Migrating Interface Implementation to Aspects. - Paolo Tonella; Mariano Ceccato (ICSM, 2004)

Adding Distribution to Existing Applications by Means of Aspect Oriented Programming. - Mariano Ceccato; Paolo Tonella (SCAM, 2004)

Aspect Mining through the Formal Concept Analysis of Execution Traces. - Paolo Tonella; Mariano Ceccato (WCRE, 2004)

Automated Refactoring of Object Oriented Code into Aspects. - David W. Binkley; Mariano Ceccato; Mark Harman; Filippo Ricca; Paolo Tonella (ICSM, 2005)

A Qualitative Comparison of Three Aspect Mining Techniques. - Mariano Ceccato; Marius Marin; Kim Mens; Leon Moonen; Paolo Tonella; Tom Tourwé (IWPC, 2005)

Refactoring the Aspectizable Interfaces: An Empirical Assessment. - Paolo Tonella; Mariano Ceccato (IEEE Trans. Software Eng., 2005)

An empirical study on the usefulness of Conallen's stereotypes inWeb application comprehension. - Filippo Ricca; Massimiliano Di Penta; Marco Torchiano; Paolo Tonella; Mariano Ceccato (WSE, 2006)

Applying and combining three different aspect Mining Techniques. - Mariano Ceccato; Marius Marin; Kim Mens; Leon Moonen; Paolo Tonella; Tom Tourwé (Softw. Qual. J., 2006)

Tool-Supported Refactoring of Existing Object-Oriented Code into Aspects. - David W. Binkley; Mariano Ceccato; Mark Harman; Filippo Ricca; Paolo Tonella (IEEE Trans. Software Eng., 2006)

The Role of Experience and Ability in Comprehension Tasks Supported by UML Stereotypes. - Filippo Ricca; Massimiliano Di Penta; Marco Torchiano; Paolo Tonella; Mariano Ceccato (ICSE, 2007)

Migrating Object Oriented code to Aspect Oriented Programming. - Mariano Ceccato (ICSM, 2007)

Talking tests: an empirical assessment of the role of fit acceptance tests in clarifying requirements. - Filippo Ricca; Marco Torchiano; Mariano Ceccato; Paolo Tonella (IWPSE, 2007)

Barrier Slicing for Remote Software Trusting. - Mariano Ceccato; Mila Dalla Preda; Jasvir Nagra; Christian S. Collberg; Paolo Tonella (SCAM, 2007)

The Use of Executable FIT Tables to support Maintenance and Evolution Tasks. - Filippo Ricca; Marco Torchiano; Massimiliano Di Penta; Mariano Ceccato; Paolo Tonella (Electron. Commun. Eur. Assoc. Softw. Sci. Technol., 2007)

How design notations affect the comprehension of Web applications. - Filippo Ricca; Massimiliano Di Penta; Marco Torchiano; Paolo Tonella; Mariano Ceccato (J. Softw. Maintenance Res. Pract., 2007)

Towards experimental evaluation of code obfuscation techniques. - Mariano Ceccato; Massimiliano Di Penta; Jasvir Nagra; Paolo Falcarin; Filippo Ricca; Marco Torchiano; Paolo Tonella (QoP, 2008)

Automatic Support for the Migration Towards Aspects. - Mariano Ceccato (CSMR, 2008)

Goto Elimination Strategies in the Migration of Legacy Code to Java. - Mariano Ceccato; Paolo Tonella; Cristina Matteotti (CSMR, 2008)

Are fit tables really talking?: a series of experiments to understand whether fit tables are useful during evolution tasks. - Filippo Ricca; Massimiliano Di Penta; Marco Torchiano; Paolo Tonella; Mariano Ceccato; Corrado Aaron Visaggio (ICSE, 2008)

Distributing Trust Verification to Increase Application Performance. - Mariano Ceccato; Jasvir Nagra; Paolo Tonella (PDP, 2008)

