ITASEC & SERICS 2025
Joint National Conference on Cybersecurity 2025

Table of Contents

• Preface
  Summary: There were 144 papers submitted for peer-review to this conference. Out of these, 70 papers were accepted for this volume.

• A Classification of Malware Sandboxes and Their Architectures
  Stefano Bistarelli, Emanuele Burberi, Francesco Santini
• Adversarial Training to Improve Accuracy and Robustness of a Windows PE Malware Detection Model
  Luca Lobascio, Giuseppina Andresini, Annalisa Appice, Donato Malerba
• Towards the Responsible/Trustworthy AI in Multi-Domain Operations for Cyber Social Security: A Black-Box AML Case Study in the CAN Bus Frame Detection Task
  Vita Santa Barletta, Danilo Caivano, Christian Catalano, Samuele del Vescovo, Michele Scalera
• Improving MQTT Security Through the Generation of Malicious Test Cases
  Camilla Cespi Polisiani, Maria Carla Calzarossa, Marco Zuppelli, Luca Caviglione, Massimo Guarascio
• Undercover Disruption: Stealth Jamming Attacks on 5G Synchronization Stages
  Rosolino Alaimo, Silvia Schilleci, Alessandra Dino, Stefano Mangione, Ilenia Tinnirello, Domenico Garlisi, Roberto Corallo
• Application of Quantum Resistant Cryptography to Smart Grid deployments
  David Domingo Martín, Rodrigo Martín Sánchez-Ledesma, Marta Irene García Cid
• Advancing Ethical Hacking with AI: A Linux-Based Experimental Study
  Haitham Al-Sinani, Nabil Sahli, Chris Mitchell, Mohamed Al-Siyabi
• Attack Originality Detector Using Machine Learning
  Charlotte Millan, Lotfi Chaari, Amel Aissaoui, Eric Gilbert
• On the Feasibility of Android Stegomalware: A Detection Study
  Diego Soi, Silvia Lucia Sanna, Angelica Liguori, Marco Zuppelli, Leonardo Regano, Davide Maiorca, Luca Caviglione, Giuseppe Manco, Giorgio Giacinto
• Securing Telephone Communication with Trusted Services
  Francesco Buccafurri, Vincenzo De Angelis, Sara Lazzaro, Carmen Licciardi
• A GPU Covert Channel Based on Workload Manipulation Through the CuPy Library
  Gianluca De Lucia, Alessio Merlo, Luca Caviglione
• Revocable Anonymous Credentials from Attribute-Based Encryption
  Giovanni Bartolomeo
• HDDroid: Federated Hyperdimensional Computing for Mobile Malware Detection
  Andrea Augello, Alessandra De Paola, Giuseppe Lo Re, Antoine Menager
• Guessing As A Service: Large Language Models Are Not Yet Ready For Vulnerability Detection
  Francesco Panebianco, Andrea Isgrò, Stefano Longari, Stefano Zanero, Michele Carminati
• How effective are Large Language Models (LLMs) at inferring people’s personality based on texts they authored?
  Victoria Popa, Guglielmo Cola, Caterina Senette, Maurizio Tesconi
• Cross-chain Smart Contracts and dApps Verification by Static Analysis: Limits and Challenges
  Luca Olivieri, Aradhita Mukherjee, Nabendu Chaki, Agostino Cortesi
• Cognitive Filter Bubble: Investigating Bias and Neutrality Vulnerabilities of LLMs in Sensitive Contexts
  Maria Di Gisi, Giuseppe Fenza, Mariacristina Gallo, Vincenzo Loia, Claudio Stanzione
• Preventing Disinformation Spread Across Network Clusters by Strategic Edge Deletions: a Lagrangian Heuristic
  Martina Cerulli, Manlio Gaudioso, Domenico Serra, Carmine Sorgente
• Multi-Domain Fake News Detection Exploiting Ensemble Learning Techniques
  Farwa Batool, Giuseppe Lo Re, Marco Morana, Mario Tortorici
• Multi-LLM Agents Architecture for Claim Verification
  Giuseppe Fenza, Domenico Furno, Vincenzo Loia, Pio Pasquale Trotta
• Key challenges in LoRaWAN-based Edge-Cloud infrastructures for security-sensitive smart cities applications
  Maurizio Giacobbe, Ida Falco, Sarah Zanafi, Carmine Colarusso, Jiregna Abdissa Olana, Antonio Puliafito, Eugenio Zimeo
• VMORPH: A Virtualization/Metamorphic Framework for Binary Obfuscation and Intellectual Property Protection
  Pierciro Caliandro, Matteo Ciccaglione, Andrea Pepe, Giuseppe Bianchi, Alessandro Pellegrini
