A Certification Scheme for Electronic Commerce. - Bruno Crispo; T. Mark A. Lomas (Security Protocols Workshop, 1996)

Proactive Password Checking with Decision Trees. - Francesco Bergadano; Bruno Crispo; Giancarlo Ruffo (CCS, 1997)

How to Build Evidence in a Public-Key Infrastructure for Multi-domain Environments. - Bruno Crispo (Security Protocols Workshop, 1997)

Strong Authentication and Privacy with Standard Browsers. - Francesco Bergadano; Bruno Crispo; T. Mark A. Lomas (J. Comput. Secur., 1997)

Delegation of Responsibility (Position Paper). - Bruno Crispo (Security Protocols Workshop, 1998)

Delegation of Responsibility (Transcript of Discussion). - Bruno Crispo (Security Protocols Workshop, 1998)

Secure WWW Transactions Using Standard HTTP and Java Applets. - Francesco Bergadano; Bruno Crispo; M. Eccettuato (USENIX Workshop on Electronic Commerce, 1998)

A New Family of Authentication Protocols. - Ross J. Anderson; Francesco Bergadano; Bruno Crispo; Jong-Hyeon Lee; Charalampos Manifavas; Roger M. Needham (ACM SIGOPS Oper. Syst. Rev., 1998)

High Dictionary Compression for Proactive Password Checking. - Francesco Bergadano; Bruno Crispo; Giancarlo Ruffo (ACM Trans. Inf. Syst. Secur., 1998)

Issues in Multicast Security. - Francesco Bergadano; Davide Cavagnino; Bruno Crispo (Security Protocols Workshop, 1999)

Delegation of responsibility - Bruno Crispo (1999)

Individual Single Source Authentication on the MBone. - Francesco Bergadano; Davide Cavagnino; Bruno Crispo (IEEE International Conference on Multimedia and Expo (I), 2000)

Chained Stream Authentication. - Francesco Bergadano; Davide Cavagnino; Bruno Crispo (Selected Areas in Cryptography, 2000)

Public-Key Crypto-systems Using Symmetric-Key Crypto-algorithms. - Bruce Christianson; Bruno Crispo; James A. Malcolm (Security Protocols Workshop, 2000)

WWW security and trusted third party services. - Bruno Crispo; Peter Landrock; Václav Matyás Jr. (Future Gener. Comput. Syst., 2000)

Reasoning about Accountability within Delegation. - Bruno Crispo; Giancarlo Ruffo (ICICS, 2001)

Delegation Protocols for Electronic Commerce. - Bruno Crispo (ISCC, 2001)

Individual Authentication in Multiparty Communications. - Francesco Bergadano; Davide Cavagnino; Bruno Crispo (Comput. Secur., 2002)

Secure Data Replication over Untrusted Hosts. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum (HotOS, 2003)

A Certificate Revocation Scheme for a Large-Scale Highly Replicated Distributed System. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum (ISCC, 2003)

Enforcing Security Policies for Distributed Objects Applications. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum; Maas Zeeman (Security Protocols Workshop, 2003)

Symmetric Key Authentication Services Revisited. - Bruno Crispo; Bogdan C. Popescu; Andrew S. Tanenbaum (ACISP, 2004)

Supporting Multi-Dimensional Trustworthiness for Grid Workflows. - Elisa Bertino; Bruno Crispo; Pietro Mazzoleni (DELOS, 2004)

A DRM security architecture for home networks. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum; Frank Kamperman (Digital Rights Management Workshop, 2004)

Towards Supporting Fine-Grained Access Control for Grid Resources. - Elisa Bertino; Pietro Mazzoleni; Bruno Crispo; Swaminathan Sivasubramanian; Elena Ferrari 001 (FTDCS, 2004)

Support for multi-level security policies in DRM architectures. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum (NSPW, 2004)

Security for grid-based computing systems issues and challenges. - Elisa Bertino; Bruno Crispo; James Joshi; Wengliang (Kevin) Du; Ravi S. Sandhu (SACMAT, 2004)

Safe and Private Data Sharing with Turtle: Friends Team-Up and Beat the System. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum (Security Protocols Workshop, 2004)

Efficient Integration of Fine-grained Access Control in Large-scale Grid Services. - Pietro Mazzoleni; Bruno Crispo; Swaminathan Sivasubramanian; Elisa Bertino (IEEE SCC, 2005)

Counting Abuses Using Flexible Off-line Credentials. - Kemal Bicakci; Bruno Crispo; Andrew S. Tanenbaum (ACISP, 2005)

RFID Guardian: A Battery-Powered Mobile Device for RFID Privacy Management. - Melanie R. Rieback; Bruno Crispo; Andrew S. Tanenbaum (ACISP, 2005)

P-Hera: Scalable fine-grained access control for P2P infrastructures. - Bruno Crispo; Swaminathan Sivasubramanian; Pietro Mazzoleni; Elisa Bertino (ICPADS (1), 2005)

Securely Replicated Web Documents. - Bogdan C. Popescu; Maarten van Steen; Bruno Crispo; Andrew S. Tanenbaum; Jan Sacha; Ihor Kuz (IPDPS, 2005)

How to incorporate revocation status information into the trust metrics for public-key certification. - Kemal Bicakci; Bruno Crispo; Andrew S. Tanenbaum (SAC, 2005)

