Access Control and Authorization Constraints for WS-BPEL. - Elisa Bertino; Jason Crampton; Federica Paci (ICWS, 2006)

Access control enforcement for conversation-based web services. - Massimo Mecella; Mourad Ouzzani; Federica Paci; Elisa Bertino (WWW, 2006)

A secure framework for publishing virtual community contracts. - Anna Cinzia Squicciarini; Federica Paci; Elisa Bertino (Int. J. Web Based Communities, 2006)

An Adaptive Access Control Model for Web Services. - Elisa Bertino; Anna Cinzia Squicciarini; Lorenzo Martino; Federica Paci (Int. J. Web Serv. Res., 2006)

User Tasks and Access Control overWeb Services. - Jacques Thomas; Federica Paci; Elisa Bertino; Patrick Eugster (ICWS, 2007)

A system for securing push-based distribution of XML documents. - Elisa Bertino; Elena Ferrari 001; Federica Paci; Loredana Parasiliti Provenza (Int. J. Inf. Sec., 2007)

PP-trust-X: A system for privacy preserving trust negotiations. - Anna Cinzia Squicciarini; Elisa Bertino; Elena Ferrari 001; Federica Paci; Bhavani Thuraisingham (ACM Trans. Inf. Syst. Secur., 2007)

Verification of Access Control Requirements in Web Services Choreography. - Federica Paci; Mourad Ouzzani; Massimo Mecella (IEEE SCC (1), 2008)

A Federated Digital Identity Management Approach for Business Processes. - Elisa Bertino; Rodolfo Ferrini; Andrea Musci; Federica Paci; Kevin J. Steuer (CollaborateCom, 2008)

Monitoring Contract Enforcement within Virtual Organizations. - Anna Cinzia Squicciarini; Federica Paci (CollaborateCom, 2008)

Minimal credential disclosure in trust negotiations. - Federica Paci; David Bauer; Elisa Bertino; Douglas M. Blough; Anna Cinzia Squicciarini (Digital Identity Management, 2008)

Authorization and User Failure Resiliency for WS-BPEL Business Processes. - Federica Paci; Rodolfo Ferrini; Yuqing Sun 001; Elisa Bertino (ICSOC, 2008)

VeryIDX - A Digital Identity Management System for Pervasive Computing Environments. - Federica Paci; Elisa Bertino; Sam Kerr; Aaron Lint; Anna Cinzia Squicciarini; Jungha Woo (SEUS, 2008)

An Access-Control Framework for WS-BPEL. - Federica Paci; Elisa Bertino; Jason Crampton (Int. J. Web Serv. Res., 2008)

Identity Attribute-Based Role Provisioning for Human WS-BPEL Processes. - Federica Paci; Rodolfo Ferrini; Elisa Bertino (ICWS, 2009)

Privacy-preserving management of transactions' receipts for mobile environments. - Federica Paci; Ning Shang; Sam Kerr; Kevin Steuer Jr.; Jungha Woo; Elisa Bertino (IDtrust, 2009)

VeryIDX - A Privacy Preserving Digital Identity Management System for Mobile Devices. - Federica Paci; Ning Shang; Kevin Steuer Jr.; Ruchith Fernando; Elisa Bertino (Mobile Data Management, 2009)

Collective privacy management in social networks. - Anna Cinzia Squicciarini; Mohamed Shehab; Federica Paci (WWW, 2009)

An Interoperable Approach to Multifactor Identity Verification. - Federica Paci; Rodolfo Ferrini; Andrea Musci; Kevin Steuer Jr.; Elisa Bertino (Computer, 2009)

Privacy-preserving Digital Identity Management for Cloud Computing. - Elisa Bertino; Federica Paci; Rodolfo Ferrini; Ning Shang (IEEE Data Eng. Bull., 2009)

An Overview of VeryIDX - A Privacy-Preserving Digital Identity Management System for Mobile Devices. - Federica Paci; Elisa Bertino; Sam Kerr; Anna Cinzia Squicciarini; Jungha Woo (J. Softw., 2009)

