Roberto Carbone

67 papers A* 1A 9B 7C 7Misc 1Journal 14Unranked 27

Year	Rank	Type	Title / Venue / Authors
2025	—	`conf`	A First Appraisal of NIS2 and CRA Compliance Leveraging Open Source Tools. REW Giovanni Corti, Gianluca Sassetti, Amir Sharif, Serena Elisa Ponta, Matteo Rizzi, Pietro De Matteis, Luca Piras, Roberto Carbone, Silvio Ranise
2025	J	`jnl`	A methodology for the experimental performance evaluation of Access Control enforcement mechanisms based on business processes. J. Inf. Secur. Appl. Stefano Berlato, Roberto Carbone, Silvio Ranise
2025	J	`jnl`	A secure and quality of service-aware solution for the end-to-end protection of IoT applications. J. Netw. Comput. Appl. Stefano Berlato, Umberto Morelli, Roberto Carbone, Silvio Ranise
2025	C	`conf`	Enhancing National Digital Identity Systems: A Framework for Institutional and Technical Harm Prevention Inspired by Microsoft's Harms Modeling. SECRYPT Giovanni Corti, Gianluca Sassetti, Amir Sharif, Roberto Carbone, Silvio Ranise
2025	—	`conf`	From Edge to Cloud: Securing Distributed Containerized Applications. EuroS&P (Workshops) Luca Verderame, Giorgia Bolognesi, Enrico Pezzano, Massimiliano Rak, Alberto Falcone, Giacomo Benedetti, Massimo Guarascio, Luca Caviglione, Roberto Carbone, Roberto Doriguzzi Corin, Maurizio Giacobbe, Giovanni Merlino, Antonio Puliafito, Massimiliano Baldo, Marino Miculan, Vincenzo Riccio, Massimo Ficco
2025	C	`conf`	Relying on Trust to Balance Protection and Performance in Cryptographic Access Control. SACMAT Simone Brunello, Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
2025	—	`conf`	Toward Secure and Trustworthy Identity Management Systems: A Knowledge-Base Driven Approach. STM Gianluca Sassetti, Amir Sharif, Roberto Carbone, Silvio Ranise
2025	—	`conf`	Towards Continuous Risk Assessment and Conformance Checking of IdM Deployments. EuroS&P (Workshops) Andrea Bisegna, Roberto Carbone, Laura Cristiano, Pietro De Matteis, Silvio Ranise
2025	—	`conf`	Work-in-Progress: Optimizing Performance of User Revocation in Cryptographic Access Control with Trusted Execution Environments. EuroS&P (Workshops) Ion Andy Ditu, Stefano Berlato, Matteo Busi, Roberto Carbone, Silvio Ranise
2024	—	`conf`	A Risk-based Approach to Trustworthy AI Systems for Judicial Procedures. Ital-IA Majid Mollaeefar, Eleonora Marchesini, Roberto Carbone, Silvio Ranise
2024	J	`jnl`	An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols. IEEE Trans. Dependable Secur. Comput. Marco Pernpruner, Roberto Carbone, Giada Sciarretta, Silvio Ranise
2024	A	`conf`	CSRFing the SSO Waves: Security Testing of SSO-Based Account Linking Process. EuroS&P Andrea Bisegna, Matteo Bitussi, Roberto Carbone, Luca Compagna, Silvio Ranise, Avinash Sudhodanan
2024	J	`jnl`	Enhancing Security Testing for Identity Management Implementations: Introducing Micro-Id-Gym Language and Micro-Id-Gym Testing Tool. IEEE Secur. Priv. Andrea Bisegna, Matteo Bitussi, Roberto Carbone, Silvio Ranise
2024	—	`conf`	Work-in-Progress: A Sidecar Proxy for Usable and Performance-Adaptable End-to-End Protection of Communications in Cloud Native Applications. EuroS&P Workshops Stefano Berlato, Matteo Rizzi, Matteo Franzil, Silvio Cretti, Pietro De Matteis, Roberto Carbone
2023	B	`conf`	Assurance, Consent and Access Control for Privacy-Aware OIDC Deployments. DBSec Gianluca Sassetti, Amir Sharif, Giada Sciarretta, Roberto Carbone, Silvio Ranise
2023	B	`conf`	Control is Nothing Without Trust a First Look into Digital Identity Wallet Trends. DBSec Zahra Ebadi Ansaroudi, Roberto Carbone, Giada Sciarretta, Silvio Ranise
2023	B	`conf`	Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities. ARES Amir Sharif, Francesco Antonio Marino, Giada Sciarretta, Giuseppe De Marco, Roberto Carbone, Silvio Ranise
2023	C	`ed.`	Proceedings of the 28th ACM Symposium on Access Control Models and Technologies, SACMAT 2023, Trento, Italy, June 7-9, 2023 SACMAT Silvio Ranise, Roberto Carbone, Daniel Takabi
2023	—	`conf`	SecCo: Automated Services to Secure Containers in the DevOps Paradigm. RACS Luca Verderame, Luca Caviglione, Roberto Carbone, Alessio Merlo
