Riccardo Scandariato

发表

An Analysis of the Security Patterns Landscape

Thomas Heyman, Koen Yskout, Riccardo Scandariato, 2007, Third International Workshop on Software Engineering for Secure Systems (SESS'07: ICSE Workshops 2007).

Is Newer Always Better?: The Case of Vulnerability Prediction Models

Wouter Joosen, Riccardo Scandariato, Aram Hovsepyan, 2016, ESEM.

Remote trust with aspect-oriented programming

Paolo Falcarin, Riccardo Scandariato, Mario Baldi, 2006, 20th International Conference on Advanced Information Networking and Applications - Volume 1 (AINA'06).

Design Churn as Predictor of Vulnerabilities?

Wouter Joosen, Riccardo Scandariato, Aram Hovsepyan, 2014, Int. J. Secur. Softw. Eng..

An experimental design for evaluating the maintainability of aspect-oriented models enhanced with domain-specific constructs

Wouter Joosen, Stefan Van Baelen, Riccardo Scandariato, 2010 .

On the Secure Software Development Process: CLASP and SDL Compared

Wouter Joosen, Riccardo Scandariato, Bart De Win, 2007, Third International Workshop on Software Engineering for Secure Systems (SESS'07: ICSE Workshops 2007).

Perception and Acceptance of an Autonomous Refactoring Bot pdf

Riccardo Scandariato, Stefan Wagner, Marvin Wyrich, 2020, ICAART.

Measuring the interplay of security principles in software architectures

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2009, 2009 3rd International Symposium on Empirical Software Engineering and Measurement.

Software vulnerability prediction using text analysis techniques

Wouter Joosen, Riccardo Scandariato, Aram Hovsepyan, 2012, MetriSec '12.

From aspect-oriented models to aspect-oriented code?: the maintenance perspective

Wouter Joosen, Stefan Van Baelen, Riccardo Scandariato, 2010, AOSD.

A Model for Provably Secure Software Design

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2017, 2017 IEEE/ACM 5th International FME Workshop on Formal Methods in Software Engineering (FormaliSE).

Generative Secure Design, Defined

Riccardo Scandariato, Robert Feldt, Jennifer Horkoff, 2018, 2018 IEEE/ACM 40th International Conference on Software Engineering: New Ideas and Emerging Technologies Results (ICSE-NIER).

Reusable Formal Models for Secure Software Architectures

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2012, 2012 Joint Working IEEE/IFIP Conference on Software Architecture and European Conference on Software Architecture.

Extraction of an Architectural Model for Least Privilege Analysis

Wouter Joosen, Riccardo Scandariato, Bernard Spitz, 2012, Int. J. Secur. Softw. Eng..

Towards a quantitative assessment of security in software architectures

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2008 .

Measuring the interplay of security principles in software architectures

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2009, ESEM 2009.

Privacy Compliance Via Model Transformations

Riccardo Scandariato, Gerardo Schneider, Thibaud Antignac, 2018, 2018 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW).

Proceedings of the 13th European Conference on Software Architecture, ECSA 2019, Paris, France, September 9-13, 2019, Companion Proceedings (Proceedings Volume 2),

Danny Weyns, Riccardo Scandariato, Raffaela Mirandola, 2019, ECSA.

Proceedings of the 5th international conference on Engineering Secure Software and Systems

Riccardo Scandariato, Jan Jürjens, Benjamin Livshits, 2012 .

Does organizing security patterns focus architectural choices?

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2012, 2012 34th International Conference on Software Engineering (ICSE).

Static analysis versus penetration testing: A controlled experiment

Wouter Joosen, Riccardo Scandariato, James Walden, 2013, 2013 IEEE 24th International Symposium on Software Reliability Engineering (ISSRE).

A system of security patterns

Wouter Joosen, Thomas Heyman, Koen Yskout, 2006 .

Requirements-Driven Runtime Reconfiguration for Security

Koen Yskout, Riccardo Scandariato, Benoit Baudry, 2011, EternalS@FET.

Preserving Aspects via Automation: A Maintainability Study

Wouter Joosen, Stefan Van Baelen, Riccardo Scandariato, 2011, 2011 International Symposium on Empirical Software Engineering and Measurement.