Keep on Blockin' in the Free World: Personal Access Control for Low-Cost RFID Tags. - Melanie R. Rieback; Bruno Crispo; Andrew S. Tanenbaum (Security Protocols Workshop, 2005)

Enabling DRM-Preserving Digital Content Redistribution. - Srijith Krishnan Nair; Bogdan C. Popescu; Chandana Gamage; Bruno Crispo; Andrew S. Tanenbaum (CEC, 2005)

Security for the Mythical Air-Dropped Sensor Network. - Chandana Gamage; Kemal Bicakci; Bruno Crispo; Andrew S. Tanenbaum (ISCC, 2006)

A Platform for RFID Security and Privacy Administration (Awarded Best Paper!). - Melanie R. Rieback; Georgi Gaydadjiev; Bruno Crispo; Rutger F. H. Hofman; Andrew S. Tanenbaum (LISA, 2006)

Is Your Cat Infected with a Computer Virus?. - Melanie R. Rieback; Bruno Crispo; Andrew S. Tanenbaum (PerCom, 2006)

XACML policy integration algorithms: not to be confused with XACML policy combination algorithms! - Pietro Mazzoleni; Elisa Bertino; Bruno Crispo (SACMAT, 2006)

An Identity-based Ring Signature Scheme with Enhanced Privacy. - Chandana Gamage; Ben Gras; Bruno Crispo; Andrew S. Tanenbaum (SecureComm, 2006)

Towards a Secure Application-Semantic Aware Policy Enforcement Architecture. - Srijith K. Nair; Bruno Crispo; Andrew S. Tanenbaum (Security Protocols Workshop, 2006)

Taking Sensor Networks from the Lab to the Jungle. - Andrew S. Tanenbaum; Chandana Gamage; Bruno Crispo (Computer, 2006)

Reverse SSL: Improved Server Performance and DoS Resistance for SSL Handshakes. - Kemal Bicakci; Bruno Crispo; Andrew S. Tanenbaum (IACR Cryptol. ePrint Arch., 2006)

RFID malware: truth vs. myth. - Melanie R. Rieback; Bruno Crispo; Andrew S. Tanenbaum (IEEE Secur. Priv., 2006)

RFID malware: Design principles and examples. - Melanie R. Rieback; Patrick N. D. Simpson; Bruno Crispo; Andrew S. Tanenbaum (Pervasive Mob. Comput., 2006)

The Evolution of RFID Security. - Melanie R. Rieback; Bruno Crispo; Andrew S. Tanenbaum (IEEE Pervasive Comput., 2006)

Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices. - Iulia Ion; Boris Dragovic; Bruno Crispo (ACSAC, 2007)

ATLANTIDES: An Architecture for Alert Verification in Network Intrusion Detection Systems. - Damiano Bolzoni; Bruno Crispo; Sandro Etalle (LISA, 2007)

A Hybrid PKI-IBC Based Ephemerizer System. - Srijith Krishnan Nair; Muhammad Torabi Dashti; Bruno Crispo; Andrew S. Tanenbaum (SEC, 2007)

Instructions to Reviewers. - Bruce Christianson; Bruno Crispo; James A. Malcolm; Michael Roe (Security Protocols Workshop, 2007)

Secure web service federation management using tpm virtualisation. - Srijith Krishnan Nair; Ivan Djordjevic; Bruno Crispo; Theodosis Dimitrakos (SWS, 2007)

Design and implementation of a secure wide-area object middleware. - Bogdan C. Popescu; Bruno Crispo; Andrew S. Tanenbaum; Arno Bakker (Comput. Networks, 2007)

A Virtual Machine Based Information Flow Control System for Policy Enforcement. - Srijith Krishnan Nair; Patrick N. D. Simpson; Bruno Crispo; Andrew S. Tanenbaum (REM@ESORICS, 2007)

Enforcing DRM policies across applications. - Srijith Krishnan Nair; Andrew S. Tanenbaum; Gabriela Gheorghe; Bruno Crispo (Digital Rights Management Workshop, 2008)

Floodgate: A Micropayment Incentivized P2P Content Delivery Network. - Srijith Krishnan Nair; Erik Zentveld; Bruno Crispo; Andrew S. Tanenbaum (ICCCN, 2008)

P-CDN: Extending access control capabilities of P2P systems to provide CDN services. - Fatih Turkmen; Pietro Mazzoleni; Bruno Crispo; Elisa Bertino (ISCC, 2008)

An efficient weak secrecy scheme for network coding data dissemination in VANET. - Mario Gerla; Roberto G. Cascella; Zhen Cao; Bruno Crispo; Roberto Battiti (PIMRC, 2008)

RelBAC: Relation Based Access Control. - Fausto Giunchiglia; Rui Zhang 006; Bruno Crispo (SKG, 2008)

Performance evaluation of XACML PDP implementations. - Fatih Turkmen; Bruno Crispo (SWS, 2008)

Weak data secrecy via obfuscation in network coding based content distribution. - Roberto G. Cascella; Zhen Cao; Mario Gerla; Bruno Crispo; Roberto Battiti (Wireless Days, 2008)

Turning Teenagers into Stores. - Srijith Krishnan Nair; Ron Gerrits; Bruno Crispo; Andrew S. Tanenbaum (Computer, 2008)

