Freeing Cooperation from Servers Tyranny. - Davide Balzarotti; Carlo Ghezzi; Mattia Monga (NETWORKING Workshops, 2002)

Supporting configuration management for virtual workgroups ini a peer-to-peer setting. - Davide Balzarotti; Carlo Ghezzi; Mattia Monga (SEKE, 2002)

Testing network-based intrusion detection signatures using mutant exploits. - Giovanni Vigna; William K. Robertson; Davide Balzarotti (CCS, 2004)

LighTS: a lightweight, customizable tuple space supporting context-aware applications. - Gian Pietro Picco; Davide Balzarotti; Paolo Costa (SAC, 2005)

Supporting Cooperative Software Processes in a Decentralized and Nomadic World. - Davide Balzarotti; Carlo Ghezzi; Mattia Monga (IEEE Trans. Syst. Man Cybern. Part A, 2006)

Testing network intrusion detection systems. - Davide Balzarotti (2006)

Assessing the risk of using vulnerable components. - Davide Balzarotti; Mattia Monga; Sabrina Sicari (Quality of Protection, 2006)

Improving Signature Testing through Dynamic Data Flow Analysis. - Christopher Kruegel; Davide Balzarotti; William K. Robertson; Giovanni Vigna (ACSAC, 2007)

Multi-module vulnerability analysis of web-based applications. - Davide Balzarotti; Marco Cova; Viktoria Felmetsger; Giovanni Vigna (CCS, 2007)

Swaddler: An Approach for the Anomaly-Based Detection of State Violations in Web Applications. - Marco Cova; Davide Balzarotti; Viktoria Felmetsger; Giovanni Vigna (RAID, 2007)

Catch Me, If You Can: Evading Network Signatures with Web-based Polymorphic Worms. - Matthew Van Gundy; Davide Balzarotti; Giovanni Vigna (WOOT, 2007)

The LighTS tuple space framework and its customization for context-aware applications. - Davide Balzarotti; Paolo Costa; Gian Pietro Picco (Web Intell. Agent Syst., 2007)

Are your votes really counted?: testing the security of real-world electronic voting systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (ISSTA, 2008)

Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications. - Davide Balzarotti; Marco Cova; Viktoria Felmetsger; Nenad Jovanovic; Engin Kirda; Christopher Kruegel; Giovanni Vigna (SP, 2008)

ClearShot: Eavesdropping on Keyboard Input from Video. - Davide Balzarotti; Marco Cova; Giovanni Vigna (SP, 2008)

A View on Current Malware Behaviors. - Ulrich Bayer; Imam Habibi; Davide Balzarotti; Engin Kirda (LEET, 2009)

All your contacts are belong to us: automated identity theft attacks on social networks. - Leyla Bilge; Thorsten Strufe; Davide Balzarotti; Engin Kirda (WWW, 2009)

Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries. - Giovanni Vigna; Fredrik Valeur; Davide Balzarotti; William K. Robertson; Christopher Kruegel; Engin Kirda (J. Comput. Secur., 2009)

G-Free: defeating return-oriented programming through gadget-less binaries. - Kaan Onarlioglu; Leyla Bilge; Andrea Lanzi; Davide Balzarotti; Engin Kirda (ACSAC, 2010)

A solution for the automated detection of clickjacking attacks. - Marco Balduzzi; Manuel Egele; Engin Kirda; Davide Balzarotti; Christopher Kruegel (AsiaCCS, 2010)

AccessMiner: using system-centric models for malware protection. - Andrea Lanzi; Davide Balzarotti; Christopher Kruegel; Mihai Christodorescu; Engin Kirda (CCS, 2010)

Honeybot, Your Man in the Middle for Automated Social Engineering. - Tobias Lauinger; Veikko Pankakoski; Davide Balzarotti; Engin Kirda (LEET, 2010)

Efficient Detection of Split Personalities in Malware. - Davide Balzarotti; Marco Cova; Christoph Karlberger; Engin Kirda; Christopher Kruegel; Giovanni Vigna (NDSS, 2010)

