Serena Elisa Ponta

Publication Activity (10 Years)

Years Active: 2009-2024
Publications (10 Years): 34

Top Topics

Business Processes

Satisfiability Problem

Top Venues

IEEE Secur. Priv.

Publications

Stefan Schott, Wolfram Fischer, Serena Elisa Ponta, Jonas Klauke, Eric Bodden
Compilation of Commit Changes within Java Source Code Repositories. CoRR (2024)
Antonino Sabetta, Serena Elisa Ponta, Rocío Cabrera Lozoya, Michele Bezzi, Tommaso Sacchetti, Matteo Greco, Gergö Balogh, Péter Hegedüs, Rudolf Ferenc, Ranindya Paramitha, Ivan Pashchenko, Aurora Papotti, Ákos Milánkovich, Fabio Massacci
Known Vulnerabilities of Open Source Projects: Where Are the Fixes? IEEE Secur. Priv. 22 (2) (2024)
Piergiorgio Ladisa, Serena Elisa Ponta, Antonino Sabetta, Matias Martinez, Olivier Barais
Journey to the Center of Software Supply Chain Attacks. IEEE Secur. Priv. 21 (6) (2023)
Piergiorgio Ladisa, Merve Sahin, Serena Elisa Ponta, Marco Rosa, Matias Martinez, Olivier Barais
The Hitchhiker's Guide to Malicious Third-Party Dependencies. CoRR (2023)
Piergiorgio Ladisa, Serena Elisa Ponta, Nicola Ronzoni, Matias Martinez, Olivier Barais
On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI. ACSAC (2023)
Piergiorgio Ladisa, Serena Elisa Ponta, Nicola Ronzoni, Matias Martinez, Olivier Barais
On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI. CoRR (2023)
Piergiorgio Ladisa, Serena Elisa Ponta, Antonino Sabetta, Matias Martinez, Olivier Barais
Journey to the Center of Software Supply Chain Attacks. CoRR (2023)
Piergiorgio Ladisa, Merve Sahin, Serena Elisa Ponta, Marco Rosa, Matias Martinez, Olivier Barais
The Hitchhiker's Guide to Malicious Third-Party Dependencies. SCORED@CCS (2023)
Andreas Dann, Henrik Plate, Ben Hermann, Serena Elisa Ponta, Eric Bodden
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite (Short Summary). Software Engineering (2022)
Piergiorgio Ladisa, Henrik Plate, Matias Martinez, Olivier Barais, Serena Elisa Ponta
Towards the Detection of Malicious Java Packages. SCORED@CCS (2022)
Piergiorgio Ladisa, Henrik Plate, Matias Martinez, Olivier Barais, Serena Elisa Ponta
Risk Explorer for Software Supply Chains: Understanding the Attack Surface of Open-Source based Software Development. SCORED@CCS (2022)
Andreas Dann, Henrik Plate, Ben Hermann, Serena Elisa Ponta, Eric Bodden
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. IEEE Trans. Software Eng. 48 (9) (2022)
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies. IEEE Trans. Software Eng. 48 (5) (2022)
Piergiorgio Ladisa, Henrik Plate, Matias Martinez, Olivier Barais, Serena Elisa Ponta
Towards the Detection of Malicious Java Packages. CoRR (2022)
Serena Elisa Ponta, Wolfram Fischer, Henrik Plate, Antonino Sabetta
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application. ICSME (2021)
Serena Elisa Ponta, Wolfram Fischer, Henrik Plate, Antonino Sabetta
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application. CoRR (2021)
Serena Elisa Ponta, Henrik Plate, Antonino Sabetta
Detection, assessment and mitigation of vulnerabilities in open source dependencies. Empir. Softw. Eng. 25 (5) (2020)
Bodin Chinthanet, Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Raula Gaikovina Kula, Takashi Ishio, Kenichi Matsumoto
Code-Based Vulnerability Detection in Node.js Applications: How far are we? ASE (2020)
Bodin Chinthanet, Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Raula Gaikovina Kula, Takashi Ishio, Kenichi Matsumoto
Code-based Vulnerability Detection in Node.js Applications: How far are we? CoRR (2020)
Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Michele Bezzi, Cédric Dangremont
A manually-curated dataset of fixes to vulnerabilities of open-source software. MSR (2019)
Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Michele Bezzi, Cédric Dangremont
