Giancarlo Pellegrino

63 papers A* 27A 11B 2C 2Misc 2Journal 11Unranked 6

Year	Rank	Type	Title / Venue / Authors
2025	A*	`ed.`	34th USENIX Security Symposium, USENIX Security 2025, Seattle, WA, USA, August 13-15, 2025. USENIX Security Symposium Lujo Bauer, Giancarlo Pellegrino
2025	J	`jnl`	Behind the Curtain: How Shared Hosting Providers Respond to Vulnerability Notifications. CoRR Giada Stivala, Rafael Mrowczynski, Maria Hellenthal, Giancarlo Pellegrino
2025	A	`conf`	CHARON: Polyglot Code Analysis for Detecting Vulnerabilities in Scripting Languages Native Extensions. EuroS&P Raoul Scholtes, Soheil Khodayari, Cristian-Alexandru Staicu, Giancarlo Pellegrino
2025	J	`jnl`	Call Me Maybe: Enhancing JavaScript Call Graph Construction using Graph Neural Networks. CoRR Masudul Hasan Masud Bhuiyan, Gianluca De Stefano, Giancarlo Pellegrino, Cristian-Alexandru Staicu
2025	A*	`conf`	Do (Not) Follow the White Rabbit: Challenging the Myth of Harmless Open Redirection. NDSS Soheil Khodayari, Kai Glauber, Giancarlo Pellegrino
2025	A	`conf`	Exploration of the Dynamics of Buy and Sale of Social Media Accounts. IMC Mario Beluri, Bhupendra Acharya, Soheil Khodayari, Giada Stivala, Giancarlo Pellegrino, Thorsten Holz
2025	A	`conf`	Exploring the Design Space for Security Warnings in Immersive Environments. EuroS&P Andrea Mengascini, Rebecca Weil, Annabelle Walle, Jürgen Steimle, Giancarlo Pellegrino
2025	A*	`conf`	In the DOM We Trust: Exploring the Hidden Dangers of Reading from the DOM on the Web. CCS Jan Drescher, Sepehr Mirzaei, Soheil Khodayari, David Klein, Thomas Barber, Martin Johns, Giancarlo Pellegrino
2025	A	`conf`	Less is More: Boosting Coverage of Web Crawling through Adversarial Multi-Armed Bandit. DSN Lorenzo Cazzaro, Stefano Calzavara, Maksim Kovalkov, Aleksei Stafeev, Giancarlo Pellegrino
2025	A*	`conf`	Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns. CHI Yusra Elbitar, Soheil Khodayari, Marian Harbach, Gianluca De Stefano, Balazs Csaba Engedy, Giancarlo Pellegrino, Sven Bugiel
2025	A*	`conf`	YuraScanner: Leveraging LLMs for Task-driven Web App Scanning. NDSS Aleksei Stafeev, Tim Recktenwald, Gianluca De Stefano, Soheil Khodayari, Giancarlo Pellegrino
2024	J	`jnl`	Exploration of the Dynamics of Buy and Sale of Social Media Accounts. CoRR Mario Beluri, Bhupendra Acharya, Soheil Khodayari, Giada Stivala, Giancarlo Pellegrino, Thorsten Holz
2024	J	`jnl`	Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks. CoRR Gianluca De Stefano, Lea Schönherr, Giancarlo Pellegrino
2024	A*	`conf`	SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications. USENIX Security Symposium Malte Wessels, Simon Koch, Giancarlo Pellegrino, Martin Johns
2024	A*	`conf`	SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements. USENIX Security Symposium Aleksei Stafeev, Giancarlo Pellegrino
2024	A*	`conf`	The Big Brother's New Playground: Unmasking the Illusion of Privacy in Web Metaverses from a Malicious User's Perspective. CCS Andrea Mengascini, Ryan Aurelio, Giancarlo Pellegrino
2024	A*	`conf`	The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web. SP Soheil Khodayari, Thomas Barber, Giancarlo Pellegrino
2024	A	`conf`	Uncovering the Role of Support Infrastructure in Clickbait PDF Campaigns. EuroS&P Giada Stivala, Gianluca De Stefano, Andrea Mengascini, Mariano Graziano, Giancarlo Pellegrino
2024	J	`jnl`	Uncovering the Role of Support Infrastructure in Clickbait PDF Campaigns. CoRR Giada Stivala, Gianluca De Stefano, Andrea Mengascini, Mariano Graziano, Giancarlo Pellegrino
