Francesco Salzano

Dr. Francesco Salzano


Research Focus & Metrics

Academic Career Length

4Years (2023-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
28 December 2023 in Informatics
Verified
Journal Article
Open access
PDF file
SPSandro Pullo
Sandro Pullo
Remo PareschiRemo Pareschi
Remo Pareschi
VPValentina Piantadosi
Valentina Piantadosi
FSFrancesco Salzano
Francesco Salzano
RCRoberto Carlini
Roberto Carlini
Addressing the critical challenges of resource inefficiency and environmental impact in the agrifood sector, this study explores the integration of Internet of Things (IoT) technologies with IOTA’s Tangle, a Distributed Ledger Technology (DLT). This integration aims to enhance sustainable agricultural practices, using rice cultivation as a case study of high relevance and reapplicability given its importance in the food chain and the high irrigation requirement of its cultivation. The approach employs sensor-based intelligent irrigation systems to optimize water efficiency. These systems enable real-time monitoring of agricultural parameters through IoT sensors. Data management is facilitated by IOTA’s Tangle, providing secure and efficient data handling, and integrated with MongoDB, a Database Management System (DBMS), for effective data storage and retrieval. The collaboration between IoT and IOTA led to significant reductions in resource consumption. Implementing sustainable agricultural practices resulted in a 50% reduction in water usage, 25% decrease in nitrogen consumption, and a 50% to 70% reduction in methane emissions. Additionally, the system contributed to lower electricity consumption for irrigation pumps and generated comprehensive historical water depth records, aiding future resource management decisions. This study concludes that the integration of IoT with IOTA’s Tangle presents a highly promising solution for advancing sustainable agriculture. This approach significantly contributes to environmental conservation and food security. Furthermore, it establishes that DLTs like IOTA are not only viable but also effective for real-time monitoring and implementation of sustainable agricultural practices.

5 December 2025 in Empirical Software Engineering
Verified
Journal Article
Open access
PDF file
FSFrancesco Salzano
Francesco Salzano
LMLodovica Marchesi
Lodovica Marchesi
CACosmo Kevin Antenucci
Cosmo Kevin Antenucci
SSSimone Scalabrino
Simone Scalabrino
RTRoberto Tonelli
Roberto Tonelli
Remo PareschiRemo Pareschi
Remo Pareschi
In this paper, we investigate the strategies adopted by Solidity developers to fix security vulnerabilities in smart contracts. Vulnerabilities are categorized using the DASP TOP 10 taxonomy, and fixing strategies are extracted from 364 commits collected from open-source Solidity projects on GitHub. Each commit was selected through a two-phase process: an initial filter using natural language processing techniques, followed by manual validation. We assessed whether these fixes adhere to established academic guidelines. Our analysis shows that 60.55% of the commits aligned with at least one literature-based recommendation, particularly for well-documented vulnerability types such as Reentrancy and Arithmetic. However, adherence dropped significantly for categories like Denial of Service, Time Manipulation, and Bad Randomness, highlighting gaps between academic best practices and real-world developer behavior. From the remaining 143 non-aligned commits, we identified 27 novel fixing strategies not previously discussed in the literature. To evaluate their quality, we conducted a structured questionnaire involving 9 experts from both academia and industry. Their feedback indicated high perceived effectiveness of the new fixes, especially for vulnerabilities like Reentrancy and Unchecked Return Values. Generalizability received more varied responses, suggesting context-specific applicability. Finally, we performed a post-fix evolution analysis on over 6700 subsequent commits to assess the long-term stability of the fixes. Most patches remained unchanged, confirming their persistence in production code. Our findings offer practical insights into how vulnerabilities are fixed in smart contracts today, reveal promising emerging patterns, and help bridge the gap between academic guidelines and developer practices.