Security for Web Services and Service-Oriented Architectures. - Elisa Bertino; Lorenzo Martino; Federica Paci; Anna Cinzia Squicciarini (Springer, 2010)

PriMa: an effective privacy protection mechanism for social networks. - Anna Cinzia Squicciarini; Federica Paci; Smitha Sundareswaran (AsiaCCS, 2010)

A privacy-preserving approach to policy-based content dissemination. - Ning Shang; Mohamed Nabeel; Federica Paci; Elisa Bertino (ICDE, 2010)

Efficient and privacy-preserving enforcement of attribute-based access control. - Ning Shang; Federica Paci; Elisa Bertino (IDtrust, 2010)

Java Card Architecture for Autonomous Yet Secure Evolution of Smart Cards Applications. - Olga Gadyatskaya; Fabio Massacci; Federica Paci; Sergey A. Stankevich (NordSec, 2010)

Group-Based Negotiations in P2P Systems. - Anna Cinzia Squicciarini; Federica Paci; Elisa Bertino; Alberto Trombetta; Stefano Braghin (IEEE Trans. Parallel Distributed Syst., 2010)

A Tool for Managing Evolving Security Requirements. - Gábor Bergmann; Fabio Massacci; Federica Paci; Thein Than Tun; Dániel Varró; Yijun Yu (CAiSE Forum, 2011)

An Extended Ontology for Security Requirements. - Fabio Massacci; John Mylopoulos; Federica Paci; Thein Than Tun; Yijun Yu (CAiSE Workshops, 2011)

Managing changes with legacy security engineering processes. - Edith Felix; Olivier Delande; Fabio Massacci; Federica Paci (ISI, 2011)

A Load Time Policy Checker for Open Multi-application Smart Cards. - Nicola Dragoni; Eduardo Lostal; Olga Gadyatskaya; Fabio Massacci; Federica Paci (POLICY, 2011)

SeCMER: A Tool to Gain Control of Security Requirements Evolution. - Gábor Bergmann; Fabio Massacci; Federica Paci; Thein Than Tun; Dániel Varró; Yijun Yu (ServiceWave, 2011)

Orchestrating Security and System Engineering for Evolving Systems - (Invited Paper). - Fabio Massacci; Fabrice Bouquet; Elizabeta Fourneret; Jan Jürjens; Mass Soldal Lund; Sébastien Madelénat; Jan Tobias Mühlberg; Federica Paci; Stéphane Paul; Frank Piessens; Bjørnar Solhaug; Sven Wenzel (ServiceWave, 2011)

Computer Aided Threat Identification. - Yudistira Asnar; Tong Li 001; Fabio Massacci; Federica Paci (CEC, 2011)

Trust establishment in the formation of Virtual Organizations. - Anna Cinzia Squicciarini; Federica Paci; Elisa Bertino (Comput. Stand. Interfaces, 2011)

ACConv - An Access Control Model for Conversational Web Services. - Federica Paci; Massimo Mecella; Mourad Ouzzani; Elisa Bertino (ACM Trans. Web, 2011)

Managing Evolution by Orchestrating Requirements and Testing Engineering Processes. - Federica Paci; Fabio Massacci; Fabrice Bouquet; Stephane Debricon (ICST, 2012)

How to Select a Security Requirements Method? A Comparative Study with Students and Practitioners. - Fabio Massacci; Federica Paci (NordSec, 2012)

Assessing a requirements evolution approach: Empirical studies in the Air Traffic Management domain. - Fabio Massacci; Deepa Nagaraj; Federica Paci; Le Minh Sang Tran; Alessandra Tedeschi (EmpiRE, 2012)

Combining Goal-Oriented and Problem-Oriented Requirements Engineering Methods. - Kristian Beckers; Stephan Faßbender; Maritta Heisel; Federica Paci (CD-ARES, 2013)

