ITASEC & SERICS 2026
Joint National Conference on Cybersecurity 2026

Table of Contents

• Preface
  Summary: There were 161 papers submitted for peer-review to this conference. Out of these, 71 papers were accepted for this volume.

• A Methodology Combining NLP, Machine Learning, and LLM for the Detection of Phishing Emails
  Danilo Rosati, Alessandro Aldini
• SA-SOINN: A Self-Adaptive Neural Network for Continuous Intrusion Detection in Dynamic Environments
  Dennis Glenn Ejeh, Gian Luca Foresti, Marino Miculan, Axel De Nardin
• The Double Spending Dilemma: From Traditional Cash Systems to Interoperable Blockchain Systems
  Aradhita Mukherjee, Luca Olivieri, Nabendu Chaki, Agostino Cortesi
• Predicting known Vulnerabilities from Attack News: A Transformer-Based Approach
  Refat Othman, Diaeddin Rimawi, Bruno Rossi, Barbara Russo
• Federated Learning for Robust Malware Detection under Noisy Labels and Malicious Sybils
  Andrea Augello, Alessandra De Paola, Giuseppe Lo Re
• AI-Driven Microlearning for Proactive DevSecOps: Closing the Security Skill Gap
  Giampiero Granatella, Maura Cerioli, Giovanni Lagorio, Angelo Lupo
• The Agentic Kill Chain: A Cognitive Threat Framework for Autonomous Agent Ecosystems
  Giorgio Piccardo, Giuseppe F. Italiano, Alessio Martino
• SecureRF-Net: RF Device Classification and Unauthorized Transmitter Detection for Model-Identical Radios
  Nour Badini, Carlos Fernando Quiroga Ruiz, Fabio Patrone, Mario Marchese
• Secure-by-Design Re-Engineering of Anti-Mafia Processes and Investigative Workflows
  Mario Varlese, Simon Pietro Romano, Giancarlo Sperlì, Andrea Vignali
• From Raw Social Data to Actionable Intelligence: The SocHunter Approach
  Stefano Bistarelli, Cristian Cerami, Francesco Santini
• Software Evolution Metrics for the Detection of Trojan Code in npm Packages
  Giacomo Benedetti, Luca Caviglione, Giovanni Lagorio, Marco Zoratti
• Shared Libraries Bloating in 3D Graphics Software
  Giacomo Benedetti, Luca Caviglione, Michela Spagnuolo
• A Privacy-Preserving Protocol to Prevent Fraudulent SPID Registrations
  Francesco Buccafurri, Carmen Licciardi, Matteo Cecilia, Marco De Iacovo, Rocco Mammoliti
• A Forensic Analysis of the WebView2-based Microsoft Teams Client
  Chiara Bertolotti, Mattia Epifani, Giovanni Lagorio
• Approximate and Private String Set Intersection
  Paolo D'Arco, Vito Troisi
• Addressing concept drift in 5G CVE classification with LLMs
  Pierpaolo Bene, Andrea Bernardini, Leonardo Sagratella, Nicolò Maunero
• Cybersecurity and the Digitalisation of Public Administration: Transforming the Concept of Administrative Legality
  Alessandra Lizzio
• Beyond Checklists: Automated Legal Compliance Check in Regulatory Sandboxes
  Pietro Bernabei, Salvatore Bramante, Ludovica Ciarravano, Fernando Pannullo
• Implementing the NIS 2 Directive: Towards Harmonisation or Further Fragmentation?
