Stefano Calzavara

87 papers A* 15A 14B 1C 1Misc 1Journal 35Unranked 18

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	Cookie Baker: gray-box login automation for web application security testing. Int. J. Inf. Sec. Simone Bozzolan, Stefano Calzavara, Davide Porcu
2025	A*	`conf`	Dynamic Security Analysis of JavaScript: Are We There Yet? WWW Stefano Calzavara, Samuele Casarin, Riccardo Focardi
2025	J	`jnl`	LLM-Assisted Web Measurements. CoRR Simone Bozzolan, Stefano Calzavara, Lorenzo Cazzaro
2025	A	`conf`	Less is More: Boosting Coverage of Web Crawling through Adversarial Multi-Armed Bandit. DSN Lorenzo Cazzaro, Stefano Calzavara, Maksim Kovalkov, Aleksei Stafeev, Giancarlo Pellegrino
2025	—	`conf`	Message from General Chairs. EuroS&P (Workshops) Stefano Calzavara, Paolo Falcarin
2025	J	`jnl`	Stochastic Models for Remote Timing Attacks. Proc. Priv. Enhancing Technol. Simone Bozzolan, Diletta Olliaro, Stefano Calzavara, Andrea Marin, Gianfranco Balbo, Matteo Sereno
2025	—	`conf`	Timber! Poisoning Decision Trees. SaTML Stefano Calzavara, Lorenzo Cazzaro, Massimo Vettori
2025	A*	`conf`	Verifiable Boosted Tree Ensembles. SP Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Giulio Ermanno Pibiri
2025	B	`conf`	Watermarking Decision Tree Ensembles. EDBT Stefano Calzavara, Lorenzo Cazzaro, Donald Gera, Salvatore Orlando
2024	J	`jnl`	An Empirical Analysis of Web Storage and Its Applications to Web Tracking. ACM Trans. Web Zubair Ahmad, Samuele Casarin, Stefano Calzavara
2024	J	`jnl`	Information flow control for comparative privacy analyses. Int. J. Inf. Sec. Zubair Ahmad, Stefano Calzavara, Samuele Casarin, Ben Stock
2024	J	`jnl`	Timber! Poisoning Decision Trees. CoRR Stefano Calzavara, Lorenzo Cazzaro, Massimo Vettori
2024	J	`jnl`	Verifiable Boosted Tree Ensembles. CoRR Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Giulio Ermanno Pibiri
2024	J	`jnl`	Watermarking Decision Tree Ensembles. CoRR Stefano Calzavara, Lorenzo Cazzaro, Donald Gera, Salvatore Orlando
2024	A*	`conf`	Web Platform Threats: Automated Detection of Web Security Issues With WPT. USENIX Security Symposium Pedro Bernardo, Lorenzo Veronese, Valentino Dalla Valle, Stefano Calzavara, Marco Squarcina, Pedro Adão, Matteo Maffei
2023	J	`jnl`	Certifying machine learning models against evasion attacks by program analysis. J. Comput. Secur. Stefano Calzavara, Pietro Ferrara, Claudio Lucchese
2023	—	`ch.`	Cryptographic Web Applications: from Security Engineering to Formal Analysis. Handb. Formal Anal. Verification Cryptogr. Michele Bugliesi, Stefano Calzavara, Alvise Rabitti
2023	—	`conf`	Explainable Global Fairness Verification of Tree-Based Classifiers. SaTML Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi
2023	J	`jnl`	Special issue: 35th IEEE Computer Security Symposium - CSF 2022. J. Comput. Secur. Stefano Calzavara, David A. Naumann
2023	A*	`conf`	Verifiable Learning for Robust Tree Ensembles. CCS Stefano Calzavara, Lorenzo Cazzaro, Giulio Ermanno Pibiri, Nicola Prezza
2023	J	`jnl`	Verifiable Learning for Robust Tree Ensembles. CoRR Stefano Calzavara, Lorenzo Cazzaro, Giulio Ermanno Pibiri, Nicola Prezza
2023	A*	`conf`	You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements. CCS Florian Hantke, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock
2022	J	`jnl`	Beyond robustness: Resilience verification of tree-based classifiers. Comput. Secur. Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
