publications

Peer-reviewed Conference and Workshop Publications

2026

  1. IEEE S&P’26
    Best of Both Worlds: Effective Foreign Bridge Identification in V8 Embedders for Security Analysis
    Georgios Alexopoulos*, Thodoris Sotiropoulos*, Zhendong Su, and Dimitris Mitropoulos
    In Proceedings of the 47th IEEE Symposium on Security and Privacy, May 2026
    * Equal contribution
  2. ICSE’26
    PyXray: Practical Cross-Language Call Graph Construction through Object Layout Analysis
    Georgios Alexopoulos, Thodoris Sotiropoulos, Georgios Gousios, Zhendong Su, and Dimitris Mitropoulos
    In Proceedings of the 48th International Conference on Software Engineering, April 2026

2025

  1. ASE’25
    PyTrim: A Practical Tool for Reducing Python Dependency Bloat
    Konstantinos Karakatsanis, Georgios Alexopoulos, Ioannis Karyotakis, Foivos Timotheos Proestakis, Evangelos Talos, Panos Louridas, and Dimitris Mitropoulos
    In Proceedings of the 40th IEEE/ACM International Conference on Automated Software Engineering: Tool Demonstrations Track, IEEE, October 2025

2024

  1. ESEM’24
    Broken Agreement: The Evolution of Solidity Error Handling
    Charalambos Mitropoulos, Maria Kechagia, Chrysostomos Maschas, Sotiris Ioannidis, Federica Sarro, and Dimitris Mitropoulos
    In Proceedings of the 18th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, pp. 257–268, October 2024
  2. OOPSLA’24
    When Your Infrastructure is a Buggy Program: Understanding Faults in Infrastructure as Code Ecosystems
    Georgios-Petros Drosos, Thodoris Sotiropoulos, Georgios Alexopoulos, Dimitris Mitropoulos, and Zhendong Su
    In Proceedings of the ACM on Programming Languages, pp. 2490–2520, ACM, October 2024
  3. ECOC’24
    Field Demonstration of a Fully Managed, L1 Encrypted 3-node Network with Hybrid Relayed-QKD and Centralized Symmetric Classical Key Management.
    Nikolaos Makris, Konstantinos Tsimvrakidis, Alkinoos Papageorgopoulos, Persefoni Konteli, Yannick Gautier, Marco Terenziani, Eric Daudin, Dimosthenis Ntoulias, Thanasis Fragkioudakis, Ian Meletios, Michele Mosca, Dale Hobbs, Tony Rosati, Ilias Papastamatiou, Ognjen Prnjat, Kostas Koumantaros, Dimitris Mitropoulos, Jean-Robert Morax, Bruno Huttner, Kostas Christodoulopoulos, George T. Kanellos, and Dimitris Syvridis
    In Proceedings of the 50th European Conference on Optical Communications, September 2024
  4. FSE’24
    Bloat beneath Python’s Scales: A Fine-Grained Inter-Project Dependency Analysis
    Georgios-Petros Drosos, Thodoris Sotiropoulos, Diomidis Spinellis, and Dimitris Mitropoulos
    In Proceedings of the ACM on Software Engineering, pp. 2584-2607, ACM, July 2024
  5. ICSE’24
    nvshare: Practical GPU sharing without memory size constraints
    Georgios Alexopoulos and Dimitris Mitropoulos
    In Proceedings of the IEEE/ACM 46th International Conference on Software Engineering: Demonstrations Track, pp. 16–20, IEEE, May 2024
  6. ICSE’24
    Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners?
    Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou, Rafaila Galanopoulou, Arthur Gervais, Dimitris Mitropoulos, and Ben Livshits
    In Proceedings of the IEEE/ACM 45th Internationa Conference on Software Engineering, pp. 705–717, IEEE, May 2024

2023

  1. CAMAD’23
    Providing Security Assurance & Hardening for Open Source Software / Hardware: The SecOPERA approach
    Apostolos P. Fournaris, Christos Tselios, Evangelos Haleplidis, Elias Athanasopoulos, Antreas Dionysiou, Dimitris Mitropoulos, Panos Louridas, Georgios Christou, Manos Athanatos, George Hatzivasilis, Konstantinos Georgopoulos, Costas Kalogeros, Christos Kotselidis, Simon Vogl, Francois Hamon, and Sotiris Ioannidis
    In Proceedings of the IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks, pp. 80-86, November 2023
  2. ESORICS’23
    Syntax-Aware Mutation for Testing the Solidity Compiler
    Charalampos Mitropoulos, Thodoris Sotiropoulos, Sotiris Ioannidis, and Dimitris Mitropoulos
    In Proceedings of the 28th European Symposium on Research in Computer Security, pp. 327–347, Springer, September 2023
  3. SBC’23
    Smart Contract and DeFi Security: Insights from Tool Evaluations and Practitioner Surveys
    Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou, Rafaila Galanopoulou, Arthur Gervais, Dimitris Mitropoulos, and Ben Livshits
    In The Science of Blockchain Conference 2023, September 2023

