Riccardo Scandariato

ORCID

Publication Activity (10 Years)

Years Active: 2002-2024
Publications (10 Years): 86

Top Venues

Publications

Simon Schneider, Nicolás E. Díaz Ferreyra, Pierre-Jean Quéval, Georg Simhandl, Uwe Zdun, Riccardo Scandariato
How Dataflow Diagrams Impact Software Security Analysis: an Empirical Experiment. SANER (2024)
Simon Schneider, Nicolás E. Díaz Ferreyra, Pierre-Jean Quéval, Georg Simhandl, Uwe Zdun, Riccardo Scandariato
How Dataflow Diagrams Impact Software Security Analysis: an Empirical Experiment. CoRR (2024)
Quang-Cuong Bui, Ranindya Paramitha, Duc Ly Vu, Fabio Massacci, Riccardo Scandariato
APR4Vul: an empirical study of automatic program repair techniques on real-world Java vulnerabilities. Empir. Softw. Eng. 29 (1) (2024)
Simon Schneider, Ananya Saha, Emanuele Mezzi, Katja Tuma, Riccardo Scandariato
Designing Secure AI-based Systems: a Multi-Vocal Literature Review. CoRR (2024)
Mazen Mohamad, Jan-Philipp Steghöfer, Eric Knauss, Riccardo Scandariato
Managing Security Evidence in Safety-Critical Organizations. CoRR (2024)
Simon Schneider, Alexander Bakhtin, Xiaozhou Li, Jacopo Soldani, Antonio Brogi, Tomás Cerný, Riccardo Scandariato, Davide Taibi
Comparison of Static Analysis Architecture Recovery Tools for Microservice Applications. CoRR (2024)
Mazen Mohamad, Jan-Philipp Steghöfer, Eric Knauss, Riccardo Scandariato
Managing security evidence in safety-critical organizations. J. Syst. Softw. 214 (2024)
Clinton Cao, Simon Schneider, Nicolás E. Díaz Ferreyra, Sicco Verwer, Annibale Panichella, Riccardo Scandariato
CATMA: Conformance Analysis Tool For Microservice Applications. CoRR (2024)
Uwe Zdun, Pierre-Jean Queval, Georg Simhandl, Riccardo Scandariato, Somik Chakravarty, Marjan Jelic, Aleksandar S. Jovanovic
Detection Strategies for Microservice Security Tactics. IEEE Trans. Dependable Secur. Comput. 21 (3) (2024)
Nicolás E. Díaz Ferreyra, Mojtaba Shahin, Mansooreh Zahedi, Sodiq Quadri, Riccardo Scandariato
What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study. CoRR (2024)
Catherine Tony, Nicolás E. Díaz Ferreyra, Markus Mutas, Salem Dhiff, Riccardo Scandariato
Prompting Techniques for Secure Code Generation: A Systematic Investigation. CoRR (2024)
Nicolás E. Díaz Ferreyra, Mojtaba Shahin, Mansooreh Zahedi, Sodiq Quadri, Riccardo Scandariato
What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study. MSR (2024)
Clinton Cao, Simon Schneider, Nicolás E. Díaz Ferreyra, Sicco Verwer, Annibale Panichella, Riccardo Scandariato
CATMA: Conformance Analysis Tool For Microservice Applications. ICSE Companion (2024)
Nicolás Emilio Díaz Ferreyra, Gautam Kishore Shahi, Catherine Tony, Stefan Stieglitz, Riccardo Scandariato
Regret, Delete, (Do Not) Repeat: An Analysis of Self-Cleaning Practices on Twitter After the Outbreak of the COVID-19 Pandemic. CHI Extended Abstracts (2023)
Mazen Mohamad, Rodi Jolak, Örjan Askerdal, Jan-Philipp Steghöfer, Riccardo Scandariato
CASCADE: An Asset-driven Approach to Build Security Assurance Cases for Automotive Systems. ACM Trans. Cyber Phys. Syst. 7 (1) (2023)
Katja Tuma, Sven Peldszus, Daniel Strüber, Riccardo Scandariato, Jan Jürjens
Checking security compliance between models and code. Softw. Syst. Model. 22 (1) (2023)
Simon Schneider, Tufan Özen, Michael Chen, Riccardo Scandariato
microSecEnD: A Dataset of Security-Enriched Dataflow Diagrams for Microservice Applications. MSR (2023)