13 April 2026
Verified
Conference Paper
Open access
RMRoberto Milanese
Roberto Milanese
FSFrancesco Salzano
Francesco Salzano
ASAngelica Spina
Angelica Spina
AVAntonio Vitale
Antonio Vitale
Remo PareschiRemo Pareschi
Remo Pareschi
MFMattia Fazzini
Mattia Fazzini
AI-based coding agents are increasingly integrated into software development workflows, collaborating with developers to create pull requests (PRs). Despite their growing adoption, the role of human-agent collaboration in software testing remains poorly understood. This paper presents an empirical study of 6,582 human-agent PRs (HAPRs) and 3,122 human PRs (HPRs) from the AIDev dataset. We compare HAPRs and HPRs along three dimensions: (i) testing frequency and extent, (ii) types of testing-related changes (code-and-test co-evolution vs. test-focused), and (iii) testing quality, measured by test smells. Our findings reveal that, although the likelihood of including tests is comparable (42.9% for HAPRs vs. 40.0% for HPRs), HAPRs exhibit a larger extent of testing, nearly doubling the test-to-source line ratio found in HPRs. While test-focused task distributions are comparable, HAPRs are more likely to add new tests during co-evolution (OR = 1.79), whereas HPRs prioritize modifying existing tests. Finally, although some test smell categories differ statistically, negligible effect sizes suggest no meaningful differences in quality. These insights provide the first characterization of how human-agent collaboration shapes testing practices.

16 May 2026 in Empirical Software Engineering
Verified
Journal Article
Open access
FSFrancesco Salzano
Francesco Salzano
CACosmo Kevin Antenucci
Cosmo Kevin Antenucci
SSSimone Scalabrino
Simone Scalabrino
GRGiovanni Rosa
Giovanni Rosa
RORocco Oliveto
Rocco Oliveto
RPRemo Pareschi
Remo Pareschi
The rapid adoption of blockchain technology highlighted the importance of ensuring the security of smart contracts due to their critical role in automated business logic execution on blockchain platforms. This paper provides an empirical evaluation of automated vulnerability analysis tools specifically designed for Solidity smart contracts. Leveraging the extensive SmartBugs 2.0 framework, which includes 20 analysis tools, we conducted a comprehensive assessment using an annotated dataset of 2,182 instances, manually labeled at the line level with vulnerability labels. Our evaluation highlights the detection effectiveness of these tools in detecting various types of vulnerabilities, as categorized by the DASP TOP 10 taxonomy. We evaluated the efficacy of a Large Language Model-based detection method on two popular datasets. In this case, we obtained inconsistent results with the two datasets, showing unreliable detection when analyzing real-world smart contracts. Our study identifies significant variations in the accuracy and reliability of different tools and demonstrates the advantages of combining multiple detection methods to improve vulnerability identification. We identified a set of 3 tools that, combined, achieve up to 76.78% found vulnerabilities, taking less than one minute to run, on average. This study contributes to the field by releasing the largest dataset of manually analyzed smart contracts with line-level vulnerability annotations and by conducting the largest empirical evaluation of tools to date.

27 March 2024 in Applied Sciences
Verified
Journal Article
Open access
PDF file
FSFrancesco Salzano
Francesco Salzano
NMNoemi Martella
Noemi Martella
Remo PareschiRemo Pareschi
Remo Pareschi
Marco SegattoMarco Segatto
Marco Segatto
In recent years, optical imaging and efficient computational approaches have improved the ability to analyse and understand biological phenomena. Immunofluorescence (IF) is a widely used immunochemical technique that provides information about protein localisation and expression levels. However, the manual analysis of IF images can present important limitations, such as operator workload and interpretative bias. Thus, the development of automated tools for IF signal computation is crucial. Several software programs have been proposed to address this challenge, but there is still a need for more accurate and reliable systems. In this work, we present Q-IF, a software for automatically measuring cellular IF signals with an intuitive and easy-to-use interface. We describe the software and validate its results in different biological scenarios using SH-SY5Y neuroblastoma cells, human fibroblasts, and rat brain sections. The Q-IF system automatically carries out the entire process, from IF signal quantification to statistical analysis, thus evading operator biases and speeding up the analysis workflow. Our results demonstrate the accuracy and reliability of the Q-IF system, highlighting its potential as a valuable tool for IF analysis in biological research.

14 January 2026 in SN Computer Science
Verified
Journal Article
Closed access
PDF file
NBNicola Bonavita
Nicola Bonavita
CFClaudio Di Florio
Claudio Di Florio
VEValerio Esposito
Valerio Esposito
EGEmanuela Guglielmi
Emanuela Guglielmi
RORocco Oliveto
Rocco Oliveto
SSSimone Scalabrino
Simone Scalabrino