20 citations · 34 across the 7 of their papers we have counts for
4 papers · 1 filter
Structured but Fragile: On the Limits of LLMs in Cybersecurity Decision-Making
Pasquale Malacaria, Yunxiao Zhang
Large language models (LLMs) are increasingly used in cybersecurity workflows, yet it remains unclear whether they can perform structured security reasoning or merely rely on super…
Optimal security hardening over a probabilistic attack graph: a case study of an industrial control system using the CySecTool tool
Przemysław Buczkowski, Pasquale Malacaria, Chris Hankin +1
CySecTool is a tool that finds a cost-optimal security controls portfolio in a given budget for a probabilistic attack graph. A portfolio is a set of counter-measures, or controls,…
Quantifying Information Leak Vulnerabilities
Jonathan Heusser, Pasquale Malacaria
Leakage of confidential information represents a serious security risk. Despite a number of novel, theoretical advances, it has been unclear if and how quantitative approaches to m…
Studying Maximum Information Leakage Using Karush-Kuhn-Tucker Conditions
Han Chen, Pasquale Malacaria
When studying the information leakage in programs or protocols, a natural question arises: "what is the worst case scenario?". This problem of identifying the maximal leakage can b…