Towards security testing with taint analysis and genetic algorithms. - Andrea Avancini; Mariano Ceccato (SESS@ICSE, 2010)

Security Testing of Web Applications: A Search-Based Approach for Cross-Site Scripting Vulnerabilities. - Andrea Avancini; Mariano Ceccato (SCAM, 2011)

Security Oracle Based on Tree Kernel Methods. - Andrea Avancini; Mariano Ceccato (EternalS@ECAI, 2012)

Security testing of web applications: A research plan. - Andrea Avancini (ICSE, 2012)

Grammar based oracle for security testing of web applications. - Andrea Avancini; Mariano Ceccato (AST, 2012)

Security testing of the communication among Android applications. - Andrea Avancini; Mariano Ceccato (AST, 2013)

Circe: A grammar-based oracle for testing Cross-site scripting in web applications. - Andrea Avancini; Mariano Ceccato (WCRE, 2013)

Comparison and integration of genetic algorithms and dynamic symbolic execution for security testing of cross-site scripting vulnerabilities. - Andrea Avancini; Mariano Ceccato (Inf. Softw. Technol., 2013)

Security Testing of Web and Smartphone Applications. - Andrea Avancini (2013)

Reactive Attestation: Automatic Detection and Reaction to Software Tampering Attacks. - Alessio Viticchié; Cataldo Basile; Andrea Avancini; Mariano Ceccato; Bert Abrath; Bart Coppens 001 (SPRO@CCS, 2016)

Identifying Android inter app communication vulnerabilities using static and dynamic analysis. - Biniam Fisseha Demissie; Davide Ghio; Mariano Ceccato; Andrea Avancini (MOBILESoft, 2016)