Nicolás E. Díaz Ferreyra, Abdessamad Imine, Melina C. Vidoni, Riccardo Scandariato
Developers Need Protection, Too: Perspectives and Research Challenges for Privacy in Social Coding Platforms. CHASE (2023)
Simon Schneider, Riccardo Scandariato
Automatic Extraction of Security-Rich Dataflow Diagrams for Microservice Applications written in Java. CoRR (2023)
Simon Schneider, Riccardo Scandariato
Automatic extraction of security-rich dataflow diagrams for microservice applications written in Java. J. Syst. Softw. 202 (2023)
Catherine Tony, Markus Mutas, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
LLMSecEval: A Dataset of Natural Language Prompts for Security Evaluations. MSR (2023)
Nicolás E. Díaz Ferreyra, Abdessamad Imine, Melina C. Vidoni, Riccardo Scandariato
Developers Need Protection, Too: Perspectives and Research Challenges for Privacy in Social Coding Platforms. CoRR (2023)
Nicolás E. Díaz Ferreyra, Melina C. Vidoni, Maritta Heisel, Riccardo Scandariato
Cybersecurity discussions in Stack Overflow: a developer-centred analysis of engagement and self-disclosure behaviour. Soc. Netw. Anal. Min. 14 (1) (2023)
Catherine Tony, Markus Mutas, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
LLMSecEval: A Dataset of Natural Language Prompts for Security Evaluations. CoRR (2023)
Nicolás E. Díaz Ferreyra, Gautam Kishore Shahi, Catherine Tony, Stefan Stieglitz, Riccardo Scandariato
Regret, Delete, (Do Not) Repeat: An Analysis of Self-Cleaning Practices on Twitter After the Outbreak of the COVID-19 Pandemic. CoRR (2023)
Quang-Cuong Bui, Malte Laukötter, Riccardo Scandariato
DockerCleaner: Automatic Repair of Security Smells in Dockerfiles. ICSME (2023)
Uwe Zdun, Pierre-Jean Queval, Georg Simhandl, Riccardo Scandariato, Somik Chakravarty, Marjan Jelic, Aleksandar S. Jovanovic
Microservice Security Metrics for Secure Communication, Identity Management, and Observability. ACM Trans. Softw. Eng. Methodol. 32 (1) (2023)
Priyanka Billawa, Anusha Bambhore Tukaram, Nicolás E. Díaz Ferreyra, Jan-Philipp Steghöfer, Riccardo Scandariato, Georg Simhandl
SoK: Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices. ARES (2022)
Catherine Tony, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
GitHub Considered Harmful? Analyzing Open-Source Projects for the Automatic Generation of Cryptographic API Call Sequences. QRS (2022)
Kamakshi Srikumar, Komal Kashish, Kolja Eggers, Nicolás E. Díaz Ferreyra, Julian Koch, Thorsten Schüppstuhl, Riccardo Scandariato
STRIPED: A Threat Analysis Method for IoT Systems. ARES (2022)
Catherine Tony, Mohana Balasubramanian, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
Conversational DevBots for Secure Programming: An Empirical Study on SKF Chatbot. EASE (2022)
Quang-Cuong Bui, Riccardo Scandariato, Nicolás E. Díaz Ferreyra
Vul4J: A Dataset of Reproducible Java Vulnerabilities Geared Towards the Study of Program Repair Techniques. MSR (2022)
Catherine Tony, Mohana Balasubramanian, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
Conversational DevBots for Secure Programming: An Empirical Study on SKF Chatbot. CoRR (2022)
Nicolás E. Díaz Ferreyra, Melina C. Vidoni, Maritta Heisel, Riccardo Scandariato
Cybersecurity Discussions in Stack Overflow: A Developer-Centred Analysis of Engagement and Self-Disclosure Behaviour. CoRR (2022)
Catherine Tony, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
GitHub Considered Harmful? Analyzing Open-Source Projects for the Automatic Generation of Cryptographic API Call Sequences. CoRR (2022)