Detecting Insider Threats: A Trust-Aware Framework. - Federica Paci; M. Carmen Fernández Gago; Francisco Moyano (ARES, 2013)

An Experimental Comparison of Two Risk-Based Security Methods. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Le Minh Sang Tran (ESEM, 2013)

PERSONA - A Personalized Data Protection Framework. - Marina Egea; Federica Paci; Marinella Petrocchi; Nicola Zannone (IFIPTM, 2013)

Privacy-Aware Web Service Composition and Ranking. - Elisa Costante; Federica Paci; Nicola Zannone (Int. J. Web Serv. Res., 2013)

EMFASE - An Empirical Framework for Security Design and Economic Trade-off. - Fabio Massacci; Federica Paci; Bjørnar Solhaug; Alessandra Tedeschi (ARES, 2014)

Security triage: an industrial case study on the effectiveness of a lean methodology to identify security requirements. - Matteo Giacalone; Federica Paci; Rocco Mammoliti; Rodolfo Perugino; Fabio Massacci; Claudio Selli (ESEM, 2014)

Security triage: A report of a lean security requirements methodology for cost-effective security analysis. - Matteo Giacalone; Rocco Mammoliti; Fabio Massacci; Federica Paci; Rodolfo Perugino; Claudio Selli (EmpiRE, 2014)

An experiment on comparing textual vs. visual industrial methods for security risk assessment. - Katsiaryna Labunets; Federica Paci; Fabio Massacci; Raminder S. Ruprai (EmpiRE, 2014)

PriMa: a comprehensive approach to privacy protection in social network sites. - Anna Cinzia Squicciarini; Federica Paci; Smitha Sundareswaran (Ann. des Télécommunications, 2014)

Evolution of Security Engineering Artifacts: A State of the Art Survey. - Michael Felderer; Basel Katt; Philipp Kalb; Jan Jürjens; Martín Ochoa; Federica Paci; Le Minh Sang Tran; Thein Than Tun; Koen Yskout; Riccardo Scandariato; Frank Piessens; Dries Vanoverberghe; et al. (Int. J. Secur. Softw. Eng., 2014)

Assessing a requirements evolution approach: Empirical studies in the air traffic management domain. - Fabio Massacci; Federica Paci; Le Minh Sang Tran; Alessandra Tedeschi (J. Syst. Softw., 2014)

Empirical Assessment of Security Requirements and Architecture: Lessons Learned. - Riccardo Scandariato; Federica Paci; Le Minh Sang Tran; Katsiaryna Labunets; Koen Yskout; Fabio Massacci; Wouter Joosen (Engineering Secure Future Internet Services and Systems, 2014)

Which security catalogue is better for novices? - Katsiaryna Labunets; Federica Paci; Fabio Massacci (EmpiRE, 2015)

The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals. - Martina de Gramatica; Katsiaryna Labunets; Fabio Massacci; Federica Paci; Alessandra Tedeschi (REFSQ, 2015)

Preventing Information Inference in Access Control. - Federica Paci; Nicola Zannone (SACMAT, 2015)

Towards Empirical Evaluation of Automated Risk Assessment Methods. - Olga Gadyatskaya; Katsiaryna Labunets; Federica Paci (CRiSIS, 2016)

EEVi - framework for evaluating the effectiveness of visualization in cyber-security. - Aneesha Sethi; Federica Paci; Gary B. Wills (ICITST, 2016)

Formal Modelling of Data Integration Systems Security Policies. - Fatimah Y. Akeel; Asieh Salehi Fathabadi; Federica Paci; Andrew M. Gravell; Gary B. Wills (Data Sci. Eng., 2016)

Privacy-Preserving Access Control in Cloud Federations. - Shorouq Alansari; Federica Paci; Andrea Margheri; Vladimiro Sassone (CLOUD, 2017)

A Distributed Access Control System for Cloud Federations. - Shorouq Alansari; Federica Paci; Vladimiro Sassone (ICDCS, 2017)