A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software. CoRR (2019)
Serena Elisa Ponta, Henrik Plate, Antonino Sabetta
Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software. CoRR (2018)
Serena Elisa Ponta, Henrik Plate, Antonino Sabetta
Beyond Metadata: Code-Centric and Usage-Based Analysis of Known Vulnerabilities in Open-Source Software. ICSME (2018)
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Vulnerable Open Source Dependencies: Counting Those That Matter. CoRR (2018)
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Vulnerable open source dependencies: counting those that matter. ESEM (2018)
Daniel Ricardo dos Santos, Silvio Ranise, Luca Compagna, Serena Elisa Ponta
Automatically finding execution scenarios to deploy security-sensitive workflows. J. Comput. Secur. 25 (3) (2017)
Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. CODASPY (2017)
Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability. SACMAT (2016)
Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. TACAS (2016)
Daniel Ricardo dos Santos, Silvio Ranise, Serena Elisa Ponta
Modularity for Security-Sensitive Workflows. CoRR (2015)
Henrik Plate, Serena Elisa Ponta, Antonino Sabetta
Impact assessment for vulnerabilities in open-source software libraries. CoRR (2015)
Henrik Plate, Serena Elisa Ponta, Antonino Sabetta
Impact assessment for vulnerabilities in open-source software libraries. ICSME (2015)
Daniel Ricardo dos Santos, Silvio Ranise, Luca Compagna, Serena Elisa Ponta
Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. DBSec (2015)
Roberto Carbone, Luca Compagna, Annibale Panichella, Serena Elisa Ponta
Security Threat Identification and Testing. ICST (2015)
Matteo Maria Casalino, Henrik Plate, Serena Elisa Ponta
Increasing Trust in the Cloud through Configuration Validation. OTM Workshops (2014)
Alessandro Armando, Serena Elisa Ponta
Model checking authorization requirements in business processes. Comput. Secur. 40 (2014)
Alessandro Armando, Enrico Giunchiglia, Marco Maratea, Serena Elisa Ponta
Modeling and Reasoning about Business Processes under Authorization Constraints: A Planning-Based Approach. ICAPS (2013)
Matteo Maria Casalino, Henrik Plate, Serena Elisa Ponta
Configuration Assessment as a Service. DPM/SETOP (2012)
Matteo Maria Casalino, Michele Mangili, Henrik Plate, Serena Elisa Ponta
Detection of Configuration Vulnerabilities in Distributed (Web) Environments. SecureComm (2012)
Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò
The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS (2012)
Alessandro Armando, Enrico Giunchiglia, Marco Maratea, Serena Elisa Ponta
An action-based approach to the formal specification and automatic analysis of business processes under authorization constraints. J. Comput. Syst. Sci. 78 (1) (2012)
Matteo Maria Casalino, Michele Mangili, Henrik Plate, Serena Elisa Ponta
Detection of Configuration Vulnerabilities in Distributed (Web) Environments CoRR (2012)
Wihem Arsac, Luca Compagna, Giancarlo Pellegrino, Serena Elisa Ponta
Security Validation of Business Processes via Model-Checking. ESSoS (2011)
Roberto Carbone, Marius Minea, Sebastian Mödersheim, Serena Elisa Ponta, Mathieu Turuani, Luca Viganò
Towards Formal Validation of Trust and Security in the Internet of Services. Future Internet Assembly (2011)
Wihem Arsac, Luca Compagna, Samuel Paul Kaluvuri, Serena Elisa Ponta
Security validation tool for business processes. SACMAT (2011)
Alessandro Armando, Serena Elisa Ponta
Model Checking of Security-Sensitive Business Processes. Formal Aspects in Security and Trust (2009)
Alessandro Armando, Enrico Giunchiglia, Serena Elisa Ponta
Formal Specification and Automatic Analysis of Business Processes under Authorization Constraints: An Action-Based Approach. TrustBus (2009)