Alice in (Software Supply) Chains: Risk Identification and Evaluation. - Giacomo Benedetti; Luca Verderame; Alessio Merlo (QUATIC, 2022)

Automatic Security Assessment of GitHub Actions Workflows. - Giacomo Benedetti; Luca Verderame; Alessio Merlo (SCORED@CCS, 2022)

A Preliminary Study of Privilege Life Cycle in Software Management Platform Automation Workflows. - Giacomo Benedetti; Luca Verderame; Alessio Merlo (EuroS&P Workshops, 2023)

SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis. - Serena Cofano; Giacomo Benedetti; Matteo Dell'Amico (TrustCom, 2024)

The Impact of SBOM Generators on Vulnerability Assessment in Python: A Comparison and a Novel Approach. - Giacomo Benedetti; Serena Cofano; Alessandro Brighente; Mauro Conti (ACNS (2), 2025)

From Edge to Cloud: Securing Distributed Containerized Applications. - Luca Verderame; Giorgia Bolognesi; Enrico Pezzano; Massimiliano Rak; Alberto Falcone; Giacomo Benedetti; Massimo Guarascio 001; Luca Caviglione; Roberto Carbone; Roberto Doriguzzi-Corin; Maurizio Giacobbe; Giovanni Merlino; et al. (EuroS&P (Workshops), 2025)

Detecting DDoS Attacks in Microservice Architectures via AI-Based Agents. - Giacomo Benedetti; Luca Caviglione; Alberto Falcone; Massimo Ficco; Massimo Guarascio 001; Antonio Guerriero (ICCSA (Workshops 4), 2025)

An Empirical Study on Reproducible Packaging in Open-Source Ecosystems. - Giacomo Benedetti; Oreofe Solarin; Courtney Miller; Greg Tystahl; William Enck; Christian Kästner; Alexandros Kapravelos; Alessio Merlo; Luca Verderame (ICSE, 2025)

Analysis and Detection of Android Stegomalware: the Impact of the Loading Stage. - Diego Soi; Silvia Lucia Sanna; Giacomo Benedetti; Angelica Liguori; Leonardo Regano; Luca Caviglione; Giorgio Giacinto (IH&MMSec, 2025)

Improving Transparency, Trust, and Automation in the Software Supply Chain. - Giacomo Benedetti (2025)

Research Directions in Software Supply Chain Security. - Laurie A. Williams; Giacomo Benedetti; Sivana Hamer; Ranindya Paramitha; Imranur Rahman; Mahzabin Tamanna; Greg Tystahl; Nusrat Zahan; Patrick Morrison; Yasemin Acar; Michel Cukier; Christian Kästner; et al. (ACM Trans. Softw. Eng. Methodol., 2025)