Anusha Bambhore Tukaram, Simon Schneider, Nicolás E. Díaz Ferreyra, Georg Simhandl, Uwe Zdun, Riccardo Scandariato
Towards a Security Benchmark for the Architectural Design of Microservice Applications. ARES (2022)
Mazen Mohamad, Jan-Philipp Steghöfer, Alexander Åström, Riccardo Scandariato
Identifying security-related requirements in regulatory documents based on cross-project classification. PROMISE (2022)
Eduard Pinconschi, Quang-Cuong Bui, Rui Abreu, Pedro Adão, Riccardo Scandariato
Maestro: a platform for benchmarking automatic program repair tools on software vulnerabilities. ISSTA (2022)
Rodi Jolak, Thomas Rosenstatter, Mazen Mohamad, Kim Strandberg, Behrooz Sangchoolie, Nasser Nowdehi, Riccardo Scandariato
CONSERVE: A framework for the selection of techniques for monitoring containers security. J. Syst. Softw. 186 (2022)
Rodi Jolak, Thomas Rosenstatter, Saif Aldaghistani, Riccardo Scandariato
RIPOSTE: A Collaborative Cyber Attack Response Framework for Automotive Systems. SEAA (2022)
Priyanka Billawa, Anusha Bambhore Tukaram, Nicolás E. Díaz Ferreyra, Jan-Philipp Steghöfer, Riccardo Scandariato, Georg Simhandl
Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices. CoRR (2022)
Hanaa Alshareef, Katja Tuma, Sandro Stucki, Gerardo Schneider, Riccardo Scandariato
Precise Analysis of Purpose Limitation in Data Flow Diagrams. ARES (2022)
Mazen Mohamad, Örjan Askerdal, Rodi Jolak, Jan-Philipp Steghöfer, Riccardo Scandariato
Asset-driven Security Assurance Cases with Built-in Quality Assurance. EnCyCriS@ICSE (2021)
Katja Tuma, Christian Sandberg, Urban Thorsson, Mathias Widman, Thomas Herpel, Riccardo Scandariato
Finding security threats that matter: Two industrial case studies. J. Syst. Softw. 179 (2021)
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
Secure Software Development in the Era of Fluid Multi-party Open Software and Services. ICSE (NIER) (2021)
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
Secure Software Development in the Era of Fluid Multi-party Open Software and Services. CoRR (2021)
Mazen Mohamad, Jan-Philipp Steghöfer, Riccardo Scandariato
Security assurance cases - state of the art of an emerging approach. Empir. Softw. Eng. 26 (4) (2021)
Tomasz Kosinski, Riccardo Scandariato, Morten Fjeld
SyntIoT: Privacy and security experimentation in consumer-oriented IoT ecosystems. EAI Endorsed Trans. Security Safety 8 (27) (2021)
Katja Tuma, Sven Peldszus, Daniel Strüber, Riccardo Scandariato, Jan Jürjens
Checking Security Compliance between Models and Code. CoRR (2021)
Mazen Mohamad, Alexander Åström, Örjan Askerdal, Jörgen Borg, Riccardo Scandariato
Security assurance cases for road vehicles: an industry perspective. ARES (2020)
Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
Contextualisation of Data Flow Diagrams for security analysis. CoRR (2020)
Marvin Wyrich, Regina Hebig, Stefan Wagner, Riccardo Scandariato
Perception and Acceptance of an Autonomous Refactoring Bot. ICAART (1) (2020)
Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
Contextualisation of Data Flow Diagrams for Security Analysis. GraMSec@CSF (2020)
Katja Tuma, Laurens Sion, Riccardo Scandariato, Koen Yskout
Automating the early detection of security design flaws. MoDELS (2020)
Marvin Wyrich, Regina Hebig, Stefan Wagner, Riccardo Scandariato
Perception and Acceptance of an Autonomous Refactoring Bot. CoRR (2020)
