40 citations · 201 across the 22 of their papers we have counts for
23 papers
Up-to-date Threat Modelling for Soft Privacy on Smart Cars
Mario Raciti, Giampaolo Bella
Physical persons playing the role of car drivers consume data that is sourced from the Internet and, at the same time, themselves act as sources of relevant data. It follows that c…
Smart Bulbs can be Hacked to Hack into your Household
Davide Bonaventura, Sergio Esposito, Giampaolo Bella
The IoT is getting more and more pervasive. Even the simplest devices, such as a light bulb or an electrical plug, are made "smart" and controllable by our smartphone. This paper d…
An automated method for the ontological representation of security directives
Giampaolo Bella, Gianpietro Castiglione, Daniele Francesco Santamaria
Large documents written in juridical language are difficult to interpret, with long sentences leading to intricate and intertwined relations between the nouns. The present paper fr…
A behaviouristic approach to representing processes and procedures in the OASIS 2 ontology
Giampaolo Bella, Gianpietro Castiglione, Daniele Francesco Santamaria
Foundational ontologies devoted to the effective representation of processes and procedures are not widely investigated at present, thereby limiting the practical adoption of seman…
Towards Grammatical Tagging for the Legal Language of Cybersecurity
Gianpietro Castiglione, Giampaolo Bella, Daniele Francesco Santamaria
Legal language can be understood as the language typically used by those engaged in the legal profession and, as such, it may come both in spoken or written form. Recent legislatio…
A Threat Model for Soft Privacy on Smart Cars
Mario Raciti, Giampaolo Bella
Modern cars are getting so computerised that ENISA's phrase "smart cars" is a perfect fit. The amount of personal data that they process is very large and, yet, increasing. Hence,…
An Ontological Approach to Compliance Verification of the NIS 2 Directive
Gianpietro Castiglione, Daniele Francesco Santamaria, Giampaolo Bella
Cybersecurity, which notoriously concerns both human and technological aspects, is becoming more and more regulated by a number of textual documents spanning several pages, such as…
The Ontology for Agents, Systems and Integration of Services: OASIS version 2
Giampaolo Bella, Domenico Cantone, Carmelo Fabio Longo +2
Semantic representation is a key enabler for several application domains, and the multi-agent systems realm makes no exception. Among the methods for semantically representing agen…
How to Model Privacy Threats in the Automotive Domain
Mario Raciti, Giampaolo Bella
This paper questions how to approach threat modelling in the automotive domain at both an abstract level that features no domain-specific entities such as the CAN bus and, separate…
PETIoT: PEnetration Testing the Internet of Things
Giampaolo Bella, Pietro Biondi, Stefano Bognanni +1
Attackers may attempt exploiting Internet of Things (IoT) devices to operate them unduly as well as to gather personal data of the legitimate device owners'. Vulnerability Assessme…
Evaluating the Fork-Awareness of Coverage-Guided Fuzzers
Marcello Maugeri, Cristian Daniele, Giampaolo Bella +1
Fuzz testing (or fuzzing) is an effective technique used to find security vulnerabilities. It consists of feeding a software under test with malformed inputs, waiting for a weird s…
Multi-service Threats: Attacking and Protecting Network Printers and VoIP Phones alike
Giampaolo Bella, Pietro Biondi, Stefano Bognanni
Printing over a network and calling over VoIP technology are routine at present. This article investigates to what extent these services can be attacked using freeware in the real…
Alexa versus Alexa: Controlling Smart Speakers by Self-Issuing Voice Commands
Sergio Esposito, Daniele Sgandurra, Giampaolo Bella
We present Alexa versus Alexa (AvA), a novel attack that leverages audio files containing voice commands and audio reproduction methods in an offensive fashion, to gain control of…
Vulnerability Assessment and Penetration Testing on IP cameras
Pietro Biondi, Stefano Bognanni, Giampaolo Bella
IP cameras have always been part of the Internet of Things (IoT) and are among the most widely used devices in both home and professional environments. Unfortunately, the vulnerabi…
Out to Explore the Cybersecurity Planet
Giampaolo Bella
Security ceremonies still fail despite decades of efforts by researchers and practitioners. Attacks are often a cunning amalgam of exploits for technical systems and of forms of hu…
Secure Routine: A Routine-Based Algorithm for Drivers Identification
Davide Micale, Gianpiero Costantino, Ilaria Matteucci +2
The introduction of Information and Communication Technology (ICT) in transportation systems leads to several advantages (efficiency of transport, mobility, traffic management). Ho…
Privacy and modern cars through a dual lens
Giampaolo Bella, Pietro Biondi, Marco De Vincenzi +1
Modern cars technologies are evolving quickly. They collect a variety of personal data and treat it on behalf of the car manufacturer to improve the drivers' experience. The precis…
CINNAMON: A Module for AUTOSAR Secure Onboard Communication
Giampaolo Bella, Pietro Biondi, Gianpiero Costantino +1
This paper introduces CINNAMON, a software module that extends and seamlessly integrates with the AUTOSAR "Secure Onboard Communication" (SecOC) module to also account for confiden…
Towards an Integrated Penetration Testing Environment for the CAN Protocol
Giampaolo Bella, Pietro Biondi
The Controller Area Network (CAN) is the most common protocol interconnecting the various control units of modern cars. Its vulnerabilities are somewhat known but we argue they are…
TOUCAN: A proTocol tO secUre Controller Area Network
Giampaolo Bella, Pietro Biondi, Gianpiero Costantino +1
Modern cars are no longer purely mechanical devices but shelter so much digital technology that they resemble a network of computers. Electronic Control Units (ECUs) need to exchan…
VoIP Can Still Be Exploited -- Badly
Pietro Biondi, Stefano Bognanni, Giampaolo Bella
VoIP phones are early representatives as well as present enhancers of the IoT. This paper observes that they are still widely used in a traditional, unsecured configuration and dem…
Car drivers' privacy concerns and trust perceptions
Giampaolo Bella, Pietro Biondi, Giuseppe Tudisco
Modern cars are evolving in many ways. Technologies such as infotainment systems and companion mobile applications collect a variety of personal data from drivers to enhance the us…
You Overtrust Your Printer
Giampaolo Bella, Pietro Biondi
Printers are common devices whose networked use is vastly unsecured, perhaps due to an enrooted assumption that their services are somewhat negligible and, as such, unworthy of pro…