52 citations · 169 across the 14 of their papers we have counts for
12 papers · 1 filter
TeleGapper: On the (un)reliability of Privacy Policies in Telegram Mini apps
Luca Ferrari, Mariano Ceccato, Luca Verderame
Telegram Mini Apps are Web applications embedded within the Telegram client, forming an ecosystem of third-party services within one of the world's most widely used messaging platf…
PolicyGapper: Automated Detection of Inconsistencies Between Google Play Data Safety Sections and Privacy Policies Using LLMs
Luca Ferrari, Billel Habbati, Meriem Guerar +2
Mobile application developers are required to disclose how they collect, use, and share user data in compliance with privacy regulations. To support transparency, major app marketp…
Automatic Security Assessment of GitHub Actions Workflows
Giacomo Benedetti, Luca Verderame, Alessio Merlo
The demand for quick and reliable DevOps operations pushed distributors of repository platforms to implement workflows. Workflows allow automating code management operations direct…
PARIOT: Anti-Repackaging for IoT Firmware Integrity
Luca Verderame, Antonio Ruggia, Alessio Merlo
IoT repackaging refers to an attack devoted to tampering with a legitimate firmware package by modifying its content (e.g., injecting some malicious code) and re-distributing it in…
Understanding Fuchsia Security
Francesco Pagano, Luca Verderame, Alessio Merlo
Fuchsia is a new open-source operating system created at Google that is currently under active development. The core architectural principles guiding the design and development of…
You can't always get what you want: towards user-controlled privacy on Android
Davide Caputo, Francesco Pagano, Giovanni Bottino +2
Mobile applications (hereafter, apps) collect a plethora of information regarding the user behavior and his device through third-party analytics libraries. However, the collection…
Gotta CAPTCHA 'Em All: A Survey of Twenty years of the Human-or-Computer Dilemma
Meriem Guerar, Luca Verderame, Mauro Migliardi +2
A recent study has found that malicious bots generated nearly a quarter of overall website traffic in 2019 [100]. These malicious bots perform activities such as price and content…
Deep Adversarial Learning on Google Home devices
Andrea Ranieri, Davide Caputo, Luca Verderame +2
Smart speakers and voice-based virtual assistants are core components for the success of the IoT paradigm. Unfortunately, they are vulnerable to various privacy threats exploiting…
ARMAND: Anti-Repackaging through Multi-pattern Anti-tampering based on Native Detection
Alessio Merlo, Antonio Ruggia, Luigi Sciolla +1
App repackaging refers to the practice of customizing an existing mobile app and redistributing it in the wild to fool the final user into installing the repackaged app instead of…
You Shall not Repackage! Demystifying Anti-Repackaging on Android
Alessio Merlo, Antonio Ruggia, Luigi Sciolla +1
App repackaging refers to the practice of customizing an existing mobile app and redistributing it in the wild. In this way, the attacker aims to force some mobile users to install…
On the (Un)Reliability of Privacy Policies in Android Apps
Luca Verderame, Davide Caputo, Andrea Romdhana +1
Access to privacy-sensitive information on Android is a growing concern in the mobile community. Albeit Google Play recently introduced some privacy guidelines, it is still an open…
Security Issues in the Android Cross-Layer Architecture
Alessandro Armando, Alessio Merlo, Luca Verderame
The security of Android has been recently challenged by the discovery of a number of vulnerabilities involving different layers of the Android stack. We argue that such vulnerabili…