Compositional Typed Analysis of ARBAC Policies. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (CSF, 2015)

Formal Verification of Liferay RBAC. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (ESSoS, 2015)

Content Security Problems?: Evaluating the Effectiveness of Content Security Policy in the Wild. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (CCS, 2016)

Static Detection of Collusion Attacks in ARBAC-Based Workflow Systems. - Stefano Calzavara; Alvise Rabitti; Enrico Steffinlongo; Michele Bugliesi (CSF, 2016)

CCSP: Controlled Relaxation of Content Security Policies by Runtime Policy Composition. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (USENIX Security Symposium, 2017)

Dr Cookie and Mr Token - Web Session Implementations and How to Live with Them. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (ITASEC, 2018)

Semantics-Based Analysis of Content Security Policy Deployment. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (ACM Trans. Web, 2018)

Testing for Integrity Flaws in Web Sessions. - Stefano Calzavara; Alvise Rabitti; Alessio Ragazzo; Michele Bugliesi (ESORICS (2), 2019)

Mitch: A Machine Learning Approach to the Black-Box Detection of CSRF Vulnerabilities. - Stefano Calzavara; Mauro Conti; Riccardo Focardi; Alvise Rabitti; Gabriele Tolomei (EuroS&P, 2019)

Semantically Sound Analysis of Content Security Policies. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (FORTE, 2019)

Postcards from the Post-HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem. - Stefano Calzavara; Riccardo Focardi; Matús Nemec; Alvise Rabitti; Marco Squarcina (IEEE Symposium on Security and Privacy, 2019)

Sub-session hijacking on the web: Root causes and prevention. - Stefano Calzavara; Alvise Rabitti; Michele Bugliesi (J. Comput. Secur., 2019)

A Hard Lesson: Assessing the HTTPS Deployment of Italian University Websites. - Stefano Calzavara; Riccardo Focardi; Alvise Rabitti; Lorenzo Soligo (ITASEC, 2020)

A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. - Stefano Calzavara; Sebastian Roth; Alvise Rabitti; Michael Backes 001; Ben Stock (USENIX Security Symposium, 2020)

Machine Learning for Web Vulnerability Detection: The Case of Cross-Site Request Forgery. - Stefano Calzavara; Mauro Conti; Riccardo Focardi; Alvise Rabitti; Gabriele Tolomei (IEEE Secur. Priv., 2020)

Measuring Web Session Security at Scale. - Stefano Calzavara; Hugo Jonker; Benjamin Krumnow; Alvise Rabitti (Comput. Secur., 2021)

The Security Lottery: Measuring Client-Side Web Security Inconsistencies. - Sebastian Roth; Stefano Calzavara; Moritz Wilhelm; Alvise Rabitti; Ben Stock (USENIX Security Symposium, 2022)

Cryptographic Web Applications: from Security Engineering to Formal Analysis. - Michele Bugliesi; Stefano Calzavara; Alvise Rabitti (Handb. Formal Anal. Verification Cryptogr., 2023)

You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements. - Florian Hantke; Stefano Calzavara; Moritz Wilhelm; Alvise Rabitti; Ben Stock (CCS, 2023)