Using Program Transformations to Add Structure to a Legacy Data Model. - Mariano Ceccato; Thomas Roy Dean; Paolo Tonella (SCAM, 2008)

Remote Entrusting by Run-Time Software Authentication. - Mariano Ceccato; Yoram Ofek; Paolo Tonella (SOFSEM, 2008)

Data Model Reverse Engineering in Migrating a Legacy System to Java. - Mariano Ceccato; Thomas Roy Dean; Paolo Tonella; Davide Marchignoli (WCRE, 2008)

Workshop on Maintenance of Aspect Oriented Systems. - Mario Luca Bernardi; Giuseppe A. Di Lucca; Mariano Ceccato (CSMR, 2009)

The effectiveness of source code obfuscation: An experimental assessment. - Mariano Ceccato; Massimiliano Di Penta; Jasvir Nagra; Paolo Falcarin; Filippo Ricca; Marco Torchiano; Paolo Tonella (ICPC, 2009)

Remote software protection by orthogonal client replacement. - Mariano Ceccato; Paolo Tonella; Mila Dalla Preda; Anirban Majumdar 004 (SAC, 2009)

Trading-off security and performance in barrier slicing for remote software entrusting. - Mariano Ceccato; Mila Dalla Preda; Jasvir Nagra; Christian S. Collberg; Paolo Tonella (Autom. Softw. Eng., 2009)

Dynamic aspect mining. - Mariano Ceccato; Paolo Tonella (IET Softw., 2009)

Recovering structured data types from a legacy data model with overlays. - Mariano Ceccato; Thomas Roy Dean; Paolo Tonella (Inf. Softw. Technol., 2009)

Using acceptance tests as a support for clarifying requirements: A series of experiments. - Filippo Ricca; Marco Torchiano; Massimiliano Di Penta; Mariano Ceccato; Paolo Tonella (Inf. Softw. Technol., 2009)

Towards security testing with taint analysis and genetic algorithms. - Andrea Avancini; Mariano Ceccato (SESS@ICSE, 2010)

Static analysis for enforcing intra-thread consistent locks in the migration of a legacy system. - Mariano Ceccato; Paolo Tonella (ICSM, 2010)

Migrating legacy data structures based on variable overlay to Java. - Mariano Ceccato; Thomas Roy Dean; Paolo Tonella; Davide Marchignoli (J. Softw. Maintenance Res. Pract., 2010)

How Developers' Experience and Ability Influence Web Application Comprehension Tasks Supported by UML Stereotypes: A Series of Four Experiments. - Filippo Ricca; Massimiliano Di Penta; Marco Torchiano; Paolo Tonella; Mariano Ceccato (IEEE Trans. Software Eng., 2010)

Ahab's Leg dilemma: On the design of a controlled experiment. - Luca Sabatucci; Mariano Ceccato; Alessandro Marchetto 001; Angelo Susi (EmpiRE, 2011)

Security Testing of Web Applications: A Search-Based Approach for Cross-Site Scripting Vulnerabilities. - Andrea Avancini; Mariano Ceccato (SCAM, 2011)

CodeBender: Remote Software Protection Using Orthogonal Replacement. - Mariano Ceccato; Paolo Tonella (IEEE Softw., 2011)

Security Oracle Based on Tree Kernel Methods. - Andrea Avancini; Mariano Ceccato (EternalS@ECAI, 2012)

Grammar based oracle for security testing of web applications. - Andrea Avancini; Mariano Ceccato (AST, 2012)

An empirical study about the effectiveness of debugging when random test cases are used. - Mariano Ceccato; Alessandro Marchetto 001; Leonardo Mariani; Cu D. Nguyen; Paolo Tonella (ICSE, 2012)

Security testing of the communication among Android applications. - Andrea Avancini; Mariano Ceccato (AST, 2013)

Towards a unified software attack model to assess software protections. - Cataldo Basile; Mariano Ceccato (ICPC, 2013)

