6 papers
From Source Code to Network Profile: Automated and Traceable MUD Profile Generation for IoT Devices
Alessandro Lotto, Abdulla R. A. Almenhali, Savio Sciancalepore +2
The Manufacturer Usage Description (MUD) standard allows IoT manufacturers to define expected network behaviors in a MUD file. This file can be translated into enforceable access-c…
Safety-Aware Zero Trust Enforcement for IoT and Cyber-Physical Systems
Alessandro Lotto, Alessandro Brighente, Mauro Conti
Zero Trust (ZT) replaces the implicit trust of perimeter-based security with explicit, continuous, context-aware authorization. This shift is particularly relevant to IoT and cyber…
FIDEM: A Standard-Compliant Framework for Secure Binding of MUD Profiles to IoT Devices
Alessandro Lotto, Savio Sciancalepore, Alessandro Brighente +1
The Manufacturer Usage Description (MUD) enables enforcement of network restrictions for IoT devices based on their expected network traffic, as specified by manufacturers in a MUD…
QUACK! Making the (Rubber) Ducky Talk: A Systematic Study of Keystroke Dynamics for HID Injection Detection
Alessandro Lotto, Francesco Marchiori, Mauro Conti
Modern computing systems implicitly trust human input devices, allowing USB Human Interface Device (HID) emulators, such as the USB Rubber Ducky, to inject arbitrary keystrokes whi…
ACRIC: Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check
Alessandro Lotto, Alessandro Brighente, Mauro Conti
The increasing integration of modern IT technologies into OT technologies and industrial systems is expanding the vulnerability surface of legacy infrastructures, which often rely…
A Survey and Comparative Analysis of Security Properties of CAN Authentication Protocols
Alessandro Lotto, Francesco Marchiori, Alessandro Brighente +1
The large number of Electronic Control Units (ECUs) mounted on modern cars and their expansive communication capabilities create a substantial attack surface for potential exploita…