Secure and Liable Computer Systems

Research output

Research output per year 2000 2006 2007 2010 2011 2013 2025

• 114 Conference contribution
• 38 Article
• 7 PhD-Thesis - Research and graduation internal
• 5 Book
• 3 More
  • 1 Chapter
  • 1 PhD-Thesis – Research external, graduation internal
  • 1 Preprint

Research output per year

Research output per year

Search results

• 2025

  On the effects of program slicing for vulnerability detection during code inspection

  Papotti, A., Tuma, K. & Massacci, F., May 2025, In: Empirical Software Engineering. 30, 3, p. 1-37 37 p., 93.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Security Misconfiguration 100%
  • Cross-Site Scripting 100%
  • Open Web Application Security Project 100%

• Assessing the usefulness of Data Flow Diagrams for validating security threats

  Mbaka, W. B., Zhang, X., Wang, Y., Li, T., Massacci, F. & Tuma, K., Sept 2025, In: Computers and Security. 156, p. 1-16 16 p., 104498.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Sequence Diagram 100%

• A Framework for Model-Based Specification and Verification in Feature-Oriented Software Product Lines

  Kanwal, S. & Fokkink, W., 2025, Fundamentals of Software Engineering: 11th IFIP WG 2.2 International Conference, FSEN 2025, Proceedings. Hojjat, H. & Caltais, G. (eds.). Springer Nature, p. 61-79 19 p. (Lecture Notes in Computer Science; vol. 15593 LNCS)(FFSEN: International Conference on Fundamentals of Software Engineering; vol. 2025).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Software Product Line 100%
  • Misconfiguration 66%
  • Complex Task 33%
  • Software Development 33%
  • Formal Verification 33%
• 2024

  On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools

  Papotti, A., Paramitha, R. & Massacci, F., Sept 2024, In: Empirical Software Engineering. 29, 5, p. 1-35 35 p., 132.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Specialized Tool 100%
  • Computer Science 50%
  • Academic Setting 50%
  • Information Security 50%
  • Balanced Design 50%

• Addressing combinatorial experiments and scarcity of subjects by provably orthogonal and crossover experimental designs

  Massacci, F., Papotti, A. & Paramitha, R., May 2024, In: Journal of Systems and Software. 211, p. 1-18 18 p., 111990.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Security Engineering 100%
  • Crossover Design 100%
  • Learning Effect 50%
  • Software Configuration 50%
  • Alternative Design 50%

• Known Vulnerabilities of Open Source Projects: Where Are the Fixes?

  Sabetta, A., Ponta, S. E., Cabrera Lozoya, R., Bezzi, M., Sacchetti, T., Greco, M., Balogh, G., Hegedus, P., Ferenc, R., Paramitha, R., Pashchenko, I., Papotti, A., Milankovich, A. & Massacci, F., Apr 2024, In: IEEE Security and Privacy. 22, 2, p. 49-59 11 p.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Open Source Project 100%
  • Open Source Tool 100%

• On the Measures of Success in Replication of Controlled Experiments with STRIDE

  Mbaka, W. & Tuma, K., Apr 2024, In: International Journal of Software Engineering and Knowledge Engineering. 34, 4, p. 623-650 28 p.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Threat Analysis 100%
  • Performance Indicator 100%
  • Cost Saving 33%
  • Software Deployment 33%
  • Analysis Technique 33%

• Role of Gender in the Evaluation of Security Decisions

  Mbaka, W. & Tuma, K., Apr 2024, In: IEEE Security and Privacy. 22, 2, p. 38-48 11 p.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Cybersecurity 100%
  • Demographic Characteristic 50%

• Systematic review on contract-based safety assurance and guidance for future research

  Kanwal, S., Muram, F. U. & Javed, M. A., Jan 2024, In: Journal of Systems Architecture. 146, p. 1-18 18 p., 103036.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  • Development Stage 100%
  • Safety Critical Systems 100%
  • Development Process 100%
  • Search Strategies 100%
  • Analysis Technique 100%

• Does trainer gender make a difference when delivering phishing training? A new experimental design to capture bias

  Palheiros Da Silva, A., Mbaka, W., Mayer, J., Bullee, J. W. & Tuma, K., 2024, EASE 2024: Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering. Association for Computing Machinery, p. 130-139 10 p. (ACM International Conference Proceeding Series).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  • Initial Access 100%
  • spam filter 100%
  • Artificial Intelligence 100%

• New experimental design to capture bias using LLM to validate security threats

  Mbaka, W. B., 2024, EASE '24: Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering. Association for Computing Machinery, p. 458-459 2 p. (ACM International Conference Proceeding Series).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  File

  • Large Language Model 100%
  • Security and Privacy 33%
  • Software Security 33%
  • Assessing Security 33%
  9 Downloads (Pure)