2022	J	`jnl`	Best current practices for OAuth/OIDC Native Apps: A study of their adoption in popular providers and top-ranked Android clients. J. Inf. Secur. Appl. Amir Sharif, Roberto Carbone, Giada Sciarretta, Silvio Ranise
2022	B	`conf`	End-to-End Protection of IoT Communications Through Cryptographic Enforcement of Access Control Policies. DBSec Stefano Berlato, Umberto Morelli, Roberto Carbone, Silvio Ranise
2022	J	`jnl`	Formal Modelling and Automated Trade-off Analysis of Enforcement Architectures for Cryptographic Access Control in the Cloud. ACM Trans. Priv. Secur. Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
2022	B	`conf`	SoK: A Survey on Technological Trends for (pre)Notified eIDAS Electronic Identity Schemes. ARES Amir Sharif, Matteo Ranzi, Roberto Carbone, Giada Sciarretta, Silvio Ranise
2021	B	`conf`	Automated Risk Assessment and What-if Analysis of OpenID Connect and OAuth 2.0 Deployments. DBSec Salimeh Dashti, Amir Sharif, Roberto Carbone, Silvio Ranise
2021	—	`conf`	Blockchain Based RAN Data Sharing. SMDS Andreas Heider-Aviet, Danny Roswin Ollik, Stefano Berlato, Silvio Ranise, Roberto Carbone, Van Thanh Le, Nabil El Ioini, Claus Pahl, Hamid R. Barzegar
2021	C	`conf`	Cryptographic Enforcement of Access Control Policies in the Cloud: Implementation and Experimental Assessment. SECRYPT Stefano Berlato, Roberto Carbone, Silvio Ranise
2021	—	`conf`	Integrating a Pentesting Tool for IdM Protocols in a Continuous Delivery Pipeline. ETAA Andrea Bisegna, Roberto Carbone, Silvio Ranise
2021	J	`jnl`	Safety-Related Cooperative, Connected, and Automated Mobility Services: Interplay Between Functional and Security Requirements. IEEE Veh. Technol. Mag. Marco Centenaro, Stefano Berlato, Roberto Carbone, Gianfranco Burzio, Giuseppe Faranda Cordella, Roberto Riggio, Silvio Ranise
2020	J	`jnl`	A survey on multi-factor authentication for online banking in the wild. Comput. Secur. Federico Sinigaglia, Roberto Carbone, Gabriele Costa, Nicola Zannone
2020	—	`conf`	Automated and Secure Integration of the OpenID Connect iGov Profile in Mobile Native Applications. ETAA@ESORICS Amir Sharif, Roberto Carbone, Giada Sciarretta, Silvio Ranise
2020	A	`conf`	Exploring Architectures for Cryptographic Access Control Enforcement in the Cloud for Fun and Optimization. AsiaCCS Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
2020	J	`jnl`	Formal Analysis of Mobile Multi-Factor Authentication with Single Sign-On Login. ACM Trans. Priv. Secur. Giada Sciarretta, Roberto Carbone, Silvio Ranise, Luca Viganò
2020	—	`conf`	Micro-Id-Gym: A Flexible Tool for Pentesting Identity Management Protocols in the Wild and in the Laboratory. ETAA@ESORICS Andrea Bisegna, Roberto Carbone, Giulio Pellizzari, Silvio Ranise
2020	—	`conf`	Security Considerations on 5G-Enabled Back-Situation Awareness for CCAM. 5G World Forum Marco Centenaro, Stefano Berlato, Roberto Carbone, Gianfranco Burzio, Giuseppe Faranda Cordella, Silvio Ranise, Roberto Riggio
2020	—	`conf`	The Good, the Bad and the (Not So) Ugly of Out-of-Band Authentication with eID Cards and Push Notifications: Design, Formal and Risk Analysis. CODASPY Marco Pernpruner, Roberto Carbone, Silvio Ranise, Giada Sciarretta
2019	—	`conf`	A Wizard-based Approach for Secure Code Generation of Single Sign-On and Access Delegation Solutions for Mobile Native Apps. ICETE (2) Amir Sharif, Roberto Carbone, Silvio Ranise, Giada Sciarretta
2019	—	`conf`	MuFASA: A Tool for High-level Specification and Analysis of Multi-factor Authentication Protocols. ETAA@ESORICS Federico Sinigaglia, Roberto Carbone, Gabriele Costa, Silvio Ranise
2018	—	`conf`	Design and Security Assessment of Usable Multi-factor Authentication and Single Sign-On Solutions for Mobile Applications - A Workshop Experience Report. Privacy and Identity Management Roberto Carbone, Silvio Ranise, Giada Sciarretta
2018	—	`conf`	Design, Formal Specification and Analysis of Multi-Factor Authentication Solutions with a Single Sign-On Experience. POST Giada Sciarretta, Roberto Carbone, Silvio Ranise, Luca Viganò
2017	J	`jnl`	Anatomy of the Facebook solution for mobile single sign-on: Security assessment and improvements. Comput. Secur. Giada Sciarretta, Roberto Carbone, Silvio Ranise, Alessandro Armando
