20 citations · 23 across the 14 of their papers we have counts for
15 papers
From Source Code to Network Profile: Automated and Traceable MUD Profile Generation for IoT Devices
Alessandro Lotto, Abdulla R. A. Almenhali, Savio Sciancalepore +2
The Manufacturer Usage Description (MUD) standard allows IoT manufacturers to define expected network behaviors in a MUD file. This file can be translated into enforceable access-c…
Safety-Aware Zero Trust Enforcement for IoT and Cyber-Physical Systems
Alessandro Lotto, Alessandro Brighente, Mauro Conti
Zero Trust (ZT) replaces the implicit trust of perimeter-based security with explicit, continuous, context-aware authorization. This shift is particularly relevant to IoT and cyber…
zk-ScalHard: Scalable and Hardware-Rooted Privacy-Preserving Authentication for Secure OTA Updates in Zonal SDVs
Shrikant Tangade, Bansi Pambhar, Valeria Loscri +1
The automotive industry is transitioning to Zonal-oriented Architectures (ZoA) for Software-Defined Vehicles (SDVs), enabling frequent over-the-air (OTA) updates for 100+ Electroni…
FIDEM: A Standard-Compliant Framework for Secure Binding of MUD Profiles to IoT Devices
Alessandro Lotto, Savio Sciancalepore, Alessandro Brighente +1
The Manufacturer Usage Description (MUD) enables enforcement of network restrictions for IoT devices based on their expected network traffic, as specified by manufacturers in a MUD…
ORCA - An Automated Threat Analysis Pipeline for O-RAN Continuous Development
Felix Klement, Alessandro Brighente, Michele Polese +2
The Open-Radio Access Network (O-RAN) integrates numerous software components in a cloud-like deployment, opening the radio access network to previously unconsidered security threa…
A Practical Solution to Systematically Monitor Inconsistencies in SBOM-based Vulnerability Scanners
Martin Rosso, Muhammad Asad Jahangir Jaffar, Alessandro Brighente +1
Software Bill of Materials (SBOM) provides new opportunities for automated vulnerability identification in software products. While the industry is adopting SBOM-based Vulnerabilit…
Cross-Service Token: Finding Attacks in 5G Core Networks
Anqi Chen, Riccardo Preatoni, Alessandro Brighente +2
5G marks a major departure from previous cellular architectures, by transitioning from a monolithic design of the core network to a Service-Based Architecture (SBA) where services…
SoK: Stealing Cars Since Remote Keyless Entry Introduction and How to Defend From It
Tommaso Bianchi, Alessandro Brighente, Mauro Conti +1
Remote Keyless Entry (RKE) systems have been the target of thieves since their introduction in automotive industry. Robberies targeting vehicles and their remote entry systems are…
Towards Robust Stability Prediction in Smart Grids: GAN-based Approach under Data Constraints and Adversarial Challenges
Emad Efatinasab, Alessandro Brighente, Denis Donadel +2
Smart grids are crucial for meeting rising energy demands driven by global population growth and urbanization. By integrating renewable energy sources, they enhance efficiency, rel…
ACRIC: Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check
Alessandro Lotto, Alessandro Brighente, Mauro Conti
The increasing integration of modern IT technologies into OT technologies and industrial systems is expanding the vulnerability surface of legacy infrastructures, which often rely…
The Impact of SBOM Generators on Vulnerability Assessment in Python: A Comparison and a Novel Approach
Giacomo Benedetti, Serena Cofano, Alessandro Brighente +1
The Software Supply Chain (SSC) security is a critical concern for both users and developers. Recent incidents, like the SolarWinds Orion compromise, proved the widespread impact r…
Obfuscated Location Disclosure for Remote ID Enabled Drones
Alessandro Brighente, Mauro Conti, Matthijs Schotsman +1
The Remote ID (RID) regulation recently introduced by several aviation authorities worldwide (including the US and EU) forces commercial drones to regularly (max. every second) bro…
Your Car Tells Me Where You Drove: A Novel Path Inference Attack via CAN Bus and OBD-II Data
Tommaso Bianchi, Alessandro Brighente, Mauro Conti +1
Despite its well-known security issues, the Controller Area Network (CAN) is still the main technology for in-vehicle communications. Attackers posing as diagnostic services or acc…
DynamiQS: Quantum Secure Authentication for Dynamic Charging of Electric Vehicles
Tommaso Bianchi, Alessandro Brighente, Mauro Conti
Dynamic Wireless Power Transfer (DWPT) is a novel technology that allows charging an electric vehicle while driving thanks to a dedicated road infrastructure. DWPT's capabilities i…
HoneyEVSE: An Honeypot to emulate Electric Vehicle Supply Equipments
Massimiliano Baldo, Tommaso Bianchi, Mauro Conti +2
To fight climate change, new "green" technology are emerging, most of them using electricity as a power source. Among the solutions, Electric Vehicles (EVs) represent a central ass…