| Vol-3962 urn:nbn:de:0074-3962-X Copyright © 2025 for the individual papers by the papers' authors. Copyright © 2025 for the volume as a collection by its editors. This volume and its papers are published under the Creative Commons License Attribution 4.0 International (CC BY 4.0).

# ITASEC & SERICS 2025
Joint National Conference on Cybersecurity 2025

### Proceedings of the Joint National Conference on Cybersecurity (ITASEC & SERICS 2025)

### Bologna, Italy, February 03-08, 2025.

Edited by

### Gabriele Costa 1
Rebecca Montanari 2
Michele Carminati 3
Giada Sciarretta 4

1 IMT Lucca, Italy
2 Università di Bologna, Italy
3 Politecnico di Milano, Italy
4 Fondazione Bruno Kessler, Trento, Italy

## Table of Contents

- Preface
  Summary: There were 144 papers submitted for peer-review to this conference. Out of these, 70 papers were accepted for this volume.

- A Classification of Malware Sandboxes and Their Architectures
  Stefano Bistarelli, Emanuele Burberi, Francesco Santini
- Adversarial Training to Improve Accuracy and Robustness of a Windows PE Malware Detection Model
  Luca Lobascio, Giuseppina Andresini, Annalisa Appice, Donato Malerba
- Towards the Responsible/Trustworthy AI in Multi-Domain Operations for Cyber Social Security: A Black-Box AML Case Study in the CAN Bus Frame Detection Task
  Vita Santa Barletta, Danilo Caivano, Christian Catalano, Samuele del Vescovo, Michele Scalera
- Improving MQTT Security Through the Generation of Malicious Test Cases
  Camilla Cespi Polisiani, Maria Carla Calzarossa, Marco Zuppelli, Luca Caviglione, Massimo Guarascio
- Undercover Disruption: Stealth Jamming Attacks on 5G Synchronization Stages
  Rosolino Alaimo, Silvia Schilleci, Alessandra Dino, Stefano Mangione, Ilenia Tinnirello, Domenico Garlisi, Roberto Corallo
- Application of Quantum Resistant Cryptography to Smart Grid deployments
  David Domingo Martín, Rodrigo Martín Sánchez-Ledesma, Marta Irene García Cid
- Advancing Ethical Hacking with AI: A Linux-Based Experimental Study
  Haitham Al-Sinani, Nabil Sahli, Chris Mitchell, Mohamed Al-Siyabi
- Attack Originality Detector Using Machine Learning
  Charlotte Millan, Lotfi Chaari, Amel Aissaoui, Eric Gilbert
- On the Feasibility of Android Stegomalware: A Detection Study
  Diego Soi, Silvia Lucia Sanna, Angelica Liguori, Marco Zuppelli, Leonardo Regano, Davide Maiorca, Luca Caviglione, Giuseppe Manco, Giorgio Giacinto
- Securing Telephone Communication with Trusted Services
  Francesco Buccafurri, Vincenzo De Angelis, Sara Lazzaro, Carmen Licciardi
- A GPU Covert Channel Based on Workload Manipulation Through the CuPy Library
  Gianluca De Lucia, Alessio Merlo, Luca Caviglione
- Revocable Anonymous Credentials from Attribute-Based Encryption
  Giovanni Bartolomeo
- HDDroid: Federated Hyperdimensional Computing for Mobile Malware Detection
  Andrea Augello, Alessandra De Paola, Giuseppe Lo Re, Antoine Menager
- Guessing As A Service: Large Language Models Are Not Yet Ready For Vulnerability Detection
  Francesco Panebianco, Andrea Isgrò, Stefano Longari, Stefano Zanero, Michele Carminati
- How effective are Large Language Models (LLMs) at inferring people’s personality based on texts they authored?
  Victoria Popa, Guglielmo Cola, Caterina Senette, Maurizio Tesconi
- Cross-chain Smart Contracts and dApps Verification by Static Analysis: Limits and Challenges
  Luca Olivieri, Aradhita Mukherjee, Nabendu Chaki, Agostino Cortesi
- Cognitive Filter Bubble: Investigating Bias and Neutrality Vulnerabilities of LLMs in Sensitive Contexts
  Maria Di Gisi, Giuseppe Fenza, Mariacristina Gallo, Vincenzo Loia, Claudio Stanzione
- Preventing Disinformation Spread Across Network Clusters by Strategic Edge Deletions: a Lagrangian Heuristic
  Martina Cerulli, Manlio Gaudioso, Domenico Serra, Carmine Sorgente
- Multi-Domain Fake News Detection Exploiting Ensemble Learning Techniques
  Farwa Batool, Giuseppe Lo Re, Marco Morana, Mario Tortorici
- Multi-LLM Agents Architecture for Claim Verification
  Giuseppe Fenza, Domenico Furno, Vincenzo Loia, Pio Pasquale Trotta
- Key challenges in LoRaWAN-based Edge-Cloud infrastructures for security-sensitive smart cities applications
