FM
Fabio Massacci
cs.CRcs.SEcs.AIcs.LGcs.CYcs.LOsecurityAirportsalgorithm aversionAlgorithms
On Valency
published · living versionsW_badysrsj·v1 · currentpublished
EDMA: Entropy-Driven Multimodal Answering
with Emanuele Mezzi, Gertjan Burghouts, Mengyuan Zhang
1 version
Preprints & journals
47 papers in the corpus · 2012–2026EDMA: Entropy-Driven Multimodal Answering2610.27120v1 · Emanuele Mezzi, Gertjan Burghouts, Fabio Massacci et al.2026 · 0 citationsarXivon Valency
CRSF: Collusion-Resilient Privacy-Preserving Sensor Fusion with Byzantine-Robust Participation2609.01096v3 · Chao Yin, Haihong Tian, Zheng Yang et al.2026 · 0 citationsarXiv
The Cathedral and the Bazaar of Software Vulnerabilities: From the NVD to the CNAs2607.05670v1 · Siqi Zhang, Fabio Massacci, Mengyuan Zhang2026 · 0 citationsarXiv
Helpful or Harmful? Evaluating LLM-Assisted Vulnerability Patching via a Human Study2606.25973v1 · Giulian Biolo, Michael Tezza, Yuanjun Gong et al.2026 · 0 citationsarXiv
LLMs for Qualitative Data Analysis Fail on Security-specificComments in Human Experiments2604.10834v1 · Maria Camporese, Fabio Massacci, Yuanjun Gong2026 · 0 citationsIn Proceedings of the 34th IEEE/ACM International Conference on Program Comprehension (ICPC 2026), pp. 515-526, Rio de Janeiro, Brazil, 2026
On the Abolition of the "ICSE Paper" and the Adoption of the "Registered Proposal" and the "Results Report"2601.18566v1 · Fabio Massacci, Winnie Mbaka2026 · 0 citationsarXiv
Function Recovery Attacks in Gate-Hiding Garbled Circuits using SAT Solving2601.13271v4 · Chao Yin, Zunchen Huang, Chenglu Jin et al.2026 · 0 citationsarXiv
Algorithm Perception When Using Threat Intelligence in Vulnerability Risk Assessment.41615328 · van Gerwen, Sarah, Papotti, Aurora, Tuma, Katja et al.2026 · 0 citationsRisk analysis : an official publication of the Society for Risk Analysis. 2026;46(1):e70178
Is common sense all you need? Using expert defined rules to identify vulnerability patches instead of machine learning.42111664 · Papotti, Aurora, Ponta, Serena Elisa, Sabetta, Antonino et al.2026 · 0 citationsEmpirical software engineering. 2026;31(5):133
Repairing vulnerabilities without invisible hands. A differentiated replication study on LLMs2507.20977v2 · Maria Camporese, Fabio Massacci2025 · 0 citationsarXiv
Risks of ignoring uncertainty propagation in AI-augmented security pipelines.40545447 · Mezzi, Emanuele, Papotti, Aurora, Massacci, Fabio et al.2025 · 3 citationsRisk analysis : an official publication of the Society for Risk Analysis. 2025;45(12):4469-4489
Today's Cat Is Tomorrow's Dog: Accounting for Time-Based Changes in the Labels of ML Vulnerability Detection Approaches2506.11939v1 · Ranindya Paramitha, Yuan Feng, Fabio Massacci2025 · 0 citationsarXiv
Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't2504.07027v1 · Maria Camporese, Fabio Massacci2025 · 1 citationarXiv
Large Language Models Are Unreliable for Cyber Threat Intelligence2503.23175v4 · Emanuele Mezzi, Fabio Massacci, Katja Tuma2025 · 19 citationsarXiv
Optimisation of cyber insurance coverage with selection of cost effective security controls2503.02706v1 · Ganbayar Uuganbayar, Artsiom Yautsiukhin, Fabio Martinelli et al.2025 · 33 citationsComputers & Security Volume 101, February 2021
A Systematic Literature Review on Automated Exploit and Security Test Generation2502.04953v1 · Quang-Cuong Bui, Emanuele Iannone, Maria Camporese et al.2025 · 0 citationsarXiv
On the effects of program slicing for vulnerability detection during code inspection.40196710 · Papotti, Aurora, Tuma, Katja, Massacci, Fabio2025 · 1 citationEmpirical software engineering. 2025;30(3):93
Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub.40621059 · Minna, Francesco, Massacci, Fabio, Tuma, Katja2025 · 16 citationsEmpirical software engineering. 2025;30(5):132
Forecasting the risk of software choices: A model to foretell security vulnerabilities from library dependencies and source code evolution2411.11202v1 · Carlos E. Budde, Ranindya Paramitha, Fabio Massacci2024 · 0 citationsarXiv
How hard can it be? Quantifying MITRE attack campaigns with attack trees and cATM logic2410.06692v4 · Stefano M. Nicoletti, Milan Lopuhaa-Zwakenberg, Marielle Stoelinga et al.2024 · 2 citationsarXiv
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns2405.06371v2 · Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik et al.2024 · 41 citationsarXiv
Cross-ecosystem categorization: A manual-curation protocol for the categorization of Java Maven libraries along Python PyPI Topics2403.06300v1 · Ranindya Paramitha, Yuan Feng, Fabio Massacci et al.2024 · 0 citationsarXiv
A Graph-based Stratified Sampling Methodology for the Analysis of (Underground) Forums2308.09413v1 · Giorgio Di Tizio, Gilberto Atondo Siu, Alice Hutchings et al.2023 · 0 citationsIEEE Transactions on Information Forensics and Security, 2023