• On the Effects of Program Slicing for Vulnerability Detection during Code Inspection: Extended Abstract

  Papotti, A., Massacci, F. & Tuma, K., 2024, ICSE-Companion 2024: Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings. IEEE Computer Society, p. 368-369 2 p. (Proceedings - International Conference on Software Engineering).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  • Code Inspection 100%
  • Vulnerability Detection 100%
  • Source Codes 50%
  • General Concept 50%
  • Fault Localization 50%

• PG: Byzantine Fault-Tolerant and Privacy-Preserving Sensor Fusion with Guaranteed Output Delivery

  Jin, C., Yin, C., van Dijk, M., Duan, S., Massacci, F., Reiter, M. K. & Zhang, H., 2024, CCS '24: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security. Association for Computing Machinery, Inc, p. 3272-3286 15 p.

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  File

  • Modern Cryptography 100%
• 2023

  Towards Unveiling Effects Of Human Factors Within Security Risk Assessment

  Mbaka, W., Jan 2023, In: ACM SIGSOFT Software Engineering Notes. 48, 1, p. 70-75 6 p.

  Research output: Contribution to Journal › Article › Academic › peer-review

  Open Access

  File

  • Security Risk Assessment 100%
  • Ergonomics 100%
  • Design Technique 100%
  • Research Question 33%
  • Human Participant 33%
  2 Downloads (Pure)
• 2022

  If You Can't Beat Them, Pay Them: Bitcoin Protection Racket is Profitable

  Yang, Z., Yin, C., Ke, J., Dinh, T. T. A. & Zhou, J., Dec 2022, ACSAC '22: Proceedings of the 38th Annual Computer Security Applications Conference. New York, NY: Association for Computing Machinery, p. 727-741 15 p. (ACM International Conference Proceeding Series).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  File

  • Attackers 100%
  • Bitcoin 100%
  171 Downloads (Pure)

• Assessment of Automated (Intelligent) Toolchains

  Papotti, A., Oct 2022, ASE '22: Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering. Aehnelt, M. & Kirste, T. (eds.). Association for Computing Machinery, p. 1-3 3 p. 119. (ACM International Conference Proceeding Series).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  • Artificial Intelligence 100%
  • Research Problem 100%
  • Static Program Analysis 100%
  • Software Security 100%
  • Case Study 100%

• On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools

  Papotti, A., Paramitha, R. & Massacci, F., 16 Sept 2022, arXiv, p. 1-9, 9 p.

  Research output: Working paper / Preprint › Preprint › Academic

  Open Access

  File

  • Specialized Tool 100%
  • Reviewer 100%
  • Testing and Validation 100%
  • Academic Setting 50%
  • Balanced Design 50%
  57 Downloads (Pure)
• 2020

  Commodity compute- and data-transport system design in modern large-scale distributed radio telescopes

  Broekema, P. C., 2020, 202 p.

  Research output: PhD Thesis › PhD-Thesis - Research and graduation internal

  Open Access

  File
  1096 Downloads (Pure)
• 2016

  Finding fault with fault injection: An Empirical Exploration of Distortion in Fault Injection Experiments

  van der Kouwe, E., Giuffrida, C. & Tanenbaum, A. S., Mar 2016, In: Software Quality Journal (SQJ).

  Research output: Contribution to Journal › Article › Academic › peer-review

  • Fault Injection Experiment 100%
  • Fault Injection 100%
  • Fault Model 100%
  • Executed Program 33%
  • Experimental Result 33%
• 2014

  Techniques for efficient in-memory checkpointing

  Vogt, D., Giuffrida, C., Bos, H. & Tanenbaum, A. S., 15 May 2014, In: Operating Systems Review (ACM). 48, 1-118, p. 21-25 5 p.

  Research output: Contribution to Journal › Article › Academic › peer-review

  • Checkpointing 100%
  • Production System 20%
  • Virtual Address Space 20%
  • Art Performance 20%
  • Research System 20%

• Building a file-based Storage Stack: Modularity and Flexibility in Loris

  Appuswamy, R., 2014

  Research output: PhD Thesis › PhD-Thesis - Research and graduation internal

  Open Access

  File
  401 Downloads (Pure)

• Evaluating Distortion in Fault Injection Experiments

  van der Kouwe, E., Giuffrida, C. & Tanenbaum, A. S., 2014, Proceedings of the 15th IEEE International Symposium on High Assurance Systems Engineering. IEEE CS, p. 25-32

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Fault Injection Experiment 100%
  • Fault Injection 100%
  • Fault Model 100%
  • Executed Program 50%
  • Experimental Result 50%