2022	J	`jnl`	Explainable Global Fairness Verification of Tree-Based Classifiers. CoRR Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi
2022	A*	`conf`	The Security Lottery: Measuring Client-Side Web Security Inconsistencies. USENIX Security Symposium Sebastian Roth, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock
2021	A	`conf`	AMEBA: An Adaptive Approach to the Black-Box Evasion of Machine Learning Models. AsiaCCS Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese
2021	J	`jnl`	Beyond Robustness: Resilience Verification of Tree-Based Classifiers. CoRR Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
2021	J	`jnl`	Bulwark: Holistic and Verified Security Monitoring of Web Protocols. CoRR Lorenzo Veronese, Stefano Calzavara, Luca Compagna
2021	A*	`conf`	Can I Take Your Subdomain? Exploring Same-Site Attacks in the Modern Web. USENIX Security Symposium Marco Squarcina, Mauro Tempesta, Lorenzo Veronese, Stefano Calzavara, Matteo Maffei
2021	J	`jnl`	Feature partitioning for robust tree ensembles and their certification in adversarial scenarios. EURASIP J. Inf. Secur. Stefano Calzavara, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
2021	J	`jnl`	Measuring Web Session Security at Scale. Comput. Secur. Stefano Calzavara, Hugo Jonker, Benjamin Krumnow, Alvise Rabitti
2021	A*	`conf`	Reining in the Web's Inconsistencies with Site Policy. NDSS Stefano Calzavara, Tobias Urban, Dennis Tatang, Marius Steffens, Ben Stock
2021	—	`conf`	The Remote on the Local: Exacerbating Web Attacks Via Service Workers Caches. SP (Workshops) Marco Squarcina, Stefano Calzavara, Matteo Maffei
2020	—	`conf`	A Hard Lesson: Assessing the HTTPS Deployment of Italian University Websites. ITASEC Stefano Calzavara, Riccardo Focardi, Alvise Rabitti, Lorenzo Soligo
2020	A*	`conf`	A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. USENIX Security Symposium Stefano Calzavara, Sebastian Roth, Alvise Rabitti, Michael Backes, Ben Stock
2020	—	`conf`	Bulwark: Holistic and Verified Security Monitoring of Web Protocols. ESORICS (1) Lorenzo Veronese, Stefano Calzavara, Luca Compagna
2020	J	`jnl`	Can I Take Your Subdomain? Exploring Related-Domain Attacks in the Modern Web. CoRR Marco Squarcina, Mauro Tempesta, Lorenzo Veronese, Stefano Calzavara, Matteo Maffei
2020	—	`conf`	Certifying Decision Trees Against Evasion Attacks by Program Analysis. ESORICS (2) Stefano Calzavara, Pietro Ferrara, Claudio Lucchese
2020	J	`jnl`	Certifying Decision Trees Against Evasion Attacks by Program Analysis. CoRR Stefano Calzavara, Pietro Ferrara, Claudio Lucchese
2020	A*	`conf`	Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. NDSS Sebastian Roth, Timothy Barron, Stefano Calzavara, Nick Nikiforakis, Ben Stock
2020	J	`jnl`	Feature Partitioning for Robust Tree Ensembles and their Certification in Adversarial Scenarios. CoRR Stefano Calzavara, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
2020	A	`conf`	Language-Based Web Session Integrity. CSF Stefano Calzavara, Riccardo Focardi, Niklas Grimm, Matteo Maffei, Mauro Tempesta
2020	J	`jnl`	Language-Based Web Session Integrity. CoRR Stefano Calzavara, Riccardo Focardi, Niklas Grimm, Matteo Maffei, Mauro Tempesta
2020	J	`jnl`	Machine Learning for Web Vulnerability Detection: The Case of Cross-Site Request Forgery. IEEE Secur. Priv. Stefano Calzavara, Mauro Conti, Riccardo Focardi, Alvise Rabitti, Gabriele Tolomei