2023	J	`jnl`	A Large-Scale Study of Phishing PDF Documents. CoRR Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino
2023	A	`conf`	From Attachments to SEO: Click Here to Learn More about Clickbait PDFs! ACSAC Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino
2023	A*	`conf`	It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses. SP Soheil Khodayari, Giancarlo Pellegrino
2023	A*	`conf`	The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web. SP Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock
2022	B	`ed.`	Detection of Intrusions and Malware, and Vulnerability Assessment - 19th International Conference, DIMVA 2022, Cagliari, Italy, June 29 - July 1, 2022, Proceedings DIMVA Lorenzo Cavallaro, Daniel Gruss, Giancarlo Pellegrino, Giorgio Giacinto
2022	A*	`conf`	The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies. SP Soheil Khodayari, Giancarlo Pellegrino
2021	A*	`conf`	Black Widow: Blackbox Data-driven Web Scanning. SP Benjamin Eriksson, Giancarlo Pellegrino, Andrei Sabelfeld
2021	B	`ed.`	Detection of Intrusions and Malware, and Vulnerability Assessment - 18th International Conference, DIMVA 2021, Virtual Event, July 14-16, 2021, Proceedings DIMVA Leyla Bilge, Lorenzo Cavallaro, Giancarlo Pellegrino, Nuno Neves
2021	A*	`conf`	JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals. USENIX Security Symposium Soheil Khodayari, Giancarlo Pellegrino
2021	A	`conf`	Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks. RAID Xhelal Likaj, Soheil Khodayari, Giancarlo Pellegrino
2020	A*	`conf`	Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps. SP Qingchuan Zhao, Chaoshun Zuo, Brendan Dolan-Gavitt, Giancarlo Pellegrino, Zhiqiang Lin
2020	A*	`conf`	Deceptive Previews: A Study of the Link Preview Trustworthiness in Social Platforms. NDSS Giada Stivala, Giancarlo Pellegrino
2020	Misc	`conf`	Raccoon: automated verification of guarded race conditions in web applications. SAC Simon Koch, Tim Sauer, Martin Johns, Giancarlo Pellegrino
2020	—	`conf`	SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems. SP (Workshops) Edward Chou, Florian Tramèr, Giancarlo Pellegrino
2019	A*	`conf`	AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning. CCS Florian Tramèr, Pascal Dupré, Gili Rusak, Giancarlo Pellegrino, Dan Boneh
2019	A*	`conf`	Fidelius: Protecting User Secrets from Compromised Browsers. IEEE Symposium on Security and Privacy Saba Eskandarian, Jonathan Cogan, Sawyer Birnbaum, Peh Chang Wei Brandon, Dillon Franke, Forest Fraser, Gaspar Garcia Jr., Eric Gong, Hung T. Nguyen, Taresh K. Sethi, Vishal Subbiah, Michael Backes, Giancarlo Pellegrino, Dan Boneh
2019	A*	`conf`	Geo-locating Drivers: A Study of Sensitive Data Leakage in Ride-Hailing Services. NDSS Qingchuan Zhao, Chaoshun Zuo, Giancarlo Pellegrino, Zhiqiang Lin
2018	J	`jnl`	Ad-versarial: Defeating Perceptual Ad-Blocking. CoRR Florian Tramèr, Pascal Dupré, Gili Rusak, Giancarlo Pellegrino, Dan Boneh
2018	A*	`conf`	Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. NDSS Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow
2018	J	`jnl`	Fidelius: Protecting User Secrets from Compromised Browsers. CoRR Saba Eskandarian, Jonathan Cogan, Sawyer Birnbaum, Peh Chang Wei Brandon, Dillon Franke, Forest Fraser, Gaspar Garcia Jr., Eric Gong, Hung T. Nguyen, Taresh K. Sethi, Vishal Subbiah, Michael Backes, Giancarlo Pellegrino, Dan Boneh
2018	A	`conf`	Formally Reasoning about the Cost and Efficacy of Securing the Email Infrastructure. EuroS&P Patrick Speicher, Marcel Steinmetz, Robert Künnemann, Milivoj Simeonovski, Giancarlo Pellegrino, Jörg Hoffmann, Michael Backes