Towards a Theory of White-Box Security. - Amir Herzberg; Haya Schulmann; Amitabh Saxena; Bruno Crispo (IACR Cryptol. ePrint Arch., 2008)

XACML Policy Integration Algorithms. - Pietro Mazzoleni; Bruno Crispo; Swaminathan Sivasubramanian; Elisa Bertino (ACM Trans. Inf. Syst. Secur., 2008)

Using Description Logics in Relation Based Access Control. - Rui Zhang 006; Alessandro Artale; Fausto Giunchiglia; Bruno Crispo (Description Logics, 2009)

Ontology Driven Community Access Control. - Fausto Giunchiglia; Rui Zhang 006; Bruno Crispo (SPOT@ESWC, 2009)

An efficient and scalable algorithm for policy compatibility in service virtualization. - Eunjin Jung; Bruno Crispo; Lasantha Ranaweera (GRID, 2009)

Anonymous opinion exchange over untrusted social networks. - Mouna Kacimi; Stefano Ortolani; Bruno Crispo (SNS, 2009)

Efficient integration of fine-grained access control and resource brokering in grid. - Pietro Mazzoleni; Bruno Crispo; Swaminathan Sivasubramanian; Elisa Bertino (J. Supercomput., 2009)

A Secure and Scalable Grid-Based Content Management System. - Benjamin Aziz; Alvaro Arenas; Giovanni Cortese; Bruno Crispo; Silvio Causetti (ARES, 2010)

An implementation of event and filter confidentiality in pub/sub systems and its application to e-health. - Mihaela Ion; Giovanni Russello; Bruno Crispo (CCS, 2010)

Time Warp: How Time Affects Privacy in LBSs. - Luciana Marconi; Roberto Di Pietro; Bruno Crispo; Mauro Conti (ICICS, 2010)

Combining Enforcement Strategies in Service Oriented Architectures. - Gabriela Gheorghe; Bruno Crispo; Daniel Schleicher; Tobias Anstett; Frank Leymann; Ralph Mietzner; Ganna Monakova (ICSOC, 2010)

Event Handoff Unobservability in WSN. - Stefano Ortolani; Mauro Conti; Bruno Crispo; Roberto Di Pietro (iNetSec, 2010)

xESB: An Enterprise Service Bus for Access and Usage Control Policy Enforcement. - Gabriela Gheorghe; Stephan Neuhaus; Bruno Crispo (IFIPTM, 2010)

CRePE: Context-Related Policy Enforcement for Android. - Mauro Conti; Vu Thien Nga Nguyen; Bruno Crispo (ISC, 2010)

Reasoning about Relation Based Access Control. - Alessandro Artale; Bruno Crispo; Fausto Giunchiglia; Fatih Turkmen; Rui Zhang 006 (NSS, 2010)

Enforcing UCON Policies on the Enterprise Service Bus. - Gabriela Gheorghe; Paolo Mori; Bruno Crispo; Fabio Martinelli (OTM Conferences (2), 2010)

Bait Your Hook: A Novel Detection Technique for Keyloggers. - Stefano Ortolani; Cristiano Giuffrida; Bruno Crispo (RAID, 2010)

A service-based context management framework for cross-enterprise collaboration. - Fatih Turkmen; Bruno Crispo; Pietro Mazzoleni (SAC, 2010)

Providing Confidentiality in Content-based Publish/subscribe Systems. - Mihaela Ion; Giovanni Russello; Bruno Crispo (SECRYPT, 2010)

MASTER as a Security Management Tool for Policy Compliance. - Bruno Crispo; Gabriela Gheorghe; Valentina Di Giacomo; Domenico Presenza (ServiceWave, 2010)

Censorship-Resilient Communications through Information Scattering. - Stefano Ortolani; Mauro Conti; Bruno Crispo (Security Protocols Workshop, 2010)

Relation-Based Access Control: An Access Control Model for Context-Aware Computing Environment. - Rui Zhang 006; Fausto Giunchiglia; Bruno Crispo; Lingyang Song (Wirel. Pers. Commun., 2010)

Poster: ESPOONERBAC: enforcing security policies in outsourced environments with encrypted RBAC. - Muhammad Rizwan Asghar; Giovanni Russello; Bruno Crispo (CCS, 2011)

Mind how you answer me!: transparently authenticating the user of a smartphone when answering or placing a call. - Mauro Conti; Irina Zachia-Zlatea; Bruno Crispo (AsiaCCS, 2011)

Virtual private social networks. - Mauro Conti; Arbnor Hasani; Bruno Crispo (CODASPY, 2011)

Securing Data Provenance in the Cloud. - Muhammad Rizwan Asghar; Mihaela Ion; Giovanni Russello; Bruno Crispo (iNetSeC, 2011)

Deploy, Adjust and Readjust: Supporting Dynamic Reconfiguration of Policy Enforcement. - Gabriela Gheorghe; Bruno Crispo; Roberto Carbone; Lieven Desmet; Wouter Joosen (Middleware, 2011)

Enforcing Multi-user Access Policies to Encrypted Cloud Databases. - Mihaela Ion; Giovanni Russello; Bruno Crispo (POLICY, 2011)

Towards Run-Time Verification in Access Control. - Fatih Turkmen; Eunjin Jung; Bruno Crispo (POLICY, 2011)