Are Software Updates Useless Against Advanced Persistent Threats?2306.07355v1 · Fabio Massacci, Giorgio Di Tizio2023 · 6 citationsCommunications of the ACM 66, 1 (2023)
CSEC+ framework assessment dataset: Expert evaluations of cybersecurity skills for job profiles in Europe.37383788 · Budde, Carlos E, Karinsalo, Anni, Vidor, Silvia et al.2024 · 5 citationsData in brief. 2023;48:109285
Building cross-language corpora for human understanding of privacy policies2302.05355v1 · Francesco Ciclosi, Silvia Vidor, Fabio Massacci2023 · 2 citationsarXiv
The Data Protection Officer, an ubiquitous role nobody really knows2212.07712v1 · Francesco Ciclosi, Fabio Massacci2022 · 9 citationsarXiv
On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools2209.07211v2 · Aurora Papotti, Ranindya Paramitha, Fabio Massacci2022 · 7 citationsarXiv
Cryptographic and Financial Fairness2207.10780v2 · Daniele Friolo, Fabio Massacci, Chan Nam Ngo et al.2022 · 7 citationsarXiv
Towards a Security Stress-Test for Cloud Configurations2205.14498v2 · Francesco Minna, Fabio Massacci, Katja Tuma2022 · 9 citationsarXiv
Software Updates Strategies: a Quantitative Evaluation against Advanced Persistent Threats2205.07759v2 · Giorgio Di Tizio, Michele Armellini, Fabio Massacci2022 · 23 citationsarXiv
The Work-Averse Cyberattacker Model: Theory and Evidence from Two Million Attack Signatures.33960506 · Allodi, Luca, Massacci, Fabio, Williams, Julian2022 · 24 citationsRisk analysis : an official publication of the Society for Risk Analysis. 2022;42(8):1623-1642
Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks2103.03317v1 · Fabio Massacci, Ivan Pashchenko2021 · 21 citationsarXiv
Secure Software Development in the Era of Fluid Multi-party Open Software and Services2103.03331v1 · Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta et al.2021 · 3 citationsarXiv
Who Should Pay for Interdependent Risk? Policy Implications for Security Interdependence Among Airports.32088932 · Kuper, Gabriel, Massacci, Fabio, Shim, Woohyun et al.2021 · 13 citationsRisk analysis : an official publication of the Society for Risk Analysis. 2020;40(5):1001-1019
IoT Security Configurability with Security-by-Contract.31548501 · Giaretta, Alberto, Dragoni, Nicola, Massacci, Fabio2019 · 15 citationsSensors (Basel, Switzerland). 2019;19(19)
A Convolutional Transformation Network for Malware Classification1909.07227v1 · Duc-Ly Vu, Trong-Kha Nguyen, Tam V. Nguyen et al.2019 · 78 citationsarXiv
Vulnerable Open Source Dependencies: Counting Those That Matter1808.09753v1 · Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta et al.2018 · 11 citationsarXiv
The Effect of Security Education and Expertise on Security Assessments: the Case of Software Vulnerabilities1808.06547v1 · Luca Allodi, Marco Cremonini, Fabio Massacci et al.2018 · 7 citationsarXiv
Attack Potential in Impact and Complexity1801.04703v1 · Luca Allodi, Fabio Massacci2018 · 10 citationsProceedings of the 12th International Conference on Availability, Reliability and Security (ARES 2017)
TestREx: a Framework for Repeatable Exploits1709.03084v1 · Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci et al.2017 · 7 citationsInt. J. Software Tools for Technology Transfer, 2017
Security Events and Vulnerability Data for Cybersecurity Risk Estimation.28800378 · Allodi, Luca, Massacci, Fabio2018 · 93 citationsRisk analysis : an official publication of the Society for Risk Analysis. 2017;37(8):1606-1627
Agency Problems and Airport Security: Quantitative and Qualitative Evidence on the Impact of Security Training.27031572 · de Gramatica, Martina, Massacci, Fabio, Shim, Woohyun et al.2018 · 8 citationsRisk analysis : an official publication of the Society for Risk Analysis. 2017;37(2):372-395
A Systematically Empirical Evaluation of Vulnerability Discovery Models: a Study on Browsers' Vulnerabilities1306.2476v1 · Viet Hung Nguyen, Fabio Massacci2013 · 46 citationsIEEE Transactions on Software Engineering 40(12), 2014
MAP-REDUCE Runtime Enforcement of Information Flow Policies1305.2136v1 · Minh Ngo, Fabio Massacci, Olga Gadyatskaya2013 · 3 citationsarXiv
The (Un)Reliability of NVD Vulnerable Versions Data: an Empirical Experiment on Google Chrome Vulnerabilities1302.4133v1 · Viet Hung Nguyen, Fabio Massacci2013 · 6 citationsarXiv
An Independent Validation of Vulnerability Discovery Models1203.5830v1 · Viet Hung Nguyen, Fabio Massacci2012 · 3 citationsarXiv
Career total: 457 works. 47 are in this corpus.
Profile built from the corpus for this byline.
Author records are still filling in while the Hub is in alpha. If this is your page, you'll be able to claim it soon. Spot a mistake? Tell us.