22 citations · 49 across the 6 of their papers we have counts for
6 papers
RFQuack: A Universal Hardware-Software Toolkit for Wireless Protocol (Security) Analysis and Research
Federico Maggi, Andrea Guglielmini
Software-defined radios (SDRs) are indispensable for signal reconnaissance and physical-layer dissection, but despite we have advanced tools like Universal Radio Hacker, SDR-based…
Static Exploration of Taint-Style Vulnerabilities Found by Fuzzing
Bhargava Shastry, Federico Maggi, Fabian Yamaguchi +2
Taint-style vulnerabilities comprise a majority of fuzzer discovered program faults. These vulnerabilities usually manifest as memory access violations caused by tainted program in…
Leveraging Flawed Tutorials for Seeding Large-Scale Web Vulnerability Discovery
Tommi Unruh, Bhargava Shastry, Malte Skoruppa +4
The Web is replete with tutorial-style content on how to accomplish programming tasks. Unfortunately, even top-ranked tutorials suffer from severe security vulnerabilities, such as…
XSS Peeker: A Systematic Analysis of Cross-site Scripting Vulnerability Scanners
Enrico Bazzoli, Claudio Criscione, Federico Maggi +1
Since the first publication of the "OWASP Top 10" (2004), cross-site scripting (XSS) vulnerabilities have always been among the top 5 web application security bugs. Black-box vulne…
PuppetDroid: A User-Centric UI Exerciser for Automatic Dynamic Analysis of Similar Android Applications
Andrea Gianazza, Federico Maggi, Aristide Fattori +2
Popularity and complexity of malicious mobile applications are rising, making their analysis difficult and labor intensive. Mobile application analysis is indeed inherently differe…
Tracking and Characterizing Botnets Using Automatically Generated Domains
Stefano Schiavoni, Federico Maggi, Lorenzo Cavallaro +1
Modern botnets rely on domain-generation algorithms (DGAs) to build resilient command-and-control infrastructures. Recent works focus on recognizing automatically generated domains…