research
∙
08/18/2023
A Graph-based Stratified Sampling Methodology for the Analysis of (Underground) Forums
[Context] Researchers analyze underground forums to study abuse and cybe...
share
research
∙
06/12/2023
Are Software Updates Useless Against Advanced Persistent Threats?
A dilemma worth Shakespeare's Hamlet is increasingly haunting companies ...
research
∙
02/10/2023
Building cross-language corpora for human understanding of privacy policies
Making sure that users understand privacy policies that impact them is a...
research
∙
12/15/2022
The Data Protection Officer, an ubiquitous role nobody really knows
Among all cybersecurity and privacy workers, the Data Protection Officer...
research
∙
09/15/2022
On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools
Background: Testing and validation of the semantic correctness of patche...
research
∙
07/21/2022
Cryptographic and Financial Fairness
A recent trend in multi-party computation is to achieve cryptographic fa...
research
∙
05/28/2022
Towards a Security Stress-Test for Cloud Configurations
Securing cloud configurations is an elusive task, which is left up to sy...
research
∙
05/16/2022
Software Updates Strategies: a Quantitative Evaluation against Advanced Persistent Threats
Software updates reduce the opportunity for exploitation. However, since...
research
∙
03/04/2021
Secure Software Development in the Era of Fluid Multi-party Open Software and Services
Pushed by market forces, software development has become fast-paced. As ...
research
∙
03/04/2021
Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks
In finance, leverage is the ratio between assets borrowed from others an...
research
∙
09/16/2019
A Convolutional Transformation Network for Malware Classification
Modern malware evolves various detection avoidance techniques to bypass ...
research
∙
08/29/2018
Vulnerable Open Source Dependencies: Counting Those That Matter
BACKGROUND: Vulnerable dependencies are a known problem in today's open-...
research
∙
08/20/2018
The Effect of Security Education and Expertise on Security Assessments: the Case of Software Vulnerabilities
In spite of the growing importance of software security and the industry...
research
∙
01/15/2018
Attack Potential in Impact and Complexity
Vulnerability exploitation is reportedly one of the main attack vectors ...
research
∙
03/08/2000