Federica Paci

Publication Activity (10 Years)

Years Active: 2006-2023
Publications (10 Years): 27

Top Topics

Risk Assessment

Security Risk Assessment

Privacy Protection

Top Venues

Publications

Marco Lucchese, Francesco Lupia, Massimo Merro, Federica Paci, Nicola Zannone, Angelo Furfaro
HoneyICS: A High-interaction Physics-aware Honeynet for Industrial Control Systems. ARES (2023)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Katja Tuma
A new, evidence-based, theory for knowledge reuse in security risk analysis. Empir. Softw. Eng. 28 (4) (2023)
Federica Paci, Jacopo Pizzoli, Nicola Zannone
A Comprehensive Study on Third-Party User Tracking in Mobile Applications. ARES (2023)
Marco Lucchese, Massimo Merro, Federica Paci, Nicola Zannone
Towards A High-interaction Physics-aware Honeynet for Industrial Control Systems. SAC (2023)
Gelareh Hasel Mehri, Inez L. Wester, Federica Paci, Nicola Zannone
Mitigating Privilege Misuse in Access Control through Anomaly Detection. ARES (2023)
Anna Lisa Ferrara, Federica Paci, Chiara Ricciardi
Verifiable Hierarchical Key Assignment Schemes. DBSec (2021)
Robert Thorburn, Federica Paci, Vladimiro Sassone, Sophie Stalla-Bourdillon
Connecting Regulatory Requirements to Audit Outcomes: A Model-driven Approach to Auditable Compliance. MoDELS (Companion) (2021)
Stephen Hart, Anna Lisa Ferrara, Federica Paci
Fuzzy-based approach to assess and prioritize privacy risks. Soft Comput. 24 (3) (2020)
Stephen Hart, Andrea Margheri, Federica Paci, Vladimiro Sassone
Riskio: A Serious Game for Cyber Security Awareness and Education. Comput. Secur. 95 (2020)
Federica Paci, Davide Bianchin, Elisa Quintarelli, Nicola Zannone
IFTTT Privacy Checker. ETAA@ESORICS (2020)
Sebastian Pape, Federica Paci, Jan Jürjens, Fabio Massacci
Selecting a Secure Cloud Provider - An Empirical Study and Multi Criteria Approach. Inf. 11 (5) (2020)
Marco De Bona, Federica Paci
A real world study on employees' susceptibility to phishing attacks. ARES (2020)
Sowmya Ravidas, Alexios Lekidis, Federica Paci, Nicola Zannone
Access control in Internet-of-Things: A survey. J. Netw. Comput. Appl. 144 (2019)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flávio Moreira de Oliveira
Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. ICSE (2018)
Luciano Argento, Andrea Margheri, Federica Paci, Vladimiro Sassone, Nicola Zannone
Towards Adaptive Access Control. DBSec (2018)
Federica Paci, Anna Cinzia Squicciarini, Nicola Zannone
Survey on Access Control for Community-Centered Collaborative Systems. ACM Comput. Surv. 51 (1) (2018)
Shorouq Alansari, Federica Paci, Vladimiro Sassone
A Distributed Access Control System for Cloud Federations. ICDCS (2017)
Shorouq Alansari, Federica Paci, Andrea Margheri, Vladimiro Sassone
Privacy-Preserving Access Control in Cloud Federations. CLOUD (2017)
Katsiaryna Labunets, Fabio Massacci, Federica Paci
On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. REFSQ (2017)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flávio Moreira de Oliveira
Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. Empir. Softw. Eng. 22 (6) (2017)
Md. Sadek Ferdous, Andrea Margheri, Federica Paci, Mu Yang, Vladimiro Sassone
Decentralised Runtime Monitoring for Access Control Systems in Cloud Federations. ICDCS (2017)
Fatimah Y. Akeel, Asieh Salehi Fathabadi, Federica Paci, Andrew M. Gravell, Gary B. Wills
Formal Modelling of Data Integration Systems Security Policies. Data Sci. Eng. 1 (3) (2016)
Aneesha Sethi, Federica Paci, Gary B. Wills
EEVi - framework for evaluating the effectiveness of visualization in cyber-security. ICITST (2016)
Olga Gadyatskaya, Katsiaryna Labunets, Federica Paci
Towards Empirical Evaluation of Automated Risk Assessment Methods. CRiSIS (2016)
Martina de Gramatica, Katsiaryna Labunets, Fabio Massacci, Federica Paci, Alessandra Tedeschi
The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals. REFSQ (2015)
Federica Paci, Nicola Zannone
Preventing Information Inference in Access Control. SACMAT (2015)
Katsiaryna Labunets, Federica Paci, Fabio Massacci
Which security catalogue is better for novices? EmpiRE (2015)
Matteo Giacalone, Rocco Mammoliti, Fabio Massacci, Federica Paci, Rodolfo Perugino, Claudio Selli