2020	—	`conf`	On Compliance of Cookie Purposes with the Purpose Specification Principle. EuroS&P Workshops Imane Fouad, Cristiana Teixeira Santos, Feras Al Kassar, Nataliia Bielova, Stefano Calzavara
2020	—	`conf`	SecWeb 2020 Preface. EuroS&P Workshops Stefano Calzavara, Ben Stock
2020	J	`jnl`	Treant: training evasion-aware decision trees. Data Min. Knowl. Discov. Stefano Calzavara, Claudio Lucchese, Gabriele Tolomei, Seyum Assefa Abebe, Salvatore Orlando
2019	A	`conf`	Adversarial Training of Gradient-Boosted Decision Trees. CIKM Stefano Calzavara, Claudio Lucchese, Gabriele Tolomei
2019	A	`conf`	Mitch: A Machine Learning Approach to the Black-Box Detection of CSRF Vulnerabilities. EuroS&P Stefano Calzavara, Mauro Conti, Riccardo Focardi, Alvise Rabitti, Gabriele Tolomei
2019	A*	`conf`	Postcards from the Post-HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem. IEEE Symposium on Security and Privacy Stefano Calzavara, Riccardo Focardi, Matús Nemec, Alvise Rabitti, Marco Squarcina
2019	C	`conf`	Semantically Sound Analysis of Content Security Policies. FORTE Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2019	J	`jnl`	Sub-session hijacking on the web: Root causes and prevention. J. Comput. Secur. Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2019	—	`conf`	Testing for Integrity Flaws in Web Sessions. ESORICS (2) Stefano Calzavara, Alvise Rabitti, Alessio Ragazzo, Michele Bugliesi
2019	J	`jnl`	Treant: Training Evasion-Aware Decision Trees. CoRR Stefano Calzavara, Claudio Lucchese, Gabriele Tolomei, Seyum Assefa Abebe, Salvatore Orlando
2018	—	`conf`	Dr Cookie and Mr Token - Web Session Implementations and How to Live with Them. ITASEC Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2018	J	`jnl`	Semantics-Based Analysis of Content Security Policy Deployment. ACM Trans. Web Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2018	—	`conf`	Surviving the Web: A Journey into Web Session Security. WWW (Companion Volume) Stefano Calzavara, Riccardo Focardi, Marco Squarcina, Mauro Tempesta
2018	A*	`conf`	WPSE: Fortifying Web Protocols via Browser-Side Security Monitoring. USENIX Security Symposium Stefano Calzavara, Riccardo Focardi, Matteo Maffei, Clara Schneidewind, Marco Squarcina, Mauro Tempesta
2018	J	`jnl`	WPSE: Fortifying Web Protocols via Browser-Side Security Monitoring. CoRR Stefano Calzavara, Riccardo Focardi, Matteo Maffei, Clara Schneidewind, Marco Squarcina, Mauro Tempesta
2017	A	`conf`	A Sound Flow-Sensitive Heap Abstraction for the Static Analysis of Android Applications. CSF Stefano Calzavara, Ilya Grishchenko, Adrien Koutsos, Matteo Maffei
2017	J	`jnl`	A Sound Flow-Sensitive Heap Abstraction for the Static Analysis of Android Applications. CoRR Stefano Calzavara, Ilya Grishchenko, Adrien Koutsos, Matteo Maffei
2017	A*	`conf`	CCSP: Controlled Relaxation of Content Security Policies by Runtime Policy Composition. USENIX Security Symposium Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2017	J	`jnl`	Formal methods for web security. J. Log. Algebraic Methods Program. Michele Bugliesi, Stefano Calzavara, Riccardo Focardi
2017	J	`jnl`	HornDroid: Practical and Sound Static Analysis of Android Applications by SMT Solving. CoRR Stefano Calzavara, Ilya Grishchenko, Matteo Maffei
2017	J	`jnl`	Surviving the Web: A Journey into Web Session Security. ACM Comput. Surv. Stefano Calzavara, Riccardo Focardi, Marco Squarcina, Mauro Tempesta
