238 citations · 251 across the 6 of their papers we have counts for
7 papers
Newer and Bigger, but Safer? A Longitudinal Study of the Functionality-Security Gap in LLM-Generated Code
Thiago Santos de Moura, Fynn Matuschek, Flavio Toffalini +1
Large Language Models (LLMs) are widely used to generate code. Although their functional plausibility keeps improving, the generated code often contains security vulnerabilities. T…
E-FuzzEdge: Optimizing Embedded Device Security with Scalable In-Place Fuzzing
Davide Rusconi, Osama Yousef, Mirco Picca +2
In this paper we show E-FuzzEdge, a novel fuzzing architecture targeted towards improving the throughput of fuzzing campaigns in contexts where scalability is unavailable. E-FuzzEd…
FishFuzz: Throwing Larger Nets to Catch Deeper Bugs
Han Zheng, Jiayuan Zhang, Yuhang Huang +6
Greybox fuzzing is the de-facto standard to discover bugs during development. Fuzzers execute many inputs to maximize the amount of reached code. Recently, Directed Greybox Fuzzers…
Designing a Provenance Analysis for SGX Enclaves
Flavio Toffalini, Mathias Payer, Jianying Zhou +1
Intel SGX enables memory isolation and static integrity verification of code and data stored in user-space memory regions called enclaves. SGX effectively shields the execution of…
SAFE^d: Self-Attestation For Networks of Heterogeneous Embedded Devices
Alessandro Visintin, Flavio Toffalini, Mauro Conti +1
The Internet of Things (IoT) is an emerging paradigm that allows to set large networks of small and independent devices. To ensure their integrity, practitioners employ so-called R…
ScaRR: Scalable Runtime Remote Attestation for Complex Systems
Flavio Toffalini, Eleonora Losiouk, Andrea Biondo +2
The introduction of remote attestation (RA) schemes has allowed academia and industry to enhance the security of their systems. The commercial products currently available enable o…
Insight into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures
Ivan Homoliak, Flavio Toffalini, Juan Guarnizo +2
Insider threats are one of today's most challenging cybersecurity issues that are not well addressed by commonly employed security solutions. Despite several scientific works publi…