Circe: A grammar-based oracle for testing Cross-site scripting in web applications. - Andrea Avancini; Mariano Ceccato (WCRE, 2013)

Comparison and integration of genetic algorithms and dynamic symbolic execution for security testing of cross-site scripting vulnerabilities. - Andrea Avancini; Mariano Ceccato (Inf. Softw. Technol., 2013)

Towards Supporting the Analysis of Online Discussions in OSS Communities: A Speech-Act Based Approach. - Itzel Morales-Ramirez; Anna Perini; Mariano Ceccato (CAiSE Forum (Selected Extended Papers), 2014)

POSTER: A Measurement Framework to Quantify Software Protections. - Paolo Tonella; Mariano Ceccato; Bjorn De Sutter; Bart Coppens 001 (CCS, 2014)

How smartphone users assess the value/risk trade-off of apps: An observational study. - Mariano Ceccato; Alessandro Marchetto 001; Anna Perini; Angelo Susi (EmpiRE, 2014)

A family of experiments to assess the effectiveness and efficiency of source code obfuscation techniques. - Mariano Ceccato; Massimiliano Di Penta; Paolo Falcarin; Filippo Ricca; Marco Torchiano; Paolo Tonella (Empir. Softw. Eng., 2014)

Guest editorial for the special issue on source code analysis and manipulation, SCAM 2012. - Mariano Ceccato; Zheng Li 002; James R. Cordy (J. Softw. Evol. Process., 2014)

Assessment of Data Obfuscation with Residue Number Coding. - Biniam Fisseha Demissie; Mariano Ceccato; Roberto Tiella (SPRO@ICSE, 2015)

A large study on the effect of code obfuscation on the quality of java code. - Mariano Ceccato; Andrea Capiluppi; Paolo Falcarin; Cornelia Boldyreff (Empir. Softw. Eng., 2015)

Ahab's legs in scenario-based requirements validation: An experiment to study communication mistakes. - Luca Sabatucci; Mariano Ceccato; Alessandro Marchetto 001; Angelo Susi (J. Syst. Softw., 2015)

Do Automatically Generated Test Cases Make Debugging Easier? An Experimental Assessment of Debugging Effectiveness and Efficiency. - Mariano Ceccato; Alessandro Marchetto 001; Leonardo Mariani; Cu D. Nguyen; Paolo Tonella (ACM Trans. Softw. Eng. Methodol., 2015)

The ASPIRE Framework for Software Protection. - Bjorn De Sutter; Cataldo Basile; Mariano Ceccato; Paolo Falcarin; Michael Zunke; Brecht Wyseur; Jérôme d'Annoville (SPRO@CCS, 2016)

Reactive Attestation: Automatic Detection and Reaction to Software Tampering Attacks. - Alessio Viticchié; Cataldo Basile; Andrea Avancini; Mariano Ceccato; Bert Abrath; Bart Coppens 001 (SPRO@CCS, 2016)

Static Analysis and Penetration Testing from the Perspective of Maintenance Teams. - Mariano Ceccato; Riccardo Scandariato (ESEM, 2016)

Identifying Android inter app communication vulnerabilities using static and dynamic analysis. - Biniam Fisseha Demissie; Davide Ghio; Mariano Ceccato; Andrea Avancini (MOBILESoft, 2016)

SOFIA: an automated security oracle for black-box testing of SQL-injection vulnerabilities. - Mariano Ceccato; Cu D. Nguyen; Dennis Appelt; Lionel C. Briand (ASE, 2016)

Assessment of Source Code Obfuscation Techniques. - Alessio Viticchié; Leonardo Regano; Marco Torchiano; Cataldo Basile; Mariano Ceccato; Paolo Tonella; Roberto Tiella (SCAM, 2016)

Search Based Clustering for Protecting Software with Diversified Updates. - Mariano Ceccato; Paolo Falcarin; Alessandro Cabutto; Yosief Weldezghi Frezghi; Cristian-Alexandru Staicu (SSBSE, 2016)