Security Assurance Cases - State of the Art of an Emerging Approach pdf

Riccardo Scandariato, Jan-Philipp Steghöfer, Mazen Mohamad, 2020, ArXiv.

Towards a measuring framework for security properties of software

Wouter Joosen, Riccardo Scandariato, Bart De Win, 2006, QoP '06.

Towards Security Threats that Matter

Riccardo Scandariato, Katja Tuma, Christian Sandberg, 2017, CyberICPS/SECPRE@ESORICS.

Static Analysis and Penetration Testing from the Perspective of Maintenance Teams

Riccardo Scandariato, Mariano Ceccato, M. Ceccato, 2016, ESEM.

Predicting Vulnerable Software Components via Text Mining

Wouter Joosen, Riccardo Scandariato, Aram Hovsepyan, 2014, IEEE Transactions on Software Engineering.

Linking Privacy Solutions to Developer Goals

Bart De Decker, Wouter Joosen, Riccardo Scandariato, 2009, 2009 International Conference on Availability, Reliability and Security.

Engineering Secure Software and Systems

Gerhard Goos, Juris Hartmanis, Jan van Leeuwen, 2013, Lecture Notes in Computer Science.

LIND(D)UN privacy threat tree catalog

Wouter Joosen, Riccardo Scandariato, Kim Wuyts, 2014 .

A Privacy-Aware Conceptual Model for Handling Personal Data

Riccardo Scandariato, Gerardo Schneider, Thibaud Antignac, 2016, ISoLA.

Design notations for secure software: a systematic literature review

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2017, Software & Systems Modeling.

Process Activities Supporting Security Principles

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2007, 31st Annual International Computer Software and Applications Conference (COMPSAC 2007).

On the role of cross-disciplinary research and SSE in addressing the challenges of the digitalization of society

Rakesh Rana, Miroslaw Staron, Christian Berger, 2015, 2015 6th IEEE International Conference on Software Engineering and Service Science (ICSESS).

An Automated Defense System to Counter Internet Worms

Riccardo Scandariato, John C. Knight, R. Scandariato, 2003 .

Cross-project Classification of Security-related Requirements pdf

Riccardo Scandariato, Jan-Philipp Steghöfer, Mazen Mohamad, 2020, ArXiv.

Security patterns: 10 years later

Wouter Joosen, Thomas Heyman, Koen Yskout, 2008 .

Change patterns

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2012, Software & Systems Modeling.

Composition of least privilege analysis results in software architectures (position paper)

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2011, SESS '11.

A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements

Wouter Joosen, Riccardo Scandariato, Bart Preneel, 2011, Requirements Engineering.

Software architectures: State-of-the-art and challenges

Wouter Joosen, Stefan Van Baelen, Riccardo Scandariato, 2007 .

SoSPa: A system of Security design Patterns for systematically engineering secure systems

Jacques Klein, Yves Le Traon, Thomas Heyman, 2015, 2015 ACM/IEEE 18th International Conference on Model Driven Engineering Languages and Systems (MODELS).

Traceability Data in Early Development Phases as an Enabler for Decision Support

Riccardo Scandariato, Ali Shahrokni, Bashar Nassar, 2016, XP Workshops.

Do Security Patterns Really Help Designers?

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2015, 2015 IEEE/ACM 37th IEEE International Conference on Software Engineering.

Back to the Drawing Board - Bringing Security Constraints in an Architecture-centric Software Development Process

Riccardo Scandariato, Matthias Riebisch, Katja Tuma, 2018, ICISSP.

Predicting Vulnerable Components: Software Metrics vs Text Mining

Riccardo Scandariato, James Walden, Jeff Stuckman, 2014, 2014 IEEE 25th International Symposium on Software Reliability Engineering.

Automated Detection of Least Privilege Violations in Software Architectures

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2010, ECSA.

Security in Context: Analysis and Refinement of Software Architectures

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2010, 2010 IEEE 34th Annual Computer Software and Applications Conference.

