A dynamic risk-based access control architecture for cloud computing. - Daniel Ricardo dos Santos; Carla Merkle Westphall; Carlos Becker Westphall (NOMS, 2014)

TESTREX: a Testbed for Repeatable Exploits. - Stanislav Dashevskyi; Daniel Ricardo dos Santos; Fabio Massacci; Antonino Sabetta (CSET, 2014)

Privacy-preserving identity federations in the cloud: a proof of concept. - Daniel Ricardo dos Santos; Tiago Jaime Nascimento; Carla Merkle Westphall; Marcos Aurélio Pedroso Leandro; Carlos Becker Westphall (Int. J. Secur. Networks, 2014)

A cyclical evaluation model of information security maturity. - Evandro Alencar Rigon; Carla Merkle Westphall; Daniel Ricardo dos Santos; Carlos Becker Westphall (Inf. Manag. Comput. Secur., 2014)

Automated Synthesis of Run-time Monitors to Enforce Authorization Policies in Business Processes. - Clara Bertolissi; Daniel Ricardo dos Santos; Silvio Ranise (AsiaCCS, 2015)

Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. - Daniel Ricardo dos Santos; Silvio Ranise; Luca Compagna; Serena Elisa Ponta (DBSec, 2015)

Modularity for Security-Sensitive Workflows. - Daniel Ricardo dos Santos; Silvio Ranise; Serena Elisa Ponta (CoRR, 2015)

Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability. - Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (SACMAT, 2016)

Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. - Luca Compagna; Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (TACAS, 2016)

A framework and risk assessment approaches for risk-based access control in the cloud. - Daniel Ricardo dos Santos; Roberto Marinho; Gustavo Roecker Schmitt; Carla Merkle Westphall; Carlos Becker Westphall (J. Netw. Comput. Appl., 2016)

From System Specification to Anomaly Detection (and back). - Davide Fauri; Daniel Ricardo dos Santos; Elisa Costante; Jerry den Hartog; Sandro Etalle; Stefano Tonetta (CPS-SPC@CCS, 2017)

Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. - Luca Compagna; Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (CODASPY, 2017)

On Run-Time Enforcement of Authorization Constraints in Security-Sensitive Workflows. - Daniel Ricardo dos Santos; Silvio Ranise (SEFM, 2017)

A Survey on Workflow Satisfiability, Resiliency, and Related Problems. - Daniel Ricardo dos Santos; Silvio Ranise (CoRR, 2017)

Automatically finding execution scenarios to deploy security-sensitive workflows. - Daniel Ricardo dos Santos; Silvio Ranise; Luca Compagna; Serena Elisa Ponta (J. Comput. Secur., 2017)

Automatic Techniques for the Synthesis and Assisted Deployment of Security Policies in Workflow-based Applications. - Daniel Ricardo dos Santos (2017)

Leveraging Semantics for Actionable Intrusion Detection in Building Automation Systems. - Davide Fauri; Michail Kapsalakis; Daniel Ricardo dos Santos; Elisa Costante; Jerry den Hartog; Sandro Etalle (CRITIS, 2018)

Solving Multi-Objective Workflow Satisfiability Problems with Optimization Modulo Theories Techniques. - Clara Bertolissi; Daniel Ricardo dos Santos; Silvio Ranise (SACMAT, 2018)

Role Inference + Anomaly Detection = Situational Awareness in BACnet Networks. - Davide Fauri; Michail Kapsalakis; Daniel Ricardo dos Santos; Elisa Costante; Jerry den Hartog; Sandro Etalle (DIMVA, 2019)

TestREx: a framework for repeatable exploits. - Stanislav Dashevskyi; Daniel Ricardo dos Santos; Fabio Massacci; Antonino Sabetta (Int. J. Softw. Tools Technol. Transf., 2019)

Security and Privacy in Smart Grids: Challenges, Current Solutions and Future Opportunities. - Ismail Butun; Alexios Lekidis; Daniel Ricardo dos Santos (ICISSP, 2020)

A Matter of Life and Death: Analyzing the Security of Healthcare Networks. - Guillaume Dupont; Daniel Ricardo dos Santos; Elisa Costante; Jerry den Hartog; Sandro Etalle (SEC, 2020)

Similarity-Based Clustering For IoT Device Classification. - Guillaume Dupont; Cristoffer Leite; Daniel Ricardo dos Santos; Elisa Costante; Jerry den Hartog; Sandro Etalle (COINS, 2021)

Leveraging operational technology and the Internet of things to attack smart buildings. - Daniel Ricardo dos Santos; Mario Dagrada; Elisa Costante (J. Comput. Virol. Hacking Tech., 2021)

Actionable Cyber Threat Intelligence for Automated Incident Response. - Cristoffer Leite; Jerry den Hartog; Daniel Ricardo dos Santos; Elisa Costante (NordSec, 2022)

Common Implementation Anti-Patterns Related to Domain Name System (DNS) Resource Record (RR) Processing. - Stanislav Dashevskyi; Daniel Ricardo dos Santos; Jos Wetzels; Amine Amri (RFC, 2022)

Automated Cyber Threat Intelligence Generation on Multi-Host Network Incidents. - Cristoffer Leite; Jerry den Hartog; Daniel Ricardo dos Santos; Elisa Costante (IEEE Big Data, 2023)

Insecure by Design in the Backbone of Critical Infrastructure. - Jos Wetzels; Daniel Ricardo dos Santos; Mohammad Ghafari (CPS-IoT Week Workshops, 2023)

Access Control Vulnerabilities in Network Protocol Implementations: How Attackers Exploit Them and What To Do About It. - Daniel Ricardo dos Santos (SACMAT, 2023)

Using DNS Patterns for Automated Cyber Threat Attribution. - Cristoffer Leite; Jerry den Hartog; Daniel Ricardo dos Santos (ARES, 2024)

Poster: A Multi-step Approach for Classification of Malware Samples. - Arnaldo Sgueglia; Rocco Addabbo; Andrea Di Sorbo; Stanislav Dashevskyi; Daniel Ricardo dos Santos; Corrado Aaron Visaggio (CCS, 2024)

Demonstration of new attacks on three healthcare network protocols in a lab environment. - Guillaume Dupont; Daniel Ricardo dos Santos; Stanislav Dashevskyi; Sangavi Vijayakumar; Sashaank P. Murali; Elisa Costante; Jerry den Hartog; Sandro Etalle (J. Comput. Virol. Hacking Tech., 2024)