A Reference Architecture for Software Protection. - Bjorn De Sutter; Paolo Falcarin; Brecht Wyseur; Cataldo Basile; Mariano Ceccato; Jérôme d'Annoville; Michael Zunke (WICSA, 2016)

How professional hackers understand protected code while performing attack tasks. - Mariano Ceccato; Paolo Tonella; Cataldo Basile; Bart Coppens 001; Bjorn De Sutter; Paolo Falcarin; Marco Torchiano (ICPC, 2017)

Automatic generation of opaque constants based on the k-clique problem for resilient data obfuscation. - Roberto Tiella; Mariano Ceccato (SANER, 2017)

AnFlo: detecting anomalous sensitive information flows in Android apps. - Biniam Fisseha Demissie; Mariano Ceccato; Lwin Khin Shar (MOBILESoft@ICSE, 2018)

[Research Paper] Obfuscating Java Programs by Translating Selected Portions of Bytecode to Native Libraries. - Davide Pizzolotto; Mariano Ceccato (SCAM, 2018)

Toward In-Vivo Testing of Mobile Applications. - Mariano Ceccato; Luca Gazzola; Fitsum Meshesha Kifetew; Leonardo Mariani; Matteo Orrù; Paolo Tonella (ISSRE Workshops, 2019)

OBLIVE: Seamless Code Obfuscation for Java Programs and Android Apps. - Davide Pizzolotto; Roberto Fellin; Mariano Ceccato (SANER, 2019)

Obfuscating Java Programs by Translating Selected Portions of Bytecode to Native Libraries. - Davide Pizzolotto; Mariano Ceccato (CoRR, 2019)

Understanding the behaviour of hackers while performing attack tasks in a professional setting and in a public challenge. - Mariano Ceccato; Paolo Tonella; Cataldo Basile; Paolo Falcarin; Marco Torchiano; Bart Coppens 001; Bjorn De Sutter (Empir. Softw. Eng., 2019)

Security testing of second order permission re-delegation vulnerabilities in Android apps. - Biniam Fisseha Demissie; Mariano Ceccato (MOBILESoft@ICSE, 2020)

Experimental comparison of features and classifiers for Android malware detection. - Lwin Khin Shar; Biniam Fisseha Demissie; Mariano Ceccato; Wei Minn (MOBILESoft@ICSE, 2020)

A Framework for In-Vivo Testing of Mobile Applications. - Mariano Ceccato; Davide Corradini; Luca Gazzola; Fitsum Meshesha Kifetew; Leonardo Mariani; Matteo Orrù; Paolo Tonella (ICST, 2020)

A Family of Experiments to Assess the Impact of Page Object Pattern in Web Test Suite Development. - Maurizio Leotta; Matteo Biagiola; Filippo Ricca; Mariano Ceccato; Paolo Tonella (ICST, 2020)

RESTTESTGEN: Automated Black-Box Testing of RESTful APIs. - Emanuele Viglianisi; Michael Dallago; Mariano Ceccato (ICST, 2020)

Security analysis of permission re-delegation vulnerabilities in Android apps. - Biniam Fisseha Demissie; Mariano Ceccato; Lwin Khin Shar (Empir. Softw. Eng., 2020)

Empirical assessment of the effort needed to attack programs protected with client/server code splitting. - Alessio Viticchié; Leonardo Regano; Cataldo Basile; Marco Torchiano; Mariano Ceccato; Paolo Tonella (Empir. Softw. Eng., 2020)

A large-scale study on the adoption of anti-debugging and anti-tampering protections in android apps. - Stefano Berlato; Mariano Ceccato (J. Inf. Secur. Appl., 2020)

Experimental assessment of XOR-Masking data obfuscation based on K-Clique opaque constants. - Roberto Fellin; Mariano Ceccato (J. Syst. Softw., 2020)

