Strengthening Cloud Applications: A Deep Dive into Kill Chain Identification, Scoring, and Automatic Penetration Testing. - Stefano Simonetto (RCIS (2), 2024)

What Matters Most in Vulnerabilities? Key Term Extraction for CVE-to-CWE Mapping with LLMs. - Stefano Simonetto; Ronan Oosteven; Thijs van Ede; Peter Bosch; Willem Jonker (CANS, 2025)

Beyond CWEs: Mapping Weaknesses in Unstructured Threat Intelligence Text. - Stefano Simonetto; Ronan Oosteven; Thijs van Ede; Peter Bosch; Willem Jonker (CANS, 2025)