Delta-Bench: Differential Benchmark for Static Analysis Security Testing Tools. - Ivan Pashchenko; Stanislav Dashevskyi; Fabio Massacci (ESEM, 2017)

FOSS version differentiation as a benchmark for static analysis security testing tools. - Ivan Pashchenko (ESEC/SIGSOFT FSE, 2017)

Vulnerable open source dependencies: counting those that matter. - Ivan Pashchenko; Henrik Plate; Serena Elisa Ponta; Antonino Sabetta; Fabio Massacci (ESEM, 2018)

Decision Support of Security Assessment of Software Vulnerabilities in Industrial Practice. - Ivan Pashchenko (2019)

A Qualitative Study of Dependency Management and Its Security Implications. - Ivan Pashchenko; Duc-Ly Vu; Fabio Massacci (CCS, 2020)

Towards Using Source Code Repositories to Identify Software Supply Chain Attacks. - Duc-Ly Vu; Ivan Pashchenko; Fabio Massacci; Henrik Plate; Antonino Sabetta (CCS, 2020)

Typosquatting and Combosquatting Attacks on the Python Ecosystem. - Duc-Ly Vu; Ivan Pashchenko; Fabio Massacci; Henrik Plate; Antonino Sabetta (EuroS&P Workshops, 2020)

Preliminary findings on FOSS dependencies and security: a qualitative study on developers' attitudes and experience. - Ivan Pashchenko; Duc-Ly Vu; Fabio Massacci (ICSE (Companion Volume), 2020)

Large-Scale Manual Validation of Bug Fixing Commits: A Fine-grained Analysis of Tangling. - Steffen Herbold; Alexander Trautsch; Benjamin Ledel; Alireza Aghamohammadi; Taher Ahmed Ghaleb; Kuljit Kaur Chahal; Tim Bossenmaier; Bhaveet Nagaria; Philip Makedonski; Matin Nili Ahmadabadi; Kristóf Szabados; Helge Spieker; et al. (CoRR, 2020)

Please hold on: more time = more patches? Automated program repair as anytime algorithms. - Duc-Ly Vu; Ivan Pashchenko; Fabio Massacci (APR@ICSE, 2021)

Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks. - Fabio Massacci; Ivan Pashchenko (ICSE, 2021)

Secure Software Development in the Era of Fluid Multi-party Open Software and Services. - Ivan Pashchenko; Riccardo Scandariato; Antonino Sabetta; Fabio Massacci (ICSE (NIER), 2021)

LastPyMile: identifying the discrepancy between sources and packages. - Duc-Ly Vu; Fabio Massacci; Ivan Pashchenko; Henrik Plate; Antonino Sabetta (ESEC/SIGSOFT FSE, 2021)

Technical Leverage: Dependencies Are a Mixed Blessing. - Fabio Massacci; Ivan Pashchenko (IEEE Secur. Priv., 2021)

Code Analysis Tables for Developers Interviews on Dependencies Paper. - Ivan Pashchenko; Duc-Ly Vu; Fabio Massacci (Zenodo, 2021)

Code Analysis Tables for Developers Interviews on Dependencies Paper. - Ivan Pashchenko; Duc-Ly Vu; Fabio Massacci (Zenodo, 2021)

Security Maturity Self-Assessment Framework for Software Development Lifecycle. - Raluca Brasoveanu; Yusuf Karabulut; Ivan Pashchenko (ARES, 2022)

Lightweight Parsing and Slicing for Bug Identification in C. - Luca Mecenero; Ranindya Paramitha; Ivan Pashchenko; Fabio Massacci (ARES, 2022)

Introduction to the Special Issue on Vulnerabilities. - Fabio Massacci; Nick Nikiforakis; Ivan Pashchenko; Antonino Sabetta; Victoria Wang (DTRAP, 2022)

A fine-grained data set and analysis of tangling in bug fixing commits. - Steffen Herbold; Alexander Trautsch; Benjamin Ledel; Alireza Aghamohammadi; Taher Ahmed Ghaleb; Kuljit Kaur Chahal; Tim Bossenmaier; Bhaveet Nagaria; Philip Makedonski; Matin Nili Ahmadabadi; Kristóf Szabados; Helge Spieker; et al. (Empir. Softw. Eng., 2022)

TaintBench: Automatic real-world malware benchmarking of Android taint analyses. - Linghui Luo; Felix Pauck; Goran Piskachev; Manuel Benz; Ivan Pashchenko; Martin Mory; Eric Bodden; Ben Hermann; Fabio Massacci (Empir. Softw. Eng., 2022)

Machine Learning for Source Code Vulnerability Detection: What Works and What Isn't There Yet. - Tina Marjanov; Ivan Pashchenko; Fabio Massacci (IEEE Secur. Priv., 2022)

Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies. - Ivan Pashchenko; Henrik Plate; Serena Elisa Ponta; Antonino Sabetta; Fabio Massacci (IEEE Trans. Software Eng., 2022)

Technical Leverage Dataset for Java Dependencies in Maven. - Fabio Massacci; Ivan Pashchenko (Zenodo, 2022)

Known Vulnerabilities of Open Source Projects: Where Are the Fixes? - Antonino Sabetta; Serena Elisa Ponta; Rocío Cabrera Lozoya; Michele Bezzi; Tommaso Sacchetti; Matteo Greco; Gergö Balogh; Péter Hegedüs; Rudolf Ferenc; Ranindya Paramitha; Ivan Pashchenko; Aurora Papotti; et al. (IEEE Secur. Priv., 2024)