• Mutable Checkpoint-Restart: Automating Live Update for Generic Server Programs

  Giuffrida, C., Iorgulescu, C. & Tanenbaum, A. S., 2014, Proceedings of the ACM/IFIP/USENIX Middleware Conference. ACM, p. 133-144

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Checkpoint Restart 100%
  • Data Structure 50%
  • Software Update 50%
  • Running Program 25%
  • Update Operation 25%

• On Sockets and System Calls: Minimizing Context Switches for the Socket API

  Hruby, T., Bos, H. J. & Tanenbaum, A. S., 2014, Proc. of the 2014 Conference on Timely Results in Operating Systems (TRIOS '14).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• On the Soundness of Silence: Investigating Silent Failures Using Fault Injection Experiments

  van der Kouwe, E., Giuffrida, C. & Tanenbaum, A. S., 2014, Proceedings of the 10th European Dependable Computing Conference (EDCC 2014). IEEE CS, p. 118-129

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Fault Injection Experiment 100%
  • Fault Injection 100%
  • Soundness 100%
  • Anomaly-Based Detection 25%
  • System Calls 25%

• Putting the Pieces Together: The Construction of a Reliable Virtualizing Object-Based Storage Stack

  van Moolenbroek, D. C., Appuswamy, R. & Tanenbaum, A. S., 2014, Proceedings of the Second International Symposium on Computing and Networking Across Practical Development and Theoretical Research.

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Scheduling of Multiserver System Components on Over-provisioned Multicore Systems

  Bos, H. J., Hruby, T. & Tanenbaum, A. S., 2014, Systems for Future Multicore Architectures (SFMA).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Towards a Flexible, Lightweight Virtualization Alternative

  van Moolenbroek, D. C., Appuswamy, R. & Tanenbaum, A. S., 2014, Proceedings of the 7th ACM International Systems and Storage Conference. ACM, p. 1-7

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Towards Optimal Scheduling of Multiserver System Components

  Hruby, T., Bos, H. J. & Tanenbaum, A. S., 2014, Workshop on Managing Overprovisioned Systems (W-MOS).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review
• 2013

  When slower is faster: On heterogeneous multicores for reliable systems

  Hruby, T., Tanenbaum, A. S. & Bos, H. J., Jun 2013, USENIX ATC 2013: Proceedings of the 2013 USENIX Annual Technical Conference. Berkeley, CA: USENIX Association, p. 255-266 12 p.

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Multicore 100%
  • Operating Systems 50%
  • Network Support 50%

• Back to the Future: Fault-tolerant Live Update with Time-traveling State Transfer

  Giuffrida, C., Iorgulescu, C., Kuijsten, A. & Tanenbaum, A. S., 2013, Proceedings of the 27th USENIX Large Installation System Administration Conference. USENIX, p. 89-104

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Traveling Time 100%
  • Fault Tolerant 100%
  • Widespread Adoption 33%
  • Updated Version 33%
  • Software Systems 33%

• Battling Bad Bits with Checksums in the Loris Page Cache

  van Moolenbroek, D. C., Appuswamy, R. & Tanenbaum, A. S., 2013, Proceedings of the Sixth Latin-American Symposium on Dependable Computing (LADC 2013). IEEE

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Cache, cache everywhere, flushing all hits down the sink: on exclusivity in multilevel, hybrid caches

  Appuswamy, R., van Moolenbroek, D. C. & Tanenbaum, A. S., 2013, Proceedings of the 29th IEEE symposium on massive storage systems and technologies. p. 1-14

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• EDFI: A Dependable Fault Injection Tool for Dependability Benchmarking Experiments

  Giuffrida, C., Kuijsten, A. & Tanenbaum, A. S., 2013, Proceedings of the Pacific Rim International Symposium on Dependable Computing. IEEE CS, p. 31-40

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Fault Injection 100%
  • Benchmarking 100%
  • Fault Injection Experiment 25%
  • Fault Coverage 25%
  • Dynamic Program 25%

• File-level, Host-Side flash catching with Loris

  Appuswamy, R., van Moolenbroek, D. C., Santhanam, S. & Tanenbaum, A. S., 2013, 19th International Conference on Parallel and Distributed Systems.