Sven Peldszus, Katja Tuma, Daniel Strüber, Jan Jürjens, Riccardo Scandariato
Secure Data-Flow Compliance Checks between Models and Code based on Automated Mappings. SE (2020)
Thomas Rosenstatter, Kim Strandberg, Rodi Jolak, Riccardo Scandariato, Tomas Olovsson
REMIND: A Framework for the Resilient Design of Automotive Systems. SecDev (2020)
Stefan Carl Peiser, Ludwig Friborg, Riccardo Scandariato
JavaScript Malware Detection Using Locality Sensitive Hashing. SEC (2020)
Mazen Mohamad, Jan-Philipp Steghöfer, Riccardo Scandariato
Security Assurance Cases - State of the Art of an Emerging Approach. CoRR (2020)
Mazen Mohamad, Jan-Philipp Steghöfer, Riccardo Scandariato
Cross-project Classification of Security-related Requirements. CoRR (2020)
Mazen Mohamad, Alexander Åström, Örjan Askerdal, Jörgen Borg, Riccardo Scandariato
Security Assurance Cases for Road Vehicles: an Industry Perspective. CoRR (2020)
Laurens Sion, Katja Tuma, Riccardo Scandariato, Koen Yskout, Wouter Joosen
Towards Automated Security Design Flaw Detection. ASE Workshops (2019)
Katja Tuma, Danial Hosseini, Kyriakos Malamas, Riccardo Scandariato
Inspection guidelines to identify security design flaws. ECSA (Companion) (2019)
Linda Erlenhov, Francisco Gomes de Oliveira Neto, Riccardo Scandariato, Philipp Leitner
Current and future bots in software development. BotSE@ICSE (2019)
Katja Tuma, Christian Sandberg, Urban Thorsson, Mathias Widman, Riccardo Scandariato
Finding Security Threats That Matter: An Industrial Case Study. CoRR (2019)
Sven Peldszus, Katja Tuma, Daniel Strüber, Jan Jürjens, Riccardo Scandariato
Secure Data-Flow Compliance Checks between Models and Code Based on Automated Mappings. MoDELS (2019)
Katja Tuma, Riccardo Scandariato, Musard Balliu
Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis. ICSA (2019)
Katja Tuma, Danial Hosseini, Kyriakos Malamas, Riccardo Scandariato
Inspection Guidelines to Identify Security Design Flaws. CoRR (2019)
Riccardo Scandariato, Jennifer Horkoff, Robert Feldt
Generative secure design, defined. ICSE (NIER) (2018)
Alexander van Den Berghe, Koen Yskout, Riccardo Scandariato, Wouter Joosen
A Lingua Franca for Security by Design. SecDev (2018)
Katja Tuma, Riccardo Scandariato
Two Architectural Threat Analysis Techniques Compared. ECSA (2018)
Stefanie Jasser, Katja Tuma, Riccardo Scandariato, Matthias Riebisch
Back to the Drawing Board - Bringing Security Constraints in an Architecture-centric Software Development Process. ICISSP (2018)
Katja Tuma, Gül Çalikli, Riccardo Scandariato
Threat analysis of software systems: A systematic literature review. J. Syst. Softw. 144 (2018)
Thibaud Antignac, Riccardo Scandariato, Gerardo Schneider
Privacy Compliance Via Model Transformations. EuroS&P Workshops (2018)
Bashar Nassar, Riccardo Scandariato
Traceability Metrics as Early Predictors of Software Defects? ICSA (2017)
Alexander van Den Berghe, Riccardo Scandariato, Koen Yskout, Wouter Joosen
Design notations for secure software: a systematic literature review. Softw. Syst. Model. 16 (3) (2017)
Alexander van Den Berghe, Koen Yskout, Riccardo Scandariato, Wouter Joosen
A Model for Provably Secure Software Design. FormaliSE@ICSE (2017)
Katja Tuma, Riccardo Scandariato, Mathias Widman, Christian Sandberg
Towards Security Threats that Matter. CyberICPS/SECPRE@ESORICS (2017)
Laurens Sion, Koen Yskout, Riccardo Scandariato, Wouter Joosen
A Modular Meta-model for Security Solutions. Programming (2017)
Jeffrey Stuckman, James Walden, Riccardo Scandariato
