50 citations · 77 across the 5 of their papers we have counts for
5 papers
ModSec-Learn: Boosting ModSecurity with Machine Learning
Christian Scano, Giuseppe Floris, Biagio Montaruli +7
ModSecurity is widely recognized as the standard open-source Web Application Firewall (WAF), maintained by the OWASP Foundation. It detects malicious requests by matching them agai…
ModSec-AdvLearn: Countering Adversarial SQL Injections with Robust Machine Learning
Giuseppe Floris, Christian Scano, Biagio Montaruli +7
Many Web Application Firewalls (WAFs) leverage the OWASP CRS to block incoming malicious requests. The CRS consists of different sets of rules designed by domain experts to detect…
Why Charles Can Pen-test: an Evolutionary Approach to Vulnerability Testing
Gabriele Costa, Andrea Valenza
Discovering vulnerabilities in applications of real-world complexity is a daunting task: a vulnerability may affect a single line of code, and yet it compromises the security of th…
Never Trust Your Victim: Weaponizing Vulnerabilities in Security Scanners
Andrea Valenza, Gabriele Costa, Alessandro Armando
The first step of every attack is reconnaissance, i.e., to acquire information about the target. A common belief is that there is almost no risk in scanning a target from a remote…
WAF-A-MoLE: Evading Web Application Firewalls through Adversarial Machine Learning
Luca Demetrio, Andrea Valenza, Gabriele Costa +1
Web Application Firewalls are widely used in production environments to mitigate security threats like SQL injections. Many industrial products rely on signature-based techniques,…