Abusing Social Networks for Automated User Profiling. - Marco Balduzzi; Christian Platzer; Thorsten Holz; Engin Kirda; Davide Balzarotti; Christopher Kruegel (RAID, 2010)

An Experience in Testing the Security of Real-World Electronic Voting Systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (IEEE Trans. Software Eng., 2010)

Reverse Social Engineering Attacks in Online Social Networks. - Danesh Irani; Marco Balduzzi; Davide Balzarotti; Engin Kirda; Calton Pu (DIMVA, 2011)

Operating System Interface Obfuscation and the Revealing of Hidden Operations. - Abhinav Srivastava; Andrea Lanzi; Jonathon T. Giffin; Davide Balzarotti (DIMVA, 2011)

Thwarting real-time dynamic unpacking. - Leyla Bilge; Andrea Lanzi; Davide Balzarotti (EUROSEC, 2011)

Quo Vadis? A Study of the Evolution of Input Validation Vulnerabilities in Web Applications. - Theodoor Scholte; Davide Balzarotti; Engin Kirda (Financial Cryptography, 2011)

Measurement and evaluation of a real world deployment of a challenge-response spam filter. - Jelena Isacenkova; Davide Balzarotti (Internet Measurement Conference, 2011)

Exposing the Lack of Privacy in File Hosting Services. - Nick Nikiforakis; Marco Balduzzi; Steven Van Acker; Wouter Joosen; Davide Balzarotti (LEET, 2011)

Automated Discovery of Parameter Pollution Vulnerabilities in Web Applications. - Marco Balduzzi; Carmen Torrano Gimenez; Davide Balzarotti; Engin Kirda (NDSS, 2011)

Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis. - Leyla Bilge; Davide Balzarotti; William K. Robertson; Engin Kirda; Christopher Kruegel (ACSAC, 2012)

Towards network containment in malware analysis systems. - Mariano Graziano; Corrado Leita; Davide Balzarotti (ACSAC, 2012)

Preventing Input Validation Vulnerabilities in Web Applications through Automated Type Analysis. - Theodoor Scholte; William K. Robertson; Davide Balzarotti; Engin Kirda (COMPSAC, 2012)

A quantitative study of accuracy in system call-based malware detection. - Davide Canali; Andrea Lanzi; Davide Balzarotti; Christopher Kruegel; Mihai Christodorescu; Engin Kirda (ISSTA, 2012)

Insights into User Behavior in Dealing with Internet Attacks. - Kaan Onarlioglu; Utku Ozan Yilmaz; Engin Kirda; Davide Balzarotti (NDSS, 2012)

A security analysis of amazon's elastic compute cloud service. - Marco Balduzzi; Jonas Zaddach; Davide Balzarotti; Engin Kirda; Sergio Loureiro (SAC, 2012)

An empirical analysis of input validation mechanisms in web applications and languages. - Theodoor Scholte; William K. Robertson; Davide Balzarotti; Engin Kirda (SAC, 2012)

From Model-Checking to Automated Testing of Security Protocols: Bridging the Gap. - Alessandro Armando; Giancarlo Pellegrino; Roberto Carbone; Alessio Merlo; Davide Balzarotti (TAP@TOOLS, 2012)

Have things changed now? An empirical study on input validation vulnerabilities in web applications. - Theodoor Scholte; Davide Balzarotti; Engin Kirda (Comput. Secur., 2012)

Implementation and implications of a stealth hard-drive backdoor. - Jonas Zaddach; Anil Kurmus; Davide Balzarotti; Erik-Oliver Blass; Aurélien Francillon; Travis Goodspeed; Moitrayee Gupta; Ioannis Koltsidas (ACSAC, 2013)

Behind the Scenes of Online Attacks: an Analysis of Exploitation Behaviors on the Web. - Davide Canali; Davide Balzarotti (NDSS, 2013)