2017	A	`conf`	Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries. EuroS&P Avinash Sudhodanan, Roberto Carbone, Luca Compagna, Nicolas Dolgin, Alessandro Armando, Umberto Morelli
2017	—	`conf`	PolEnA: Enforcing Fine-grained Permission Policies in Android. SAFECOMP Workshops Gabriele Costa, Federico Sinigaglia, Roberto Carbone
2017	C	`conf`	Strong Authentication for e-Banking: A Survey on European Regulations and Implementations. SECRYPT Federico Sinigaglia, Roberto Carbone, Gabriele Costa
2016	—	`conf`	A delegated authorization solution for smart-city mobile applications. RTSI Giada Sciarretta, Roberto Carbone, Silvio Ranise
2016	A*	`conf`	Attack Patterns for Black-Box Security Testing of Multi-Party Web Applications. NDSS Avinash Sudhodanan, Alessandro Armando, Roberto Carbone, Luca Compagna
2016	J	`jnl`	SATMC: a SAT-based model checker for security protocols, business processes, and security APIs. Int. J. Softw. Tools Technol. Transf. Alessandro Armando, Roberto Carbone, Luca Compagna
2016	C	`conf`	Security of Mobile Single Sign-On: A Rational Reconstruction of Facebook Login Solution. SECRYPT Giada Sciarretta, Alessandro Armando, Roberto Carbone, Silvio Ranise
2015	A	`conf`	Android Permissions Unleashed. CSF Alessandro Armando, Roberto Carbone, Gabriele Costa, Alessio Merlo
2015	A	`conf`	Security Threat Identification and Testing. ICST Roberto Carbone, Luca Compagna, Annibale Panichella, Serena Elisa Ponta
2014	C	`conf`	Attribute based access control for APIs in spring security. SACMAT Alessandro Armando, Roberto Carbone, Eyasu Getahun Chekole, Silvio Ranise
2014	A	`conf`	SATMC: A SAT-Based Model Checker for Security-Critical Systems. TACAS Alessandro Armando, Roberto Carbone, Luca Compagna
2014	—	`conf`	Selective Release of Smart Metering Data in Multi-domain Smart Grids. SmartGridSec Alessandro Armando, Roberto Carbone, Eyasu Getahun Chekole, Claudio Petrazzuolo, Andrea Ranalli, Silvio Ranise
2013	J	`jnl`	An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations. Comput. Secur. Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
2013	B	`conf`	Formal Modeling and Automatic Security Analysis of Two-Factor and Two-Channel Authentication Protocols. NSS Alessandro Armando, Roberto Carbone, Luca Zanetti
2012	—	`conf`	Formal Analysis of a Privacy-Preserving Billing Protocol. SmartGridSec Alessandro Armando, Roberto Carbone, Alessio Merlo
2012	—	`conf`	From Model-Checking to Automated Testing of Security Protocols: Bridging the Gap. TAP@TOOLS Alessandro Armando, Giancarlo Pellegrino, Roberto Carbone, Alessio Merlo, Davide Balzarotti
2012	A	`conf`	The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò
2011	—	`conf`	Automated Analysis of Semantic-Aware Access Control Policies: A Logic-Based Approach. ICSC Alessandro Armando, Roberto Carbone, Silvio Ranise
2011	A	`conf`	Deploy, Adjust and Readjust: Supporting Dynamic Reconfiguration of Policy Enforcement. Middleware Gabriela Gheorghe, Bruno Crispo, Roberto Carbone, Lieven Desmet, Wouter Joosen
2011	Misc	`conf`	From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure? SEC Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
2011	J	`jnl`	LTL model-checking for security protocols. AI Commun. Roberto Carbone
2011	—	`conf`	Towards Formal Validation of Trust and Security in the Internet of Services. Future Internet Assembly Roberto Carbone, Marius Minea, Sebastian Mödersheim, Serena Elisa Ponta, Mathieu Turuani, Luca Viganò
2010	—	`conf`	Model-Checking Driven Security Testing of Web-Based Applications. ICST Workshops Alessandro Armando, Roberto Carbone, Luca Compagna, Keqin Li, Giancarlo Pellegrino
2009	J	`jnl`	LTL model checking for security protocols. J. Appl. Non Class. Logics Alessandro Armando, Roberto Carbone, Luca Compagna
2009	—	`ch.`	Verification of S&D Solutions for Network Communications and Devices. Security and Dependability for Ambient Intelligence Carsten Rudolph, Luca Compagna, Roberto Carbone, Antonio Muñoz, Jürgen Repp
2008	—	`conf`	Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps. FMSE Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Llanos Tobarra
2007	A	`conf`	LTL Model Checking for Security Protocols. CSF Alessandro Armando, Roberto Carbone, Luca Compagna