System Description: RDL : Rewrite and Decision Procedure Laboratory. - Alessandro Armando; Luca Compagna; Silvio Ranise (IJCAR, 2001)

The AVISS Security Protocol Analysis Tool. - Alessandro Armando; David A. Basin; Mehdi Bouallagui; Yannick Chevalier; Luca Compagna; Sebastian Mödersheim; Michaël Rusinowitch; Mathieu Turuani; Luca Viganò 001; Laurent Vigneron (CAV, 2002)

Automatic SAT-Compilation of Protocol Insecurity Problems via Reduction to Planning. - Alessandro Armando; Luca Compagna (FORTE, 2002)

SAT-Based Model-Checking of Security Protocols Using Planning Graph Analysis. - Alessandro Armando; Luca Compagna; Pierre Ganty (FME, 2003)

Abstraction-Driven SAT-based Analysis of Security Protocols. - Alessandro Armando; Luca Compagna (SAT, 2003)

SATMC: A SAT-Based Model Checker for Security Protocols. - Alessandro Armando; Luca Compagna (JELIA, 2004)

Automatic Compilation of Protocol Insecurity Problems into Logic Programming. - Alessandro Armando; Luca Compagna; Yuliya Lierler (JELIA, 2004)

An Optimized Intruder Model for SAT-based Model-Checking of Security Protocols. - Alessandro Armando; Luca Compagna (ARSPA@IJCAR, 2004)

Rewriting and Decision Procedure Laboratory: Combining Rewriting, Satisfiability Checking, and Lemma Speculation. - Alessandro Armando; Luca Compagna; Silvio Ranise (Mechanizing Mathematical Reasoning, 2005)

The AVISPA Tool for the Automated Validation of Internet Security Protocols and Applications. - Alessandro Armando; David A. Basin; Yohan Boichut; Yannick Chevalier; Luca Compagna; Jorge Cuéllar; Paul Hankes Drielsma; Pierre-Cyrille Héam; Olga Kouchnarenko; Jacopo Mantovani; Sebastian Mödersheim; David von Oheimb; et al. (CAV, 2005)

How to capture, model, and verify the knowledge of legal, security, and privacy experts: a pattern-based approach. - Luca Compagna; Paul El Khoury; Fabio Massacci; Reshma Thomas; Nicola Zannone (ICAIL, 2007)

Preface. - Luca Compagna; Volkmar Lotz; Fabio Massacci (STM@ESORICS, 2007)

Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps. - Alessandro Armando; Roberto Carbone; Luca Compagna; Jorge Cuéllar; Llanos Tobarra (FMSE, 2008)

SAT-based model-checking for security protocols analysis. - Alessandro Armando; Luca Compagna (Int. J. Inf. Sec., 2008)

Towards Adaptive Security for Ubiquitous Computing Systems. - Volkmar Lotz; Luca Compagna; Konrad S. Wrona (Handbook of Research on Ubiquitous Computing Technology for Real Time Enterprises, 2008)

Towards Validating Security Protocol Deployment in the Wild. - Luca Compagna; Ulrich Flegel; Volkmar Lotz (COMPSAC (2), 2009)

Validating Security Protocols under the General Attacker. - Wihem Arsac; Giampaolo Bella; Xavier Chantry; Luca Compagna (ARSPA-WITS, 2009)

Attacking Each Other. - Wihem Arsac; Giampaolo Bella; Xavier Chantry; Luca Compagna (Security Protocols Workshop, 2009)

How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns. - Luca Compagna; Paul El Khoury; Alzbeta Krausová; Fabio Massacci; Nicola Zannone (Artif. Intell. Law, 2009)

LTL model checking for security protocols. - Alessandro Armando; Roberto Carbone; Luca Compagna (J. Appl. Non Class. Logics, 2009)

Verification of S&D Solutions for Network Communications and Devices. - Carsten Rudolph; Luca Compagna; Roberto Carbone; Antonio Muñoz 001; Jürgen Repp (Security and Dependability for Ambient Intelligence, 2009)

Model-Checking Driven Security Testing of Web-Based Applications. - Alessandro Armando; Roberto Carbone; Luca Compagna; Keqin Li 002; Giancarlo Pellegrino (ICST Workshops, 2010)

A Dynamic Security Framework for Ambient Intelligent Systems: A Smart-Home Based eHealth Application. - Luca Compagna; Paul El Khoury; Fabio Massacci; Ayda Saïdane (Trans. Comput. Sci., 2010)

Security Validation of Business Processes via Model-Checking. - Wihem Arsac; Luca Compagna; Giancarlo Pellegrino; Serena Elisa Ponta (ESSoS, 2011)

Security validation tool for business processes. - Wihem Arsac; Luca Compagna; Samuel Paul Kaluvuri; Serena Elisa Ponta (SACMAT, 2011)

From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure? - Alessandro Armando; Roberto Carbone; Luca Compagna; Jorge Cuéllar; Giancarlo Pellegrino; Alessandro Sorniotti (SEC, 2011)

