50 citations · 110 across the 8 of their papers we have counts for
5 papers · 1 filter
Why Charles Can Pen-test: an Evolutionary Approach to Vulnerability Testing
Gabriele Costa, Andrea Valenza
Discovering vulnerabilities in applications of real-world complexity is a daunting task: a vulnerability may affect a single line of code, and yet it compromises the security of th…
Private-Yet-Verifiable Contact Tracing
Andrea Canidio, Gabriele Costa, Letterio Galletta
We propose PrYVeCT, a private-yet-verifiable contact tracing system. PrYVeCT works also as an authorization framework allowing for the definition of fine-grained policies, which a…
Never Trust Your Victim: Weaponizing Vulnerabilities in Security Scanners
Andrea Valenza, Gabriele Costa, Alessandro Armando
The first step of every attack is reconnaissance, i.e., to acquire information about the target. A common belief is that there is almost no risk in scanning a target from a remote…
WAF-A-MoLE: Evading Web Application Firewalls through Adversarial Machine Learning
Luca Demetrio, Andrea Valenza, Gabriele Costa +1
Web Application Firewalls are widely used in production environments to mitigate security threats like SQL injections. Many industrial products rely on signature-based techniques,…
Automating the Generation of Cyber Range Virtual Scenarios with VSDL
Gabriele Costa, Enrico Russo, Alessandro Armando
A cyber range is an environment used for training security experts and testing attack and defence tools and procedures. Usually, a cyber range simulates one or more critical infras…