KLIMAX: Profiling Memory Write Patterns to Detect Keystroke-Harvesting Malware. - Stefano Ortolani; Cristiano Giuffrida; Bruno Crispo (RAID, 2011)

Access Control via Lightweight Ontologies. - Fausto Giunchiglia; Bruno Crispo; Rui Zhang 006 (ICSC, 2011)

YAASE: Yet Another Android Security Extension. - Giovanni Russello; Bruno Crispo; Earlence Fernandes; Yury Zhauniarovich (SocialCom/PASSAT, 2011)

Events privacy in WSNs: A new model and its application. - Stefano Ortolani; Mauro Conti; Bruno Crispo; Roberto Di Pietro (WOWMOM, 2011)

Supporting Publication and Subscription Confidentiality in Pub/Sub Networks. - Mihaela Ion; Giovanni Russello; Bruno Crispo (IACR Cryptol. ePrint Arch., 2011)

Memoirs of a browser: a cross-browser detection model for privacy-breaching extensions. - Cristiano Giuffrida; Stefano Ortolani; Bruno Crispo (AsiaCCS, 2012)

Demonstrating the effectiveness of MOSES for separation of execution modes. - Giovanni Russello; Mauro Conti; Bruno Crispo; Earlence Fernandes; Yury Zhauniarovich (CCS, 2012)

Efficient run-time solving of RBAC user authorization queries: pushing the envelope. - Alessandro Armando; Silvio Ranise; Fatih Turkmen; Bruno Crispo (CODASPY, 2012)

Optimal Solutions for Pairing Services on Smartphones: A Strategy to Minimize Energy Consumption. - Mauro Conti; Daniele Diodati; Cristina M. Pinotti; Bruno Crispo (GreenCom, 2012)

MOSES: supporting operation modes on smartphones. - Giovanni Russello; Mauro Conti; Bruno Crispo; Earlence Fernandes (SACMAT, 2012)

Sense-And-Trace: A Privacy Preserving Distributed Geolocation Tracking System. - Eyüp S. Canlar; Mauro Conti; Bruno Crispo; Roberto Di Pietro (Security Protocols Workshop, 2012)

NoisyKey: Tolerating Keyloggers via Keystrokes Hiding. - Stefano Ortolani; Bruno Crispo (HotSec, 2012)

Design and implementation of a confidentiality and access control solution for publish/subscribe systems. - Mihaela Ion; Giovanni Russello; Bruno Crispo (Comput. Networks, 2012)

CRêPE: A System for Enforcing Fine-Grained Context-Related Policies on Android. - Mauro Conti; Bruno Crispo; Earlence Fernandes; Yury Zhauniarovich (IEEE Trans. Inf. Forensics Secur., 2012)

Supporting complex queries and access policies for multi-user encrypted databases. - Muhammad Rizwan Asghar; Giovanni Russello; Bruno Crispo; Mihaela Ion (CCSW, 2013)

Enabling trusted stores for android. - Yury Zhauniarovich; Olga Gadyatskaya; Bruno Crispo (CCS, 2013)

CREPUSCOLO: A collusion resistant privacy preserving location verification system. - Eyüp S. Canlar; Mauro Conti; Bruno Crispo; Roberto Di Pietro (CRiSIS, 2013)

Introducing concurrency in policy-based access control. - Maarten Decat; Bert Lagaisse; Wouter Joosen; Bruno Crispo (MW4NextGen@Middleware, 2013)

Federated Authorization for Software-as-a-Service Applications. - Maarten Decat; Bert Lagaisse; Dimitri Van Landuyt; Bruno Crispo; Wouter Joosen (OTM Conferences, 2013)

ESPOONERBAC: Enforcing security policies in outsourced environments. - Muhammad Rizwan Asghar; Mihaela Ion; Giovanni Russello; Bruno Crispo (Comput. Secur., 2013)

Providing Source Location Privacy in Wireless Sensor Networks: A Survey. - Mauro Conti; Jeroen Willemsen; Bruno Crispo (IEEE Commun. Surv. Tutorials, 2013)

ESPOON: Enforcing Encrypted Security Policies in Outsourced Environments. - Muhammad Rizwan Asghar; Mihaela Ion; Giovanni Russello; Bruno Crispo (IACR Cryptol. ePrint Arch., 2013)

ESPOON ERBAC: Enforcing Security Policies in Outsourced Environments. - Muhammad Rizwan Asghar; Mihaela Ion; Giovanni Russello; Bruno Crispo (IACR Cryptol. ePrint Arch., 2013)

Windows Mobile LiveSD Forensics. - Eyüp S. Canlar; Mauro Conti; Bruno Crispo; Roberto Di Pietro (J. Netw. Comput. Appl., 2013)

Unprivileged Black-Box Detection of User-Space Keyloggers. - Stefano Ortolani; Cristiano Giuffrida; Bruno Crispo (IEEE Trans. Dependable Secur. Comput., 2013)

FM 99.9, Radio Virus: Exploiting FM Radio Broadcasts for Malware Deployment. - Earlence Fernandes; Bruno Crispo; Mauro Conti (IEEE Trans. Inf. Forensics Secur., 2013)

