4 citations · 9 across the 8 of their papers we have counts for
11 papers
HoldSpec: A Machine-Checked Model and Conformance Suite for the Payment Authorization Hold Lifecycle
Abhishek Sharma
When a merchant authorizes a card and captures the funds later, the money sits in a state that neither party fully controls: held on the cardholder's account, not yet taken, and du…
Towards LLM-Enhanced Android Taint Analysis
Nicholas Miazzo, Marco Alecci, Jordan Samhi +2
Taint analysis is a fundamental technique for detecting sensitive data leaks in Android apps. However, traditional static tools, such as FlowDroid, still face well-known challenges…
GAPS: Targeted Execution of Android Apps via Static Path Reconstruction
Samuele Doria, Alexander Pilgun, Jordan Samhi +2
Targeted execution of Android applications (apps) remains a longstanding challenge for software testing and analysis. Although recent advances in GUI testing have substantially imp…
Evaluating LLM-Based Regression Test Generation
Jing Liu, Seongmin Lee, Eleonora Losiouk +1
Large Language Models (LLMs) have shown tremendous promise in automated software engineering. In this paper, we investigate LLMs for just-in-time regression test generation for pro…
E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Battery-powered Embedded Systems
Marco Casagrande, Riccardo Cestaro, Eleonora Losiouk +2
Battery-powered embedded systems (BESs) have become ubiquitous. Their internals include a battery management system (BMS), a radio interface, and a motor controller. Despite their…
Beware of Pickpockets: A Practical Attack against Blocking Cards
Marco Alecci, Luca Attanasio, Alessandro Brighente +4
Today, we rely on contactless smart cards to perform several critical operations (e.g., payments and accessing buildings). Attacking smart cards can have severe consequences, such…
Security and Privacy of IP-ICN Coexistence: A Comprehensive Survey
Enkeleda Bardhi, Mauro Conti, Riccardo Lazzeretti +1
Today Internet is experiencing a massive number of users with a continuously increasing need for data, which is the leading cause of introduced limitations among security and priva…
Contact Tracing Made Un-relay-able
Marco Casagrande, Mauro Conti, Eleonora Losiouk
Automated contact tracing is a key solution to control the spread of airborne transmittable diseases: it traces contacts among individuals in order to alert people about their pote…
Mascara: A Novel Attack Leveraging Android Virtualization
Marco Alecci, Riccardo Cestaro, Mauro Conti +2
Android virtualization enables an app to create a virtual environment, in which other apps can run. Originally designed to overcome the limitations of mobile apps dimensions, malic…
The Road Ahead for Networking: A Survey on ICN-IP Coexistence Solutions
Mauro Conti, Ankit Gangwal, Muhammad Hassan +2
In recent years, the current Internet has experienced an unexpected paradigm shift in the usage model, which has pushed researchers towards the design of the Information-Centric Ne…
ScaRR: Scalable Runtime Remote Attestation for Complex Systems
Flavio Toffalini, Eleonora Losiouk, Andrea Biondo +2
The introduction of remote attestation (RA) schemes has allowed academia and industry to enhance the security of their systems. The commercial products currently available enable o…