A federated society of bots for smart contract testing. - Emanuele Viglianisi; Mariano Ceccato; Paolo Tonella (J. Syst. Softw., 2020)

Do Security Reports Meet Usability?: Lessons Learned from Using Actionable Mitigations for Patching TLS Misconfigurations. - Salvatore Manfredi; Mariano Ceccato; Giada Sciarretta; Silvio Ranise (ARES, 2021)

Restats: A Test Coverage Tool for RESTful APIs. - Davide Corradini; Amedeo Zampieri; Michele Pasqua; Mariano Ceccato (ICSME, 2021)

COSMO: Code Coverage Made Easier for Android. - Andrea Romdhana; Mariano Ceccato; Gabriel Claudiu Georgiu; Alessio Merlo; Paolo Tonella (ICST, 2021)

Summary of: A Federated Society of Bots for Smart Contract Testing. - Emanuele Viglianisi; Mariano Ceccato; Paolo Tonella (ICST, 2021)

EtherSolve: Computing an Accurate Control-Flow Graph from Ethereum Bytecode. - Filippo Contro; Marco Crosara; Mariano Ceccato; Mila Dalla Preda (ICPC, 2021)

Empirical Comparison of Black-box Test Case Generation Tools for RESTful APIs. - Davide Corradini; Amedeo Zampieri; Michele Pasqua; Mariano Ceccato (SCAM, 2021)

Towards Reverse Engineering of Industrial Physical Processes. - Mariano Ceccato; Youssef Driouich; Ruggero Lanotte; Marco Lucchese; Massimo Merro (CyberICPS/SECPRE/SPOSE/CPS4CIP/CDT&SECOMAN/EIS/SecAssure@ESORICS, 2022)

RestTestGen: An Extensible Framework for Automated Black-box Testing of RESTful APIs. - Davide Corradini; Amedeo Zampieri; Michele Pasqua; Mariano Ceccato (ICSME, 2022)

IFRIT: Focused Testing through Deep Reinforcement Learning. - Andrea Romdhana; Mariano Ceccato; Alessio Merlo; Paolo Tonella (ICST, 2022)

Integrating Smart Contracts in Manufacturing for Automated Assessment of Production Quality. - Sebastiano Gaiardelli; Stefano Spellini; Michele Pasqua; Mariano Ceccato; Franco Fummi (IECON, 2022)

Message from the General Chair and Program Co-Chairs SCAM 2022. - Mariano Ceccato; Banani Roy; Mohammad Ghafari (SCAM, 2022)

Empirical Validation on the Usability of Security Reports for Patching TLS Misconfigurations: User- and Case-Studies on Actionable Mitigations. - Salvatore Manfredi; Mariano Ceccato; Giada Sciarretta; Silvio Ranise (J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl., 2022)

Automated black-box testing of nominal and error scenarios in RESTful APIs. - Davide Corradini; Amedeo Zampieri; Michele Pasqua; Emanuele Viglianisi; Michael Dallago; Mariano Ceccato (Softw. Test. Verification Reliab., 2022)

Deep Reinforcement Learning for Black-box Testing of Android Apps. - Andrea Romdhana; Alessio Merlo; Mariano Ceccato; Paolo Tonella (ACM Trans. Softw. Eng. Methodol., 2022)

Remote Attestation of IoT Devices using Physically Unclonable Functions: Recent Advancements and Open Research Challenges. - Niccolò Marastoni; Mariano Ceccato (CPSIOTSEC@CCS, 2023)

EUROPULS: NEUROmorphic energy-efficient secure accelerators based on Phase change materials aUgmented siLicon photonicS. - Fabio Pavanello; Cédric Marchand 002; Ian O'Connor; Régis Orobtchouk; Fabien Mandorlo; Xavier Letartre; Sébastien Cueff; Elena-Ioana Vatajelu; Giorgio Di Natale; Benoit Cluzel; Aurelien Coillet; Benoît Charbonnier; et al. (ETS, 2023)