Hybrid Static-Runtime Information Flow and Declassification Enforcement. - Bruno P. S. Rocha; Mauro Conti; Sandro Etalle; Bruno Crispo (IEEE Trans. Inf. Forensics Secur., 2013)

LAKE: A Server-Side Authenticated Key-Establishment with Low Computational Workload. - Kemal Bicakci; Bruno Crispo; Gabriele Oligeri (ACM Trans. Internet Techn., 2013)

Virtual private social networks and a facebook implementation. - Mauro Conti; Arbnor Hasani; Bruno Crispo (ACM Trans. Web, 2013)

Less is more: cipher-suite negotiation for DNSSEC. - Amir Herzberg; Haya Schulmann; Bruno Crispo (ACSAC, 2014)

PIDGIN: privacy-preserving interest and content sharing in opportunistic networks. - Muhammad Rizwan Asghar; Ashish Gehani; Bruno Crispo; Giovanni Russello (AsiaCCS, 2014)

VLOC: An Approach to Verify the Physical Location of a Virtual Machine In Cloud. - Mojtaba Eskandari; Anderson Santana de Oliveira; Bruno Crispo (CloudCom, 2014)

FSquaDRA: Fast Detection of Repackaged Applications. - Yury Zhauniarovich; Olga Gadyatskaya; Bruno Crispo; Francesco La Spina; Ermanno Moser (DBSec, 2014)

MOSES: Supporting and Enforcing Security Profiles on Smartphones. - Yury Zhauniarovich; Giovanni Russello; Mauro Conti; Bruno Crispo; Earlence Fernandes (IEEE Trans. Dependable Secur. Comput., 2014)

Towards Black Box Testing of Android Apps. - Yury Zhauniarovich; Anton Philippov; Olga Gadyatskaya; Bruno Crispo; Fabio Massacci (ARES, 2015)

StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications. - Yury Zhauniarovich; Maqsood Ahmad 001; Olga Gadyatskaya; Bruno Crispo; Fabio Massacci (CODASPY, 2015)

E-GRANT: Enforcing Encrypted Dynamic Security Constraints in the Cloud. - Muhammad Rizwan Asghar; Giovanni Russello; Bruno Crispo (FiCloud, 2015)

Touchstroke: Smartphone User Authentication Based on Touch-Typing Biometrics. - Attaullah Buriro; Bruno Crispo; Filippo Del Frari; Konrad S. Wrona (ICIAP Workshops, 2015)

ITSME: Multi-modal and Unobtrusive Behavioural User Authentication for Smartphones. - Attaullah Buriro; Bruno Crispo; Filippo Del Frari; Jeffrey Klardie; Konrad S. Wrona (PASSWORDS, 2015)

Leveraging Parallel Communications for Minimizing Energy Consumption on Smartphones. - Mauro Conti; Bruno Crispo; Daniele Diodati; Jukka K. Nurminen; Cristina M. Pinotti; Taavi Teemaa (IEEE Trans. Parallel Distributed Syst., 2015)

Age, Gender and Operating-Hand Estimation on Smart Mobile Devices. - Attaullah Buriro; Zahid Akhtar; Bruno Crispo; Filippo Del Frari (BIOSIG, 2016)

PROTECTOR: Privacy-preserving information lookup in content-centric networks. - Muhammad Rizwan Asghar; César Bernardini; Bruno Crispo (ICC, 2016)

Analyzing Gateways' Impact on Caching for Micro CDNs based on CCN. - César Bernardini; Bruno Crispo (DCNET, 2016)

Empirical Analysis on the Use of Dynamic Code Updates in Android and Its Security Implications. - Maqsood Ahmad 001; Bruno Crispo; Teklay Gebremichael (NordSec, 2016)

Hold and Sign: A Novel Behavioral Biometrics for Smartphone User Authentication. - Attaullah Buriro; Bruno Crispo; Filippo Del Frari; Konrad S. Wrona (IEEE Symposium on Security and Privacy Workshops, 2016)

Cyber-Physical Security and Privacy [Guest editors' introduction]. - Alvaro A. Cárdenas; Bruno Crispo (IEEE Internet Comput., 2016)

Evaluation of Motion-Based Touch-Typing Biometrics for Online Banking. - Attaullah Buriro; Sandeep Gupta 002; Bruno Crispo (BIOSIG, 2017)

DLoc: Distributed Auditing for Data Location Compliance in Cloud. - Mojtaba Eskandari; Bruno Crispo; Anderson Santana de Oliveira (DPM/CBT@ESORICS, 2017)

CerberOS: A Resource-Secure OS for Sharing IoT Devices. - Sven Akkermans; Wilfried Daniels; Gowri Sankar Ramachandran; Bruno Crispo; Danny Hughes 001 (EWSN, 2017)

Estimating the Assessment Difficulty of CVSS Environmental Metrics: An Experiment. - Luca Allodi; Silvio Biagioni; Bruno Crispo; Katsiaryna Labunets; Fabio Massacci; Wagner Santos (FDSE, 2017)

Multimodal smartphone user authentication using touchstroke, phone-movement and face patterns. - Zahid Akhtar; Attaullah Buriro; Bruno Crispo; Tiago H. Falk (GlobalSIP, 2017)

Mobile biometrics: Towards a comprehensive evaluation methodology. - Attaullah Buriro; Zahid Akhtar; Bruno Crispo; Sandeep Gupta 002 (ICCST, 2017)