The role of phone numbers in understanding cyber-crime schemes. - Andrei Costin; Jelena Isacenkova; Marco Balduzzi; Aurélien Francillon; Davide Balzarotti (PST, 2013)

Hypervisor Memory Forensics. - Mariano Graziano; Andrea Lanzi; Davide Balzarotti (RAID, 2013)

The role of web hosting providers in detecting compromised websites. - Davide Canali; Davide Balzarotti; Aurélien Francillon (WWW, 2013)

Cybersecurity in the Smart Grid. - Magnus Almgren; Davide Balzarotti; Marina Papatriantafilou; Valentin Tudor (ERCIM News, 2013)

On the effectiveness of risk prediction based on users browsing behavior. - Davide Canali; Leyla Bilge; Davide Balzarotti (AsiaCCS, 2014)

Shades of gray: a closer look at emails in the gray area. - Jelena Isacenkova; Davide Balzarotti (AsiaCCS, 2014)

On the feasibility of software attacks on commodity virtual machine monitors via direct device assignment. - Gábor Pék; Andrea Lanzi; Abhinav Srivastava; Davide Balzarotti; Aurélien Francillon; Christoph Neumann 001 (AsiaCCS, 2014)

Optical Delusions: A Study of Malicious QR Codes in the Wild. - Amin Kharraz; Engin Kirda; William K. Robertson; Davide Balzarotti; Aurélien Francillon (DSN, 2014)

Toward Black-Box Detection of Logic Flaws in Web Applications. - Giancarlo Pellegrino; Davide Balzarotti (NDSS, 2014)

AVATAR: A Framework to Support Dynamic Security Analysis of Embedded Systems' Firmwares. - Jonas Zaddach; Luca Bruno; Aurélien Francillon; Davide Balzarotti (NDSS, 2014)

A Large-Scale Analysis of the Security of Embedded Firmwares. - Andrei Costin; Jonas Zaddach; Aurélien Francillon; Davide Balzarotti (USENIX Security Symposium, 2014)

Through the Looking-Glass, and What Eve Found There. - Luca Bruno; Mariano Graziano; Davide Balzarotti; Aurélien Francillon (WOOT, 2014)

Resource monitoring for the detection of parasite P2P botnets. - Rafael A. Rodríguez-Gómez; Gabriel Maciá-Fernández; Pedro García-Teodoro; Moritz Steiner; Davide Balzarotti (Comput. Networks, 2014)

Inside the SCAM Jungle: A Closer Look at 419 Scam Email Operations. - Jelena Isacenkova; Olivier Thonnard; Andrei Costin; Aurélien Francillon; Davide Balzarotti (EURASIP J. Inf. Secur., 2014)

Exposure: A Passive DNS Analysis Service to Detect and Report Malicious Domains. - Leyla Bilge; Sevil Sen; Davide Balzarotti; Engin Kirda; Christopher Kruegel (ACM Trans. Inf. Syst. Secur., 2014)

PIE: Parser Identification in Embedded Systems. - Lucian Cojocar; Jonas Zaddach; Roel Verdult; Herbert Bos; Aurélien Francillon; Davide Balzarotti (ACSAC, 2015)

The Role of Cloud Services in Malicious Software: Trends and Insights. - Xiao Han; Nizar Kheir; Davide Balzarotti (DIMVA, 2015)

Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. - Amin Kharraz; William K. Robertson; Davide Balzarotti; Leyla Bilge; Engin Kirda (DIMVA, 2015)

SoK: Deep Packer Inspection: A Longitudinal Study of the Complexity of Run-Time Packers. - Xabier Ugarte-Pedrero; Davide Balzarotti; Igor Santos; Pablo García Bringas (IEEE Symposium on Security and Privacy, 2015)

Needles in a Haystack: Mining Information from Public Dynamic Analysis Sandboxes for Malware Intelligence. - Mariano Graziano; Davide Canali; Leyla Bilge; Andrea Lanzi; Davide Balzarotti (USENIX Security Symposium, 2015)

