15 citations · 39 across the 11 of their papers we have counts for
13 papers
Credential Disclosure in (EU) Digital Identity Wallets: Privacy Risks and Practical Mitigations
Sheila Zingg, Daniele Lain, Yoshimichi Nakatsuka +3
The European Union will introduce the EUDI Wallet by late 2026, which allows users to hold digital credentials (i.e., representations of physical official identity documents) on th…
Can LLMs Make (Personalized) Access Control Decisions?
Friederike Groschupp, Daniele Lain, Aritra Dhar +2
Precise access control decisions are crucial for the security of both traditional applications and emerging agent-based systems. Typically, these decisions are made by users during…
URL Inspection Tasks: Helping Users Detect Phishing Links in Emails
Daniele Lain, Yoshimichi Nakatsuka, Kari Kostiainen +2
The most widespread type of phishing attack involves email messages with links pointing to malicious content. Despite user training and the use of detection techniques, these attac…
Breaking Bad: How Compilers Break Constant-Time Implementations
Moritz Schneider, Daniele Lain, Ivan Puddu +2
The implementations of most hardened cryptographic libraries use defensive programming techniques for side-channel resistance. These techniques are usually specified as guidelines…
Content, Nudges and Incentives: A Study on the Effectiveness and Perception of Embedded Phishing Training
Daniele Lain, Tarek Jost, Sinisa Matetic +2
A common form of phishing training in organizations is the use of simulated phishing emails to test employees' susceptibility to phishing attacks, and the immediate delivery of tra…
On (the Lack of) Code Confidentiality in Trusted Execution Environments
Ivan Puddu, Moritz Schneider, Daniele Lain +2
Trusted Execution Environments (TEEs) have been proposed as a solution to protect code confidentiality in scenarios where computation is outsourced to an untrusted operator. We stu…