Model Checking of Security-Sensitive Business Processes. - Alessandro Armando; Serena Elisa Ponta (Formal Aspects in Security and Trust, 2009)

Formal Specification and Automatic Analysis of Business Processes under Authorization Constraints: An Action-Based Approach. - Alessandro Armando; Enrico Giunchiglia; Serena Elisa Ponta (TrustBus, 2009)

Security Validation of Business Processes via Model-Checking. - Wihem Arsac; Luca Compagna; Giancarlo Pellegrino; Serena Elisa Ponta (ESSoS, 2011)

Towards Formal Validation of Trust and Security in the Internet of Services. - Roberto Carbone; Marius Minea; Sebastian Mödersheim; Serena Elisa Ponta; Mathieu Turuani; Luca Viganò 001 (Future Internet Assembly, 2011)

Security validation tool for business processes. - Wihem Arsac; Luca Compagna; Samuel Paul Kaluvuri; Serena Elisa Ponta (SACMAT, 2011)

Configuration Assessment as a Service. - Matteo Maria Casalino; Henrik Plate; Serena Elisa Ponta (DPM/SETOP, 2012)

Detection of Configuration Vulnerabilities in Distributed (Web) Environments. - Matteo Maria Casalino; Michele Mangili; Henrik Plate; Serena Elisa Ponta (SecureComm, 2012)

The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. - Alessandro Armando; Wihem Arsac; Tigran Avanesov; Michele Barletta; Alberto Calvi; Alessandro Cappai; Roberto Carbone; Yannick Chevalier; Luca Compagna; Jorge Cuéllar; Gabriel Erzse; Simone Frau; et al. (TACAS, 2012)

An action-based approach to the formal specification and automatic analysis of business processes under authorization constraints. - Alessandro Armando; Enrico Giunchiglia; Marco Maratea; Serena Elisa Ponta (J. Comput. Syst. Sci., 2012)

Modeling and Reasoning about Business Processes under Authorization Constraints: A Planning-Based Approach. - Alessandro Armando; Enrico Giunchiglia; Marco Maratea; Serena Elisa Ponta (ICAPS, 2013)

Increasing Trust in the Cloud through Configuration Validation. - Matteo Maria Casalino; Henrik Plate; Serena Elisa Ponta (OTM Workshops, 2014)

Model checking authorization requirements in business processes. - Alessandro Armando; Serena Elisa Ponta (Comput. Secur., 2014)

Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. - Daniel Ricardo dos Santos; Silvio Ranise; Luca Compagna; Serena Elisa Ponta (DBSec, 2015)

Impact assessment for vulnerabilities in open-source software libraries. - Henrik Plate; Serena Elisa Ponta; Antonino Sabetta (ICSME, 2015)

Security Threat Identification and Testing. - Roberto Carbone; Luca Compagna; Annibale Panichella; Serena Elisa Ponta (ICST, 2015)

Modularity for Security-Sensitive Workflows. - Daniel Ricardo dos Santos; Silvio Ranise; Serena Elisa Ponta (CoRR, 2015)

Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability. - Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (SACMAT, 2016)

Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. - Luca Compagna; Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (TACAS, 2016)

Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. - Luca Compagna; Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (CODASPY, 2017)

Automatically finding execution scenarios to deploy security-sensitive workflows. - Daniel Ricardo dos Santos; Silvio Ranise; Luca Compagna; Serena Elisa Ponta (J. Comput. Secur., 2017)

Vulnerable open source dependencies: counting those that matter. - Ivan Pashchenko; Henrik Plate; Serena Elisa Ponta; Antonino Sabetta; Fabio Massacci (ESEM, 2018)

Beyond Metadata: Code-Centric and Usage-Based Analysis of Known Vulnerabilities in Open-Source Software. - Serena Elisa Ponta; Henrik Plate; Antonino Sabetta (ICSME, 2018)

A manually-curated dataset of fixes to vulnerabilities of open-source software. - Serena Elisa Ponta; Henrik Plate; Antonino Sabetta; Michele Bezzi; Cédric Dangremont (MSR, 2019)

Code-Based Vulnerability Detection in Node.js Applications: How far are we? - Bodin Chinthanet; Serena Elisa Ponta; Henrik Plate; Antonino Sabetta; Raula Gaikovina Kula; Takashi Ishio; Kenichi Matsumoto (ASE, 2020)

Detection, assessment and mitigation of vulnerabilities in open source dependencies. - Serena Elisa Ponta; Henrik Plate; Antonino Sabetta (Empir. Softw. Eng., 2020)

The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application. - Serena Elisa Ponta; Wolfram Fischer; Henrik Plate; Antonino Sabetta (ICSME, 2021)

Risk Explorer for Software Supply Chains: Understanding the Attack Surface of Open-Source based Software Development. - Piergiorgio Ladisa; Henrik Plate; Matias Martinez; Olivier Barais; Serena Elisa Ponta (SCORED@CCS, 2022)

Towards the Detection of Malicious Java Packages. - Piergiorgio Ladisa; Henrik Plate; Matias Martinez; Olivier Barais; Serena Elisa Ponta (SCORED@CCS, 2022)

Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite (Short Summary). - Andreas Dann; Henrik Plate; Ben Hermann; Serena Elisa Ponta; Eric Bodden (Software Engineering, 2022)

Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. - Andreas Dann; Henrik Plate; Ben Hermann; Serena Elisa Ponta; Eric Bodden (IEEE Trans. Software Eng., 2022)

Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies. - Ivan Pashchenko; Henrik Plate; Serena Elisa Ponta; Antonino Sabetta; Fabio Massacci (IEEE Trans. Software Eng., 2022)

On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI. - Piergiorgio Ladisa; Serena Elisa Ponta; Nicola Ronzoni; Matias Martinez; Olivier Barais (ACSAC, 2023)

The Hitchhiker's Guide to Malicious Third-Party Dependencies. - Piergiorgio Ladisa; Merve Sahin; Serena Elisa Ponta; Marco Rosa; Matias Martinez; Olivier Barais (SCORED@CCS, 2023)

Journey to the Center of Software Supply Chain Attacks. - Piergiorgio Ladisa; Serena Elisa Ponta; Antonino Sabetta; Matias Martinez; Olivier Barais (IEEE Secur. Priv., 2023)

Java Bytecode Normalization for Code Similarity Analysis. - Stefan Schott; Serena Elisa Ponta; Wolfram Fischer; Jonas Klauke; Eric Bodden (ECOOP, 2024)

Compilation of Commit Changes Within Java Source Code Repositories. - Stefan Schott; Wolfram Fischer; Serena Elisa Ponta; Jonas Klauke; Eric Bodden (ICSME, 2024)

Java Bytecode Normalization for Code Similarity Analysis (Artifact). - Stefan Schott; Serena Elisa Ponta; Wolfram Fischer; Jonas Klauke; Eric Bodden (Dagstuhl Artifacts Ser., 2024)

Known Vulnerabilities of Open Source Projects: Where Are the Fixes? - Antonino Sabetta; Serena Elisa Ponta; Rocío Cabrera Lozoya; Michele Bezzi; Tommaso Sacchetti; Matteo Greco; Gergö Balogh; Péter Hegedüs; Rudolf Ferenc; Ranindya Paramitha; Ivan Pashchenko; Aurora Papotti; et al. (IEEE Secur. Priv., 2024)