| 2026 | CHI | Tool-Assisted CVSS Vulnerability Scoring: A Controlled Quantitative Study of Human Assessment. | Siqi Zhang, Minjie Cai, Lianying Zhao, Xavier de Carn de Carnavalet, Fabio Massacci, Mengyuan Zhang |
| 2025 | CloudCom | An AI Security Testbed for the 5G Core. | Clment Legrand-Duchesne, Johannes Hrtel, Fabio Massacci, Mengyuan Zhang, Agathe Blaise |
| 2025 | ICSE | Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't. | Maria Camporese, Fabio Massacci |
| 2025 | ICSE | When in Doubt Throw It Out: Building on Confident Learning for Vulnerability Detection. | Yuanjun Gong, Fabio Massacci |
| 2025 | SP | GDPR in the Small: A Field Study of Privacy and Security Challenges in Schools. | Francesco Ciclosi, Giovanna Varni, Fabio Massacci |
| 2024 | CCS | PG: Byzantine Fault-Tolerant and Privacy-Preserving Sensor Fusion with Guaranteed Output Delivery. | Chenglu Jin, Chao Yin, Marten van Dijk, Sisi Duan, Fabio Massacci, Michael K. Reiter, Haibin Zhang |
| 2024 | CCS | Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns. | Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl |
| 2024 | ICSE | Automated Security Repair for Helm Charts. | Francesco Minna, Agathe Blaise, Fabio Massacci, Katja Tuma |
| 2024 | ICSE | On the Effects of Program Slicing for Vulnerability Detection during Code Inspection: Extended Abstract. | Aurora Papotti, Fabio Massacci, Katja Tuma |
| 2022 | CCGRID | An Open-Source Cloud Testbed for Security Experimentation. | Francesco Minna, Fabio Massacci |
| 2021 | FC | Practical Witness-Key-Agreement for Blockchain-Based Dark Pools Financial Trading. | Chan Nam Ngo, Fabio Massacci, Florian Kerschbaum, Julian Williams |
| 2021 | ICSE | Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks. | Fabio Massacci, Ivan Pashchenko |
| 2021 | ICSE | Secure Software Development in the Era of Fluid Multi-party Open Software and Services. | Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci |
| 2020 | CCS | A Qualitative Study of Dependency Management and Its Security Implications. | Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci |
| 2020 | CCS | Towards Using Source Code Repositories to Identify Software Supply Chain Attacks. | Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta |
| 2020 | ICSE | Preliminary findings on FOSS dependencies and security: a qualitative study on developers' attitudes and experience. | Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci |
| 2018 | ESEM | Vulnerable open source dependencies: counting those that matter. | Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci |
| 2018 | ICSE | Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. | Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flvio Moreira de Oliveira |
| 2018 | SP | FuturesMEX: Secure, Distributed Futures Market Exchange. | Fabio Massacci, Chan Nam Ngo, Jing Nie, Daniele Venturi, Julian Williams |
| 2017 | ESEM | Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels and Complexity. | Katsiaryna Labunets, Fabio Massacci, Alessandra Tedeschi |
| 2017 | ESEM | Delta-Bench: Differential Benchmark for Static Analysis Security Testing Tools. | Ivan Pashchenko, Stanislav Dashevskyi, Fabio Massacci |
| 2017 | ICSE | Teaching predictive modeling to junior software engineers - seminar format and its evaluation: poster. | Katsiaryna Labunets, Andrea Janes, Michael Felderer, Fabio Massacci |
| 2017 | REFSQ | On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. | Katsiaryna Labunets, Fabio Massacci, Federica Paci |
| 2015 | POPL | Runtime Enforcement of Security Policies on Black Box Reactive Programs. | Minh Ngo, Fabio Massacci, Dimiter Milushev, Frank Piessens |
| 2015 | RE | Which security catalogue is better for novices? | Katsiaryna Labunets, Federica Paci, Fabio Massacci |
| 2015 | REFSQ | The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals. | Martina de Gramatica, Katsiaryna Labunets, Fabio Massacci, Federica Paci, Alessandra Tedeschi |
| 2014 | ACSAC | NodeSentry: least-privilege library integration for server-side JavaScript. | Willem De Groef, Fabio Massacci, Frank Piessens |
| 2014 | ESEM | Security triage: an industrial case study on the effectiveness of a lean methodology to identify security requirements. | Matteo Giacalone, Federica Paci, Rocco Mammoliti, Rodolfo Perugino, Fabio Massacci, Claudio Selli |
