| Vol-3488 urn:nbn:de:0074-3488-5 Copyright © 2023 for the individual papers by the papers' authors. Copyright © 2023 for the volume as a collection by its editors. This volume and its papers are published under the Creative Commons License Attribution 4.0 International (CC BY 4.0).

# ITASEC 2023
Italian Conference on Cyber Security (ITASEC 2023)

### Proceedings of the Italian Conference on Cyber Security (ITASEC 2023)

### Bari, Italy, May 2-5, 2023.

Edited by

### Francesco Buccafurri *
Elena Ferrari **
Gianluca Lax *

* University Mediterranea of Reggio Calabria, Reggio Calabria, Italy
** University of Insubria, Varese, Italy

## Table of Contents

- Preface
  Summary: There were 104 papers submitted for peer-review to this conference. Out of these, 29 papers were accepted for this volume.

- DBCChecker: a Bigraph-based Tool for Checking Security Properties of Container Compositions
  Andrea Altarui, Marino Miculan, Matteo Paier
- A Framework for Automating Security Assessments with Deductive Reasoning
  Mauro Andreolini, Andrea Artioli, Luca Ferretti, Mirco Marchetti, Michele Colajanni
- Task Aware Intrusion Detection for Industrial Robots
  Davide Avanzi, Stefano Longari, Mario Polino, Michele Carminati, Andrea Maria Zanchettin, Mara Tanelli, Stefano Zanero
- Windows Antivirus Evasion Techniques: How to Stay Ahead of the Hooks
  Giorgio Bernardinetti, Dimitri Di Cristofaro, Giuseppe Bianchi
- A Survey on Decentralized Identifier Methods for Self Sovereign Identity
  Stefano Bistarelli, Francesco Micheli, Francesco Santini
- NIF: Reactive Injection Attack via Nmap Piggybacking
  Alessandro Bonfiglio, Gabriele Costa, Silvia De Francisci
- User Perception of Risks Associated with IFTTT Applets: A Preliminary User Study
  Bernardo Breve, Gaetano Cimino, Vincenzo Deufemia, Annunziata Elefante
- Scamming the Scammers: Using ChatGPT to Reply Mails for Wasting Time and Resources
  Enrico Cambiaso, Luca Caviglione
- Container-based Virtualization for Ethical Hacking with HOUDINI
  Daniele Capone, Angelo Delicato, Gaetano Perrone, Simon Pietro Romano
- A Heuristic to Select the Optimal Transformation Matrixes in Bio-Convolving with Mixing Transform
  Francesco Castro, Stefano Galantucci, Donato Impedovo, Giuseppe Pirlo
- From Tweet to Theft: Tracing the Flow of Stolen Cryptocurrency
  Guglielmo Cola, Michele Mazza, Maurizio Tesconi
- Towards Self-Supervised Cross-Domain Fake News Detection
  Carmela Comito, Francesco Sergio Pisani, Erica Coppolillo, Angelica Liguori, Massimo Guarascio, Giuseppe Manco
- Preliminary Results on a "Real" Iris Recognition System under Challenging Operational Conditions
  Sara Concas, Giulia Orrù, Emiliano De Paoli, Gian Luca Marcialis
- Formal Analysis of Security Protocols with Movement
  Andrew Cook, Luca Viganò
- Breakthroughs in Testing and Certification in Cybersecurity: Research Gaps and Open Problems
  Said Daoudagh, Eda Marchetti
- Local Differential Privacy in Voting
  Bernardo David, Rosario Giustolisi, Victor Mortensen, Morten Pedersen
- Text-Independent Voice Recognition based on Siamese Networks and Fusion Embeddings
  Roberto De Prisco, Ciro Fusco, Michele Iannucci, Delfina Malandrino, Rocco Zaccagnino
- OSINT Knowledge Graph for Fact-Checking: Google Map Hacks Debunking
  Giuseppe Fenza, Vincenzo Loia, Paola Montserrat Mainardi, Claudio Stanzione
- How (not) to Index Order Revealing Encrypted Databases
  Luca Ferretti, Mattia Trabucco, Mauro Andreolini, Mirco Marchetti
- SAE - Secure Application Email Architecture
  Francesco Gennai, Fabio Sinibaldi, Loredana Martusciello, Marina Buzzi
- Big Data Value Graph: Enhancing Security and Generating new Value from Big Data
  Massimiliano Gervasi, Nicolò Gianmauro Totaro, Anna Fornaio, Danilo Caivano
- Explaining Phishing Attacks: An XAI Approach to Enhance User Awareness and Trust
  Francesco Greco, Giuseppe Desolda, Andrea Esposito
- CLUE: Certificateless Updatable Encryption
  Jodie Knapp, Elizabeth A. Quaglia
- Exploiting Ethereum after "The Merge": The Interplay between PoS and MEV Strategies
  Davide Mancino, Alberto Leporati, Marco Viviani, Giovanni Denaro
- Towards Context-Aware Risk Assessment Scoring System for IoT/IIoT Devices
  Valerio Giuseppe Massaro, Luca Capacci, Rebecca Montanari
- A Targeted Assessment of Cross-Site Scripting Detection Tools
  Bruno Pala, Lorenzo Pisu, Silvia Lucia Sanna, Davide Maiorca, Giorgio Giacinto
- Is Your Smartphone Really Safe? A Wake-up Call on Android Antivirus Software Effectiveness
  Andrea Piccione, Giorgio Bernardinetti, Alessandro Pellegrini, Giuseppe Bianchi
- Sharing Responsibilities through Distributed Key Generation in the Chirotonia e-Voting Framework
  Simon Pietro Romano, Alfonso Calabria, Anna Piscitelli, Antonio Russo
- Practical Evaluation of Graph Neural Networks in Network Intrusion Detection
  Andrea Venturi, Daniele Pellegrini, Mauro Andreolini, Luca Ferretti, Mirco Marchetti, Michele Colajanni

2023-09-04: submitted by Gianluca Lax, metadata incl. bibliographic data published under Creative Commons CC0
2023-09-20: published on CEUR Workshop Proceedings (CEUR-WS.org, ISSN 1613-0073) |valid HTML5|