140 citations · 600 across the 36 of their papers we have counts for
13 papers · 1 filter
VulnGym: Evaluating Vulnerability Management Strategies against Advanced Persistent Threats
Sofia Della Penna, Lorenzo Parracino, Luciano Pianese +2
Enterprise networks are continuously targeted by Advanced Persistent Threats (APTs), attack campaigns exploiting software vulnerabilities to compromise critical assets over time. A…
AI-Generated PowerShell Malware: An Experimental Framework and Dataset
Luciano Pianese, Vittorio Orbinato, Pietro Liguori +1
Generative AI has emerged as a significant cybersecurity threat, with several recent attack campaigns leveraging LLMs to generate code for malicious purposes via scripting language…
Elevating Cyber Threat Intelligence against Disinformation Campaigns with LLM-based Concept Extraction and the FakeCTI Dataset
Domenico Cotroneo, Roberto Natella, Vittorio Orbinato
The swift spread of fake news and disinformation campaigns poses a significant threat to public trust, political stability, and cybersecurity. Traditional Cyber Threat Intelligence…
CTI-HAL: A Human-Annotated Dataset for Cyber Threat Intelligence Analysis
Sofia Della Penna, Roberto Natella, Vittorio Orbinato +2
Organizations are increasingly targeted by Advanced Persistent Threats (APTs), which involve complex, multi-stage tactics and diverse techniques. Cyber Threat Intelligence (CTI) so…
Can Neural Decompilation Assist Vulnerability Prediction on Binary Code?
D. Cotroneo, F. C. Grasso, R. Natella +1
Vulnerability prediction is valuable in identifying security issues efficiently, even though it requires the source code of the target software system, which is a restrictive hypot…
The Power of Words: Generating PowerShell Attacks from Natural Language
Pietro Liguori, Christian Marescalco, Roberto Natella +2
As the Windows OS stands out as one of the most targeted systems, the PowerShell language has become a key tool for malicious actors and cybersecurity professionals (e.g., for pene…
AI Code Generators for Security: Friend or Foe?
Roberto Natella, Pietro Liguori, Cristina Improta +2
Recent advances of artificial intelligence (AI) code generators are opening new opportunities in software security research, including misuse by malicious actors. We review use cas…
Laccolith: Hypervisor-Based Adversary Emulation with Anti-Detection
Vittorio Orbinato, Marco Carlo Feliciano, Domenico Cotroneo +1
Advanced Persistent Threats (APTs) represent the most threatening form of attack nowadays since they can stay undetected for a long time. Adversary emulation is a proactive approac…
Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks
Domenico Cotroneo, Cristina Improta, Pietro Liguori +1
AI-based code generators have become pivotal in assisting developers in writing software starting from natural language (NL). However, they are trained on large amounts of data, of…
Automatic Mapping of Unstructured Cyber Threat Intelligence: An Experimental Study
Vittorio Orbinato, Mariarosaria Barbaraci, Roberto Natella +1
Proactive approaches to security, such as adversary emulation, leverage information about threat actors and their techniques (Cyber Threat Intelligence, CTI). However, most CTI sti…
StateAFL: Greybox Fuzzing for Stateful Network Servers
Roberto Natella
Fuzzing network servers is a technical challenge, since the behavior of the target server depends on its state over a sequence of multiple messages. Existing solutions are costly a…
Timing Covert Channel Analysis of the VxWorks MILS Embedded Hypervisor under the Common Criteria Security Certification
Domenico Cotroneo, Luigi De Simone, Roberto Natella
Virtualization technology is nowadays adopted in security-critical embedded systems to achieve higher performance and more design flexibility. However, it also comes with new secur…
ProFuzzBench: A Benchmark for Stateful Protocol Fuzzing
Roberto Natella, Van-Thuan Pham
We present a new benchmark (ProFuzzBench) for stateful fuzzing of network protocols. The benchmark includes a suite of representative open-source network servers for popular protoc…