Open-source vulnerability evidence is distributed across vulnerability databases, project advisories, version records, code repositories, issue/PR threads, proofs of concept, and tests. These artifacts may share upstream sources, apply to different s...
Vulnerable open-source component reuse can lead to security problems. At present, open-source component detection for binary programs can only reveal whether open-source components with vulnerabilities are reused, which cannot determine the specific...
Vulnerability prioritization is an essential element of the vulnerability management process in data communication networks. Accurate prioritization allows the attention to be focused on the most critical vulnerabilities and their timely elimination;...
With the acceleration of digital transformation, open-source software has become a fundamental component of modern smart grids and other critical infrastructures. However, the complex dependency structures of open-source ecosystems and the continuous...
Hundreds of connected components expose vehicle systems to an increasing number of cyber attacks. Vehicle manufacturers must establish the most appropriate procedures for vulnerability assessment and penetration testing using a mix of proprietary sol...
Wildfires are an increasing threat to Mediterranean ecosystems and populated areas. This study proposes an innovative static wildfire risk assessment methodology for the Apulia Region (southern Italy). The framework produces a Fire Risk Global Index...
Recently, there has been an increasing prevalence of software supply chain attacks on software component suppliers. These attacks have targeted suppliers with relatively weak security or they have exploited vulnerabilities in open-source software. Th...
The algorithmic complexity vulnerability (ACV) that may lead to denial of service attacks greatly disrupts the security and availability of applications, and due to the widespread use of third-party libraries, its impact may be amplified through the...
Programming logic controllers (PLCs) are vital components for conveyors in production lines, and the sensors and actuators controlled underneath the PLCs represent critical points in the manufacturing process. Attacks targeting the exploitation of PL...
Coverage-guided greybox fuzzing (CGF) has become the mainstream technology used in the field of vulnerability mining, which has been proven to be effective. Seed scheduling, the process of selecting seeds from the seeds pool for subsequent fuzzing it...
Penetration testing, a critical component of cybersecurity, typically requires extensive time and effort to find vulnerabilities. Beginners in this field often benefit from collaborative approaches with the community or experts. To address this, we d...
Cyber-physical systems (CPS) are vital in automating complex tasks across various sectors, yet they face significant vulnerabilities due to the rising threats of cybersecurity attacks. The recent surge in cyber-attacks on critical infrastructure (CI)...
The possibility of cyber-attacks against critical infrastructure, and in particular nuclear power plants, has prompted several efforts by academia. Many of these works aim to capture the vulnerabilities of the industrial control systems used in these...
Blockchain-based crowdsourcing logistics is a promising decentralized paradigm for solving the “last-mile delivery” problem, in which smart contracts automatically execute the business logic. Since crowdsourcing logistics inherently invol...
Contemporary vulnerability management relies on the Common Vulnerability Scoring System (CVSS) and the Exploit Prediction Scoring System (EPSS), both of which evaluate Common Vulnerabilities and Exposures (CVE) entry in isolation, disregarding the ne...
The exponential growth in data volumes, combined with the inherent complexity of network algorithms, has drastically affected network security. Data activities are producing voluminous network logs that often mask critical vulnerabilities. Although t...
With the widespread adoption of open-source software (OSS), software supply chain attacks have become increasingly sophisticated, posing severe threats to digital infrastructure. Traditional Software Composition Analysis (SCA) tools and Software Bill...
Irrigation is an essential component of our food production system and a large user of freshwater. Pressure on irrigated agriculture is likely to increase with growing populations and climate uncertainty. Efforts to ensure sustainable water use in th...
The Android operating system has become increasingly popular, not only on mobile phones but also in various other platforms such as Internet-of-Things devices, tablet computers, and wearable devices. Due to its open-source nature and significant mark...
The COVID-19 pandemic exposed the vulnerability of global supply chains of many products. One area that requires improved supply chain resilience and that is of particular importance to electronic designers is the shortage of basic dual in-line packa...
Cyber–physical systems (CPSs) increasingly rely on complex software components whose vulnerabilities may affect both digital services and physical processes. Fuzzing is a practical technique for discovering such vulnerabilities in CPS-facing pa...
The entry into force of the EU Cyber Resilience Act (CRA) imposes mandatory cybersecurity obligations on software products, yet compliance assessment tools available to manufacturers remain largely manual, costly, and unable to produce actionable, ru...
The closure of coal and lignite mines has the potential to result in long-term environmental risks and socio-economic issues. To solve these, this research aims to improve the hazard assessment and risk management of former mining regions in a Europe...
The latest improvements in geo-informatics offer new opportunities in a wide range of territorial and environmental applications. In this general framework, a relevant issue is represented by earthquake early warning and emergency management. This re...
Energy Poverty Vulnerability is a multidimensional phenomenon, which depends both on the energy efficiency of dwellings and on the related socio-economic aspects. Its diagnosis at the intra-urban scale has been addressed by few studies; therefore, it...
Modern society’s very existence is tied to the proper and reliable functioning of its Critical Infrastructure (CI) systems. In the seismic risk assessment of an infrastructure, taking into account all the relevant uncertainties affecting the pr...
Urban settlements located in high-seismicity areas should benefit from comprehensive vulnerability analyses, which are essential for the proper implementation of vulnerability modelling actions. Alas, many developing countries face a shortage of know...
Background/Objectives: Whole-blood fatty acid composition provides an objective biomarker of fatty acid status, but its relationships with nutritional characteristics and subsequent quality-of-life (QoL) changes among cancer survivors remain incomple...
Software security is a component of software development that should be integrated throughout its entire development lifecycle, and not simply as an afterthought. If security vulnerabilities are caught early in development, they can be fixed before t...
Remote sensing enables building-level flood vulnerability assessment without field surveys, yet existing approaches require site-specific calibration or produce categorical outputs without physical interpretability. We present the Global Flood Vulner...
According to the World Health Organization (WHO), over 1.35 million people died in road traffic-related accidents worldwide in 2020 of which 41,000 are related to the cyclists. Bike safety is one of the most serious issues facing urban riders. Accord...
Quantum key distribution (QKD) is widely regarded as a highly secure quantum encryption approach since it applies theoretical principles of quantum mechanics as a medium of security, unlike classical encryption processes that rely on complex mathemat...
This mixed-methods study examined how language growth beliefs and related regulatory and emotional processes were represented in the Language Mindset and Regulation Inventory (LMRI) and explained in Thai undergraduate learners’ accounts of Engl...
Historic masonry towers are iconic components of the world’s architectural heritage, yet their seismic vulnerability remains to be investigated, particularly regarding the influence of vertical ground motion. This study investigates the seismic...
The outbreak of COVID-19 is a public health emergency that caused disastrous results in many countries. The global aim is to stop transmission and prevent the spread of the disease. To achieve it, every country needs to scale up emergency response me...
Terrestrial carbon sinks in water-limited basins may strengthen while remaining vulnerable because gains in vegetation productivity can be offset by climate-sensitive soil carbon losses. Here, we present a model-derived assessment rather than a direc...
Soil water models are increasingly required to support irrigation, drought assessment and sustainable water management, yet physical, artificial intelligence (AI)-based and hybrid approaches differ in process representation, data demand and transfera...
Codon optimization is a cornerstone technique in synthetic biology and biotechnological production, aimed at enhancing heterologous protein expression through synonymous codon substitutions. While optimization traditionally focuses on forward-strand...