  Federica Casarosa, Giovanni Comandé
• An Experimental Approach for Establishing TLS Trusted Channels with Device Identification in IoT Environments
  Diana Gratiela Berbecaru, Silvia Sisinni, Francesco Virga, Antonio Lioy
• Enhancing CTI Awareness of Small and Medium Enterprises with LLMs and Knowledge Graphs
  Francesco Panebianco, Nicolò Amigoni, Gabriele Ruini, Tommaso Paladini, Stefano Longari, Stefano Zanero, Michele Carminati
• Integrating Post-Quantum Cryptography Within Existing Public Key Infrastructures for Complex Corporate Ecosystems
  Davide Varcasia, Michele Amoretti
• A Hybrid Honeypot for Cyber Detection and Deception in Industrial Control Systems
  Silvio Russo, Isabella Marasco, Michele Colajanni
• Addressing Cybersecurity and Nodes Localization on LoRaWAN Networks
  Amirhossein Noshadi, Taregh Khanjari, Zhansaya Amangeldiyeva, Enrico Cambiaso, Matteo Repetto, Sandro Zappatore, Fabio Patrone
• Evading ML Network Intrusion Detection Systems for Modbus TCP with Problem-Space Perturbations
  Dimitri Galli, Giovanni Gambigliani Zoccoli, Daniele Bianchini, Dario Stabili, Mirco Marchetti
• Benchmarking Multimodal LLMs on Closed-World Image Geolocation
  Maria Di Gisi, Giuseppe Fenza, Mariacristina Gallo, Maria Palomba
• LSB-based Fragile Watermarking for Image Integrity Verification Under Morphing Attacks
  Davide Ghiani, Sergio Soggiu, Jefferson David Rodriguez Chivata, Simone Maurizio La Cava, Marco Micheletto, Giulia Orrù, Federico Lama, Gian Luca Marcialis
• TC-ACN-Based Cyber Incident Reporting Using Large Language Models
  Manuel Zambelli, Refat Othman, Barbara Russo
• Preliminary Insights in the Language of Extortion in Ransomware Dialogues
  Federico Cerutti, Massimiliano Giacomin, Andrea Loreggia, Enrico Scala
• Divide and Conquer: Stealth Code injection via Split Memory Permission Manipulation Across Processes
  Michele Salvatori, Pasquale Caporaso, Francesco Quaglia, Giuseppe Bianchi
• Towards a Secure Network Architecture for Social Robots
  Denis Donadel, Matteo Soldà, Mauro Conti, Massimo Merro
• Accelerating Incident Response: A Hybrid Approach for Data Breach Reporting
  Aurora Arrus, Maria Di Gisi, Sara Lilli, Marco Quadrini
• LLM-Based Auto-Categorization of Android Applications
  Pierangelo Loi, Diego Soi, Leonardo Regano, Giorgio Giacinto
• Empirical Evaluation of the Resistance of Novel Non-Algebraic AES S-Boxes to Power Side-Channel Attacks
  Samuele Yves Cerini, Gianluca Roascio, Nicolò Maunero, Paolo Prinetto
• Dr. Jekyll and Mr. Hyde: Two Faces of LLMs
  Matteo Gioele Collu, Tom Janssen-Groesbeek, Stefanos Koffas, Mauro Conti, Stjepan Picek
• AndroWasm: an Empirical Study on Android Malware Obfuscation through WebAssembly
  Diego Soi, Silvia Lucia Sanna, Lorenzo Pisu, Leonardo Regano, Giorgio Giacinto
• A Formal Control Plane for Fuzzing Campaigns: Leveraging Attribute Grammars for Dynamic Policy Selection
  Pierciro Caliandro, Matteo Ciccaglione, Alessandro Pellegrini
• The Postman: A Journey of Ethical Hacking in PosteID/SPID Borderland
  Gabriele Costa
• A Temporal Study on Memory Forensics Artifacts Extraction: the Volatility Reliability
  Aurora Arrus, Silvia Lucia Sanna, Antonio Aracri, Giorgio Giacinto
• DICE-anchored Realms on Arm CCA
  Lorenzo Ferro, Silvia Sisinni, Flavio Ciravegna, Enrico Bravi, Antonio Lioy
• Profiles as Payloads: Exploiting eSIM Applet Behavior
  Lorenzo Valeriani, Simone Festa, Matteo Fanfarillo, Giuseppe Bianchi
• Deepfake Detection, Attribution, and Authentication: Insights from the FF4ALL Project
  Irene Amerini, Mauro Barni, Sebastiano Battiato, Paolo Bestagini, Giulia Boato, Pietro Bongini, Vittoria Bruni, Roberto Casula, Lorenzo Cirillo, Roberto Caldelli, Giuseppe Daidone, Francesco De Natale, Rocco De Nicola, Luca Guarnera, Simone Maurizio La Cava, Sara Mandelli, Gian Luca Marcialis, Marco Micheletto, Andrea Montibeller, Viola Negroni, Giulia Orrù, Pericle Perazzo, Giovanni Puglisi, Davide Salvi, Benedetta Tondi, Stefano Tubaro, Massimo Villari, Domenico Vitulano
• MPTCPcap: A Practical Framework for Security Testing of Multipath TCP
  Riccardo Mancini, Federica Bianchi, Angelo Spognardi
• Secure and Sustainable FUOTA in Constrained IoT Infrastructures
  Maurizio Giacobbe, Salvatore Distefano
