marco
publications
Menu:
Last update
Page last updated Mon Mar 3 08:43:54 PST 2008
- Symbolic String Verification: An Automata-based Approach 15th International SPIN Workshop on Model Checking of Software Los Angeles, CA, USA, August 2008 [PDF] [BibTeX] [Springer]
-
There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits
USENIX Workshop on Offensive Technologies (WOOT)
San Jose, CA, USA, July 2008
[PDF]
[BibTeX]
[USENIX]
In the press: MarkMonitor, Sunbelt Blog, honeyblog, InfosecEvents, InformationWeek, The Tech Herald, Infosecurity.US, SC Magazine, ZDNet, The Register, UCSB CS News - Are Your Votes Really Counted? Testing the Security of Real-world Electronic Voting Systems ACM International Symposium on Software Testing and Analysis (ISSTA) Seattle, WA, USA, July 2008 [PDF] [BibTeX] [ACM Press]
-
ClearShot: Eavesdropping on Keyboard Input from Video
IEEE Symposium on Security and Privacy
Oakland, CA, USA, May 2008
[PDF]
[BibTeX]
[IEEE Computer Society Press]
In the press: PCWorld, Geeks are sexy, IntelFusion - Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications IEEE Symposium on Security and Privacy Oakland, CA, USA, May 2008 [PDF] [BibTeX] [IEEE Computer Society Press]
- Multi-Module Vulnerability Analysis of Web-based Applications 14th ACM Conference on Computer and Communications Security (CCS) Alexandria, VA, USA, October 2007 [PDF] [BibTeX] [ACM Press]
- Vulnerability Analysis of Web-Based Applications L. Baresi and E. Di Nitto (Eds.), Test and Analysis of Web Services September 2007 [PDF] [BibTeX] [Springer]
- Swaddler: An Approach for the Anomaly-based Detection of State Violations in Web Applications 10th International Symposium on Recent Advances in Intrusion Detection (RAID) Gold Coast, Queensland, Australia, September 2007 [PDF] [BibTeX] [Springer]
- Static Detection of Vulnerabilities in x86 Executables 22nd Annual Computer Security Applications Conference (ACSAC) Miami, FL, USA, December 2006 [PDF] [BibTeX] [IEEE Computer Society Press]
- SNOOZE: toward a Stateful NetwOrk prOtocol fuzZEr 9th Information Security Conference (ISC) Samos, Greece, August 2006 [PDF] [BibTeX] [Springer]
- LinSTAT: An Intrusion Detection System for Linux Laurea thesis, Università di Bologna, 2003 (first chapter in Italian, others in English) [PDF] [slides (in Italian)]
Before defecting to the field of security, I delved in the problem of emergent semantics at ITC-irst. Some of my work appears in the articles listed below.
- Language Games: Solving the Vocabulary Problem in Multi-Case-Base Reasoning Proceedings of the 6th International Conference on Case-Based Reasoning (ICCBR), pp. 35–49, August 23–26, 2005, Chicago, USA [abstract] [PDF] [BibTeX]
- Language Games: Learning Shared Concepts among Distributed Information Agents Proceedings of the 1st IJCAI workshop on Multi-Agent Information Retrieval and Recommender Systems, pp. 11–17, July 31, 2005, Edinburgh, Scotland [abstract] [PDF]
- Learning Contextualized Weblog Topics Proceedings of the 2nd WWW workshop on the Weblogging Ecosystem: Aggregation, Analysis and Dynamics, May 10, 2005, Chiba, Japan [abstract] [PDF]
- Shared Lexicon for Distributed Annotations on the Web Proceedings of the 14th International World Wide Web Conference (WWW), pp. 207–214, May 10–14, 2005, Chiba, Japan [abstract] [PDF] [BibTeX]
- A Service Oriented Architecture for Advertising Games (short paper) Proceedings of the 2nd International Conference on Service Oriented Computing (ICSOC), November 15–18, 2004, New York City, NY, USA [abstract] [PDF] [slides] [BibTeX]