Publications

Journals

AI Security Analysis 2025

Deobfuscation of JavaScript Code and Identification of Security Weaknesses Through Large Language Models

Giacomo Benedetti, Luca Caviglione, Carmela Comito, Alberto Falcone, Massimo Guarascio

Future Generation Computer Systems, 2025

PDF
Supply Chain Security 2025

Research Directions in Software Supply Chain Security

Laurie Williams, Giacomo Benedetti, Sivana Hamer, Ranindya Paramitha, Imranur Rahman, Mahzabin Tamanna, Greg Tystahl, Nusrat Zahan, Patrick Morrison, Yasemin Acar, Michel Cukier, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, William Enck

ACM Transactions on Software Engineering and Methodology, 2025

PDF

Conferences

Reproducible Builds 2025

An Empirical Study on Reproducible Packaging in Open-Source Ecosystems

Giacomo Benedetti, Oreofe Solarin, Courtney Miller, Greg Tystahl, William Enck, Christian Kästner, Alexandros Kapravelos, Alessio Merlo, Luca Verderame

IEEE/ACM International Conference on Software Engineering, 2025

PDF
Dependency Analysis 2025

The Impact of SBOM Generators on Vulnerability Assessment in Python: A Comparison and a Novel Approach

Giacomo Benedetti, Serena Cofano, Alessandro Brighente, Mauro Conti

International Conference on Applied Cryptography and Network Security, 2025

PDF
Dependency Analysis 2024

SBOM Generation Tools in the Python Ecosystem: An In-Detail Analysis

Serena Cofano, Giacomo Benedetti, Matteo Dell'Amico

IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 2024

PDF
Supply Chain Security 2022

Alice in (Software Supply) Chains: Risk Identification and Evaluation

Giacomo Benedetti, Luca Verderame, Alessio Merlo

Quality of Information and Communications Technology, 2022

PDF

Workshops

Systems Security 2025

From Edge to Cloud: Securing Distributed Containerized Applications

Luca Verderame, Giorgia Bolognesi, Enrico Pezzano, Massimiliano Rak, Alberto Falcone, Giacomo Benedetti, Massimo Guarascio, Luca Caviglione, Roberto Carbone, Roberto Doriguzzi-Corin, Maurizio Giacobbe, Giovanni Merlino, Antonio Puliafito, Massimiliano Baldo, Marino Miculan, Vincenzo Riccio, Massimo Ficco

IEEE European Symposium on Security and Privacy Workshops, 2025

PDF
AI Security Analysis 2025

Detecting DDoS Attacks in Microservice Architectures via AI-Based Agents

Giacomo Benedetti, Luca Caviglione, Alberto Falcone, Massimo Ficco, Massimo Guarascio, Antonio Guerriero

International Conference on Computational Science and Its Applications Workshops, 2025

PDF
Systems Security 2025

Analysis and Detection of Android Stegomalware: The Impact of the Loading Stage

Diego Soi, Silvia Lucia Sanna, Giacomo Benedetti, Angelica Liguori, Leonardo Regano, Luca Caviglione, Giorgio Giacinto

ACM Workshop on Information Hiding and Multimedia Security, 2025

PDF
Supply Chain Security 2023

A Preliminary Study of Privilege Life Cycle in Software Management Platform Automation Workflows

Giacomo Benedetti, Luca Verderame, Alessio Merlo

IEEE European Symposium on Security and Privacy Workshops, 2023

PDF
Supply Chain Security 2022

Automatic Security Assessment of GitHub Actions Workflows

Giacomo Benedetti, Luca Verderame, Alessio Merlo

ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, 2022

PDF