5 citations · 11 across the 9 of their papers we have counts for
6 papers · 1 filter
FuzzBox: Blending Fuzzing into Emulation for Binary-Only Embedded Targets
Carmine Cesarano, Roberto Natella
Coverage-guided fuzzing has been widely applied to address zero-day vulnerabilities in general-purpose software and operating systems. This approach relies on instrumenting the tar…
GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
Carmine Cesarano, Martin Monperrus, Roberto Natella
Modern software supply chain attacks consist of introducing new, malicious capabilities into trusted third-party software components, in order to propagate to a victim through a pa…
Security-by-Design at the Telco Edge with OSS: Challenges and Lessons Learned
Carmine Cesarano, Alessio Foggia, Gianluca Roscigno +2
This paper presents our experience, in the context of an industrial R&D project, on securing GENIO, a platform for edge computing on Passive Optical Network (PON) infrastructures,…
KubeFence: Security Hardening of the Kubernetes Attack Surface
Carmine Cesarano, Roberto Natella
Kubernetes (K8s) is widely used to orchestrate containerized applications, including critical services in domains such as finance, healthcare, and government. However, its extensiv…
GoSurf: Identifying Software Supply Chain Attack Vectors in Go
Carmine Cesarano, Vivi Andersson, Roberto Natella +1
In Go, the widespread adoption of open-source software has led to a flourishing ecosystem of third-party dependencies, which are often integrated into critical systems. However, th…
Securing an Application Layer Gateway: An Industrial Case Study
Carmine Cesarano, Roberto Natella
Application Layer Gateways (ALGs) play a crucial role in securing critical systems, including railways, industrial automation, and defense applications, by segmenting networks at d…