Please hold on: Unobtrusive user authentication using smartphone's built-in sensors. - Attaullah Buriro; Bruno Crispo; Yury Zhauniarovich (ISBA, 2017)

SμV - the security microvisor: a virtualisation-based security middleware for the internet of things. - Wilfried Daniels; Danny Hughes 001; Mahmoud Ammar; Bruno Crispo; Nelson Matthys; Wouter Joosen (Middleware Industry, 2017)

TeICC: targeted execution of inter-component communications in Android. - Maqsood Ahmad 001; Valerio Costamagna; Bruno Crispo; Francesco Bergadano (SAC, 2017)

Analyzing Remote Server Locations for Personal Data Transfers in Mobile Apps. - Mojtaba Eskandari; Bruno Kessler; Maqsood Ahmad 001; Anderson Santana de Oliveira; Bruno Crispo (Proc. Priv. Enhancing Technol., 2017)

Security and privacy in vehicular communications: Challenges and opportunities. - César Bernardini; Muhammad Rizwan Asghar; Bruno Crispo (Veh. Commun., 2017)

SPEED: Secure Provable Erasure for Class-1 IoT Devices. - Mahmoud Ammar; Wilfried Daniels; Bruno Crispo; Danny Hughes 001 (CODASPY, 2018)

DIALERAUTH: A Motion-assisted Touch-based Smartphone User Authentication Scheme. - Attaullah Buriro; Bruno Crispo; Sandeep Gupta 002; Filippo Del Frari (CODASPY, 2018)

SlimIoT: Scalable Lightweight Attestation Protocol for the Internet of Things. - Mahmoud Ammar; Mahdi Washha; Gowri Sankar Ramachandran; Bruno Crispo (DSC, 2018)

SnapAuth: A Gesture-Based Unobtrusive Smartwatch User Authentication Scheme. - Attaullah Buriro; Bruno Crispo; Mojtaba Eskandari; Sandeep Gupta 002; Athar Mahboob; Rutger Van Acker (ETAA@ESORICS, 2018)

AirSign: A Gesture-Based Smartwatch User Authentication. - Attaullah Buriro; Rutger Van Acker; Bruno Crispo; Athar Mahboob (ICCST, 2018)

Polyglot CerberOS: Resource Security, Interoperability and Multi-Tenancy for IoT Services on a Multilingual Platform. - Sven Akkermans; Bruno Crispo; Wouter Joosen; Danny Hughes 001 (MobiQuitous, 2018)

WISE: Lightweight Intelligent Swarm Attestation Scheme for IoT (The Verifier's Perspective). - Mahmoud Ammar; Mahdi Washha; Bruno Crispo (WiMob, 2018)

Large-Scale Analysis of Style Injection by Relative Path Overwrite. - Sajjad Arshad; Seyed Ali Mirheidari; Tobias Lauinger; Bruno Crispo; Engin Kirda; William K. Robertson (WWW, 2018)

Internet of Things: A survey on the security of IoT frameworks. - Mahmoud Ammar; Giovanni Russello; Bruno Crispo (J. Inf. Secur. Appl., 2018)

Demystifying Authentication Concepts in Smartphones: Ways and Types to Secure Access. - Sandeep Gupta 002; Attaullah Buriro; Bruno Crispo (Mob. Inf. Syst., 2018)

Towards Bridging the Gap between Modern and Legacy Automotive ECUs: A Software-Based Security Framework for Legacy ECUs. - Ashok Samraj Thangarajan; Mahmoud Ammar; Bruno Crispo; Danny Hughes 001 (CAVS, 2019)

MicroGuard: Securing Bare-Metal Microcontrollers against Code-Reuse Attacks. - Majid Salehi; Danny Hughes 001; Bruno Crispo (DSC, 2019)

A Risk-Driven Model to Minimize the Effects of Human Factors on Smart Devices. - Sandeep Gupta 002; Attaullah Buriro; Bruno Crispo (ETAA@ESORICS, 2019)

SmartHandle: A Novel Behavioral Biometric-based Authentication Scheme for Smart Lock Systems. - Sandeep Gupta 002; Attaullah Buriro; Bruno Crispo (ICBEA, 2019)

Detecting malicious applications using system services request behavior. - Majid Salehi; Morteza Amini; Bruno Crispo (MobiQuitous, 2019)

Towards a standards-compliant pure-software trusted execution environment for resource-constrained embedded devices. - Hassaan Janjua; Mahmoud Ammar; Bruno Crispo; Danny Hughes 001 (SysTEX@SOSP, 2019)

A Decentralized and Scalable Model for Resource Discovery in IoT Network. - Mohammed B. Alshawki; Bruno Crispo; Péter Ligeti (WiMob, 2019)

PrivICN: Privacy-preserving content retrieval in information-centric networking. - César Bernardini; Samuel Marchal; Muhammad Rizwan Asghar; Bruno Crispo (Comput. Networks, 2019)

DriverAuth: A risk-based multi-modal biometric-based driver authentication scheme for ride-sharing platforms. - Sandeep Gupta 002; Attaullah Buriro; Bruno Crispo (Comput. Secur., 2019)