Security triage: A report of a lean security requirements methodology for cost-effective security analysis. EmpiRE (2014)
Anna Cinzia Squicciarini, Federica Paci, Smitha Sundareswaran
PriMa: a comprehensive approach to privacy protection in social network sites. Ann. des Télécommunications 69 (1-2) (2014)
Michael Felderer, Basel Katt, Philipp Kalb, Jan Jürjens, Martín Ochoa, Federica Paci, Le Minh Sang Tran, Thein Than Tun, Koen Yskout, Riccardo Scandariato, Frank Piessens, Dries Vanoverberghe, Elizabeta Fourneret, Matthias Gander, Bjørnar Solhaug, Ruth Breu
Evolution of Security Engineering Artifacts: A State of the Art Survey. Int. J. Secur. Softw. Eng. 5 (4) (2014)
Matteo Giacalone, Federica Paci, Rocco Mammoliti, Rodolfo Perugino, Fabio Massacci, Claudio Selli
Security triage: an industrial case study on the effectiveness of a lean methodology to identify security requirements. ESEM (2014)
Fabio Massacci, Federica Paci, Bjørnar Solhaug, Alessandra Tedeschi
EMFASE - An Empirical Framework for Security Design and Economic Trade-off. ARES (2014)
Fabio Massacci, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi
Assessing a requirements evolution approach: Empirical studies in the air traffic management domain. J. Syst. Softw. 95 (2014)
Katsiaryna Labunets, Federica Paci, Fabio Massacci, Raminder S. Ruprai
An experiment on comparing textual vs. visual industrial methods for security risk assessment. EmpiRE (2014)
Elisa Costante, Federica Paci, Nicola Zannone
Privacy-Aware Web Service Composition and Ranking. ICWS (2013)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Le Minh Sang Tran
An Experimental Comparison of Two Risk-Based Security Methods. ESEM (2013)
Federica Paci, M. Carmen Fernández Gago, Francisco Moyano
Detecting Insider Threats: A Trust-Aware Framework. ARES (2013)
Marina Egea, Federica Paci, Marinella Petrocchi, Nicola Zannone
PERSONA - A Personalized Data Protection Framework. IFIPTM (2013)
Elisa Costante, Federica Paci, Nicola Zannone
Privacy-Aware Web Service Composition and Ranking. Int. J. Web Serv. Res. 10 (3) (2013)
Kristian Beckers, Stephan Faßbender, Maritta Heisel, Federica Paci
Combining Goal-Oriented and Problem-Oriented Requirements Engineering Methods. CD-ARES (2013)
Fabio Massacci, Federica Paci
How to Select a Security Requirements Method? A Comparative Study with Students and Practitioners. NordSec (2012)
Fabio Massacci, Deepa Nagaraj, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi
Assessing a requirements evolution approach: Empirical studies in the Air Traffic Management domain. EmpiRE (2012)
Federica Paci, Fabio Massacci, Fabrice Bouquet, Stephane Debricon
Managing Evolution by Orchestrating Requirements and Testing Engineering Processes. ICST (2012)
Nicola Dragoni, Eduardo Lostal, Olga Gadyatskaya, Fabio Massacci, Federica Paci
A Load Time Policy Checker for Open Multi-application Smart Cards. POLICY (2011)
Fabio Massacci, John Mylopoulos, Federica Paci, Thein Than Tun, Yijun Yu
An Extended Ontology for Security Requirements. CAiSE Workshops (2011)
Gábor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dániel Varró, Yijun Yu
A Tool for Managing Evolving Security Requirements. CAiSE Forum (2011)
Yudistira Asnar, Tong Li, Fabio Massacci, Federica Paci
Computer Aided Threat Identification. CEC (2011)
Gábor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dániel Varró, Yijun Yu
A Tool for Managing Evolving Security Requirements. CAiSE Forum (Selected Papers) (2011)
Federica Paci, Massimo Mecella, Mourad Ouzzani, Elisa Bertino
ACConv - An Access Control Model for Conversational Web Services. ACM Trans. Web 5 (3) (2011)
Fabio Massacci, Fabrice Bouquet, Elizabeta Fourneret, Jan Jürjens, Mass Soldal Lund, Sébastien Madelénat, Jan Tobias Mühlberg, Federica Paci, Stéphane Paul, Frank Piessens, Bjørnar Solhaug, Sven Wenzel
Orchestrating Security and System Engineering for Evolving Systems - (Invited Paper). ServiceWave (2011)
Anna Cinzia Squicciarini, Federica Paci, Elisa Bertino
Trust establishment in the formation of Virtual Organizations. Comput. Stand. Interfaces 33 (1) (2011)
Edith Felix, Olivier Delande, Fabio Massacci, Federica Paci
Managing changes with legacy security engineering processes. ISI (2011)
Gábor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dániel Varró, Yijun Yu
