94 citations · 209 across the 10 of their papers we have counts for
7 papers · 1 filter
Automatic Security Assessment of GitHub Actions Workflows
Giacomo Benedetti, Luca Verderame, Alessio Merlo
The demand for quick and reliable DevOps operations pushed distributors of repository platforms to implement workflows. Workflows allow automating code management operations direct…
PARIOT: Anti-Repackaging for IoT Firmware Integrity
Luca Verderame, Antonio Ruggia, Alessio Merlo
IoT repackaging refers to an attack devoted to tampering with a legitimate firmware package by modifying its content (e.g., injecting some malicious code) and re-distributing it in…
Understanding Fuchsia Security
Francesco Pagano, Luca Verderame, Alessio Merlo
Fuchsia is a new open-source operating system created at Google that is currently under active development. The core architectural principles guiding the design and development of…
You can't always get what you want: towards user-controlled privacy on Android
Davide Caputo, Francesco Pagano, Giovanni Bottino +2
Mobile applications (hereafter, apps) collect a plethora of information regarding the user behavior and his device through third-party analytics libraries. However, the collection…
Gotta CAPTCHA 'Em All: A Survey of Twenty years of the Human-or-Computer Dilemma
Meriem Guerar, Luca Verderame, Mauro Migliardi +2
A recent study has found that malicious bots generated nearly a quarter of overall website traffic in 2019 [100]. These malicious bots perform activities such as price and content…
Deep Adversarial Learning on Google Home devices
Andrea Ranieri, Davide Caputo, Luca Verderame +2
Smart speakers and voice-based virtual assistants are core components for the success of the IoT paradigm. Unfortunately, they are vulnerable to various privacy threats exploiting…
ARMAND: Anti-Repackaging through Multi-pattern Anti-tampering based on Native Detection
Alessio Merlo, Antonio Ruggia, Luigi Sciolla +1
App repackaging refers to the practice of customizing an existing mobile app and redistributing it in the wild to fool the final user into installing the repackaged app instead of…