2022

  1. PLDI’22
    Finding Typing Compiler Bugs
    Stefanos Chaliasos*, Thodoris Sotiropoulos*, Diomidis Spinellis, Arthur Gervais Benjamin Livshits, and Dimitris Mitropoulos
    In Proceedings of the 43rd ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 183–198, ACM, June 2022
    * Equal contribution

2021

  1. OOPSLA’21
    Well-Typed Programs Can Go Wrong: A Study of Typing-Related Bugs in JVM Compilers
    Stefanos Chaliasos*, Thodoris Sotiropoulos*, Georgios-Petros Drosos Charalambos, Mitropoulos, Dimitris Mitropoulos, and Diomidis Spinellis
    In Proceedings of the ACM on Programming Languages, pp. 1-30, ACM, October 2021
    * Equal contribution
  2. FSE’21
    CrossVul: A Cross-Language Vulnerability Dataset with Commit Data
    Georgios Nikitopoulos, Konstantina Dritsa, Panos Louridas, and Dimitris Mitropoulos
    In 29th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering: Demonstrations Track, pp. 1565–1569, ACM, August 2021
  3. ICSE’21
    Data-Oriented Differential Testing of Object-Relational Mapping Systems
    Thodoris Sotiropoulos, Stefanos Chaliasos, Vaggelis Atlidakis, Dimitris Mitropoulos, and Diomidis Spinellis
    In Proceedings of the 43rd International Conference on Software Engineering, pp. 1535–1547, IEEE, May 2021
  4. ICSE’21
    PyCG: Practical Call Graph Construction in Python
    Vitalis Salis, Thodoris Sotiropoulos, Panos Louridas, Diomidis Spinellis, and Dimitris Mitropoulos
    In Proceedings of the 43rd International Conference on Software Engineering, pp. 1646–1657, IEEE, May 2021

2020

  1. OOPSLA’20
    A Model for Detecting Faults in Build Specifications
    Thodoris Sotiropoulos, Stefanos Chaliasos, Dimitris Mitropoulos, and Diomidis Spinellis
    In Proceedings of the ACM on Programming Languages, pp. 1–30, ACM, November 2020
  2. ICSE’20
    Practical Fault Detection in Puppet Programs
    Thodoris Sotiropoulos, Dimitris Mitropoulos, and Diomidis Spinellis
    In Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering, pp. 26–37, ACM, June 2020

2019

  1. ESORICS’19
    Mime Artist: Bypassing Whitelisting for the Web with JavaScript Mimicry Attacks
    Stefanos Chaliasos, George Metaxopoulos, George Argyros, and Dimitris Mitropoulos
    In 24th European Symposium on Research in Computer Security, pp. 565–585, Springer, September 2019
  2. MSR’19
    Time Present and Time Past: Analyzing the Evolution of JavaScript Code in the Wild
    Dimitris Mitropoulos, Panos Louridas, Vitalis Salis, and Diomidis Spinellis
    In Proceedings of the 16th International Conference on Mining Software Repositories: Technical Track, pp. 126–137, May 2019
  3. EuroSec’19
    Pythia: Identifying Dangerous Data-flows in Django-based Applications
    Linos Giannopoulos, Eirini Degkleri, Panayiotis Tsanakas, and Dimitris Mitropoulos
    In Proceedings of the 12th Workshop on Systems Security, pp. 1–6, ACM, March 2019

2018

  1. MSR’18
    VulinOSS: A Dataset of Security Vulnerabilities in Open-source Systems
    Antonios Gkortzis, Dimitris Mitropoulos, and Diomidis Spinellis
    In Proceedings of the 15th International Conference on Mining Software Repositories: Data Showcase Track, ACM, May 2018

2016

  1. EuroSys’16
    POSIX Abstractions in Modern Operating Systems: The Old, the New, and the Missing.
    Vaggelis Atlidakis, Jeremy Andrus, Roxana Geambasu, Dimitris Mitropoulos, and Jason Nieh
    In Proceedings of the 11th European Conference on Computer Systems, pp. 1–17, ACM, 2016