DriverAuth: Behavioral biometric-based driver authentication mechanism for on-demand ride and ridesharing infrastructure. - Sandeep Gupta 002; Attaullah Buriro; Bruno Crispo (ICT Express, 2019)

AnswerAuth: A bimodal behavioral biometric-based user authentication scheme for smartphones. - Attaullah Buriro; Bruno Crispo; Mauro Conti (J. Inf. Secur. Appl., 2019)

SμV - The Security MicroVisor: A Formally-Verified Software-Based Security Architecture for the Internet of Things. - Mahmoud Ammar; Bruno Crispo; Bart Jacobs 002; Danny Hughes 001; Wilfried Daniels (IEEE Trans. Dependable Secur. Comput., 2019)

Verify&Revive: Secure Detection and Recovery of Compromised Low-end Embedded Devices. - Mahmoud Ammar; Bruno Crispo (ACSAC, 2020)

SIMPLE: A Remote Attestation Approach for Resource-constrained IoT devices. - Mahmoud Ammar; Bruno Crispo; Gene Tsudik (ICCPS, 2020)

μSBS: Static Binary Sanitization of Bare-metal Embedded Devices for Fault Observability. - Majid Salehi; Danny Hughes 001; Bruno Crispo (RAID, 2020)

Cached and Confused: Web Cache Deception in the Wild. - Seyed Ali Mirheidari; Sajjad Arshad; Kaan Onarlioglu; Bruno Crispo; Engin Kirda; William Robertson 002 (USENIX Security Symposium, 2020)

StaDART: Addressing the problem of dynamic code updates in the security analysis of android applications. - Maqsood Ahmad 001; Valerio Costamagna; Bruno Crispo; Francesco Bergadano; Yury Zhauniarovich (J. Syst. Softw., 2020)

WISE: A Lightweight Intelligent Swarm Attestation Scheme for the Internet of Things. - Mahmoud Ammar; Bruno Crispo (ACM Trans. Internet Things, 2020)

The Full Gamut of an Attack: An Empirical Analysis of OAuth CSRF in the Wild. - Michele Benolli; Seyed Ali Mirheidari; Elham Arshad; Bruno Crispo (DIMVA, 2021)

You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures. - Tommaso Innocenti; Seyed Ali Mirheidari; Amin Kharraz; Bruno Crispo; Engin Kirda (DIMVA, 2021)

SIUV: A Smart Car Identity Management and Usage Control System Based on Verifiable Credentials. - Ali Hariri; Subhajit Bandopadhyay; Athanasios Rizos; Theo Dimitrakos; Bruno Crispo; Muttukrishnan Rajarajan (SEC, 2021)

Delegated attestation: scalable remote attestation of commodity CPS by blending proofs of execution with software attestation. - Mahmoud Ammar; Bruno Crispo; Ivan De Oliveira Nunes; Gene Tsudik (WISEC, 2021)

SWIPEGAN: Swiping Data Augmentation Using Generative Adversarial Networks for Smartphone User Authentication. - Attaullah Buriro; Francesco Ricci 001; Bruno Crispo (WiseML@WiSec, 2021)

Risk-Driven Behavioral Biometric-based One-Shot-cum-Continuous User Authentication Scheme. - Attaullah Buriro; Sandeep Gupta 002; Artsiom Yautsiukhin; Bruno Crispo (J. Signal Process. Syst., 2021)

On the (in)security of Memory Protection Units : A Cautionary Note. - Michele Grisafi; Mahmoud Ammar; Bruno Crispo (CSR, 2022)

Mollywood: Subtitles as an attack vector. - Elham Arshad; Giuliano Turri; Bruno Crispo (ISCC, 2022)

End-to-End Encryption for Securing Communications in Industry 4.0. - Sandeep Gupta 002; Tommaso Sacchetti; Bruno Crispo (MENACOMM, 2022)

Generative adversarial networks for subdomain enumeration. - Luca Degani; Francesco Bergadano; Seyed Ali Mirheidari; Fabio Martinelli; Bruno Crispo (SAC, 2022)

WiP: Metamodel for Continuous Authorisation and Usage Control. - Ali Hariri; Amjad Ibrahim; Theo Dimitrakos; Bruno Crispo (SACMAT, 2022)

PISTIS: Trusted Computing Architecture for Low-end Embedded Systems. - Michele Grisafi; Mahmoud Ammar; Marco Roveri; Bruno Crispo (USENIX Security Symposium, 2022)

Web Cache Deception Escalates! - Seyed Ali Mirheidari; Matteo Golinelli; Kaan Onarlioglu; Engin Kirda; Bruno Crispo (USENIX Security Symposium, 2022)

NemesisGuard: Mitigating interrupt latency side channel attacks with static binary rewriting. - Majid Salehi; Gilles De Borger; Danny Hughes 001; Bruno Crispo (Comput. Networks, 2022)

Practical attacks on Login CSRF in OAuth. - Elham Arshad; Michele Benolli; Bruno Crispo (Comput. Secur., 2022)

Step & turn - A novel bimodal behavioral biometric-based user verification scheme for physical access control. - Sandeep Gupta 002; Mouna Kacimi; Bruno Crispo (Comput. Secur., 2022)

RiderAuth: A cancelable touch-signature based rider authentication scheme for driverless taxis. - Sandeep Gupta 002; Kiran B. Raja; Fabio Martinelli; Bruno Crispo (J. Inf. Secur. Appl., 2022)