  Maurizio Giacobbe, Ida Falco, Sarah Zanafi, Carmine Colarusso, Jiregna Abdissa Olana, Antonio Puliafito, Eugenio Zimeo
- VMORPH: A Virtualization/Metamorphic Framework for Binary Obfuscation and Intellectual Property Protection
  Pierciro Caliandro, Matteo Ciccaglione, Andrea Pepe, Giuseppe Bianchi, Alessandro Pellegrini
- CANPak: An Intrusion Detection System against Error Frame Attacks for Controller Area Network
  Sikandar Mehmood Abbasi, Stefano Longari
- A Deep Learning Approach for False Data Injection Attacks Detection in Smart Water Infrastructure
  Davide Giannubilo, Tommaso Giorgeschi, Michele Carminati, Stefano Zanero, Stefano Longari
- Micro-Mobility Security: A Holistic Approach via Mobile App Analysis
  Marco Balossini, Michele Carminati, Stefano Zanero, Stefano Longari
- On Policies for Bartering Access to Resources
  Lorenzo Bettini, Rosario Pugliese, Francesco Tiezzi
- Analysis and Study of a Cybersecurity Maturity Assessment System for SMEs
  Stefano Bistarelli, Sara Geoli, Chiara Luchini, Ivan Mercanti
- On the Usage of ChatGPT for Integrating CAPEC Attacks into ADVISE Meta Ontology
  Marzieh Kordi, Francesco Mariotti, Paolo Lollini, Roberto Magrini, Andrea Bondavalli
- BinSAFE: Extending Functions Embeddings to Entire Binaries
  Gianluca Capozzi, Giordano Laurenzi, Marco Mormando, Carmine Gianni, Gianluca Marcilli, Giuseppe Antonio Di Luna, Leonardo Querzoni
- Enhancing Training Time for Sustainability of Intrusion Detection Systems based on Machine Learning
  Isabella Marasco, Karina Chichifoi, Silvio Russo, Claudio Zanasi
- Digital Authoritarianism: ICT-enabled Repression Across Regime Types
  Martina Lucaccini
- Finding Vulnerabilities in Solidity Smart Contracts with In-Context Learning
  Badaruddin Chachar, Marc Cavazza, Andrea Bracciali, Pietro Ferrara, Agostino Cortesi
- Exposing the Cracks: A Case Study on the Quality of Public Linux Malware Data Sets
  Alessandro Sanna, Daniele Canavese, Leonardo Regano, Davide Maiorca, Giorgio Giacinto
- Challenging Antivirus against Elusive Android Malware over Time
  Danilo Dell'Orco, Lorenzo Valeriani, Giuseppe Bianchi, Alessandro Pellegrini, Alessio Merlo
- Advancing Internet-Connected Devices Posture Analysis with a Meta-Search Engine: A Case Study in Energy Systems
  Andrea Bernardini, Mario Lezoche, Simone Angelini, Giovanna Dondossola, Roberta Terruggia
- A Stackelberg Approach to Federated Learning for Malware Detection
  Andrea Augello, Alessandra De Paola, Giuseppe Lo Re, Marena Jestin
- Forgotten & Reclaimed: Detecting and Preventing Subdomain Takeover in the Italian Medical Landscape
  Lorenzo Bracciale, Matteo Coni, Pierpaolo Loreti, Emanuele Raso, Giuseppe Bianchi
- Evaluating SCAS Tests in Closed Source 5G Core Network
  Leonardo Sagratella, Andrea Bernardini, Francesco D'Alterio, Marina Settembre, Roberta Terruggia
- Towards Cyber Resilience against APTs
  Alessandro Gaudenzi, Lorenzo Nodari, Rodolfo Valentim, Danilo Giordano, Idilio Drago, Alessandra Russo, Federico Cerutti
- Stateful Handling of Critical Events: Leveraging eBPF to Realize eXtended Finite State Machine Abstractions
  Arianna Quinci, Giacomo Belocchi, Francesco Quaglia, Giuseppe Bianchi
- Cybersecurity Education Showdown: A Comparative Analysis of K-12 Education Systems in the United States, the European Union and China
  Berenice Fernandez Nieto, Daisy Romanini, Yuhui Zhu
- Managing Concept Drift in Online Intrusion Detection Systems with Active Learning
  Francesco Camarda, Alessandra De Paola, Salvatore Drago, Pierluca Ferraro, Giuseppe Lo Re
- The Internet of Quantum Things (IoQT) – A New Frontier in Quantum Emulation and Simulation
  Ioannis Kefaloukos, Nikolay Tcholtchev, Michail-Alexandros Kourtis, Giorgos Oikonomakis, Emmanouil Eleftherios Rompogiannakis, Evangelos Markakis
- Leveraging Pre-trained LLMs for GDPR Compliance in Online Privacy Policies
  Giovanni Ciaramella, Luca Petrillo, Margaret Varilek, Francesco Mercaldo, Giovanni Comandé, Fabio Martinelli
- Real-Time Anomaly Detection in Docker Containers: A Continuous Learning Approach Using SF-SOINN
  Dennis Glenn Ejeh, Gian Luca Foresti, Marino Miculan, Axel De Nardin