2015

  1. MSR’15
    Generating the Blueprints of the Java Ecosystem
    Vassilios Karakoidas, Dimitris Mitropoulos, Panos Louridas, Georgios Gousios, and Diomidis Spinellis
    In Proceedings of the 2015 International Working Conference on Mining Software Repositories: Data Showcase Track, pp. 510–513, IEEE, 2015

2014

  1. BADGERS’14
    The Vulnerability Dataset of a Large Software Ecosystem
    Dimitris Mitropoulos, Georgios Gousios, Panagiotis Papadopoulos, Vassilios Karakoidas, Panos Louridas, and Diomidis Spinellis
    In Proceedings of the 3rd International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security, pp. 69–74, IEEE, September 2014
  2. PCI’14
    Securing Legacy Code with the TRACER Platform
    Konstantinos Stroggylos, Dimitris Mitropoulos, Zacharias Tzermias, Panagiotis Papadopoulos, Fotios Rafailidis, Diomidis Spinellis, Sotiris Ioannidis, and Panagiotis Katsaros
    In Proceedings of 18th Panhellenic Conference on Informatics, pp. 1–6, ACM, 2014
  3. TRUST’14
    TRACER: A Platform for Securing Legacy Code
    Konstantinos Stroggylos, Dimitris Mitropoulos, Zacharias Tzermias, Panagiotis Papadopoulos, Fotios Rafailidis, Diomidis Spinellis, Sotiris Ioannidis, and Panagiotis Katsaros
    In Proceedings of 7th International Conference on Trust & Trustworthy Computing: Poster Presentation Track, pp. 218–219, Springer, June 2014
  4. MSR’14
    The Bug Catalog of the Maven Ecosystem
    Dimitris Mitropoulos, Vassilios Karakoidas, Panos Louridas, Georgios Gousios, and Diomidis Spinellis
    In Proceedings of the 2014 International Working Conference on Mining Software Repositories: Data Showcase Track, pp. 372–365, ACM, June 2014

2013

  1. OASIcs’13
    Improving the Quality of APIs through the Analysis of Software Crash Reports
    Maria Kechagia, Dimitris Mitropoulos, and Diomidis Spinellis
    In 2013 Imperial College Computing Student Workshop, pp. 57–64, Schloss Dagstuhl–Leibniz-Zentrum fuer Informatik, 2013
  2. LASER’13
    Dismal Code: Studying the Evolution of Security Bugs
    Dimitris Mitropoulos, Vassilios Karakoidas, Panos Louridas, Georgios Gousios, and Diomidis Spinellis
    In Proceedings of the 2013 Learning from Authoritative Security Experiment Results Workshop, pp. 37–48, Usenix Association, October 2013

2012

  1. PCI’12
    Measuring the Occurrence of Security-Related Bugs through Software Evolution
    Dimitris Mitropoulos, Georgios Gousios, and Diomidis Spinellis
    In Proceedings of 16th Panhellenic Conference on Informatics, pp. 117–122, IEEE, 2012

2010

  1. PCI’10
    Cyberdiversity: Measures and Initial Results
    Konstantinos Kravvaritis, Dimitris Mitropoulos, and Diomidis Spinellis
    In Proceedings of 14th Panhellenic Conference on Informatics, pp. 135–140, IEEE, September 2010

2009

  1. MCIS’09
    Fortifying Applications against XPath Injection Attacks
    Dimitris Mitropoulos, Vassilios Karakoidas, and Diomidis Spinellis
    In Proceedings of the 4th Mediterranean Conference on Information Systems, September 2009
  2. PCI’09
    Securing E-voting against MITM Attacks
    Dimitris Mitropoulos and Diomidis Spinellis
    In Proceedings of the 13th Pan-Hellenic Conference on Informatics, September 2009

2007

  1. PCI’07
    Countering SQL Injection Attacks with a Database Driver
    Dimitris Mitropoulos and Diomidis Spinellis
    In Proceedings of the 11th Pan-Hellenic Conference on Informatics, pp. 105–115, New Technologies Publications, May 2007

Peer-reviewed Journal Articles

2020

  1. IJIS’20
    PDGuard: An Architecture for the Control and Secure Processing of Personal Data
    Dimitris Mitropoulos, Thodoris Sotiropoulos, Nikos Koutsovasilis, and Diomidis Spinellis
    International Journal of Information Security, Vol. 19, No. 4, pp. 479–498, September 2020