Decentralised Runtime Monitoring for Access Control Systems in Cloud Federations. - Md. Sadek Ferdous; Andrea Margheri; Federica Paci; Mu Yang; Vladimiro Sassone (ICDCS, 2017)

On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. - Katsiaryna Labunets; Fabio Massacci; Federica Paci (REFSQ, 2017)

Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Sabrina Marczak; Flávio Moreira de Oliveira (Empir. Softw. Eng., 2017)

Towards Adaptive Access Control. - Luciano Argento; Andrea Margheri; Federica Paci; Vladimiro Sassone; Nicola Zannone (DBSec, 2018)

Survey on Access Control for Community-Centered Collaborative Systems. - Federica Paci; Anna Cinzia Squicciarini; Nicola Zannone (ACM Comput. Surv., 2018)

Access control in Internet-of-Things: A survey. - Sowmya Ravidas; Alexios Lekidis; Federica Paci; Nicola Zannone (J. Netw. Comput. Appl., 2019)

A real world study on employees' susceptibility to phishing attacks. - Marco De Bona; Federica Paci (ARES, 2020)

IFTTT Privacy Checker. - Federica Paci; Davide Bianchin; Elisa Quintarelli; Nicola Zannone (ETAA@ESORICS, 2020)

Riskio: A Serious Game for Cyber Security Awareness and Education. - Stephen Hart; Andrea Margheri; Federica Paci; Vladimiro Sassone (Comput. Secur., 2020)

Selecting a Secure Cloud Provider - An Empirical Study and Multi Criteria Approach. - Sebastian Pape 001; Federica Paci; Jan Jürjens; Fabio Massacci (Inf., 2020)

Fuzzy-based approach to assess and prioritize privacy risks. - Stephen Hart; Anna Lisa Ferrara; Federica Paci (Soft Comput., 2020)

Verifiable Hierarchical Key Assignment Schemes. - Anna Lisa Ferrara; Federica Paci; Chiara Ricciardi (DBSec, 2021)

Connecting Regulatory Requirements to Audit Outcomes: A Model-driven Approach to Auditable Compliance. - Robert Thorburn; Federica Paci; Vladimiro Sassone; Sophie Stalla-Bourdillon (MoDELS (Companion), 2021)

HoneyICS: A High-interaction Physics-aware Honeynet for Industrial Control Systems. - Marco Lucchese; Francesco Lupia; Massimo Merro; Federica Paci; Nicola Zannone; Angelo Furfaro (ARES, 2023)

Mitigating Privilege Misuse in Access Control through Anomaly Detection. - Gelareh Hasel Mehri; Inez L. Wester; Federica Paci; Nicola Zannone (ARES, 2023)

A Comprehensive Study on Third-Party User Tracking in Mobile Applications. - Federica Paci; Jacopo Pizzoli; Nicola Zannone (ARES, 2023)

Towards A High-interaction Physics-aware Honeynet for Industrial Control Systems. - Marco Lucchese; Massimo Merro; Federica Paci; Nicola Zannone (SAC, 2023)

A new, evidence-based, theory for knowledge reuse in security risk analysis. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Katja Tuma (Empir. Softw. Eng., 2023)

Enhancing Safety and Privacy in Industry 4.0: The ICE Laboratory Case Study. - Federico Cunico; Stefano Aldegheri; Andrea Avogaro; Michele Boldo; Nicola Bombieri; Luigi Capogrosso; Ariel Caputo; Damiano Carra; Stefano Centomo; Dong Seon Cheng; Ettore Cinquetti; Marco Cristani; et al. (IEEE Access, 2024)

Next Generation Vulnerability Detection with LLMs. - Mila Dalla Preda; Niccolò Marastoni; Federica Paci (ERCIM News, 2024)

An Empirical Measurement of Cookie Banners Potential Legal Violations in EU vs US Websites. - Federica Paci; Matteo Cristani; Armando de Berti (ARES (Workshops 2), 2025)