Automated Black-Box Testing of Mass Assignment Vulnerabilities in RESTful APIs. - Davide Corradini; Michele Pasqua; Mariano Ceccato (ICSE, 2023)

Enhancing REST API Testing with NLP Techniques. - Myeongsoo Kim; Davide Corradini; Saurabh Sinha; Alessandro Orso; Michele Pasqua; Rachel Tzoref-Brill; Mariano Ceccato (ISSTA, 2023)

Assessing the security of inter-app communications in android through reinforcement learning. - Andrea Romdhana; Alessio Merlo; Mariano Ceccato; Paolo Tonella (Comput. Secur., 2023)

NEUROPULS: NEUROmorphic energy-efficient secure accelerators based on Phase change materials aUgmented siLicon photonicS. - Fabio Pavanello; Cédric Marchand 002; Ian O'Connor; Régis Orobtchouk; Fabien Mandorlo; Xavier Letartre; Sébastien Cueff; Elena-Ioana Vatajelu; Giorgio Di Natale; Benoit Cluzel; Aurelien Coillet; Benoît Charbonnier; et al. (CoRR, 2023)

Enhancing Ethereum smart-contracts static analysis by computing a precise Control-Flow Graph of Ethereum bytecode. - Michele Pasqua; Andrea Benini; Filippo Contro; Marco Crosara; Mila Dalla Preda; Mariano Ceccato (J. Syst. Softw., 2023)

Experimental comparison of features, analyses, and classifiers for Android malware detection. - Lwin Khin Shar; Biniam Fisseha Demissie; Mariano Ceccato; Yan Naing Tun; David Lo 001; Lingxiao Jiang; Christoph Bienert (Empir. Softw. Eng., 2023)

Security Layers and Related Services within the Horizon Europe NEUROPULS Project. - Fabio Pavanello; Cédric Marchand 002; Paul Jiménez; Xavier Letartre; Ricardo Chaves; Niccolò Marastoni; Alberto Lovato; Mariano Ceccato; George Papadimitriou 001; Vasileios Karakostas; Dimitris Gizopoulos; Roberta Bardini; et al. (DATE, 2024)

Hypertesting of Programs: Theoretical Foundation and Automated Test Generation. - Michele Pasqua; Mariano Ceccato; Paolo Tonella (ICSE, 2024)

DeepREST: Automated Test Case Generation for REST APIs Exploiting Deep Reinforcement Learning. - Davide Corradini; Zeno Montolli; Michele Pasqua; Mariano Ceccato (ASE, 2024)

Mitigating Debugger-based Attacks to Java Applications with Self-debugging. - Davide Pizzolotto; Stefano Berlato; Mariano Ceccato (ACM Trans. Softw. Eng. Methodol., 2024)

RESTgym: A Flexible Infrastructure for Empirical Assessment of Automated REST API Testing Tools. - Davide Corradini; Michele Pasqua; Mariano Ceccato (ICST, 2025)

MITHRAS: A Dynamic Analysis Framework for the Mobile-IoT Ecosystem. - Francesco Pagano; Mariano Ceccato; Alessio Merlo; Paolo Tonella (SIGSOFT FSE Companion, 2025)

Guest Editorial for the Special Issue on Source Code Analysis and Manipulation, SCAM 2022. - Banani Roy; Mohammad Ghafari; Mariano Ceccato (J. Softw. Evol. Process., 2025)

How Do Solidity Versions Affect Vulnerability Detection Tools? An Empirical Study. - Gerardo Iuliano; Davide Corradini; Michele Pasqua; Mariano Ceccato; Dario Di Nucci (CoRR, 2025)

VLM-Fuzz: Vision Language Model Assisted Recursive Depth-first Search Exploration for Effective UI Testing of Android Apps. - Biniam Fisseha Demissie; Yan Naing Tun; Lwin Khin Shar; Mariano Ceccato (CoRR, 2025)