2018	J	`jnl`	SentiNet: Detecting Physical Attacks Against Deep Learning Systems. CoRR Edward Chou, Florian Tramèr, Giancarlo Pellegrino, Dan Boneh
2018	A*	`conf`	The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes
2017	A*	`conf`	Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CCS Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
2017	J	`jnl`	Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CoRR Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
2017	A*	`conf`	Who Controls the Internet?: Analyzing Global Threats using Property Graph Traversals. WWW Milivoj Simeonovski, Giancarlo Pellegrino, Christian Rossow, Michael Backes
2016	A*	`conf`	Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	A*	`conf`	POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	A	`conf`	Uses and Abuses of Server-Side Requests. RAID Giancarlo Pellegrino, Onur Catakoglu, Davide Balzarotti, Christian Rossow
2015	—	`conf`	Cashing Out the Great Cannon? On Browser-Based DDoS Attacks and Economics. WOOT Giancarlo Pellegrino, Christian Rossow, Fabrice J. Ryba, Thomas C. Schmidt, Matthias Wählisch
2015	A*	`conf`	In the Compression Hornet's Nest: A Security Study of Data Compression in Network Services. USENIX Security Symposium Giancarlo Pellegrino, Davide Balzarotti, Stefan Winter, Neeraj Suri
2015	—	`ch.`	Technical Implementation and Feasibility. Attribute-based Credentials for Trust Gert Læssøe Mikkelsen, Kasper Damgård, Hans Guldager, Jonas Lindstrøm Jensen, Jesus Luna Garcia, Janus Dam Nielsen, Pascal Paillier, Giancarlo Pellegrino, Michael Bladt Stausholm, Neeraj Suri, Heng Zhang
2015	A	`conf`	jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications. RAID Giancarlo Pellegrino, Constantin Tschürtz, Eric Bodden, Christian Rossow
2014	—	`conf`	On the Feasibility of Side-Channel Attacks in a Virtualized Environment. ICETE (Selected Papers) Tsvetoslava Vateva-Gurova, Jesus Luna, Giancarlo Pellegrino, Neeraj Suri
2014	A*	`conf`	Toward Black-Box Detection of Logic Flaws in Web Applications. NDSS Giancarlo Pellegrino, Davide Balzarotti
2014	C	`conf`	Towards a Framework for Assessing the Feasibility of Side-channel Attacks in Virtualized Environments. SECRYPT Tsvetoslava Vateva-Gurova, Jesus Luna, Giancarlo Pellegrino, Neeraj Suri
2013	C	`conf`	A Tool for Supporting Developers in Analyzing the Security of Web-Based Security Protocols. ICTSS Giancarlo Pellegrino, Luca Compagna, Thomas Morreggia
2013	J	`jnl`	An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations. Comput. Secur. Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
2013	—	`—`	Detection of logic flaws in multi-party business applications via security testing. (Détection d'anomalies logiques dans les logiciels d'entreprise multi-partis à travers des tests de sécurité). Giancarlo Pellegrino
2012	—	`conf`	From Model-Checking to Automated Testing of Security Protocols: Bridging the Gap. TAP@TOOLS Alessandro Armando, Giancarlo Pellegrino, Roberto Carbone, Alessio Merlo, Davide Balzarotti
2012	A	`conf`	The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò
2011	Misc	`conf`	From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure? SEC Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
2011	—	`conf`	Security Validation of Business Processes via Model-Checking. ESSoS Wihem Arsac, Luca Compagna, Giancarlo Pellegrino, Serena Elisa Ponta
2010	—	`conf`	Model-Checking Driven Security Testing of Web-Based Applications. ICST Workshops Alessandro Armando, Roberto Carbone, Luca Compagna, Keqin Li, Giancarlo Pellegrino