IDeAuth: A novel behavioral biometric-based implicit deauthentication scheme for smartphones. - Sandeep Gupta 002; Rajesh Kumar; Mouna Kacimi; Bruno Crispo (Pattern Recognit. Lett., 2022)

MPI: Memory Protection for Intermittent Computing. - Michele Grisafi; Mahmoud Ammar; Kasim Sinan Yildirim; Bruno Crispo (IEEE Trans. Inf. Forensics Secur., 2022)

OAuth 2.0 Redirect URI Validation Falls Short, Literally. - Tommaso Innocenti; Matteo Golinelli; Kaan Onarlioglu; Seyed Ali Mirheidari; Bruno Crispo; Engin Kirda (ACSAC, 2023)

μIPS: Software-Based Intrusion Prevention for Bare-Metal Embedded Systems. - Luca Degani; Majid Salehi; Fabio Martinelli; Bruno Crispo (ESORICS (4), 2023)

The Nonce-nce of Web Security: An Investigation of CSP Nonces Reuse. - Matteo Golinelli; Francesco Bonomi; Bruno Crispo (ESORICS Workshops (2), 2023)

Continuous Authorization Architecture for Dynamic Trust Evaluation. - Hussein Joumaa; Ana Petrovska; Ali Hariri; Theo Dimitrakos; Bruno Crispo (IFIPTM, 2023)

AppBox: A Black-Box Application Sandboxing Technique for Mobile App Management Solutions. - Maqsood Ahmad 001; Francesco Bergadano; Valerio Costamagna; Bruno Crispo; Giovanni Russello (ISCC, 2023)

Device Behavioral Profiling for Autonomous Protection Using Deep Neural Networks. - Sandeep Gupta 002; Bruno Crispo (ISCC, 2023)

Mind the CORS. - Matteo Golinelli; Elham Arshad; Dmytro Kashchuk; Bruno Crispo (TPS-ISA, 2023)

Discovery and Identification of Memory Corruption Vulnerabilities on Bare-Metal Embedded Devices. - Majid Salehi; Luca Degani; Marco Roveri; Danny Hughes 001; Bruno Crispo (IEEE Trans. Dependable Secur. Comput., 2023)

A survey of human-computer interaction (HCI) & natural habits-based behavioural biometric modalities for user recognition schemes. - Sandeep Gupta 002; Carsten Maple; Bruno Crispo; Kiran B. Raja; Artsiom Yautsiukhin; Fabio Martinelli (Pattern Recognit., 2023)

AI-enabled IoT penetration testing: state-of-the-art and research challenges. - Claudia Greco; Giancarlo Fortino; Bruno Crispo; Kim-Kwang Raymond Choo (Enterp. Inf. Syst., 2023)

Hidden Web Caches Discovery. - Matteo Golinelli; Bruno Crispo (RAID, 2024)

Obligation Management Framework for Usage Control. - Hussein Joumaa; Ali Hariri; Ana Petrovska; Oleksii Osliak; Theo Dimitrakos; Bruno Crispo (SACMAT, 2024)

CROSSCON: Cross-platform Open Security Stack for Connected Devices. - Bruno Crispo; Marco Roveri; Sandro Pinto 001; Tiago Gomes 001; Aljosa Pasic; Ákos Milánkovich; David Puron; Ainara Garcia; Ziga Putrle; Peter Ten; Malvina Catalano (CoRR, 2024)

EmbedFuzz: High Speed Fuzzing Through Transplantation. - Florian Hofhammer; Qinying Wang; Atri Bhattacharyya; Majid Salehi; Bruno Crispo; Manuel Egele; Mathias Payer; Marcel Busch (CoRR, 2024)

Security and Privacy of Current and Emerging IoT Devices and Systems (Dagstuhl Seminar 24312). - Bruno Crispo; Alexandra Dmitrienko; Gene Tsudik; Wenyuan Xu 001; Christoph Sendner (Dagstuhl Reports, 2024)

FLAShadow: A Flash-based Shadow Stack for Low-end Embedded Systems. - Michele Grisafi; Mahmoud Ammar; Marco Roveri; Bruno Crispo (ACM Trans. Internet Things, 2024)

A Model-based Approach for Cybersecurity Assessment of Off-Road and Defense Vehicles. - Umberto Bellini; Marzieh Kordi; Bruno Crispo; Paolo Lollini; Andrea Bondavalli; Davide Compar (DSN-W, 2025)

Coordinated Enforcement of Obligations in Distributed Usage Control Systems [Work In Progress Paper]. - Hussein Joumaa; Ali Hariri; Theo Dimitrakos; Bruno Crispo (SACMAT, 2025)

Certified Secure Updates for IoT Devices. - Alberto Tacchella; Emanuele Beozzo; Bruno Crispo; Marco Roveri (SEC (1), 2025)

Evaluating a Bimodal User Verification Robustness Against Synthetic Data Attacks. - Sandeep Gupta 002; Rajesh Kumar; Kiran B. Raja; Bruno Crispo; Carsten Maple (SECRYPT, 2025)

Towards autonomous device protection using behavioural profiling and generative artificial intelligence. - Sandeep Gupta 002; Bruno Crispo (IET Cyper-Phys. Syst.: Theory & Appl., 2025)