SeCMER: A Tool to Gain Control of Security Requirements Evolution. ServiceWave (2011)
Olga Gadyatskaya, Fabio Massacci, Federica Paci, Sergey Stankevich
Java Card Architecture for Autonomous Yet Secure Evolution of Smart Cards Applications. NordSec (2010)
Anna Cinzia Squicciarini, Federica Paci, Elisa Bertino, Alberto Trombetta, Stefano Braghin
Group-Based Negotiations in P2P Systems. IEEE Trans. Parallel Distributed Syst. 21 (10) (2010)
Ning Shang, Federica Paci, Elisa Bertino
Efficient and privacy-preserving enforcement of attribute-based access control. IDtrust (2010)
Anna Cinzia Squicciarini, Federica Paci, Smitha Sundareswaran
PriMa: an effective privacy protection mechanism for social networks. AsiaCCS (2010)
Ning Shang, Mohamed Nabeel, Federica Paci, Elisa Bertino
A privacy-preserving approach to policy-based content dissemination. ICDE (2010)
Elisa Bertino, Federica Paci, Rodolfo Ferrini, Ning Shang
Privacy-preserving Digital Identity Management for Cloud Computing. IEEE Data Eng. Bull. 32 (1) (2009)
Federica Paci, Elisa Bertino, Sam Kerr, Anna Cinzia Squicciarini, Jungha Woo
An Overview of VeryIDX - A Privacy-Preserving Digital Identity Management System for Mobile Devices. J. Softw. 4 (7) (2009)
Anna Cinzia Squicciarini, Mohamed Shehab, Federica Paci
Collective privacy management in social networks. WWW (2009)
Federica Paci, Rodolfo Ferrini, Elisa Bertino
Identity Attribute-Based Role Provisioning for Human WS-BPEL Processes. ICWS (2009)
Federica Paci, Ning Shang, Sam Kerr, Kevin Steuer Jr., Jungha Woo, Elisa Bertino
Privacy-preserving management of transactions' receipts for mobile environments. IDtrust (2009)
Federica Paci, Ning Shang, Kevin Steuer Jr., Ruchith Fernando, Elisa Bertino
VeryIDX - A Privacy Preserving Digital Identity Management System for Mobile Devices. Mobile Data Management (2009)
Federica Paci, Rodolfo Ferrini, Andrea Musci, Kevin Steuer Jr., Elisa Bertino
An Interoperable Approach to Multifactor Identity Verification. Computer 42 (5) (2009)
Federica Paci, David Bauer, Elisa Bertino, Douglas M. Blough, Anna Cinzia Squicciarini
Minimal credential disclosure in trust negotiations. Digital Identity Management (2008)
Elisa Bertino, Rodolfo Ferrini, Andrea Musci, Federica Paci, Kevin J. Steuer
A Federated Digital Identity Management Approach for Business Processes. CollaborateCom (2008)
Anna Cinzia Squicciarini, Federica Paci, Elisa Bertino
Trust establishment in the formation of Virtual Organizations. ICDE Workshops (2008)
Federica Paci, Elisa Bertino, Jason Crampton
An Access-Control Framework for WS-BPEL. Int. J. Web Serv. Res. 5 (3) (2008)
Federica Paci, Elisa Bertino, Sam Kerr, Aaron Lint, Anna Cinzia Squicciarini, Jungha Woo
VeryIDX - A Digital Identity Management System for Pervasive Computing Environments. SEUS (2008)
Federica Paci, Rodolfo Ferrini, Yuqing Sun, Elisa Bertino
Authorization and User Failure Resiliency for WS-BPEL Business Processes. ICSOC (2008)
Federica Paci, Mourad Ouzzani, Massimo Mecella
Verification of Access Control Requirements in Web Services Choreography. IEEE SCC (1) (2008)
Anna Cinzia Squicciarini, Federica Paci
Monitoring Contract Enforcement within Virtual Organizations. CollaborateCom (2008)
Jacques Thomas, Federica Paci, Elisa Bertino, Patrick Eugster
User Tasks and Access Control overWeb Services. ICWS (2007)
Anna Cinzia Squicciarini, Elisa Bertino, Elena Ferrari, Federica Paci, Bhavani M. Thuraisingham
PP-trust-X: A system for privacy preserving trust negotiations. ACM Trans. Inf. Syst. Secur. 10 (3) (2007)
Elisa Bertino, Elena Ferrari, Federica Paci, Loredana Parasiliti Provenza
A system for securing push-based distribution of XML documents. Int. J. Inf. Sec. 6 (4) (2007)
Massimo Mecella, Mourad Ouzzani, Federica Paci, Elisa Bertino
Access control enforcement for conversation-based web services. WWW (2006)
Anna Cinzia Squicciarini, Federica Paci, Elisa Bertino
A secure framework for publishing virtual community contracts. Int. J. Web Based Communities 2 (2) (2006)
Elisa Bertino, Anna Cinzia Squicciarini, Lorenzo Martino, Federica Paci
An Adaptive Access Control Model for Web Services. Int. J. Web Serv. Res. 3 (3) (2006)
Elisa Bertino, Jason Crampton, Federica Paci
Access Control and Authorization Constraints for WS-BPEL. ICWS (2006)