2016	A*	`conf`	Content Security Problems?: Evaluating the Effectiveness of Content Security Policy in the Wild. CCS Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2016	A	`conf`	HornDroid: Practical and Sound Static Analysis of Android Applications by SMT Solving. EuroS&P Stefano Calzavara, Ilya Grishchenko, Matteo Maffei
2016	A	`conf`	Micro-policies for Web Session Security. CSF Stefano Calzavara, Riccardo Focardi, Niklas Grimm, Matteo Maffei
2016	J	`jnl`	Security protocol specification and verification with AnBx. J. Inf. Secur. Appl. Michele Bugliesi, Stefano Calzavara, Sebastian Mödersheim, Paolo Modesti
2016	A	`conf`	Static Detection of Collusion Attacks in ARBAC-Based Workflow Systems. CSF Stefano Calzavara, Alvise Rabitti, Enrico Steffinlongo, Michele Bugliesi
2015	J	`jnl`	A Supervised Learning Approach to Protect Client Authentication on the Web. ACM Trans. Web Stefano Calzavara, Gabriele Tolomei, Andrea Casini, Michele Bugliesi, Salvatore Orlando
2015	J	`jnl`	Affine Refinement Types for Secure Distributed Programming. ACM Trans. Program. Lang. Syst. Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
2015	A	`conf`	Compositional Typed Analysis of ARBAC Policies. CSF Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2015	J	`jnl`	CookiExt: Patching the browser against session hijacking attacks. J. Comput. Secur. Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Wilayat Khan
2015	A	`conf`	Fine-Grained Detection of Privilege Escalation Attacks on Browser Extensions. ESOP Stefano Calzavara, Michele Bugliesi, Silvia Crafa, Enrico Steffinlongo
2015	—	`conf`	Formal Verification of Liferay RBAC. ESSoS Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
2014	—	`conf`	Automatic and Robust Client-Side Protection for Cookie-Based Sessions. ESSoS Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Wilayat Khan
2014	Misc	`conf`	Client Side Web Session Integrity as a Non-interference Property. ICISS Wilayat Khan, Stefano Calzavara, Michele Bugliesi, Willem De Groef, Frank Piessens
2014	A	`conf`	Provably Sound Browser-Based Enforcement of Web Session Integrity. CSF Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Wilayat Khan, Mauro Tempesta
2014	A*	`conf`	Quite a mess in my cookie jar!: leveraging machine learning to protect web authentication. WWW Stefano Calzavara, Gabriele Tolomei, Michele Bugliesi, Salvatore Orlando
2013	—	`conf`	Lintent: Towards Security Type-Checking of Android Applications. FMOODS/FORTE Michele Bugliesi, Stefano Calzavara, Alvise Spanò
2013	—	`conf`	Logical Foundations of Secure Resource Management in Protocol Implementations. POST Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
2013	—	`—`	Static verification and enforcement of authorization policies. Stefano Calzavara
2012	—	`conf`	Affine Refinement Types for Authentication and Authorization. TGC Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
2012	A	`conf`	Gran: Model Checking Grsecurity RBAC Policies. CSF Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Marco Squarcina
2011	A	`conf`	Resource-Aware Authorization Policies for Statically Typed Cryptographic Protocols. CSF Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
2010	—	`conf`	Secrecy and Authenticity Types for Secure Distributed Messaging. ARSPA-WITS Michele Bugliesi, Stefano Calzavara, Damiano Macedonio