In the Compression Hornet's Nest: A Security Study of Data Compression in Network Services. - Giancarlo Pellegrino; Davide Balzarotti; Stefan Winter 001; Neeraj Suri (USENIX Security Symposium, 2015)

Hypervisor-based malware protection with AccessMiner. - Aristide Fattori; Andrea Lanzi; Davide Balzarotti; Engin Kirda (Comput. Secur., 2015)

The impact of GPU-assisted malware on memory forensics: A case study. - Davide Balzarotti; Roberto Di Pietro; Antonio Villani (Digit. Investig., 2015)

ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks. - Mariano Graziano; Davide Balzarotti; Alain Zidouemba (AsiaCCS, 2016)

PhishEye: Live Monitoring of Sandboxed Phishing Kits. - Xiao Han; Nizar Kheir; Davide Balzarotti (CCS, 2016)

Subverting Operating System Properties Through Evolutionary DKOM Attacks. - Mariano Graziano; Lorenzo Flore; Andrea Lanzi; Davide Balzarotti (DIMVA, 2016)

Google Dorks: Analysis, Creation, and New Defenses. - Flavio Toffalini; Maurizio Abbà; Damiano Carra; Davide Balzarotti (DIMVA, 2016)

RAMBO: Run-Time Packer Analysis with Multiple Branch Observation. - Xabier Ugarte-Pedrero; Davide Balzarotti; Igor Santos; Pablo García Bringas (DIMVA, 2016)

Measuring the Role of Greylisting and Nolisting in Fighting Spam. - Fabio Pagani; Matteo De Astis; Mariano Graziano; Andrea Lanzi; Davide Balzarotti (DSN, 2016)

Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory. - Marius Muench; Fabio Pagani; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna; Davide Balzarotti (RAID, 2016)

Uses and Abuses of Server-Side Requests. - Giancarlo Pellegrino; Onur Catakoglu; Davide Balzarotti; Christian Rossow (RAID, 2016)

Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks. - Stefano Cristalli; Mattia Pagnozzi; Mariano Graziano; Andrea Lanzi; Davide Balzarotti (USENIX Security Symposium, 2016)

Automatic Extraction of Indicators of Compromise for Web Applications. - Onur Catakoglu; Marco Balduzzi; Davide Balzarotti (WWW, 2016)

Evaluation of Deception-Based Web Attacks Detection. - Xiao Han; Nizar Kheir; Davide Balzarotti (MTD@CCS, 2017)

Attacks landscape in the dark side of the web. - Onur Catakoglu; Marco Balduzzi; Davide Balzarotti (SAC, 2017)

A Lustrum of Malware Network Communication: Evolution and Insights. - Chaz Lever; Platon Kotzias; Davide Balzarotti; Juan Caballero; Manos Antonakakis (IEEE Symposium on Security and Privacy, 2017)

Extension Breakdown: Security Analysis of Browsers Extension Resources Control Policies. - Iskander Sánchez-Rola; Igor Santos; Davide Balzarotti (USENIX Security Symposium, 2017)

The Onions Have Eyes: A Comprehensive Structure and Privacy Analysis of Tor Hidden Services. - Iskander Sánchez-Rola; Davide Balzarotti; Igor Santos (WWW, 2017)

Clock Around the Clock: Time-Based Device Fingerprinting. - Iskander Sánchez-Rola; Igor Santos; Davide Balzarotti (CCS, 2018)

Beyond Precision and Recall: Understanding Uses (and Misuses) of Similarity Hashes in Binary Analysis. - Fabio Pagani; Matteo Dell'Amico; Davide Balzarotti (CODASPY, 2018)

What You Corrupt Is Not What You Crash: Challenges in Fuzzing Embedded Devices. - Marius Muench; Jan Stijohann; Frank Kargl; Aurélien Francillon; Davide Balzarotti (NDSS, 2018)

Understanding Linux Malware. - Emanuele Cozzi; Mariano Graziano; Yanick Fratantonio; Davide Balzarotti (IEEE Symposium on Security and Privacy, 2018)

