![](https://dblp.uni-trier.de/img/logo.ua.320x120.png)
![](https://dblp.uni-trier.de/img/dropdown.dark.16x16.png)
![](https://dblp.uni-trier.de/img/peace.dark.16x16.png)
Остановите войну!
for scientists:
![search dblp search dblp](https://dblp.uni-trier.de/img/search.dark.16x16.png)
![search dblp](https://dblp.uni-trier.de/img/search.dark.16x16.png)
default search action
Serena Elisa Ponta
Person information
Refine list
![note](https://dblp.uni-trier.de/img/note-mark.dark.12x12.png)
refinements active!
zoomed in on ?? of ?? records
view refined list in
export refined list as
2020 – today
- 2024
- [j8]Antonino Sabetta
, Serena Elisa Ponta
, Rocío Cabrera Lozoya
, Michele Bezzi
, Tommaso Sacchetti, Matteo Greco
, Gergö Balogh
, Péter Hegedüs
, Rudolf Ferenc
, Ranindya Paramitha
, Ivan Pashchenko
, Aurora Papotti
, Ákos Milánkovich, Fabio Massacci
:
Known Vulnerabilities of Open Source Projects: Where Are the Fixes? IEEE Secur. Priv. 22(2): 49-59 (2024) - 2023
- [j7]Piergiorgio Ladisa
, Serena Elisa Ponta
, Antonino Sabetta
, Matias Martinez
, Olivier Barais
:
Journey to the Center of Software Supply Chain Attacks. IEEE Secur. Priv. 21(6): 34-49 (2023) - [c26]Piergiorgio Ladisa
, Serena Elisa Ponta
, Nicola Ronzoni
, Matias Martinez
, Olivier Barais
:
On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI. ACSAC 2023: 71-82 - [c25]Piergiorgio Ladisa
, Merve Sahin
, Serena Elisa Ponta
, Marco Rosa
, Matias Martinez
, Olivier Barais
:
The Hitchhiker's Guide to Malicious Third-Party Dependencies. SCORED@CCS 2023: 65-74 - [i12]Piergiorgio Ladisa, Serena Elisa Ponta, Antonino Sabetta, Matias Martinez, Olivier Barais:
Journey to the Center of Software Supply Chain Attacks. CoRR abs/2304.05200 (2023) - [i11]Piergiorgio Ladisa, Merve Sahin, Serena Elisa Ponta, Marco Rosa, Matias Martinez, Olivier Barais:
The Hitchhiker's Guide to Malicious Third-Party Dependencies. CoRR abs/2307.09087 (2023) - [i10]Piergiorgio Ladisa, Serena Elisa Ponta, Nicola Ronzoni, Matias Martinez, Olivier Barais:
On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI. CoRR abs/2310.09571 (2023) - 2022
- [j6]Ivan Pashchenko
, Henrik Plate
, Serena Elisa Ponta
, Antonino Sabetta
, Fabio Massacci
:
Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies. IEEE Trans. Software Eng. 48(5): 1592-1609 (2022) - [j5]Andreas Dann
, Henrik Plate
, Ben Hermann
, Serena Elisa Ponta
, Eric Bodden
:
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. IEEE Trans. Software Eng. 48(9): 3613-3625 (2022) - [c24]Piergiorgio Ladisa
, Henrik Plate, Matias Martinez, Olivier Barais, Serena Elisa Ponta:
Risk Explorer for Software Supply Chains: Understanding the Attack Surface of Open-Source based Software Development. SCORED@CCS 2022: 35-36 - [c23]Piergiorgio Ladisa
, Henrik Plate, Matias Martinez, Olivier Barais, Serena Elisa Ponta:
Towards the Detection of Malicious Java Packages. SCORED@CCS 2022: 63-72 - [c22]Andreas Dann, Henrik Plate, Ben Hermann, Serena Elisa Ponta, Eric Bodden:
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite (Short Summary). Software Engineering 2022: 21-23 - [i9]Piergiorgio Ladisa, Henrik Plate, Matias Martinez, Olivier Barais, Serena Elisa Ponta:
Towards the Detection of Malicious Java Packages. CoRR abs/2210.03998 (2022) - 2021
- [c21]Serena Elisa Ponta, Wolfram Fischer, Henrik Plate, Antonino Sabetta:
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application. ICSME 2021: 555-558 - [i8]Serena Elisa Ponta, Wolfram Fischer, Henrik Plate, Antonino Sabetta:
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application. CoRR abs/2108.05115 (2021) - 2020
- [j4]Serena Elisa Ponta
, Henrik Plate, Antonino Sabetta:
Detection, assessment and mitigation of vulnerabilities in open source dependencies. Empir. Softw. Eng. 25(5): 3175-3215 (2020) - [c20]Bodin Chinthanet, Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Raula Gaikovina Kula
