A delegated authorization solution for smart-city mobile applications. - Giada Sciarretta; Roberto Carbone; Silvio Ranise (RTSI, 2016)

Security of Mobile Single Sign-On: A Rational Reconstruction of Facebook Login Solution. - Giada Sciarretta; Alessandro Armando; Roberto Carbone; Silvio Ranise (SECRYPT, 2016)

Anatomy of the Facebook solution for mobile single sign-on: Security assessment and improvements. - Giada Sciarretta; Roberto Carbone; Silvio Ranise; Alessandro Armando (Comput. Secur., 2017)

Design, Formal Specification and Analysis of Multi-Factor Authentication Solutions with a Single Sign-On Experience. - Giada Sciarretta; Roberto Carbone; Silvio Ranise; Luca Viganò 001 (POST, 2018)

Design and Security Assessment of Usable Multi-factor Authentication and Single Sign-On Solutions for Mobile Applications - A Workshop Experience Report. - Roberto Carbone; Silvio Ranise; Giada Sciarretta (Privacy and Identity Management, 2018)

A methodology for the design and security assessment of mobile identity management: applications to real-world scenarios. - Giada Sciarretta (2018)

Lost in TLS? No More! Assisted Deployment of Secure TLS Configurations. - Salvatore Manfredi; Silvio Ranise; Giada Sciarretta (DBSec, 2019)

Enroll, and Authentication Will Follow - eID-Based Enrollment for a Customized, Secure, and Frictionless Authentication Experience. - Silvio Ranise; Giada Sciarretta; Alessandro Tomasi 001 (FPS, 2019)

A Wizard-based Approach for Secure Code Generation of Single Sign-On and Access Delegation Solutions for Mobile Native Apps. - Amir Sharif; Roberto Carbone; Silvio Ranise; Giada Sciarretta (ICETE (2), 2019)

Audit-Based Access Control with a Distributed Ledger: Applications to Healthcare Organizations. - Umberto Morelli; Silvio Ranise; Damiano Sartori; Giada Sciarretta; Alessandro Tomasi 001 (STM, 2019)

Blockchain Tree for eHealth. - Sergii Kushch; Silvio Ranise; Giada Sciarretta (CoRR, 2019)

The Good, the Bad and the (Not So) Ugly of Out-of-Band Authentication with eID Cards and Push Notifications: Design, Formal and Risk Analysis. - Marco Pernpruner; Roberto Carbone; Silvio Ranise; Giada Sciarretta (CODASPY, 2020)

TLSAssistant Goes FINSEC A Security Platform Integration Extending Threat Intelligence Language. - Salvatore Manfredi; Silvio Ranise; Giada Sciarretta; Alessandro Tomasi 001 (CPS4CIP, 2020)

Automated and Secure Integration of the OpenID Connect iGov Profile in Mobile Native Applications. - Amir Sharif; Roberto Carbone; Giada Sciarretta; Silvio Ranise (ETAA@ESORICS, 2020)

Formal Analysis of Mobile Multi-Factor Authentication with Single Sign-On Login. - Giada Sciarretta; Roberto Carbone; Silvio Ranise; Luca Viganò 001 (ACM Trans. Priv. Secur., 2020)

Do Security Reports Meet Usability?: Lessons Learned from Using Actionable Mitigations for Patching TLS Misconfigurations. - Salvatore Manfredi; Mariano Ceccato; Giada Sciarretta; Silvio Ranise (ARES, 2021)

Secure Pull Printing with QR Codes and National eID Cards: A Software-oriented Design and an Open-source Implementation. - Matteo Leonelli; Umberto Morelli; Giada Sciarretta; Silvio Ranise (CODASPY, 2021)

A Framework for Security and Risk Analysis of Enrollment Procedures: Application to Fully-remote Solutions based on eDocuments. - Marco Pernpruner; Giada Sciarretta; Silvio Ranise (SECRYPT, 2021)

SoK: A Survey on Technological Trends for (pre)Notified eIDAS Electronic Identity Schemes. - Amir Sharif; Matteo Ranzi; Roberto Carbone; Giada Sciarretta; Silvio Ranise (ARES, 2022)