- VFSMon: an Innovative Reference Monitor in Linux
  Edoardo Manenti, Pasquale Caporaso, Giuseppe Bianchi, Francesco Quaglia
- 5G Security Assurance: Lessons Learned from 3GPP SCAS Tests on Virtualized Network Architectures
  Francesco Mancini, Lorenzo Cannella, Giorgia Messina, Marco Centenaro, Ivan Di Pietro, Alessandro Greco, Samuela Persia, Francesca Cuomo, Giuseppe Bianchi
- A Comparative Analysis of Datasets for Intrusion Detection in Software-Defined Networks
  Francesco Di Gennaro, Alessandro Cucchiarelli, Christian Morbidoni, Luca Spalazzi
- OWSM: Empowering Rego for Stateful Access Control
  Massimiliano Baldo, Fabio Ionut Ion, Marino Miculan, Matteo Paier, Vincenzo Riccio
- Evaluating Explainability of Graph Neural Networks for Network Intrusion Detection with Structural Attacks
  Dimitri Galli, Andrea Venturi, Isabella Marasco, Mirco Marchetti
- Optimizing 5G Protocol Fuzzing: Structure-Aware Techniques and Feedback Integration
  Sara Da Canal, Francesco Mancini, Luca Mastrobattista, Giuseppe Bianchi
- The Security of Quantum Computing in 6G: from Technical Perspectives to Ethical Implications
  Luca Barbieri, Abdelkrim Menina, Riccardo Bassoli, Frank H.P. Fitzek
- CrawLLMentor: An LLM-Powered Tool to Assist Pen Testers in Identifying Business Logic Vulnerabilities
  Nicolò Romandini, Luca Capacci, Rebecca Montanari
- Children and Artificial Intelligence. Towards an Italian Discussion on Artificial Intelligence, Children’s Rights and Regulatory Sandboxes
  Sara Tibido', Nadia Spatari, Azzurra Ragone
- Reporting potential vulnerabilities: a plea for coordination
  Federica Casarosa, Giovanni Comandé
- An Adaptive Dual-Stack QKD-PQC Framework for Secure and Reliable Inter-Site Communication
  Alessio Di Santo, Walter Tiberti, Dajana Cassioli
- An Experimental Analysis of Semi-supervised Learning for Malware Detection
  Luca Minnei, Giorgio Piras, Angelo Sotgiu, Maura Pintor, Ambra Demontis, Davide Maiorca, Battista Biggio
- A Proportional Approach to Cybersecurity Challanges in the Financial Sector: Ideas from Post-Quantum Cryptography Legal Analysis
  Maria Gagliardi, Chiara D'Elia
- Understanding Regression in Continual Learning for Malware Detection
  Daniele Ghiani, Daniele Angioni, Angelo Sotgiu, Maura Pintor, Battista Biggio
- LLM-based Fact-Checking: A Pipeline for Studying Information Disorder
  Gabriele Fioretti, Lorenzo Goglia, Eugenio Zimeo
- The informational disorder and Artificial Intelligence; between major insidies and possible contrasting tools
  Andrea Ruffo
- Unveiling Attack Patterns from CTF Network Logs with Process Mining Techniques
  Francesco Romeo, Francesco Blefari, Francesco Pironti, Angelo Furfaro
- Cyber-DRIVE: Dynamic Risk Versatile Engine for Cyber Security Risk Analysis, Situational Awareness and Incident Response
  Stefano Solari, Umberto Pedrotti, Enrico Castelli, Gianluca Ceccoli, Alessandro Oneto, Enrico Russo
- Automated Analysis of Key Management Policies
  Matteo Busi, Riccardo Focardi, Sana Gul, Flaminia L. Luccio
- A Survey of WebAssembly Usage for Embedded Applications: Safety and Portability Considerations
  Tancredi Orlando, Luca D'Agati, Francesco Longo, Giovanni Merlino
- PECSo: A Privacy Enhancing Framework for Applications in the Automotive Domain
  Giampaolo Bella, Sergio Esposito, Mirko Giuseppe Mangano, Salvatore Riccobene, Daniele Francesco Santamaria, Gabriele Veneziano Broccia
- A working experimentation model for cyber resilience regulatory sandboxes
  Fabio Seferi
- Integrating OpenTitan as a Security Controller for Cryptographic Tasks in RISC-V SoCs
  Alberto Musa, Emanuele Paisi, Luca Barbierato, Edoardo Patti, Andrea Acquaviva, Francesco Barchi
- CANter: Data-Link Layer Detection of Drop-and-Spoof Attacks on CAN and CAN FD
  Stefano Longari, Gregorio Galletti, Jan Holle, Stefano Zanero
- Confidential Computing: A Security Overview and Future Research Directions
  Alessandro Bertani, Danilo Caraccio, Stefano Zanero, Mario Polino

2025-04-15: submitted by Michele Carminati, metadata incl. bibliographic data published under Creative Commons CC0
2025-05-13: published on CEUR Workshop Proceedings (CEUR-WS.org, ISSN 1613-0073) | valid HTML5 |