• Graph-Based Modelling of the Italian Criminal Code as a Knowledge Base for AI-Assisted Inference
  Samuele Yves Cerini, Nicola Deidda, Yilian Huang, Sara Lilli, Luca Lobascio, Lavinia Russo, Maria Vittoria Zucca, Giorgio Fumera, Giorgio Giacinto, Paolo Prinetto, Salvatore Marsocci
• Integrating Human-in-the-Loop AI Systems in the Italian Judicial System
  Samuele Yves Cerini, Nicola Deidda, Sara Lilli, Maria Vittoria Zucca, Giorgio Fumera, Giorgio Giacinto, Paolo Prinetto, Salvatore Marsocci
• A Static Workflow for Cryptography Verification in 4G/5G Basebands
  Lorenzo Lucca, Sara Da Canal, Giuseppe Bianchi, Andrea Visconti
• ADA: An AI-Powered Assistant for Managed Service Providers
  Eleonora Breci, Sediola Ruko, Luigi V. Mancini, Dorjan Hitaj
• AI Governance: A Security and Privacy Organizational Standard Architecture (SPOSA)
  Sergio Barezzani
• Enhancing Vulnerability Management in Cybersecurity Certification: Leveraging Attack Potential and CVSS score
  Mirko Malacario, Samuela Persia, Ivan Di Pietro
• Enhancing SSH/Telnet Honeypot for Attack Classification and Malware Research
  Michele Castellaneta, Abraham Gebrehiwot, Filippo Maria Lauria, Claudio Porta
• Bullet Signaling: Precise Message Spoofing Against 4G/5G Access Security
  Andrea Paci, Matteo Chiacchia, Riccardo Marizilli, Giuseppe Bianchi
• A Hierarchical Hybrid Deep Learning Framework for Unknown Attack Detection in SDN Networks
  Francesco Di Gennaro, Andrea Giuliani, Christian Morbidoni, Alessandro Cucchiarelli, Luca Spalazzi
• Online Framework for Intrusion Detection Systems with Explainable Concept Drift Detection and Adaptation Phases
  Salvatore Drago, Manuel Lorusso, Pierluca Ferraro, Alessandra De Paola, Giuseppe Lo Re
• Obfuscation-Resistant Feature Extraction for Macro-based Office Malware Detection
  Sergio Imperiale, Marco Morana, Giuseppe Lo Re
• Integration of Post-Quantum Cryptography in the Keylime Agent for Quantum-Safe Remote Attestation
  Francesco Vaccaro, Enrico Bravi, Antonio Lioy
• Cutting Out the Middle Man: A Game-Theoretic Analysis in Computability Logic of the Needham-Schroeder Protocol
  Cosimo Perini Brogi, Stella Spadoni
• The Ghidra Metrics Toolkit for obfuscated native code
  Jonathan Gobbo, Federica Sarro, Paolo Falcarin
• Automatic Verification of Security Properties in Containerized IoT Applications via Bigraphical Modeling
  Cristian Coppo, Francesco Longo, Giovanni Merlino, Antonio Puliafito, Marino Miculan
• Iris Super-Resolution for Images Sourced from Websites and Social Media
  Nikoo Fakhraei, Ruggero Donida Labati, Vincenzo Piuri, Fabio Scotti
• Heuristic Quality Assessment of Textual Adversarial Examples
  Giuseppe Rizzo, Samuele Lo Cascio, Marco Morana, Giuseppe Lo Re
• Cybersecurity Of and Through Regulatory Sandboxes: An Analytical Approach
  Ludovica Ciarravano, Fabio Seferi
• Conceptual Modeling of Cybersecurity Threats and Their Impact on Fundamental Rights
  Nicolò Maunero, Andrea Bernardini, Mario Lezoche, Francesco D'Alterio, Federica Casarosa, Giovanni Comandé, Marina Settembre, Stefano Solari
• Hybrid Post-Quantum Cryptography and Ethereum Signatures: A Comprehensive Performance Benchmarking Study
  Mishaal Ahmed, Silvia Sisinni
• A Preliminary Investigation of a Methodology for Technically Informed Drafting and Revision of Technology Regulations
  Ida Gioia Cristiano, Marco Angelini
• SAGE-5GC: Security-Aware Guidelines for Evaluating Anomaly Detection in the 5G Core Network
  Cristian Manca, Christian Scano, Giorgio Piras, Fabio Brau, Maura Pintor, Battista Biggio
• Zero-Trust Software-Defined Vehicles: a Security Paradigm for the Automotive Cloud-Edge Continuum
  Giovanni Lombardo, Vincenzo Alessio Bucaria, Giovanni Merlino, Francesco Longo
• Automation in Cyber Risk Management: A Literature Review of Evidence, Gaps, and Emerging Directions
  Antonio Belli, Nicolò Maunero, Paolo Prinetto
• EWACS as a Backbone for Wargaming and Decision Support in the Information Environment
  Alberto F. Olivieri, Rosanna E. Guadagno, Stefano Solari, Enrico Russo
• Risk-based Authorization in Safety Critical Microservice Architectures
  Giorgia Sirigu, Alessandro Burastero, Alessandro Armando
• CTI Dataset Construction from Telegram
  Dincy R. Arikkat, Sneha B. T, Serena Nicolazzo, Antonino Nocera, Vinod P, Rafidha Rehiman K. A, Karthika R