33 citations · 36 across the 10 of their papers we have counts for
12 papers
Dense Contexts Are Hard Contexts: Lexical Density Limits Effective Context in LLMs
Giovanni Dettori, Matteo Boffa, Danilo Giordano +2
Input length and the position of relevant information are widely cited as the primary causes of degraded LLM long-context performance. Here, we study lexical density -- the rate at…
Improving Generalization on Cybersecurity Tasks with Multi-Modal Contrastive Learning
Jianan Huang, Rodolfo V. Valentim, Luca Vassio +4
The use of ML in cybersecurity has long been impaired by generalization issues: Models that work well in controlled scenarios fail to maintain performance in production. The root c…
Towards Agentic Honeynet Configuration
Federico Mirra, Matteo Boffa, Idilio Drago +2
Honeypots are deception systems that emulate vulnerable services to collect threat intelligence. While deploying many honeypots increases the opportunity to observe attacker behavi…
The Potential of Erroneous Outbound Traffic Analysis to Unveil Silent Internal Anomalies
Andrea Sordello, Zhihao Wang, Kai Huang +2
Passive measurement has traditionally focused on inbound traffic to detect malicious activity, based on the assumption that threats originate externally. In this paper, we offer a…
Holoscope: Open and Lightweight Telescope & Honeypot Platform
Andrea Sordello, Marco Mellia, Idilio Drago +7
The complexity and scale of Internet attacks call for distributed, cooperative observatories capable of monitoring malicious traffic across diverse networks. Holoscope is an open,…
Analyzing BEV Suitability and Charging Strategies Using Italian Driving Data
Homa Jamalof, Luca Vassio, Danilo Giordano +2
Battery Electric Vehicles (BEVs) are rapidly evolving from a niche alternative to an established option for private transportation, often replacing Internal Combustion Engine (ICE)…
CyberSleuth: Autonomous Blue-Team LLM Agent for Web Attack Forensics
Stefano Fumero, Kai Huang, Matteo Boffa +3
Post-mortem analysis of compromised systems is a key aspect of cyber forensics, today a mostly manual, slow, and error-prone task. Agentic AI, i.e., LLM-powered agents, is a promis…
ChamaleoNet: Programmable Passive Probe for Enhanced Visibility on Erroneous Traffic
Zhihao Wang, Alessandro Cornacchia, Andrea Bianco +4
Traffic visibility remains a key component for management and security operations. Observing erroneous traffic, i.e., unanswered requests or error messages, is fundamental to detec…
Generic Multi-modal Representation Learning for Network Traffic Analysis
Luca Gioacchini, Idilio Drago, Marco Mellia +2
Network traffic analysis is fundamental for network management, troubleshooting, and security. Tasks such as traffic classification, anomaly detection, and novelty discovery are fu…
Dynamic Cluster Analysis to Detect and Track Novelty in Network Telescopes
Kai Huang, Luca Gioacchini, Marco Mellia +1
In the context of cybersecurity, tracking the activities of coordinated hosts over time is a daunting task because both participants and their behaviours evolve at a fast pace. We…
Benchmarking Evolutionary Community Detection Algorithms in Dynamic Networks
Giordano Paoletti, Luca Gioacchini, Marco Mellia +2
In dynamic complex networks, entities interact and form network communities that evolve over time. Among the many static Community Detection (CD) solutions, the modularity-based Lo…
LogPrécis: Unleashing Language Models for Automated Malicious Log Analysis
Matteo Boffa, Rodolfo Vieira Valentim, Luca Vassio +4
The collection of security-related logs holds the key to understanding attack behaviors and diagnosing vulnerabilities. Still, their analysis remains a daunting challenge. Recently…