ITASEC 2024
Italian Conference on Cyber Security 2024

Table of Contents

• Preface
  Summary: There were 108 papers submitted for peer-review to this conference. Out of these, 45 papers were accepted for this volume.

• Towards K-Anonymous Payments in Ethereum
  Francesco Buccafurri, Vincenzo De Angelis, Sara Lazzaro, Giorgia Sigilli
• ShiftyLoader: Syscall-free Reflective Code Injection in the Linux Operating System
  Michele Salvatori, Giorgio Bernardinetti, Francesco Quaglia, Giuseppe Bianchi
• Cybersecurity Assessment of Digital Twin in Smart Grids
  Mulualem B. Anley, Otuekong Ekpo, T. Milinda H. Gedara
• Predicting Source Code Vulnerabilities Using Deep Learning: A Fair Comparison on Real Data
  Vincenzo Carletti, Pasquale Foggia, Alessia Saggese, Mario Vento
• SecuriDN: a customizable GUI generating cybersecurity models for DER control architectures
  Davide Cerotti, Daniele Codetta-Raiteri, Giovanna Dondossola, Lavinia Egidi, Giuliana Franceschinis, Luigi Portinale, Roberta Terruggia, Davide Savarro
• Detecting Zero-Day Attacks under Concept Drift: An Online Unsupervised Threat Detection System
  Alessandra De Paola, Salvatore Drago, Pierluca Ferraro, Giuseppe Lo Re
• AI Regulatory Sandboxes between the AI Act and the GDPR: the role of Data Protection as a Corporate Social
  Davide Baldini, Kate Francis
• A Black-box Adversarial Attack on Fake News Detection Systems
  Farwa Batool, Federico Canino, Federico Concone, Giuseppe Lo Re, Marco Morana
• ECC’s Achilles’ Heel: Unveiling Weak Keys in Standardized Curves
  Enrico Talotti, Matteo Paier, Marino Miculan
• Benchmarking Virtualized Page Permission for Malware Detection: a Web Server Case Study
  Pasquale Caporaso, Giuseppe Bianchi, Francesco Quaglia
• The Case for Ultra High Speed Portable Network Security Filters
  Alessandro Rivitti, Angelo Tulumello, Giuseppe Bianchi
• Private law perspectives of cybersecurity
  Federica Casarosa, Giovanni Comandé
• Security Risks and Best Practices of MLOps: A Multivocal Literature Review
  Fabio Calefato, Filippo Lanubile, Luigi Quaranta
• Design of a Hardening Module for Automatically Securing Containers
  Luca Verderame, Luca Caviglione
• In Plain Sight: A Pragmatic Exploration of the Medical Landscape (In)security
  Lorenzo Bracciale, Pierpaolo Loreti, Emanuele Raso, Giuseppe Bianchi
• Hardening Machine Learning based Network Intrusion Detection Systems with synthetic netflows
  Andrea Venturi, Dimitri Gall, Dario Stabili, Mirco Marchetti
• Timing side-channel attacks on USB devices using eBPF
  Gianmarco Lusvardi, Luca Ferretti, Michele Iannucci, Mauro Andreolini
• OpenSatRange: An open cyber range for operators and users of satellite communication networks
  Fabio Patrone, Pierpaolo Loreti, Luca Fiscariello, Lorenzo Bracciale, Alessandro Amici, Andrea Detti, Cesare Roseti, Michele Luglio, Francesco Zampognaro, Giuseppe Bianchi, Mario Marchese
• Enhancing Fraud Detection through Cascading Machine Learning Models and Clustering Techniques
  Giuseppe Fenza, Salvatore Froncillo, Claudio Stanzione
• Hyperproperties for Safe and Secure RFID Systems
  Ludovico Fusco, Alessandro Aldini
• VoWiFi Security: An Exploration of Non-3GPP Untrusted Access via Public ePDG URLs
  Francesco Zampognaro, Domenico Verde, Giuseppe Bianchi
• Feature extraction for anomaly detection in industrial control systems
  Silvio Russo, Claudio Zanasi, Isabella Marasco
• On attacks (dis)similarities to test adversarial defense: can we reduce the attack set?
