28 citations · 73 across the 21 of their papers we have counts for
24 papers
Enforcement of In-Kernel Stateful Security Policies via eBPF
Letterio Galletta
Many attacks against workloads running on multi-tenant systems are multi-step and history-dependent: sequences of innocuous operations whose malicious nature emerges only over an e…
Checking Information Flow in Cloud-based IoT Access Control Policies (Extended Version)
Lorenzo Ceragioli, Letterio Galletta, Edoardo Lunati
Many cloud providers for IoT technologies offer access control mechanisms whose proper configuration is critical for security. However, verifying permissions in isolation is insuff…
A Unified Framework and Comparative Study of Decentralized Finance Derivatives Protocols
Luca Pennella, Pietro Saggese, Fabio Pinelli +1
Decentralized Finance (DeFi) applications introduce novel financial instruments replicating and extending traditional ones through blockchain-based smart contracts. Among these app…
Policies for Fair Exchanges of Resources
Lorenzo Ceragioli, Pierpaolo Degano, Letterio Galletta +1
People increasingly use digital platforms to exchange resources in accordance with some policies stating what resources users offer and what they require in return. In this paper,…
A Logic for Policy Based Resource Exchanges in Multiagent Systems
Lorenzo Ceragioli, Pierpaolo Degano, Letterio Galletta +1
In multiagent systems autonomous agents interact with each other to achieve individual and collective goals. Typical interactions concern negotiation and agreement on resource exch…
Explainable Ponzi Schemes Detection on Ethereum
Letterio Galletta, Fabio Pinelli
Blockchain technology has been successfully exploited for deploying new economic applications. However, it has started arousing the interest of malicious actors who deliver scams t…
Automatic Fair Exchanges
Lorenzo Ceragioli, Letterio Galletta, Pierpaolo Degano +1
In a decentralized environment, exchanging resources requires users to bargain until an agreement is found. Moreover, human agreements involve a combination of collaborative and se…
IFCIL: An Information Flow Configuration Language for SELinux (Extended Version)
Lorenzo Ceragioli, Letterio Galletta, Pierpaolo Degano +1
Security Enhanced Linux (SELinux) is a security architecture for Linux implementing mandatory access control. It has been used in numerous security-critical contexts ranging from s…
A theory of transaction parallelism in blockchains
Massimo Bartoletti, Letterio Galletta, Maurizio Murgia
Decentralized blockchain platforms have enabled the secure exchange of crypto-assets without the intermediation of trusted authorities. To this purpose, these platforms rely on a p…
Private-Yet-Verifiable Contact Tracing
Andrea Canidio, Gabriele Costa, Letterio Galletta
We propose PrYVeCT, a private-yet-verifiable contact tracing system. PrYVeCT works also as an authorization framework allowing for the definition of fine-grained policies, which a…
A type language for message passing component-based systems
Zorica Savanović, Letterio Galletta, Hugo Torres Vieira
Component-based development is challenging in a distributed setting, for starters considering programming a task may involve the assembly of loosely-coupled remote components. In o…
Control-flow Flattening Preserves the Constant-Time Policy (Extended Version)
Matteo Busi, Pierpaolo Degano, Letterio Galletta
Obfuscating compilers protect a software by obscuring its meaning and impeding the reconstruction of its original source code. The typical concern when defining such compilers is t…
Provably Secure Isolation for Interruptible Enclaved Execution on Small Microprocessors: Extended Version
Matteo Busi, Job Noorman, Jo Van Bulck +4
Computer systems often provide hardware support for isolation mechanisms like privilege levels, virtual memory, or enclaved execution. Over the past years, several successful softw…
A minimal core calculus for Solidity contracts
Massimo Bartoletti, Letterio Galletta, Maurizio Murgia
The Ethereum platform supports the decentralized execution of smart contracts, i.e. computer programs that transfer digital assets between users. The most common language used to d…
A true concurrent model of smart contracts executions
Massimo Bartoletti, Letterio Galletta, Maurizio Murgia
The development of blockchain technologies has enabled the trustless execution of so-called smart contracts, i.e. programs that regulate the exchange of assets (e.g., cryptocurrenc…
Translation Validation for Security Properties
Matteo Busi, Pierpaolo Degano, Letterio Galletta
Secure compilation aims to build compilation chains that preserve security properties when translating programs from a source to a target language. Recent research led to the defin…
Using Standard Typing Algorithms Incrementally
Matteo Busi, Pierpaolo Degano, Letterio Galletta
Modern languages are equipped with static type checking/inference that helps programmers to keep a clean programming style and to reduce errors. However, the ever-growing size of p…
Tool Supported Analysis of IoT
Chiara Bodei, Pierpaolo Degano, Letterio Galletta +1
The design of IoT systems could benefit from the combination of two different analyses. We perform a first analysis to approximate how data flow across the system components, while…
Tracing where IoT data are collected and aggregated
Chiara Bodei, Pierpaolo Degano, Gian-Luigi Ferrari +1
The Internet of Things (IoT) offers the infrastructure of the information society. It hosts smart objects that automatically collect and exchange data of various kinds, directly ga…
A Step Towards Checking Security in IoT
Chiara Bodei, Pierpaolo Degano, Gian-Luigi Ferrari +1
The Internet of Things (IoT) is smartifying our everyday life. Our starting point is IoT-LySa, a calculus for describing IoT systems, and its static analysis, which will be present…
Event-driven Adaptation in COP
Pierpaolo Degano, Gian-Luigi Ferrari, Letterio Galletta
Context-Oriented Programming languages provide us with primitive constructs to adapt program behaviour depending on the evolution of their operational environment, namely the conte…
A Context-Oriented Extension of F#
Andrea Canciani, Pierpaolo Degano, Gian-Luigi Ferrari +1
Context-Oriented programming languages provide us with primitive constructs to adapt program behaviour depending on the evolution of their operational environment, namely the conte…
Typing Context-Dependent Behavioural Variation
Pierpaolo Degano, Gian-Luigi Ferrari, Letterio Galletta +1
Context Oriented Programming (COP) concerns the ability of programs to adapt to changes in their running environment. A number of programming languages endowed with COP constructs…
An Abstract Semantics for Inference of Types and Effects in a Multi-Tier Web Language
Letterio Galletta, Giorgio Levi
Types-and-effects are type systems, which allow one to express general semantic properties and to statically reason about program's execution. They have been widely exploited to sp…