Deception Techniques in Computer Security: A Research Perspective. - Xiao Han; Nizar Kheir; Davide Balzarotti (ACM Comput. Surv., 2018)

BakingTimer: privacy analysis of server-side request processing time. - Iskander Sánchez-Rola; Davide Balzarotti; Igor Santos (ACSAC, 2019)

Can I Opt Out Yet?: GDPR and the Global Illusion of Cookie Control. - Iskander Sánchez-Rola; Matteo Dell'Amico; Platon Kotzias; Davide Balzarotti; Leyla Bilge; Pierre-Antoine Vervier; Igor Santos (AsiaCCS, 2019)

Toward the Analysis of Embedded Firmware through Automated Re-hosting. - Eric Gustafson; Marius Muench; Chad Spensky; Nilo Redini; Aravind Machiry; Yanick Fratantonio; Davide Balzarotti; Aurélien Francillon; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (RAID, 2019)

Back to the Whiteboard: a Principled Approach for the Assessment and Design of Memory Forensic Techniques. - Fabio Pagani; Davide Balzarotti (USENIX Security Symposium, 2019)

Introducing the Temporal Dimension to Memory Forensics. - Fabio Pagani; Oleksii Fedorov; Davide Balzarotti (ACM Trans. Priv. Secur., 2019)

A Close Look at a Daily Dataset of Malware Samples. - Xabier Ugarte-Pedrero; Mariano Graziano; Davide Balzarotti (ACM Trans. Priv. Secur., 2019)

The Tangled Genealogy of IoT Malware. - Emanuele Cozzi; Pierre-Antoine Vervier; Matteo Dell'Amico; Yun Shen; Leyla Bilge; Davide Balzarotti (ACSAC, 2020)

When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features. - Hojjat Aghakhani; Fabio Gritti; Francesco Mecca; Martina Lindorfer; Stefano Ortolani; Davide Balzarotti; Giovanni Vigna; Christopher Kruegel (NDSS, 2020)

Prevalence and Impact of Low-Entropy Packing Schemes in the Malware Ecosystem. - Alessandro Mantovani; Simone Aonzo; Xabier Ugarte-Pedrero; Alessio Merlo; Davide Balzarotti (NDSS, 2020)

SoK: Cyber Insurance - Technical Challenges and a System Security Roadmap. - Savino Dambra; Leyla Bilge; Davide Balzarotti (SP, 2020)

Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web. - Iskander Sánchez-Rola; Davide Balzarotti; Christopher Kruegel; Giovanni Vigna; Igor Santos (WWW, 2020)

Cookies from the Past: Timing Server-side Request Processing Code for History Sniffing. - Iskander Sánchez-Rola; Davide Balzarotti; Igor Santos (DTRAP, 2020)

SoK: Enabling Security Analyses of Embedded Systems via Rehosting. - Andrew Fasano; Tiemoko Ballo; Marius Muench; Tim Leek; Alexander Bulekov; Brendan Dolan-Gavitt; Manuel Egele; Aurélien Francillon; Long Lu; Nick Gregory; Davide Balzarotti; William Robertson 002 (AsiaCCS, 2021)

Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone. - Davide Quarta; Michele Ianni; Aravind Machiry; Yanick Fratantonio; Eric Gustafson; Davide Balzarotti; Martina Lindorfer; Giovanni Vigna; Christopher Kruegel (Checkmate@CCS, 2021)

Does Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes. - Alexander Küchler; Alessandro Mantovani; Yufei Han 001; Leyla Bilge; Davide Balzarotti (NDSS, 2021)

Lost in the Loader: The Many Faces of the Windows PE File Format. - Dario Nisi; Mariano Graziano; Yanick Fratantonio; Davide Balzarotti (RAID, 2021)

Trust, But Verify: A Longitudinal Analysis Of Android OEM Compliance and Customization. - Andrea Possemato; Simone Aonzo; Davide Balzarotti; Yanick Fratantonio (SP, 2021)