Multi-Attacker Protocol Validation. - Wihem Arsac; Giampaolo Bella; Xavier Chantry; Luca Compagna (J. Autom. Reason., 2011)

The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. - Alessandro Armando; Wihem Arsac; Tigran Avanesov; Michele Barletta; Alberto Calvi; Alessandro Cappai; Roberto Carbone; Yannick Chevalier; Luca Compagna; Jorge Cuéllar; Gabriel Erzse; Simone Frau; et al. (TACAS, 2012)

Business Process Compliance via Security Validation as a Service. - Luca Compagna; Pierre Guilleminot; Achim D. Brucker (ICST, 2013)

A Tool for Supporting Developers in Analyzing the Security of Web-Based Security Protocols. - Giancarlo Pellegrino; Luca Compagna; Thomas Morreggia (ICTSS, 2013)

An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations. - Alessandro Armando; Roberto Carbone; Luca Compagna; Jorge Cuéllar; Giancarlo Pellegrino; Alessandro Sorniotti (Comput. Secur., 2013)

From Research Results to Strategy: A Mapping Exercise. - Michele Bezzi; Frances Cleary; Luca Compagna (ISSE, 2014)

SATMC: A SAT-Based Model Checker for Security-Critical Systems. - Alessandro Armando; Roberto Carbone; Luca Compagna (TACAS, 2014)

Compliance Validation of Secure Service Compositions. - Achim D. Brucker; Luca Compagna; Pierre Guilleminot (Secure and Trustworthy Service Composition, 2014)

Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. - Daniel Ricardo dos Santos; Silvio Ranise; Luca Compagna; Serena Elisa Ponta (DBSec, 2015)

Security Threat Identification and Testing. - Roberto Carbone; Luca Compagna; Annibale Panichella; Serena Elisa Ponta (ICST, 2015)

Attack Patterns for Black-Box Security Testing of Multi-Party Web Applications. - Avinash Sudhodanan; Alessandro Armando; Roberto Carbone; Luca Compagna (NDSS, 2016)

Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. - Luca Compagna; Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (TACAS, 2016)

SATMC: a SAT-based model checker for security protocols, business processes, and security APIs. - Alessandro Armando; Roberto Carbone; Luca Compagna (Int. J. Softw. Tools Technol. Transf., 2016)

Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. - Luca Compagna; Daniel Ricardo dos Santos; Serena Elisa Ponta; Silvio Ranise (CODASPY, 2017)

Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries. - Avinash Sudhodanan; Roberto Carbone; Luca Compagna; Nicolas Dolgin; Alessandro Armando; Umberto Morelli (EuroS&P, 2017)

Automatically finding execution scenarios to deploy security-sensitive workflows. - Daniel Ricardo dos Santos; Silvio Ranise; Luca Compagna; Serena Elisa Ponta (J. Comput. Secur., 2017)

Bulwark: Holistic and Verified Security Monitoring of Web Protocols. - Lorenzo Veronese; Stefano Calzavara; Luca Compagna (ESORICS (1), 2020)

A preliminary study on the adoption and effectiveness of SameSite cookies as a CSRF defence. - Luca Compagna; Hugo Jonker; Johannes Krochewski; Benjamin Krumnow; Merve Sahin (EuroS&P Workshops, 2021)

The Convergence of Source Code and Binary Vulnerability Discovery - A Case Study. - Alessandro Mantovani; Luca Compagna; Yan Shoshitaishvili; Davide Balzarotti (AsiaCCS, 2022)

Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications. - Feras Al Kassar; Giulia Clerici; Luca Compagna; Davide Balzarotti; Fabian Yamaguchi (NDSS, 2022)

Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. - Biagio Montaruli; Luca Demetrio; Maura Pintor; Luca Compagna; Davide Balzarotti; Battista Biggio (AISec@CCS, 2023)

WHIP: Improving Static Vulnerability Detection in Web Application by Forcing tools to Collaborate. - Feras Al Kassar; Luca Compagna; Davide Balzarotti (USENIX Security Symposium, 2023)

Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning. - Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (CoRR, 2023)

CSRFing the SSO Waves: Security Testing of SSO-Based Account Linking Process. - Andrea Bisegna; Matteo Bitussi; Roberto Carbone; Luca Compagna; Silvio Ranise; Avinash Sudhodanan (EuroS&P, 2024)

ModSec-Learn: Boosting ModSecurity with Machine Learning. - Christian Scano; Giuseppe Floris; Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (CoRR, 2024)

FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds. - Soumaya Boussaha; Lukas Hock; Miguel Bermejo; Rubén Cuevas Rumín; Ángel Cuevas Rumín; David Klein 001; Martin Johns; Luca Compagna; Daniele Antonioli; Thomas Barber (Proc. Priv. Enhancing Technol., 2024)

ModSec-AdvLearn: Countering Adversarial SQL Injections With Robust Machine Learning. - Giuseppe Floris; Christian Scano; Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (IEEE Trans. Inf. Forensics Secur., 2025)