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Keylogger Detection and Containment

  Ortolani, S., 2013

  Research output: PhD Thesis › PhD-Thesis - Research and graduation internal

  Open Access

  File
  1604 Downloads (Pure)

• Practical Automated Vulnerability Monitoring Using Program State Invariants

  Giuffrida, C., Cavallaro, L. & Tanenbaum, A. S., 2013, Proceedings of the 43rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks. IEEE CS, p. 1-12

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Programme State 100%
  • State Invariant 100%
  • Security Vulnerability 50%
  • Dynamic Analysis 50%
  • Dynamic Program 25%

• Safe and Automatic Live Update for Operating Systems

  Giuffrida, C., Kuijsten, A. & Tanenbaum, A. S., 2013, Proceedings of the 18th International Conference on Architectural Support for Programming Languages and Operating Systems. ACM, p. 279-292

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Operating Systems 100%
  • Running Program 33%
  • Electronic Banking 33%
  • Operating System Version 33%

• System-level support for intrusion recovery

  Bacs, A., Vermeulen, R., Slowinska, J. M. & Bos, H. J., 2013, Detection of Intrusions and Malware, and Vulnerability Assessment: 9th International Conference, DIMVA 2012, Heraklion, Crete, Greece, July 26-27, 2012, Revised Selected Papers. Flegel, U., Markatos, E. & Robertson, W. (eds.). Springer Verlag, p. 144-163 20 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 7591 LNCS).

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • User Data 100%
  • Analysis System 100%
  • Malicious Input 100%
  • Granularity Level 100%
  • Benign Application 100%

• Techniques for Efficient In-Memory Checkpointing

  Vogt, D., Giuffrida, C., Bos, H. J. & Tanenbaum, A. S., 2013, Proceedings of the Ninth Workshop on Hot Topics in System Dependability. ACM, p. 12:1-12:5

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Checkpointing 100%
  • Production System 20%
  • Virtual Address Space 20%
  • Art Performance 20%
  • Research System 20%

• Transaction-based Process Crash Recovery of File System Namespace Modules

  van Moolenbroek, D. C., Appuswamy, R. & Tanenbaum, A. S., 2013, Proceedings of the 19th IEEE Pacific Rim International Symposium on Dependable Computing (PRDC 2013). IEEE

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review
• 2012

  Enhanced Operating System Security Through Efficient and Fine-grained Address Space Randomization

  Giuffrida, C., Kuijsten, A. & Tanenbaum, A. S., 2012, Proceedings of the 21st USENIX Security Symposium. USENIX, p. 475-490

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Operating System Security 100%
  • Operating Systems 100%
  • Application Level 40%
  • Information Leakage 20%
  • Discovered Vulnerability 20%

• Generating synchronization statements in divide-and-conquer programs

  Hijma, H. P., van Nieuwpoort, R. V., Jacobs, C. J. H. & Bal, H. E., 2012, In: Parallel computing. 38, 1-2, p. 75-89

  Research output: Contribution to Journal › Article › Academic › peer-review

  • Parallelism 100%
  • Efficient Execution 100%
  • Programming Model 50%
  • World Application 50%
  • Multicore 50%

• Integrated System and Process Crash Recovery in the Loris Storage Stack

  van Moolenbroek, D. C., Appuswamy, R. & Tanenbaum, A. S., 2012, Proceedings of the 7th IEEE International Conference on Networking, Architecture, and Storage. IEEE

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Integrating Flash-based SSDs into the Storage Stack

  Appuswamy, R., van Moolenbroek, D. C. & Tanenbaum, A. S., 2012, Proceedings of the 28th IEEE Symposium on Massive Storage Systems and Technologies (MSST 2012). IEEE

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Keep Net Working - On a Dependable and Fast Networking Stack

  Hruby, T., Vogt, D., Bos, H. J. & Tanenbaum, A. S., 2012, 2012 42nd Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2012. IEEE, 6263933

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  Open Access

  File

  • Multicore 100%
  • Operating Systems 100%
  • Parallelism 50%
  • Software Development 50%
  • Performance Implication 50%
  245 Downloads (Pure)

• Memoirs of a Browser: A Cross-browser Detection Model for Privacy-breaching Extensions

  Giuffrida, C., Ortolani, S. & Crispo, B., 2012, Proceedings of the 7th ACM Symposium on Information, Computer and Communications Security. ACM, p. 10-11

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Web Browser 100%
  • Software Developer 33%
  • User Application 33%
  • Party Software 33%
  • Security Perspective 33%

• NoisyKey: Tolerating Keyloggers via Keystrokes Hiding

  Ortolani, S. & Crispo, B., 2012, 7th USENIX Workshop of Hot Topics in Security (HOTSEC 2012). Bellevue: USENIX

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Radio Astronomy Beam Forming on Many-Core Architectures

  Sclocco, A., Varbanescu, A. L., Mol, J. D. & van Nieuwpoort, R. V., 2012, 26th IEEE International Parallel & Distributed Processing Symposium (IPDPS). Shanghai, China

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

• Safe and Automated State Transfer for Secure and Reliable Live Update

  Giuffrida, C. & Tanenbaum, A. S., 2012, Proceedings of the Fourth International Workshop on Hot Topics in Software Upgrades. IEEE, p. 16-20

  Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

  • Programme State 100%
  • Annotation 50%
  • C Program 50%