| 2014 | RE | Security triage: A report of a lean security requirements methodology for cost-effective security analysis. | Matteo Giacalone, Rocco Mammoliti, Fabio Massacci, Federica Paci, Rodolfo Perugino, Claudio Selli |
| 2014 | RE | An experiment on comparing textual vs. visual industrial methods for security risk assessment. | Katsiaryna Labunets, Federica Paci, Fabio Massacci, Raminder S. Ruprai |
| 2014 | RE | An Approach for Decision Support on the Uncertainty in Feature Model Evolution. | Le Minh Sang Tran, Fabio Massacci |
| 2013 | CaiSE | UNICORN: A Tool for Modeling and Reasoning on the Uncertainty of Requirements Evolution. | Le Minh Sang Tran, Fabio Massacci |
| 2013 | CCS | The (un)reliability of NVD vulnerable versions data: an empirical experiment on Google Chrome vulnerabilities. | Viet Hung Nguyen, Fabio Massacci |
| 2013 | ESEM | An Experimental Comparison of Two Risk-Based Security Methods. | Katsiaryna Labunets, Fabio Massacci, Federica Paci, Le Minh Sang Tran |
| 2013 | SP | Quantitative Assessment of Risk Reduction with Cybercrime Black Market Monitoring. | Luca Allodi, Woohyun Shim, Fabio Massacci |
| 2012 | CCS | A preliminary analysis of vulnerability scores for attacks in wild: the ekits and sym datasets. | Luca Allodi, Fabio Massacci |
| 2012 | CCS | An independent validation of vulnerability discovery models. | Viet Hung Nguyen, Fabio Massacci |
| 2012 | ICST | Managing Evolution by Orchestrating Requirements and Testing Engineering Processes. | Federica Paci, Fabio Massacci, Fabrice Bouquet, Stephane Debricon |
| 2012 | RE | Assessing a requirements evolution approach: Empirical studies in the Air Traffic Management domain. | Fabio Massacci, Deepa Nagaraj, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi |
| 2012 | SEC | Security-by-Contract for the OSGi Platform. | Olga Gadyatskaya, Fabio Massacci, Anton Philippov |
| 2011 | CaiSE | A Tool for Managing Evolving Security Requirements. | Gbor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dniel Varr, Yijun Yu |
| 2011 | CaiSE | A Tool for Managing Evolving Security Requirements. | Gbor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dniel Varr, Yijun Yu |
| 2011 | CaiSE | An Extended Ontology for Security Requirements. | Fabio Massacci, John Mylopoulos, Federica Paci, Thein Than Tun, Yijun Yu |
| 2011 | CaiSE | Dealing with Known Unknowns: Towards a Game-Theoretic Foundation for Software Requirement Evolution. | Le Minh Sang Tran, Fabio Massacci |
| 2011 | ICISS | Load Time Security Verification. | Olga Gadyatskaya, Eduardo Lostal, Fabio Massacci |
| 2011 | ISI | Managing changes with legacy security engineering processes. | Edith Felix, Olivier Delande, Fabio Massacci, Federica Paci |
| 2011 | NSS | Reactive non-interference for a browser model. | Nataliia Bielova, Dominique Devriese, Fabio Massacci, Frank Piessens |
| 2011 | RE | Invited talks. | Neil A. M. Maiden, Massimiliano Di Penta, Fabio Massacci |
| 2010 | CISIS | Extending Security-by-Contract with Quantitative Trust on Mobile Devices. | Gabriele Costa, Nicola Dragoni, Aliaksandr Lazouski, Fabio Martinelli, Fabio Massacci, Ilaria Matteucci |
| 2010 | ISoLA | SecureChange: Security Engineering for Lifelong Evolvable Systems. | Riccardo Scandariato, Fabio Massacci |
| 2010 | WISTP | Can We Support Applications' Evolution in Multi-application Smart Cards by Security-by-Contract? | Nicola Dragoni, Olga Gadyatskaya, Fabio Massacci |
| 2009 | CCS | Logging key assurance indicators in business processes. | Fabio Massacci, Gene Tsudik, Artsiom Yautsiukhin |
| 2009 | ICAIL | How to capture and use legal patterns in IT. | Alzbeta Krausov, Fabio Massacci, Ayda Sadane |
| 2009 | ICSOC | Satisfaction of Control Objectives by Control Processes. | Daniela Marino, Fabio Massacci, Andrea Micheletti, Nataliya Rassadko, Stephan Neuhaus |
| 2009 | RE | Legal Patterns Implement Trust in IT Requirements: When Legal Means are the "Best" Implementation of IT Technical Goals. | Alzbeta Krausov, Fabio Massacci, Ayda Sadane |
| 2008 | PLDI | Simulating midlet's security claims with automata modulo theory. | Fabio Massacci, Ida Sri Rejeki Siahaan |
| 2007 | CCS | A flexible security architecture to support third-party applications on mobile devices. | Lieven Desmet, Wouter Joosen, Fabio Massacci, Katsiaryna Naliuka, Pieter Philippaerts, Frank Piessens, Dries Vanoverberghe |
