Risk Explorer for Software Supply Chains: Understanding the Attack Surface of Open-Source based Software Development. - Piergiorgio Ladisa; Henrik Plate; Matias Martinez; Olivier Barais; Serena Elisa Ponta (SCORED@CCS, 2022)

Towards the Detection of Malicious Java Packages. - Piergiorgio Ladisa; Henrik Plate; Matias Martinez; Olivier Barais; Serena Elisa Ponta (SCORED@CCS, 2022)

Taxonomy of Attacks on Open-Source Software Supply Chains. - Piergiorgio Ladisa; Henrik Plate; Matias Martinez; Olivier Barais (CoRR, 2022)

On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI. - Piergiorgio Ladisa; Serena Elisa Ponta; Nicola Ronzoni; Matias Martinez; Olivier Barais (ACSAC, 2023)

The Hitchhiker's Guide to Malicious Third-Party Dependencies. - Piergiorgio Ladisa; Merve Sahin; Serena Elisa Ponta; Marco Rosa; Matias Martinez; Olivier Barais (SCORED@CCS, 2023)

SoK: Taxonomy of Attacks on Open-Source Software Supply Chains. - Piergiorgio Ladisa; Henrik Plate; Matias Martinez; Olivier Barais (SP, 2023)

Journey to the Center of Software Supply Chain Attacks. - Piergiorgio Ladisa; Serena Elisa Ponta; Antonino Sabetta; Matias Martinez; Olivier Barais (IEEE Secur. Priv., 2023)

Understanding and preventing open-source software supply chain attacks. (Comprendre et prévenir les attaques à la chaîne d'approvisionnement de logiciels open-source). - Piergiorgio Ladisa (2024)