The Effect of Dimensionality Reduction on Software Vulnerability Prediction Models. IEEE Trans. Reliab. 66 (1) (2017)
Vasileios Theodorou, Ilias Gerostathopoulos, Sasan Amini, Riccardo Scandariato, Christian Prehofer, Miroslaw Staron
Theta Architecture: Preserving the Quality of Analytics in Data-Driven Systems. ADBIS (Short Papers and Workshops) (2017)
Miroslaw Staron, Riccardo Scandariato
Data veracity in intelligent transportation systems: The slippery road warning scenario. Intelligent Vehicles Symposium (2016)
Aram Hovsepyan, Riccardo Scandariato, Wouter Joosen
Is Newer Always Better?: The Case of Vulnerability Prediction Models. ESEM (2016)
Bashar Nassar, Ali Shahrokni, Riccardo Scandariato
Traceability Data in Early Development Phases as an Enabler for Decision Support. XP Workshops (2016)
Mariano Ceccato, Riccardo Scandariato
Static Analysis and Penetration Testing from the Perspective of Maintenance Teams. ESEM (2016)
Thibaud Antignac, Riccardo Scandariato, Gerardo Schneider
A Privacy-Aware Conceptual Model for Handling Personal Data. ISoLA (1) (2016)
Laurens Sion, Koen Yskout, Alexander van Den Berghe, Riccardo Scandariato, Wouter Joosen
MASC: Modelling Architectural Security Concerns. MiSE@ICSE (2015)
Riccardo Scandariato, Kim Wuyts, Wouter Joosen
A descriptive study of Microsoft's threat modeling technique. Requir. Eng. 20 (2) (2015)
Koen Yskout, Riccardo Scandariato, Wouter Joosen
Do Security Patterns Really Help Designers? ICSE (1) (2015)
Phu Hong Nguyen, Koen Yskout, Thomas Heyman, Jacques Klein, Riccardo Scandariato, Yves Le Traon
SoSPa: A system of Security design Patterns for systematically engineering secure systems. MoDELS (2015)
Aram Hovsepyan, Riccardo Scandariato, Maximilian Steff, Wouter Joosen
Design Churn as Predictor of Vulnerabilities? Int. J. Secur. Softw. Eng. 5 (3) (2014)
Koen Yskout, Riccardo Scandariato, Wouter Joosen
Change patterns - Co-evolving requirements and architecture. Softw. Syst. Model. 13 (2) (2014)
Riccardo Scandariato, James Walden, Aram Hovsepyan, Wouter Joosen
Predicting Vulnerable Software Components via Text Mining. IEEE Trans. Software Eng. 40 (10) (2014)
Michael Felderer, Basel Katt, Philipp Kalb, Jan Jürjens, Martín Ochoa, Federica Paci, Le Minh Sang Tran, Thein Than Tun, Koen Yskout, Riccardo Scandariato, Frank Piessens, Dries Vanoverberghe, Elizabeta Fourneret, Matthias Gander, Bjørnar Solhaug, Ruth Breu
Evolution of Security Engineering Artifacts: A State of the Art Survey. Int. J. Secur. Softw. Eng. 5 (4) (2014)
Kim Wuyts, Riccardo Scandariato, Wouter Joosen
Empirical evaluation of a privacy-focused threat modeling methodology. J. Syst. Softw. 96 (2014)
James Walden, Jeff Stuckman, Riccardo Scandariato
Predicting Vulnerable Components: Software Metrics vs Text Mining. ISSRE (2014)
Riccardo Scandariato, James Walden, Wouter Joosen
Static analysis versus penetration testing: A controlled experiment. ISSRE (2013)
Koen Buyens, Riccardo Scandariato, Wouter Joosen
Least privilege analysis in software architectures. Softw. Syst. Model. 12 (2) (2013)
Thomas Heyman, Riccardo Scandariato, Wouter Joosen
Reusable Formal Models for Secure Software Architectures. WICSA/ECSA (2012)
Bernard Spitz, Riccardo Scandariato, Wouter Joosen
Extraction of an Architectural Model for Least Privilege Analysis. Int. J. Secur. Softw. Eng. 3 (4) (2012)

Riccardo Scandariato.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Riccardo Scandariato