research
∙
07/18/2023
The Hitchhiker's Guide to Malicious Third-Party Dependencies
The increasing popularity of certain programming languages has spurred t...
share
research
∙
04/11/2023
Journey to the Center of Software Supply Chain Attacks
This work discusses open-source software supply chain attacks and propos...
research
∙
10/08/2022
Towards the Detection of Malicious Java Packages
Open-source software supply chain attacks aim at infecting downstream us...
research
∙
04/28/2022
RISCLESS: A Reinforcement Learning Strategy to Exploit Unused Cloud Resources
One of the main objectives of Cloud Providers (CP) is to guarantee the S...
research
∙
04/08/2022
Taxonomy of Attacks on Open-Source Software Supply Chains
The widespread dependency on open-source software makes it a fruitful ta...
research
∙
09/23/2020
ReLeaSER: A Reinforcement Learning Strategy for Optimizing Utilization Of Ephemeral Cloud Resources
Cloud data center capacities are over-provisioned to handle demand peaks...
research
∙
08/26/2019
Analyzing 2.3 Million Maven Dependencies to Reveal an Essential Core in APIs
This paper addresses the following question: does a small, essential, co...
research
∙
03/13/2019
The Emergence of Software Diversity in Maven Central
Maven artifacts are immutable: an artifact that is uploaded on Maven Cen...
research
∙
01/16/2019