• CANPak: An Intrusion Detection System against Error Frame Attacks for Controller Area Network
  Sikandar Mehmood Abbasi, Stefano Longari
• A Deep Learning Approach for False Data Injection Attacks Detection in Smart Water Infrastructure
  Davide Giannubilo, Tommaso Giorgeschi, Michele Carminati, Stefano Zanero, Stefano Longari
• Micro-Mobility Security: A Holistic Approach via Mobile App Analysis
  Marco Balossini, Michele Carminati, Stefano Zanero, Stefano Longari
• On Policies for Bartering Access to Resources
  Lorenzo Bettini, Rosario Pugliese, Francesco Tiezzi
• Analysis and Study of a Cybersecurity Maturity Assessment System for SMEs
  Stefano Bistarelli, Sara Geoli, Chiara Luchini, Ivan Mercanti
• On the Usage of ChatGPT for Integrating CAPEC Attacks into ADVISE Meta Ontology
  Marzieh Kordi, Francesco Mariotti, Paolo Lollini, Roberto Magrini, Andrea Bondavalli
• BinSAFE: Extending Functions Embeddings to Entire Binaries
  Gianluca Capozzi, Giordano Laurenzi, Marco Mormando, Carmine Gianni, Gianluca Marcilli, Giuseppe Antonio Di Luna, Leonardo Querzoni
• Enhancing Training Time for Sustainability of Intrusion Detection Systems based on Machine Learning
  Isabella Marasco, Karina Chichifoi, Silvio Russo, Claudio Zanasi
• Digital Authoritarianism: ICT-enabled Repression Across Regime Types
  Martina Lucaccini
• Finding Vulnerabilities in Solidity Smart Contracts with In-Context Learning
  Badaruddin Chachar, Marc Cavazza, Andrea Bracciali, Pietro Ferrara, Agostino Cortesi
• Exposing the Cracks: A Case Study on the Quality of Public Linux Malware Data Sets
  Alessandro Sanna, Daniele Canavese, Leonardo Regano, Davide Maiorca, Giorgio Giacinto
• Challenging Antivirus against Elusive Android Malware over Time
  Danilo Dell'Orco, Lorenzo Valeriani, Giuseppe Bianchi, Alessandro Pellegrini, Alessio Merlo
• Advancing Internet-Connected Devices Posture Analysis with a Meta-Search Engine: A Case Study in Energy Systems
  Andrea Bernardini, Mario Lezoche, Simone Angelini, Giovanna Dondossola, Roberta Terruggia
• A Stackelberg Approach to Federated Learning for Malware Detection
  Andrea Augello, Alessandra De Paola, Giuseppe Lo Re, Marena Jestin
• Forgotten & Reclaimed: Detecting and Preventing Subdomain Takeover in the Italian Medical Landscape
  Lorenzo Bracciale, Matteo Coni, Pierpaolo Loreti, Emanuele Raso, Giuseppe Bianchi
• Evaluating SCAS Tests in Closed Source 5G Core Network
  Leonardo Sagratella, Andrea Bernardini, Francesco D'Alterio, Marina Settembre, Roberta Terruggia
• Towards Cyber Resilience against APTs
  Alessandro Gaudenzi, Lorenzo Nodari, Rodolfo Valentim, Danilo Giordano, Idilio Drago, Alessandra Russo, Federico Cerutti
• Stateful Handling of Critical Events: Leveraging eBPF to Realize eXtended Finite State Machine Abstractions
  Arianna Quinci, Giacomo Belocchi, Francesco Quaglia, Giuseppe Bianchi
• Cybersecurity Education Showdown: A Comparative Analysis of K-12 Education Systems in the United States, the European Union and China
  Berenice Fernandez Nieto, Daisy Romanini, Yuhui Zhu
• Managing Concept Drift in Online Intrusion Detection Systems with Active Learning
  Francesco Camarda, Alessandra De Paola, Salvatore Drago, Pierluca Ferraro, Giuseppe Lo Re
• The Internet of Quantum Things (IoQT) – A New Frontier in Quantum Emulation and Simulation
  Ioannis Kefaloukos, Nikolay Tcholtchev, Michail-Alexandros Kourtis, Giorgos Oikonomakis, Emmanouil Eleftherios Rompogiannakis, Evangelos Markakis
• Leveraging Pre-trained LLMs for GDPR Compliance in Online Privacy Policies
  Giovanni Ciaramella, Luca Petrillo, Margaret Varilek, Francesco Mercaldo, Giovanni Comandé, Fabio Martinelli
• Real-Time Anomaly Detection in Docker Containers: A Continuous Learning Approach Using SF-SOINN
  Dennis Glenn Ejeh, Gian Luca Foresti, Marino Miculan, Axel De Nardin
• VFSMon: an Innovative Reference Monitor in Linux
