20 citations · 103 across the 32 of their papers we have counts for
33 papers
Safety-Aware Zero Trust Enforcement for IoT and Cyber-Physical Systems
Alessandro Lotto, Alessandro Brighente, Mauro Conti
Zero Trust (ZT) replaces the implicit trust of perimeter-based security with explicit, continuous, context-aware authorization. This shift is particularly relevant to IoT and cyber…
Not All Relations Are Equal: Relation-Balanced and Calibrated Graph Learning for Provenance-Based Intrusion Detection
Lijie Zheng, Ji He, Zhiwei Zhang +3
Provenance-Based Intrusion Detection Systems (PIDSs) detect Advanced Persistent Threats (APTs) by analyzing system interactions. However, existing methods largely treat relations u…
ORCA - An Automated Threat Analysis Pipeline for O-RAN Continuous Development
Felix Klement, Alessandro Brighente, Michele Polese +2
The Open-Radio Access Network (O-RAN) integrates numerous software components in a cloud-like deployment, opening the radio access network to previously unconsidered security threa…
A Practical Solution to Systematically Monitor Inconsistencies in SBOM-based Vulnerability Scanners
Martin Rosso, Muhammad Asad Jahangir Jaffar, Alessandro Brighente +1
Software Bill of Materials (SBOM) provides new opportunities for automated vulnerability identification in software products. While the industry is adopting SBOM-based Vulnerabilit…
Cross-Service Token: Finding Attacks in 5G Core Networks
Anqi Chen, Riccardo Preatoni, Alessandro Brighente +2
5G marks a major departure from previous cellular architectures, by transitioning from a monolithic design of the core network to a Service-Based Architecture (SBA) where services…
Profiling Electric Vehicles via Early Charging Voltage Patterns
Francesco Marchiori, Denis Donadel, Alessandro Brighente +1
Electric Vehicles (EVs) are rapidly gaining adoption as a sustainable alternative to fuel-powered vehicles, making secure charging infrastructure essential. Despite traditional aut…
CANTXSec: A Deterministic Intrusion Detection and Prevention System for CAN Bus Monitoring ECU Activations
Denis Donadel, Kavya Balasubramanian, Alessandro Brighente +3
Despite being a legacy protocol with various known security issues, Controller Area Network (CAN) still represents the de-facto standard for communications within vehicles, ships,…
SoK: Stealing Cars Since Remote Keyless Entry Introduction and How to Defend From It
Tommaso Bianchi, Alessandro Brighente, Mauro Conti +1
Remote Keyless Entry (RKE) systems have been the target of thieves since their introduction in automotive industry. Robberies targeting vehicles and their remote entry systems are…
Towards Robust Stability Prediction in Smart Grids: GAN-based Approach under Data Constraints and Adversarial Challenges
Emad Efatinasab, Alessandro Brighente, Denis Donadel +2
Smart grids are crucial for meeting rising energy demands driven by global population growth and urbanization. By integrating renewable energy sources, they enhance efficiency, rel…
ACRIC: Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check
Alessandro Lotto, Alessandro Brighente, Mauro Conti
The increasing integration of modern IT technologies into OT technologies and industrial systems is expanding the vulnerability surface of legacy infrastructures, which often rely…
The Impact of SBOM Generators on Vulnerability Assessment in Python: A Comparison and a Novel Approach
Giacomo Benedetti, Serena Cofano, Alessandro Brighente +1
The Software Supply Chain (SSC) security is a critical concern for both users and developers. Recent incidents, like the SolarWinds Orion compromise, proved the widespread impact r…
Obfuscated Location Disclosure for Remote ID Enabled Drones
Alessandro Brighente, Mauro Conti, Matthijs Schotsman +1
The Remote ID (RID) regulation recently introduced by several aviation authorities worldwide (including the US and EU) forces commercial drones to regularly (max. every second) bro…
Your Car Tells Me Where You Drove: A Novel Path Inference Attack via CAN Bus and OBD-II Data
Tommaso Bianchi, Alessandro Brighente, Mauro Conti +1
Despite its well-known security issues, the Controller Area Network (CAN) is still the main technology for in-vehicle communications. Attackers posing as diagnostic services or acc…
GAN-GRID: A Novel Generative Attack on Smart Grid Stability Prediction
Emad Efatinasab, Alessandro Brighente, Mirco Rampazzo +2
The smart grid represents a pivotal innovation in modernizing the electricity sector, offering an intelligent, digitalized energy network capable of optimizing energy delivery from…
Securing the Open RAN Infrastructure: Exploring Vulnerabilities in Kubernetes Deployments
Felix Klement, Alessandro Brighente, Michele Polese +2
In this paper, we investigate the security implications of virtualized and software-based Open Radio Access Network (RAN) systems, specifically focusing on the architecture propose…
FaultGuard: A Generative Approach to Resilient Fault Prediction in Smart Electrical Grids
Emad Efatinasab, Francesco Marchiori, Alessandro Brighente +2
Predicting and classifying faults in electricity networks is crucial for uninterrupted provision and keeping maintenance costs at a minimum. Thanks to the advancements in the field…
Penetration Testing of 5G Core Network Web Technologies
Filippo Giambartolomei, Marc Barceló, Alessandro Brighente +2
Thanks to technologies such as virtual network function the Fifth Generation (5G) of mobile networks dynamically allocate resources to different types of users in an on-demand fash…
A Survey and Comparative Analysis of Security Properties of CAN Authentication Protocols
Alessandro Lotto, Francesco Marchiori, Alessandro Brighente +1
The large number of Electronic Control Units (ECUs) mounted on modern cars and their expansive communication capabilities create a substantial attack surface for potential exploita…
DynamiQS: Quantum Secure Authentication for Dynamic Charging of Electric Vehicles
Tommaso Bianchi, Alessandro Brighente, Mauro Conti
Dynamic Wireless Power Transfer (DWPT) is a novel technology that allows charging an electric vehicle while driving thanks to a dedicated road infrastructure. DWPT's capabilities i…
EPUF: A Novel Scheme Based on Entropy Features of Latency-based DRAM PUFs Providing Lightweight Authentication in IoT Networks
Fatemeh Najafi, Masoud Kaveh, Mohammad Reza Mosavi +2
Physical unclonable functions (PUFs) are hardware-oriented primitives that exploit manufacturing variations to generate a unique identity for a physical system. Recent advancements…
When Authentication Is Not Enough: Breaking Behavior-Based Driver Authentication Systems
Emad Efatinasab, Francesco Marchiori, Denis Donadel +2
Researchers extensively explored behavior-based driver authentication systems in vehicles. Pushed by advances in Artificial Intelligence (AI), these systems employ powerful models…
Beware of Pickpockets: A Practical Attack against Blocking Cards
Marco Alecci, Luca Attanasio, Alessandro Brighente +4
Today, we rely on contactless smart cards to perform several critical operations (e.g., payments and accessing buildings). Attacking smart cards can have severe consequences, such…
Electric Vehicles Security and Privacy: Challenges, Solutions, and Future Needs
Alessandro Brighente, Mauro Conti, Denis Donadel +3
Electric Vehicles (EVs) share common technologies with classical fossil-fueled cars, but they also employ novel technologies and components (e.g., Charging System and Battery Manag…
Hyperloop: A Cybersecurity Perspective
Alessandro Brighente, Mauro Conti, Denis Donadel +1
Hyperloop is among the most prominent future transportation systems. It involves novel technologies to allow traveling at a maximum speed of 1220km/h while guaranteeing sustainabil…