, Takashi Ishio
, Kenichi Matsumoto:
Code-Based Vulnerability Detection in Node.js Applications: How far are we? ASE 2020: 1199-1203 - [i7]Bodin Chinthanet, Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Raula Gaikovina Kula, Takashi Ishio, Kenichi Matsumoto:
Code-based Vulnerability Detection in Node.js Applications: How far are we? CoRR abs/2008.04568 (2020)
2010 – 2019
- 2019
- [c19]Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Michele Bezzi, Cédric Dangremont:
A manually-curated dataset of fixes to vulnerabilities of open-source software. MSR 2019: 383-387 - [i6]Serena Elisa Ponta, Henrik Plate, Antonino Sabetta, Michele Bezzi, Cédric Dangremont:
A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software. CoRR abs/1902.02595 (2019) - 2018
- [c18]Ivan Pashchenko
, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
:
Vulnerable open source dependencies: counting those that matter. ESEM 2018: 42:1-42:10 - [c17]Serena Elisa Ponta, Henrik Plate, Antonino Sabetta:
Beyond Metadata: Code-Centric and Usage-Based Analysis of Known Vulnerabilities in Open-Source Software. ICSME 2018: 449-460 - [i5]Serena Elisa Ponta, Henrik Plate, Antonino Sabetta:
Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software. CoRR abs/1806.05893 (2018) - [i4]Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci:
Vulnerable Open Source Dependencies: Counting Those That Matter. CoRR abs/1808.09753 (2018) - 2017
- [j3]Daniel Ricardo dos Santos, Silvio Ranise
, Luca Compagna, Serena Elisa Ponta:
Automatically finding execution scenarios to deploy security-sensitive workflows. J. Comput. Secur. 25(3): 255-282 (2017) - [c16]Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
:
Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. CODASPY 2017: 321-328 - 2016
- [c15]Daniel Ricardo dos Santos
, Serena Elisa Ponta, Silvio Ranise
:
Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability. SACMAT 2016: 89-99 - [c14]Luca Compagna, Daniel Ricardo dos Santos
, Serena Elisa Ponta, Silvio Ranise
:
Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. TACAS 2016: 567-572 - 2015
- [c13]Daniel Ricardo dos Santos
, Silvio Ranise
, Luca Compagna, Serena Elisa Ponta:
Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. DBSec 2015: 85-100 - [c12]Henrik Plate, Serena Elisa Ponta, Antonino Sabetta:
Impact assessment for vulnerabilities in open-source software libraries. ICSME 2015: 411-420 - [c11]Roberto Carbone
, Luca Compagna, Annibale Panichella, Serena Elisa Ponta:
Security Threat Identification and Testing. ICST 2015: 1-8 - [i3]Henrik Plate, Serena Elisa Ponta, Antonino Sabetta:
Impact assessment for vulnerabilities in open-source software libraries. CoRR abs/1504.04971 (2015) - [i2]Daniel Ricardo dos Santos, Silvio Ranise, Serena Elisa Ponta:
Modularity for Security-Sensitive Workflows. CoRR abs/1507.07479 (2015) - 2014
- [j2]Alessandro Armando
, Serena Elisa Ponta:
Model checking authorization requirements in business processes. Comput. Secur. 40: 1-22 (2014) - [c10]Matteo Maria Casalino, Henrik Plate, Serena Elisa Ponta:
Increasing Trust in the Cloud through Configuration Validation. OTM Workshops 2014: 210-216 - 2013
- [c9]Alessandro Armando, Enrico Giunchiglia, Marco Maratea, Serena Elisa Ponta:
Modeling and Reasoning about Business Processes under Authorization Constraints: A Planning-Based Approach. ICAPS 2013 - 2012
- [j1]Alessandro Armando
, Enrico Giunchiglia
, Marco Maratea, Serena Elisa Ponta:
An action-based approach to the formal specification and automatic analysis of business processes under authorization constraints. J. Comput. Syst. Sci. 78(1): 119-141 (2012) - [c8]Matteo Maria Casalino, Henrik Plate, Serena Elisa Ponta:
Configuration Assessment as a Service. DPM/SETOP 2012: 217-226 - [c7]Matteo Maria Casalino, Michele Mangili, Henrik Plate, Serena Elisa Ponta:
Detection of Configuration Vulnerabilities in Distributed (Web) Environments. SecureComm 2012: 131-148 - [c6]Alessandro Armando
, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone
, Yannick Chevalier
, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim
, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò:
The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS 2012: 267-282 - [i1]Matteo Maria Casalino, Michele Mangili, Henrik Plate, Serena Elisa Ponta:
Detection of Configuration Vulnerabilities in Distributed (Web) Environments. CoRR abs/1206.6757 (2012) - 2011
- [c5]Wihem Arsac, Luca Compagna, Giancarlo Pellegrino, Serena Elisa Ponta:
Security Validation of Business Processes via Model-Checking. ESSoS 2011: 29-42 - [c4]Roberto Carbone
, Marius Minea, Sebastian Mödersheim
, Serena Elisa Ponta, Mathieu Turuani, Luca Viganò:
Towards Formal Validation of Trust and Security in the Internet of Services. Future Internet Assembly 2011: 193-208 - [c3]Wihem Arsac, Luca Compagna, Samuel Paul Kaluvuri, Serena Elisa Ponta:
Security validation tool for business processes. SACMAT 2011: 143-144
2000 – 2009
- 2009
- [c2]Alessandro Armando
, Serena Elisa Ponta:
Model Checking of Security-Sensitive Business Processes. Formal Aspects in Security and Trust 2009: 66-80 - [c1]Alessandro Armando
, Enrico Giunchiglia
, Serena Elisa Ponta:
Formal Specification and Automatic Analysis of Business Processes under Authorization Constraints: An Action-Based Approach. TrustBus 2009: 63-72
Coauthor Index
![](https://dblp.uni-trier.de/img/cog.dark.24x24.png)
manage site settings
To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.
Unpaywalled article links
Add open access links from to the list of external document links (if available).
Privacy notice: By enabling the option above, your browser will contact the API of unpaywall.org to load hyperlinks to open access articles. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Unpaywall privacy policy.
Archived links via Wayback Machine
For web page which are no longer available, try to retrieve content from the of the Internet Archive (if available).
Privacy notice: By enabling the option above, your browser will contact the API of archive.org to check for archived content of web pages that are no longer available. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Internet Archive privacy policy.
Reference lists
Add a list of references from ,
, and
to record detail pages.
load references from crossref.org and opencitations.net
Privacy notice: By enabling the option above, your browser will contact the APIs of crossref.org, opencitations.net, and semanticscholar.org to load article reference information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Crossref privacy policy and the OpenCitations privacy policy, as well as the AI2 Privacy Policy covering Semantic Scholar.
Citation data
Add a list of citing articles from and
to record detail pages.
load citations from opencitations.net
Privacy notice: By enabling the option above, your browser will contact the API of opencitations.net and semanticscholar.org to load citation information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the OpenCitations privacy policy as well as the AI2 Privacy Policy covering Semantic Scholar.
OpenAlex data
Load additional information about publications from .
Privacy notice: By enabling the option above, your browser will contact the API of openalex.org to load additional information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the information given by OpenAlex.
last updated on 2024-06-10 21:24 CEST by the dblp team
all metadata released as open data under CC0 1.0 license
see also: Terms of Use | Privacy Policy | Imprint