Publications

Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci (2021). Secure Software Development in the Era of Fluid Multi-party Open Software and Services.

Serena Elisa Ponta, Wolfram Fischer, Henrik Plate, Antonino Sabetta (2021). The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application. ICSME 2021.

Duc Ly Vu, Fabio Massacci, Ivan Pashchenko, Henrik Plate, Antonino Sabetta (2021). LastPyMile: Identifying the Discrepancy between Sources and Packages. ESEC-FSE 2021.

PDF Project DOI

Therese Fehrer, Rocío Cabrera Lozoya, Antonino Sabetta, Dario Di Nucci, Damian A Tamburri (2021). Detecting Security Fixes in Open-Source Repositories using Static Code Analyzers. arXiv:2105.03346.

Emanuele Iannone, Dario Di Nucci, Antonino Sabetta, Andrea De Lucia (2021). Toward Automated Exploit Generation for Known Vulnerabilities in Open-Source Libraries. IEEE/ACM ICPC 2021.

Daan Hommersom, Antonino Sabetta, Bonaventura Coppola, Damian A. Tamburri (2021). Automated Mapping of Vulnerability Advisories onto their Fix Commits in Open Source Repositories. arXiv:2103.13375.

Rocío Cabrera Lozoya, Arnaud Baumann, Antonino Sabetta, Michele Bezzi (2021). Commit2Vec: Learning Distributed Representations of Code Changes. SN Computer Science.

Preprint PDF Project Project DOI

Duc Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta (2020). Towards Using Source Code Repositories to Identify Software Supply Chain Attacks. ACM CCS 2020.

Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci (2020). Vuln4Real: A methodology for counting actually vulnerable dependencies. IEEE TSE.

Duc Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta (2020). Typosquatting and combosquatting attacks on the python ecosystem. IEEE EuroS&PW 2020.

Serena Elisa Ponta, Henrik Plate, Antonino Sabetta (2020). Detection, assessment and mitigation of vulnerabilities in open source dependencies. Empirical Software Engineering.

PDF Project DOI

Serena E. Ponta, Henrik Plate, Antonino Sabetta, Michele Bezzi, Cédric Dangremont (2019). A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software. MSR 2019.

Preprint Code Dataset Project

Antonino Sabetta, Michele Bezzi (2018). A Practical Approach to the Automatic Classification of Security-Relevant Commits. In ICSME 2018.

Preprint Project

Serena E. Ponta, Henrik Plate, Antonino Sabetta (2018). Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software. In ICSME 2018.

Preprint PDF Source Document

Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci (2018). Vulnerable Open Source Dependencies: Counting Those That Matter. In ESEM 2018.

Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci, Antonino Sabetta (2017). TESTREX: a Testbed for Repeatable Exploits. Springer IJSTTT 2019.

Henrik Plate, Serena E. Ponta, Antonino Sabetta (2015). Impact Assessment for Vulnerabilities in Open-Source Software Libraries . In ICSME 2015.

Preprint PDF DOI

Valérie Issarny, Bernhard Steffen, Bengt Jonsson, Gordon Blair, Paul Grace, Marta Kwiatkowska, Radu Calinescu, Paola Inverardi, Massimo Tivoli, Antonia Bertolino, Antonino Sabetta (2009). CONNECT Challenges: Towards Emergent Connectors for Eternal Networked Systems. ICECCS 2009.

Preprint PDF DOI

Antonia Bertolino, Guglielmo De Angelis, Antonino Sabetta (2008). VCR: Virtual Capture and Replay for Performance Testing. ASE 2008.

Preprint PDF DOI

Antonia Bertolino, Guglielmo De Angelis, Antonino Sabetta, Sebastian Elbaum (2007). Scaling up SLA monitoring in pervasive environments. In ESSPE 2007 (ESEC/FSE).

Vincenzo Grassi, Raffaela Mirandola, Antonino Sabetta (2007). Filling the gap between design and performance/reliability models of component-based systems: A model-driven approach. In JSS 2007.