2019

  1. TDSC’19
    Defending Against Web Application Attacks: Approaches, Challenges and Implications
    Dimitris Mitropoulos, Panos Louridas, Michalis Polychronakis, and Angelos D. Keromytis
    IEEE Transactions on Dependable and Secure Computing, Vol. 16, No. 2, pp. 188–203, March 2019

2018

  1. IEEE Annals’18
    Aspects of the History of Computing in Modern Greece
    Konstantina Dritsa, Dimitris Mitropoulos, and Diomidis Spinellis
    IEEE Annals of the History of Computing, Vol. 40, No. 1, pp. 47–60, May 2018

2017

  1. PeerJ’17
    Fatal Injection: A Survey of Modern Code Injection Attack Countermeasures
    Dimitris Mitropoulos and Diomidis Spinellis
    PeerJ Computer Science, 3:e136, November 2017

2016

  1. TOPS’16
    How to Train your Browser: Preventing XSS Attacks Using Contextual Script Fingerprints
    Dimitris Mitropoulos, Konstantinos Stroggylos, Diomidis Spinellis, and Angelos D. Keromytis
    ACM Transactions on Privacy and Security, Vol. 19, No. 1, pp. 1–31, July 2016

2015

  1. CoLa’15
    A Type-Safe Embedding of SQL into Java Using the Extensible Compiler Framework J%
    Vassilios Karakoidas, Dimitris Mitropoulos, Panagiotis Louridas, and Diomidis Spinellis
    Computer Languages, Systems & Structures, Vol. 41, pp. 1–20, April 2015
  2. EMSE’15
    Charting the API Minefield Using Software Telemetry Data
    Maria Kechagia, Dimitris Mitropoulos, and Diomidis Spinellis
    Empirical Software Engineering, Vol. 20, No. 6, pp. 1785–1830, December 2015

2011

  1. IMCS’11
    Countering Code Injection Attacks: A Unified Approach
    Dimitris Mitropoulos, Vassilios Karakoidas, Panagiotis Louridas, and Diomidis Spinellis
    Information Management and Computer Security, Vol. 19, No. 3, pp. 177–194, 2011

2009

  1. CoSe’09
    SDriver: Location-Specific Signatures Prevent SQL Injection Attacks
    Dimitris Mitropoulos and Diomidis Spinellis
    Computers & Security, Vol. 28, No. 3–4, pp. 121–129, May 2009

Book Chapters

2021

  1. ISSC’21
    Secure Software Technologies
    Dimitris Mitropoulos, Theodosios Tsaklanos, and Diomidis Spinelliss
    In Information and System Security in the Cyberspace, NewTech Pub, 2021

2016

  1. ECST’16
    Securing Software
    Dimitris Mitropoulos
    In Encyclopedia of Computer Science and Technology, Second Edition, CRC Press, Taylor and Francis Group, 2016

Magazine Articles

2024

  1. CONNECT’24
    GRNET’s Platform for Running Digital Public Services
    Dimitris Mitropoulos
    CONNECT, The Magazine from the GÉANT, June 2024
  2. ;login’24
    AppStack: An Agile Platform for Running Digital Public Services
    Dimitris Mitropoulos and Georgios Tsoukalas
    USENIX ;login: Magazine, March 2024

2017

  1. XRDS’17
    How 1 Million App Calls Can Tell You a Bit About Malware
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 24, No. 1, pp. 17–19, 2017

2016

  1. ;login’16
    POSIX Has Become Outdated
    Vaggelis Atlidakis, Jeremy Andrus, Roxana Geambasu, Dimitris Mitropoulos, and Jason Nieh
    USENIX ;login: Magazine, Vol. 41, No. 3, Fall 2016

2015

  1. XRDS’15
    On the Evolution of Security Bugs
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 21, No. 3, pp. 18–19, 2015

2013

  1. XRDS’13
    Security Bugs in Large Software Ecosystems
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 20, No. 2, pp. 15–16, 2013
  2. XRDS’13
    Data Security in the Cloud Environment
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 19, No. 3, pp. 11–11, 2013

2012

  1. XRDS’12
    Fatal Injection: the Server’s Side
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 19, No. 2, pp. 12–14, 2012
  2. XRDS’12
    How Secure is Your Software?
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 19, No. 1, pp. 11–13, 2012
  3. XRDS’12
    Better Safe than Sorry: Backup your Backups
    Dimitris Mitropoulos
    XRDS: Crossroads, The ACM Magazine for Students, Vol. 18, No. 2, pp. 6–6, 2012