| 2007 | CCS | An algorithm for the appraisal of assurance indicators for complex business processes. | Fabio Massacci, Artsiom Yautsiukhin |
| 2007 | ICAIL | How to capture, model, and verify the knowledge of legal, security, and privacy experts: a pattern-based approach. | Luca Compagna, Paul El Khoury, Fabio Massacci, Reshma Thomas, Nicola Zannone |
| 2007 | ICSOC | Goal-Equivalent Secure Business Process Re-engineering. | Hugo A. Lpez, Fabio Massacci, Nicola Zannone |
| 2007 | TrustBus | The Meaning of Logs. | Sandro Etalle, Fabio Massacci, Artsiom Yautsiukhin |
| 2007 | TrustBus | Usage Control in Service-Oriented Architectures. | Alexander Pretschner, Fabio Massacci, Manuel Hilty |
| 2006 | CaiSE | Designing Security Requirements Models Through Planning. | Volha Bryl, Fabio Massacci, John Mylopoulos, Nicola Zannone |
| 2006 | RE | Detecting Conflicts of Interest. | Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone |
| 2005 | ESORICS | Minimal Disclosure in Hierarchical Hippocratic Databases with Delegation. | Fabio Massacci, John Mylopoulos, Nicola Zannone |
| 2005 | RE | Modeling Security Requirements Through Ownership, Permission and Delegation. | Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone |
| 2005 | RE | ST-Tool: A CASE Tool for Security Requirements Engineering. | Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone |
| 2005 | SACMAT | Generalized XML security views. | Gabriel M. Kuper, Fabio Massacci, Nataliya Rassadko |
| 2004 | ICWE | A System for Interactive Authorization for Business Processes for Web Services. | Hristo Koshutanski, Fabio Massacci |
| 2004 | SEC | Interactive Access Control for Web Services. | Hristo Koshutanski, Fabio Massacci |
| 2003 | ER | Requirement Engineering Meets Security: A Case Study on Modelling Secure Electronic Transactions by VISA and Mastercard. | Paolo Giorgini, Fabio Massacci, John Mylopoulos |
| 2002 | CCS | The verification of an industrial payment protocol: the SET purchase phase. | Giampaolo Bella, Lawrence C. Paulson, Fabio Massacci |
| 2002 | KR | Solving QBF by SMV. | Francesco M. Donini, Paolo Liberatore, Fabio Massacci, Marco Schaerf |
| 2001 | CADE | Lotrec : The Generic Tableau Prover for Modal and Description Logics. | Luis Farias del Cerro, David Fauthoux, Olivier Gasquet, Andreas Herzig, Dominique Longin, Fabio Massacci |
| 2001 | IJCAI | Decision Procedures for Expressive Description Logics with Intersection, Composition, Converse of Roles and Role Identity. | Fabio Massacci |
| 2000 | ESORICS | Formal Verification of Cardholder Registration in SET. | Giampaolo Bella, Fabio Massacci, Lawrence C. Paulson, Piero Tramontano |
| 2000 | KR | Reduction rules and universal variables for first order tableaux and DPLL. | Fabio Massacci |
| 2000 | TABLEAUX | Design and Results of TANCS-2000 Non-classical (Modal) Systems Comparison. | Fabio Massacci, Francesco M. Donini |
| 1999 | IJCAI | Using Walk-SAT and Rel-Sat for Cryptographic Key Search. | Fabio Massacci |
| 1999 | TABLEAUX | Design and Results of the Tableaux-99 Non-classical (Modal) Systems Comparison. | Fabio Massacci |
| 1999 | TABLEAUX | Automated Reasoning and the Verification of Security Protocols. | Fabio Massacci |
| 1998 | AAAI | Anytime Approximate Modal Reasoning. | Fabio Massacci |
| 1998 | ECAI | Cook and Reckhow are Wrong: Subexponential Tableaux Proofs for Their Family of Formulae. | Fabio Massacci |
| 1998 | TABLEAUX | Simplification: A General Constraint Propagation Technique for Propositional and Modal Tableaux. | Fabio Massacci |
| 1997 | ECSQARU | Reasoning About Security: A Logic and a Decision Method for Role-Based Access Control. | Fabio Massacci |
| 1997 | TABLEAUX | Tableaux Methods for Access Control in Distributed Systems. | Fabio Massacci |
| 1996 | AAAI | Contextual Reasoning Is NP-Complete. | Fabio Massacci |
| 1996 | CADE | Tableaux and Algorithms for Propositional Dynamic Logic with Converse. | Giuseppe De Giacomo, Fabio Massacci |
| 1996 | ICTAI | Approximate Reasoning for Contextual Databases. | Fabio Massacci |
| 1996 | JELIA | A Uniform Tableaux Method for Nonmonotonic Modal Logics. | Francesco M. Donini, Fabio Massacci, Daniele Nardi, Riccardo Rosati |
| 1994 | CADE | Strongly Analytic Tableaux for Normal Modal Logics. | Fabio Massacci |