Hardening XDS-Based Architectures

Wouter Joosen, Riccardo Scandariato, Kim Wuyts, 2008, 2008 Third International Conference on Availability, Reliability and Security.

Predicting vulnerable classes in an Android application

Riccardo Scandariato, James Walden, R. Scandariato, 2012, MetriSec '12.

On the secure software development process: CLASP, SDL and Touchpoints compared

Wouter Joosen, Riccardo Scandariato, Bart De Win, 2009, Inf. Softw. Technol..

LMAP: a protocol to automate the setup of logical networks

Riccardo Scandariato, Fulvio Risso, Patricia Lago, 2002, Proceedings 10th IEEE International Conference on Networks (ICON 2002). Towards Network Superiority (Cat. No.02EX588).

Integrating Patient Consent in e-Health Access Control

Wouter Joosen, Riccardo Scandariato, Kim Wuyts, 2011, Int. J. Secur. Softw. Eng..

Running head : DESIGN CHURN AS PREDICTOR OF VULNERABILITIES ? Title : Design Churn as Predictor of Vulnerabilities ?

Wouter Joosen, Riccardo Scandariato, Aram Hovsepyan, 2014 .

Aspectual vs. component-based decomposition: a quantitative study

Wouter Joosen, Riccardo Scandariato, Siobhán Clarke, 2007 .

Threat analysis of software systems: A systematic literature review

Riccardo Scandariato, Katja Tuma, Gül Çalikli, 2018, J. Syst. Softw..

Towards a reference framework for legal compliance: a detailed overview

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2010 .

Maintainability studies investigating aspect preservation via automation: lessons learned

Wouter Joosen, Stefan Van Baelen, Riccardo Scandariato, 2011 .

Smarmy -- A language to verify the security of software architectures

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2012 .

Application-Oriented Trust in Distributed Computing

Paolo Falcarin, Riccardo Scandariato, Yoram Ofek, 2008, 2008 Third International Conference on Availability, Reliability and Security.

The Effect of Dimensionality Reduction on Software Vulnerability Prediction Models

Riccardo Scandariato, James Walden, Jeff Stuckman, 2017, IEEE Transactions on Reliability.

Empirical evaluation of a privacy-focused threat modeling methodology

Wouter Joosen, Riccardo Scandariato, Kim Wuyts, 2014, J. Syst. Softw..

Security assurance cases for road vehicles: an industry perspective

Riccardo Scandariato, Mazen Mohamad, Alexander Åström, 2020, ARES.

Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis

Riccardo Scandariato, Musard Balliu, Katja Tuma, 2019, 2019 IEEE International Conference on Software Architecture (ICSA).

Risk-Driven Architectural Decomposition

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2009, 2009 International Conference on Availability, Reliability and Security.

Data veracity in intelligent transportation systems: The slippery road warning scenario

Miroslaw Staron, Riccardo Scandariato, R. Scandariato, 2016, 2016 IEEE Intelligent Vehicles Symposium (IV).

A descriptive study of Microsoft’s threat modeling technique

Wouter Joosen, Riccardo Scandariato, Kim Wuyts, 2015, Requirements Engineering.

Traceability Metrics as Early Predictors of Software Defects?

Riccardo Scandariato, Bashar Nassar, 2017, 2017 IEEE International Conference on Software Architecture (ICSA).

SecureChange: Security Engineering for Lifelong Evolvable Systems

Riccardo Scandariato, Fabio Massacci, 2010, ISoLA.

Evolution of Security Engineering Artifacts: A State of the Art Survey

Ruth Breu, Koen Yskout, Riccardo Scandariato, 2014, Int. J. Secur. Softw. Eng..

Proceedings of the 2008 workshop on Middleware security

Riccardo Scandariato, Giovanni Russello, 2008, Middleware 2008.

A model for provably secure software design

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2017 .

A Lingua Franca for Security by Design

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2018, 2018 IEEE Cybersecurity Development (SecDev).

Finding Security Threats That Matter: An Industrial Case Study pdf

Riccardo Scandariato, Katja Tuma, Christian Sandberg, 2019, ArXiv.

