Alvise Rabitti

Proceedings of the Handbook of Formal Analysis and Verification in Cryptography, 2023

2022

The Security Lottery: Measuring Client-Side Web Security Inconsistencies.

[BibT_eX]

[DOI]

Proceedings of the 31st USENIX Security Symposium, 2022

2021

Measuring Web Session Security at Scale.

[BibT_eX]

[DOI]

Comput. Secur., 2021

2020

Machine Learning for Web Vulnerability Detection: The Case of Cross-Site Request Forgery.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2020

A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web.

[BibT_eX]

[DOI]

Proceedings of the 29th USENIX Security Symposium, 2020

A Hard Lesson: Assessing the HTTPS Deployment of Italian University Websites.

[BibT_eX]

[DOI]

Proceedings of the Fourth Italian Conference on Cyber Security, 2020

2019

Sub-session hijacking on the web: Root causes and prevention.

[BibT_eX]

[DOI]

J. Comput. Secur., 2019

Postcards from the Post-HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem.

[BibT_eX]

[DOI]

Proceedings of the 2019 IEEE Symposium on Security and Privacy, 2019

Semantically Sound Analysis of Content Security Policies.

[BibT_eX]

[DOI]

Proceedings of the Formal Techniques for Distributed Objects, Components, and Systems, 2019

Mitch: A Machine Learning Approach to the Black-Box Detection of CSRF Vulnerabilities.

[BibT_eX]

[DOI]

Proceedings of the IEEE European Symposium on Security and Privacy, 2019

Testing for Integrity Flaws in Web Sessions.

[BibT_eX]

[DOI]

Proceedings of the Computer Security - ESORICS 2019, 2019

2018

Semantics-Based Analysis of Content Security Policy Deployment.

[BibT_eX]

[DOI]

ACM Trans. Web, 2018

Dr Cookie and Mr Token - Web Session Implementations and How to Live with Them.

[BibT_eX]

[DOI]

Proceedings of the Second Italian Conference on Cyber Security, Milan, Italy, February 6th - to, 2018

2017

CCSP: Controlled Relaxation of Content Security Policies by Runtime Policy Composition.

[BibT_eX]

[DOI]

Proceedings of the 26th USENIX Security Symposium, 2017

2016

Static Detection of Collusion Attacks in ARBAC-Based Workflow Systems.

[BibT_eX]

[DOI]

Proceedings of the IEEE 29th Computer Security Foundations Symposium, 2016

Content Security Problems?: Evaluating the Effectiveness of Content Security Policy in the Wild.

[BibT_eX]

[DOI]

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

2015

Formal Verification of Liferay RBAC.

[BibT_eX]

[DOI]

Proceedings of the Engineering Secure Software and Systems - 7th International Symposium, 2015

Compositional Typed Analysis of ARBAC Policies.

[BibT_eX]

[DOI]