42 citations · 47 across the 14 of their papers we have counts for
14 papers
Merging Cyber Threat Intelligence Through Retrieval-Augmented Generation and Small Language Models for Rich Threat Representation
Nicola Deidda, Leonardo Regano, Alessandro Sanna +2
Modern cybersecurity operations rely on CTI collected from heterogeneous sources, including semi-structured threat representations, IoCs, and narrative technical reports. However,…
SemVul: Semantic-Enhanced Graph Neural Networks for Code Property Graph-based Vulnerability Detection
Younas Affan, Leonardo Regano, Giorgio Giacinto
Vulnerabilities in source code are often the root cause of cyberattacks worldwide, as attackers exploit weaknesses in software to gain unauthorized access, steal data, or disrupt s…
The Sound of Malware: A Memory Forensics Approach for Android Malware Analysis via Audio Signals
Silvia Lucia Sanna, Massimo Palozzi, Leonardo Regano +2
Android malware analysis is currently facing increasing challenges in achieving robust classification and detecting stealth attacks. Modern threats employ advanced evasion strategi…
Obfuscating Code Vulnerabilities against Static Analysis in JavaScript Code
Francesco Pagano, Lorenzo Pisu, Leonardo Regano +3
Code obfuscation is widely adopted in modern software development to protect intellectual property and hinder reverse engineering, but it also provides attackers with a powerful me…
Statistical Effort Modelling of Game Resource Localisation Attacks
Alessandro Sanna, Waldo Verstraete, Leonardo Regano +2
Evidence on the effectiveness of Man-At-The-End (MATE) software protections, such as code obfuscation, has mainly come from limited empirical research. Recently, however, an automa…
AndroWasm: an Empirical Study on Android Malware Obfuscation through WebAssembly
Diego Soi, Silvia Lucia Sanna, Lorenzo Pisu +2
In recent years, stealthy Android malware has increasingly adopted sophisticated techniques to bypass automatic detection mechanisms and harden manual analysis. Adversaries typical…
Empirical Assessment of the Code Comprehension Effort Needed to Attack Programs Protected with Obfuscation
Leonardo Regano, Daniele Canavese, Cataldo Basile +1
Evaluating the effectiveness of software protection is crucial for selecting the most effective methods to safeguard assets within software applications. Obfuscation involves techn…
Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence
Silvia Lucia Sanna, Leonardo Regano, Davide Maiorca +1
According to a recent EUROPOL report, cybercrime is still recurrent in Europe, and different activities and countermeasures must be taken to limit, prevent, detect, analyze, and fi…
Automatic Selection of Protections to Mitigate Risks Against Software Applications
Daniele Canavese, Leonardo Regano, Bjorn De Sutter +1
This paper introduces a novel approach for the automated selection of software protections to mitigate MATE risks against critical assets within software applications. We formalize…
Exploring the Robustness of AI-Driven Tools in Digital Forensics: A Preliminary Study
Silvia Lucia Sanna, Leonardo Regano, Davide Maiorca +1
Nowadays, many tools are used to facilitate forensic tasks about data extraction and data analysis. In particular, some tools leverage Artificial Intelligence (AI) to automatically…
Design, Implementation, and Automation of a Risk Management Approach for Man-at-the-End Software Protection
Cataldo Basile, Bjorn De Sutter, Daniele Canavese +2
The last years have seen an increase in Man-at-the-End (MATE) attacks against software applications, both in number and severity. However, software protection, which aims at mitiga…
Man-at-the-End Software Protection as a Risk Analysis Process
Daniele Canavese, Leonardo Regano, Cataldo Basile +2
The last years have seen an increase of Man-at-the-End (MATE) attacks against software applications, both in number and severity. However, MATE software protections are dominated b…
Assessment of Source Code Obfuscation Techniques
Alessio Viticchié, Leonardo Regano, Marco Torchiano +4
Obfuscation techniques are a general category of software protections widely adopted to prevent malicious tampering of the code by making applications more difficult to understand…
Ethical issues of ISPs in the modern web
Leonardo Regano, Ali Safari Khatouni, Martino Trevisan +1
In recent years, ethical issues in the networking field are getting moreimportant. In particular, there is a consistent debate about how Internet Service Providers (ISPs) should co…