Fabio Massacci

A Screening Test for Disclosed Vulnerabilities in FOSS Components

2018 · IEEE Transactions on Software Engineering

Free and Open Source Software (FOSS) components are ubiquitous in both proprietary and open source applications. Each time a vulnerability is disclosed in a FOSS component, a software vendor using this component in an application …

A methodology to perform cross-ecosystems case-control security studies

2026 · Empirical Software Engineering

Abstract The choice of one’s programming language and relative ecosystem of libraries can affect the likelihood of encountering a critical vulnerability. Simply counting the vulnerabilities by mining a software repository is not enough, and case-control …