Current and Future Bots in Software Development

Riccardo Scandariato, Philipp Leitner, Francisco Gomes de Oliveira Neto, 2019, 2019 IEEE/ACM 1st International Workshop on Bots in Software Engineering (BotSE).

The design and evaluation of a defense system for Internet worms

Riccardo Scandariato, John C. Knight, 2004, Proceedings of the 23rd IEEE International Symposium on Reliable Distributed Systems, 2004..

MASC: Modelling Architectural Security Concerns

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2015, 2015 IEEE/ACM 7th International Workshop on Modeling in Software Engineering.

Using change patterns to incorporate evolving trust relationships into a software architecture

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2010 .

A Modular Meta-model for Security Solutions

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2017, Programming.

Theta Architecture: Preserving the Quality of Analytics in Data-Driven Systems

Miroslaw Staron, Riccardo Scandariato, Vasileios Theodorou, 2017, ADBIS.

Empirical Assessment of Security Requirements and Architecture: Lessons Learned

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2014, Engineering Secure Future Internet Services and Systems.

Architecting software with security patterns

Wouter Joosen, Thomas Heyman, Koen Yskout, 2008 .

Enhanced set of solutions supporting secure service architecture and design

Thomas Heyman, Riccardo Scandariato, Kristian Beckers, 2013 .

Security requirement patterns for Future Internet applications, and improved modelling of the scenarios

Koen Yskout, Riccardo Scandariato, Federica Paci, 2013 .

Wouter Joosen, Riccardo Scandariato, Bart De Win, 2007 .

Least privilege analysis in software architectures

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2011, Software & Systems Modeling.

Using Multi-Level Security Annotations to Improve Software Assurance

Wouter Joosen, Riccardo Scandariato, Eryk Kulikowski, 2008, 2008 11th IEEE High Assurance Systems Engineering Symposium.

Automated detection and resolution of least privilege violations in software architectures

Wouter Joosen, Riccardo Scandariato, Koen Buyens, 2010 .

Inspection guidelines to identify security design flaws

Riccardo Scandariato, Katja Tuma, Kyriakos Malamas, 2019, ECSA.

Using Security Patterns to Combine Security Metrics

Wouter Joosen, Thomas Heyman, Riccardo Scandariato, 2008, 2008 Third International Conference on Availability, Reliability and Security.

Two Architectural Threat Analysis Techniques Compared

Riccardo Scandariato, Katja Tuma, R. Scandariato, 2018, ECSA.

Empirical research on security and privacy by design - What (not) to expect as a researcher or a reviewer

Wouter Joosen, Koen Yskout, Riccardo Scandariato, 2017 .

The Security Twin Peaks

Thomas Heyman, Koen Yskout, Riccardo Scandariato, 2011, ESSoS.

Proceedings of the 6th International Workshop on Security Measurements and Metrics

Riccardo Scandariato, Laurie Williams, 2010, ESEM 2010.

Towards a systematic literature review on secure software design

Wouter Joosen, Riccardo Scandariato, Alexander van den Berghe, 2013, ESSoS 2013.

Checking Security Compliance between Models and Code pdf

Riccardo Scandariato, Jan Jürjens, Sven Peldszus, 2021, ArXiv.

Secure Software Development in the Era of Fluid Multi-party Open Software and Services

Riccardo Scandariato, Fabio Massacci, Ivan Pashchenko, 2021, 2021 IEEE/ACM 43rd International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER).

Asset-driven Security Assurance Cases with Built-in Quality Assurance

Riccardo Scandariato, Jan-Philipp Steghöfer, Örjan Askerdal, 2021, 2021 IEEE/ACM 2nd International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS).

Finding security threats that matter: Two industrial case studies

Riccardo Scandariato, Katja Tuma, Thomas Herpel, 2021, J. Syst. Softw..

SyntIoT: Privacy and security experimentation in consumer-oriented IoT ecosystems

Morten Fjeld, Riccardo Scandariato, Tomasz Kosinski, 2021, EAI Endorsed Trans. Security Safety.

What electronic health records don’t know just yet. A privacy analysis for patient communities and health records interaction

Wouter Joosen, Riccardo Scandariato, Jos Dumortier, 2012, Health and Technology.