When Malware Changed Its Mind: An Empirical Study of Variable Program Behaviors in the Real World. - Erin Avllazagaj; Ziyun Zhu; Leyla Bilge; Davide Balzarotti; Tudor Dumitras (USENIX Security Symposium, 2021)

The Use of Likely Invariants as Feedback for Fuzzers. - Andrea Fioraldi; Daniele Cono D'Elia; Davide Balzarotti (USENIX Security Symposium, 2021)

Pre-processing memory dumps to improve similarity score of Windows modules. - Miguel Martín-Pérez; Ricardo J. Rodríguez; Davide Balzarotti (Comput. Secur., 2021)

Longitudinal Study of the Prevalence of Malware Evasive Techniques. - Lorenzo Maffia; Dario Nisi; Platon Kotzias; Giovanni Lagorio; Simone Aonzo; Davide Balzarotti (CoRR, 2021)

The evidence beyond the wall: Memory forensics in SGX environments. - Flavio Toffalini; Andrea Oliveri; Mariano Graziano; Jianying Zhou 001; Davide Balzarotti (Digit. Investig., 2021)

Certificate Transparency in Google Chrome: Past, Present, and Future. - Emily Stark 001; Joe DeBlasio; Devon O'Brien; Davide Balzarotti; William Enck; Samuel King; Angelos Stavrou (IEEE Secur. Priv., 2021)

The Convergence of Source Code and Binary Vulnerability Discovery - A Case Study. - Alessandro Mantovani; Luca Compagna; Yan Shoshitaishvili; Davide Balzarotti (AsiaCCS, 2022)

LibAFL: A Framework to Build Modular and Reusable Fuzzers. - Andrea Fioraldi; Dominik Christian Maier; Dongjia Zhang; Davide Balzarotti (CCS, 2022)

Fuzzing with Data Dependency Information. - Alessandro Mantovani; Andrea Fioraldi; Davide Balzarotti (EuroS&P, 2022)

Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications. - Feras Al Kassar; Giulia Clerici; Luca Compagna; Davide Balzarotti; Fabian Yamaguchi (NDSS, 2022)

Journey to the Center of the Cookie Ecosystem: Unraveling Actors' Roles and Relationships. - Iskander Sánchez-Rola; Matteo Dell'Amico; Davide Balzarotti; Pierre-Antoine Vervier; Leyla Bilge (SP, 2022)

When Sally Met Trackers: Web Tracking From the Users' Perspective. - Savino Dambra; Iskander Sánchez-Rola; Leyla Bilge; Davide Balzarotti (USENIX Security Symposium, 2022)

RE-Mind: a First Look Inside the Mind of a Reverse Engineer. - Alessandro Mantovani; Simone Aonzo; Yanick Fratantonio; Davide Balzarotti (USENIX Security Symposium, 2022)

How Machine Learning Is Solving the Binary Function Similarity Problem. - Andrea Marcelli; Mariano Graziano; Xabier Ugarte-Pedrero; Yanick Fratantonio; Mohamad Mansouri; Davide Balzarotti (USENIX Security Symposium, 2022)

Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs. - Jayakrishna Vadayath; Moritz Eckert; Kyle Zeng; Nicolaas Weideman; Gokulkrishna Praveen Menon; Yanick Fratantonio; Davide Balzarotti; Adam Doupé; Tiffany Bao; Ruoyu Wang 001; Christophe Hauser; Yan Shoshitaishvili (USENIX Security Symposium, 2022)

In the Land of MMUs: Multiarchitecture OS-Agnostic Virtual Memory Forensics. - Andrea Oliveri; Davide Balzarotti (ACM Trans. Priv. Secur., 2022)

AutoProfile: Towards Automated Profile Generation for Memory Analysis. - Fabio Pagani; Davide Balzarotti (ACM Trans. Priv. Secur., 2022)

Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance. - Savino Dambra; Yufei Han 001; Simone Aonzo; Platon Kotzias; Antonino Vitale; Juan Caballero; Davide Balzarotti; Leyla Bilge (CCS, 2023)

Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. - Biagio Montaruli; Luca Demetrio; Maura Pintor; Luca Compagna; Davide Balzarotti; Battista Biggio (AISec@CCS, 2023)

CrabSandwich: Fuzzing Rust with Rust (Registered Report). - Addison Crump; Dongjia Zhang; Syeda Mahnur Asif; Dominik Christian Maier; Andrea Fioraldi; Thorsten Holz; Davide Balzarotti (FUZZING, 2023)

An OS-agnostic Approach to Memory Forensics. - Andrea Oliveri; Matteo Dell'Amico; Davide Balzarotti (NDSS, 2023)

Humans vs. Machines in Malware Classification. - Simone Aonzo; Yufei Han 001; Alessandro Mantovani; Davide Balzarotti (USENIX Security Symposium, 2023)

WHIP: Improving Static Vulnerability Detection in Web Application by Forcing tools to Collaborate. - Feras Al Kassar; Luca Compagna; Davide Balzarotti (USENIX Security Symposium, 2023)

Rods with Laser Beams: Understanding Browser Fingerprinting on Phishing Pages. - Iskander Sánchez-Rola; Leyla Bilge; Davide Balzarotti; Armin Buescher; Petros Efstathopoulos (USENIX Security Symposium, 2023)

Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning. - Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (CoRR, 2023)

Dissecting American Fuzzy Lop: A FuzzBench Evaluation. - Andrea Fioraldi; Alessandro Mantovani; Dominik Christian Maier; Davide Balzarotti (ACM Trans. Softw. Eng. Methodol., 2023)

Dissecting American Fuzzy Lop - A FuzzBench Evaluation - RCR Report. - Andrea Fioraldi; Alessandro Mantovani; Dominik Christian Maier; Davide Balzarotti (ACM Trans. Softw. Eng. Methodol., 2023)

A Comparison of Systemic and Systematic Risks of Malware Encounters in Consumer and Enterprise Environments. - Savino Dambra; Leyla Bilge; Davide Balzarotti (ACM Trans. Priv. Secur., 2023)

Unmasking the Veiled: A Comprehensive Analysis of Android Evasive Malware. - Antonio Ruggia; Dario Nisi; Savino Dambra; Alessio Merlo; Davide Balzarotti; Simone Aonzo (AsiaCCS, 2024)

On Understanding and Forecasting Fuzzers Performance with Static Analysis. - Dongjia Zhang; Andrea Fioraldi; Davide Balzarotti (CCS, 2024)

Malware Research: History, Milestones, and Open Questions. - Davide Balzarotti (CODASPY, 2024)

Predictive Context-sensitive Fuzzing. - Pietro Borrello; Andrea Fioraldi; Daniele Cono D'Elia; Davide Balzarotti; Leonardo Querzoni; Cristiano Giuffrida (NDSS, 2024)

ModSec-Learn: Boosting ModSecurity with Machine Learning. - Christian Scano; Giuseppe Floris; Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (CoRR, 2024)

On the inadequacy of open-source application logs for digital forensics. - Afiqah Azahari; Davide Balzarotti (Forensic Sci. Int. Digit. Investig., 2024)

A study on the evolution of kernel data types used in memory forensics and their dependency on compilation options. - Andrea Oliveri; Nikola Nemes; Branislav Andjelic; Davide Balzarotti (Digit. Investig., 2025)

ModSec-AdvLearn: Countering Adversarial SQL Injections With Robust Machine Learning. - Giuseppe Floris; Christian Scano; Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (IEEE Trans. Inf. Forensics Secur., 2025)

A Comprehensive Quantification of Inconsistencies in Memory Dumps. - Andrea Oliveri; Davide Balzarotti (CoRR, 2025)

The Dark Side of Native Code on Android. - Antonio Ruggia; Andrea Possemato; Savino Dambra; Alessio Merlo; Simone Aonzo; Davide Balzarotti (ACM Trans. Priv. Secur., 2025)