A Modular and Extensible Framework for Securing TLS. - Matteo Rizzi; Salvatore Manfredi; Giada Sciarretta; Silvio Ranise (CODASPY, 2022)

Demo: TLSAssistant v2: A Modular and Extensible Framework for Securing TLS. - Matteo Rizzi; Salvatore Manfredi; Giada Sciarretta; Silvio Ranise (SACMAT, 2022)

Best current practices for OAuth/OIDC Native Apps: A study of their adoption in popular providers and top-ranked Android clients. - Amir Sharif; Roberto Carbone; Giada Sciarretta; Silvio Ranise (J. Inf. Secur. Appl., 2022)

Empirical Validation on the Usability of Security Reports for Patching TLS Misconfigurations: User- and Case-Studies on Actionable Mitigations. - Salvatore Manfredi; Mariano Ceccato; Giada Sciarretta; Silvio Ranise (J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl., 2022)

Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities. - Amir Sharif; Francesco Antonio Marino; Giada Sciarretta; Giuseppe De Marco; Roberto Carbone; Silvio Ranise (ARES, 2023)

Control is Nothing Without Trust a First Look into Digital Identity Wallet Trends. - Zahra Ebadi Ansaroudi; Roberto Carbone; Giada Sciarretta; Silvio Ranise (DBSec, 2023)

Assurance, Consent and Access Control for Privacy-Aware OIDC Deployments. - Gianluca Sassetti; Amir Sharif; Giada Sciarretta; Roberto Carbone; Silvio Ranise (DBSec, 2023)

Towards a Fine-Grained Threat Model for Video-Based Remote Identity Proofing. - Cecilia Pasquini; Marco Pernpruner; Giada Sciarretta; Silvio Ranise (PKDD/ECML Workshops (2), 2023)

A First Appraisal of Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials. - Andrea Flamini; Silvio Ranise; Giada Sciarretta; Mario Scuro; Amir Sharif; Alessandro Tomasi 001 (SECRYPT, 2023)

Protecting Digital Identity Wallet: A Threat Model in the Age of eIDAS 2.0. - Amir Sharif; Zahra Ebadi Ansaroudi; Giada Sciarretta; Daniela Pöhn; Majid Mollaeefar; Wolfgang Hommel; Silvio Ranise (CRiSIS, 2024)

Beyond Screens: Investigating Identity Proofing for the Metaverse Through Cross-Device Flows. - Marco Pernpruner; Cecilia Pasquini; Giada Sciarretta; Silvio Ranise (iMETA, 2024)

Automating Compliance for Improving TLS Security Postures: An Assessment of Public Administration Endpoints. - Riccardo Germenia; Salvatore Manfredi; Matteo Rizzi; Giada Sciarretta; Alessandro Tomasi 001; Silvio Ranise (SECRYPT, 2024)

On cryptographic mechanisms for the selective disclosure of verifiable credentials. - Andrea Flamini; Giada Sciarretta; Mario Scuro; Amir Sharif; Alessandro Tomasi 001; Silvio Ranise (J. Inf. Secur. Appl., 2024)

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols. - Marco Pernpruner; Roberto Carbone; Giada Sciarretta; Silvio Ranise (IEEE Trans. Dependable Secur. Comput., 2024)

Secure and Reliable Digital Wallets: A Threat Model for Secure Storage in eIDAS 2.0. - Zahra Ebadi Ansaroudi; Amir Sharif; Giada Sciarretta; Francesco Antonio Marino; Silvio Ranise (DBSec, 2025)

Comparison of Credential Status Mechanisms for the Digital Wallet Ecosystem. - Riccardo Germenia; Salvatore Manfredi; Giada Sciarretta; Mario Scuro; Alessandro Tomasi 001 (SECRYPT, 2025)

Public Key Accumulators for Revocation of Non-Anonymous Credentials. - Andrea Flamini; Silvio Ranise; Giada Sciarretta; Mario Scuro; Nicola Smaniotto; Alessandro Tomasi 001 (IACR Cryptol. ePrint Arch., 2025)

Navigating secure storage requirements for EUDI Wallets: a review paper. - Zahra Ebadi Ansaroudi; Giada Sciarretta; Andrea De Maria; Silvio Ranise (EURASIP J. Inf. Secur., 2025)