  Edoardo Manenti, Pasquale Caporaso, Giuseppe Bianchi, Francesco Quaglia
• 5G Security Assurance: Lessons Learned from 3GPP SCAS Tests on Virtualized Network Architectures
  Francesco Mancini, Lorenzo Cannella, Giorgia Messina, Marco Centenaro, Ivan Di Pietro, Alessandro Greco, Samuela Persia, Francesca Cuomo, Giuseppe Bianchi
• A Comparative Analysis of Datasets for Intrusion Detection in Software-Defined Networks
  Francesco Di Gennaro, Alessandro Cucchiarelli, Christian Morbidoni, Luca Spalazzi
• OWSM: Empowering Rego for Stateful Access Control
  Massimiliano Baldo, Fabio Ionut Ion, Marino Miculan, Matteo Paier, Vincenzo Riccio
• Evaluating Explainability of Graph Neural Networks for Network Intrusion Detection with Structural Attacks
  Dimitri Galli, Andrea Venturi, Isabella Marasco, Mirco Marchetti
• Optimizing 5G Protocol Fuzzing: Structure-Aware Techniques and Feedback Integration
  Sara Da Canal, Francesco Mancini, Luca Mastrobattista, Giuseppe Bianchi
• The Security of Quantum Computing in 6G: from Technical Perspectives to Ethical Implications
  Luca Barbieri, Abdelkrim Menina, Riccardo Bassoli, Frank H.P. Fitzek
• CrawLLMentor: An LLM-Powered Tool to Assist Pen Testers in Identifying Business Logic Vulnerabilities
  Nicolò Romandini, Luca Capacci, Rebecca Montanari
• Children and Artificial Intelligence. Towards an Italian Discussion on Artificial Intelligence, Children’s Rights and Regulatory Sandboxes
  Sara Tibido', Nadia Spatari, Azzurra Ragone
• Reporting potential vulnerabilities: a plea for coordination
  Federica Casarosa, Giovanni Comandé
• An Adaptive Dual-Stack QKD-PQC Framework for Secure and Reliable Inter-Site Communication
  Alessio Di Santo, Walter Tiberti, Dajana Cassioli
• An Experimental Analysis of Semi-supervised Learning for Malware Detection
  Luca Minnei, Giorgio Piras, Angelo Sotgiu, Maura Pintor, Ambra Demontis, Davide Maiorca, Battista Biggio
• A Proportional Approach to Cybersecurity Challanges in the Financial Sector: Ideas from Post-Quantum Cryptography Legal Analysis
  Maria Gagliardi, Chiara D'Elia
• Understanding Regression in Continual Learning for Malware Detection
  Daniele Ghiani, Daniele Angioni, Angelo Sotgiu, Maura Pintor, Battista Biggio
• LLM-based Fact-Checking: A Pipeline for Studying Information Disorder
  Gabriele Fioretti, Lorenzo Goglia, Eugenio Zimeo
• The informational disorder and Artificial Intelligence; between major insidies and possible contrasting tools
  Andrea Ruffo
• Unveiling Attack Patterns from CTF Network Logs with Process Mining Techniques
  Francesco Romeo, Francesco Blefari, Francesco Pironti, Angelo Furfaro
• Cyber-DRIVE: Dynamic Risk Versatile Engine for Cyber Security Risk Analysis, Situational Awareness and Incident Response
  Stefano Solari, Umberto Pedrotti, Enrico Castelli, Gianluca Ceccoli, Alessandro Oneto, Enrico Russo
• Automated Analysis of Key Management Policies
  Matteo Busi, Riccardo Focardi, Sana Gul, Flaminia L. Luccio
• A Survey of WebAssembly Usage for Embedded Applications: Safety and Portability Considerations
  Tancredi Orlando, Luca D'Agati, Francesco Longo, Giovanni Merlino
• PECSo: A Privacy Enhancing Framework for Applications in the Automotive Domain
  Giampaolo Bella, Sergio Esposito, Mirko Giuseppe Mangano, Salvatore Riccobene, Daniele Francesco Santamaria, Gabriele Veneziano Broccia
• A working experimentation model for cyber resilience regulatory sandboxes
  Fabio Seferi
• Integrating OpenTitan as a Security Controller for Cryptographic Tasks in RISC-V SoCs
  Alberto Musa, Emanuele Paisi, Luca Barbierato, Edoardo Patti, Andrea Acquaviva, Francesco Barchi
• CANter: Data-Link Layer Detection of Drop-and-Spoof Attacks on CAN and CAN FD
  Stefano Longari, Gregorio Galletti, Jan Holle, Stefano Zanero
• Confidential Computing: A Security Overview and Future Research Directions
  Alessandro Bertani, Danilo Caraccio, Stefano Zanero, Mario Polino