  Tommaso Puccetti, Tommaso Zoppi, Andrea Ceccarelli
• Smart Critical Infrastructures Security management and governance: Implementation of Cyber Resilience KPIs for Decentralized Energy Asset
  Ali Aghazadeh Ardebili, Cristian Martella, Angelo Martella, Alessandro Lazari, Antonella Longo, Antonio Ficarella
• Toward dynamic epistemic verification of zero-knowledge protocols
  Gabriele Costa, Cosimo Perini Brogi
• The role of disinformation, propaganda and active measures in cyber warfare. noname(057)16 travels to Italy
  Arturo di Corinto
• Ask the right queries: Improving search engine retrieval of vulnerable internet-connected devices through interactive query reformulation
  Andrea Bernardini, Claudio Carpineto, Simone Angelini, Giovanna Dondossola, Roberta Terruggia
• Standard-Based Remote Attestation: The Veraison Project
  Lorenzo Ferro, Antonio Lioy
• Unveiling Online Conspiracy Theorists: a Text-Based Approach and Characterization
  Alessandra Recordare, Guglielmo Cola, Tiziano Fagni, Maurizio Tesconi
• Building call graph of WebAssembly programs via abstract semantics
  Mattia Paccamiccio, Franco Raimondi, Michele Loreti
• 2in1: A Bimodal Behavioral Biometric-based User Authentication Scheme for Smartphones
  Attaullah Buriro Buriro, Flaminia Luccio
• Multilevel Database Decomposition Framework
  Fabrizio Baiardi, Cosimo Comella, Vincenzo Sammartino
• Supporting Criminal Investigations on the Blockchain: A Temporal Logic-based Approach
  Marco Blanchini, Michele Cerreta, Davide Di Monda, Matteo Fabbri, Mario Raciti, Hamza Sajjad Ahmad, Gabriele Costa
• A Preliminary Study on the Creation of a Covert Channel with HTTP Headers
  Stefano Bistarelli, Michele Ceccarelli, Chiara Luchini, Ivan Mercanti, Francesco Santini
• IKE-less IPsec: Enhancing Security for IoT Device Networks
  Flavio Ciravegna, Giacomo Bruno, Antonio Lioy
• Securing the Internet of Medical Things using PUF-based SSI Authentication
  Mario Barbareschi, Biagio Boi, Franco Cirillo, Marco De Santis, Christian Esposito
• Netstaldi: A Modular Distributed Architecture for Incremental Network Discovery
  Matteo Paier, Mattia Pizzolitto, Gian Luca Foresti, Marino Miculan
• Exploiting Data Spaces to Enable Privacy Preserving Data Exchange in the Energy Supply Chain
  Luigi Coppolino, Alessandro De Crecchio, Roberto Nardone, Alfredo Petruolo, Luigi Romano, Federica Uccello
• Inferring Political Leaning on X (Twitter): A Zero-Shot Approach in an Italian Scenario
  Caterina Senette, Margherita Gambini, Tiziano Fagni, Victoria Popa, Maurizio Tesconi
• Implementing and testing RollJam on Software-Defined Radios
  Dario Stabili, Filip Valgimigli, Tobia Bocchi, Filippo Veronesi, Mirco Marchetti
• David versus Goliath: Can Machine Learning Detect LLM-Generated Text? A Case Study in the Detection of Phishing Emails
  Francesco Greco, Giuseppe Desolda, Andrea Esposito, Alessandro Carelli
• Evaluating trainees in large cyber exercises
  Andrea Artioli, Mauro Andreolini, Luca Ferretti, Mirco Marchetti
• Understanding how users choose passwords: analysis and best practices
  Alessia Michela Di Campi, Flaminia Luccio
• A Privacy-Preserving Approach for Vulnerability Scanning Detection
  Leonardo Regano, Daniele Canavese, Luca Mannella
• Is the Road to Hell Paved with Good Intentions? A Criminological and Criminal Law Analysis of Prospective Regulation for Ethical Hacking in Italy and the EU
  Gaia Fiorinelli, Maria Vittoria Zucca