Here you can find a list of our publications:

• F. Moretta, U. Barbato, M. Rak, e D. Granata, «Correct by design, complete by iteration: A graph-based framework for automated security assessment», Internet of Things, vol. 36, p. 101851, 2026, doi: https://doi.org/10.1016/j.iot.2025.101851.
• Giovanni Salzillo, Massimiliano Rak, and Felice Moretta. 2021. Threat Modeling based Penetration Testing: The Open Energy Monitor Case study. In 13th International Conference on Security of Information and Networks (SIN 2020). Association for Computing Machinery, New York, NY, USA, Article 8, 1–8. https://doi.org/10.1145/3433174.3433181
• Massimiliano Rak, Felice Moretta, and Daniele Granata. 2024. Advancing ESSecA: a step forward in Automated Penetration Testing. In Proceedings of the 19th International Conference on Availability, Reliability and Security (ARES '24). Association for Computing Machinery, New York, NY, USA, Article 120, 1–11. https://doi.org/10.1145/3664476.3670459
• Casola, Valentina, et al. "DEFEDGE: Threat-Driven Security Testing and Proactive Defense Identification for Edge-Cloud Systems." International Conference on Advanced Information Networking and Applications. Cham: Springer Nature Switzerland, 2024.
• Rak, Massimiliano, Giovanni Salzillo, and Daniele Granata. "ESSecA: An automated expert system for threat modelling and penetration testing for IoT ecosystems." Computers and Electrical Engineering 99 (2022): 107721.
• Granata, Daniele, and Massimiliano Rak. "Design and Development of a Technique for the Automation of the Risk Analysis Process in IT Security." CLOSER. 2021.
• Granata, Daniele, et al. "Security in IoT Pairing & Authentication protocols, a Threat Model, a Case Study Analysis." ITASEC. 2021.
• Granata, Daniele, Massimiliano Rak, and Giovanni Salzillo. "MetaSenD: a security enabled development life cycle Meta-model." Proceedings of the 17th International Conference on Availability, Reliability and Security. 2022.
• Granata, Daniele, Massimiliano Rak, and Giovanni Salzillo. "Risk analysis automation process in it security for cloud applications." International Conference on Cloud Computing and Services Science. Cham: Springer International Publishing, 2021.
• Granata, Daniele, Massimiliano Rak, and Giovanni Salzillo. "Automated threat modeling approaches: Comparison of open source tools." International Conference on the Quality of Information and Communications Technology. Cham: Springer International Publishing, 2022.
• Granata, Daniele, and Massimiliano Rak. "Systematic analysis of automated threat modelling techniques: Comparison of open-source tools." Software Quality Journal 32.1 (2024): 125-161.