ZenHackAdemy: Ethical Hacking @ DIBRIS. - Luca Demetrio; Giovanni Lagorio; Marina Ribaudo; Enrico Russo 001; Andrea Valenza (CSEDU (1), 2019)

Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries. - Luca Demetrio; Battista Biggio; Giovanni Lagorio; Fabio Roli; Alessandro Armando (ITASEC, 2019)

WAF-A-MoLE: evading web application firewalls through adversarial machine learning. - Luca Demetrio; Andrea Valenza; Gabriele Costa 001; Giovanni Lagorio (SAC, 2020)

Efficient Black-box Optimization of Adversarial Windows Malware with Constrained Manipulations. - Luca Demetrio; Battista Biggio; Giovanni Lagorio; Fabio Roli; Alessandro Armando (CoRR, 2020)

WAF-A-MoLE: An adversarial tool for assessing ML-based WAFs. - Andrea Valenza; Luca Demetrio; Gabriele Costa 001; Giovanni Lagorio (SoftwareX, 2020)

Slope: A First-order Approach for Measuring Gradient Obfuscation. - Maura Pintor; Luca Demetrio; Giovanni Manca; Battista Biggio; Fabio Roli (ESANN, 2021)

secml-malware: A Python Library for Adversarial Robustness Evaluation of Windows Malware Classifiers. - Luca Demetrio; Battista Biggio (CoRR, 2021)

Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples. - Maura Pintor; Luca Demetrio; Angelo Sotgiu; Giovanni Manca; Ambra Demontis; Nicholas Carlini; Battista Biggio; Fabio Roli (CoRR, 2021)

Functionality-Preserving Black-Box Optimization of Adversarial Windows Malware. - Luca Demetrio; Battista Biggio; Giovanni Lagorio; Fabio Roli; Alessandro Armando (IEEE Trans. Inf. Forensics Secur., 2021)

Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection. - Luca Demetrio; Scott E. Coull; Battista Biggio; Giovanni Lagorio; Alessandro Armando; Fabio Roli (ACM Trans. Priv. Secur., 2021)

Formalizing evasion attacks against machine learning security detectors. - Luca Demetrio (2021)

Robust Machine Learning for Malware Detection over Time. - Daniele Angioni; Luca Demetrio; Maura Pintor; Battista Biggio (ITASEC, 2022)

Explaining Machine Learning DGA Detectors from DNS Traffic Data. - Giorgio Piras; Maura Pintor; Luca Demetrio; Battista Biggio (ITASEC, 2022)

Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples. - Maura Pintor; Luca Demetrio; Angelo Sotgiu; Ambra Demontis; Nicholas Carlini; Battista Biggio; Fabio Roli (NeurIPS, 2022)

Practical Evaluation of Poisoning Attacks on Online Anomaly Detectors in Industrial Control Systems. - Moshe Kravchik; Luca Demetrio; Battista Biggio; Asaf Shabtai (Comput. Secur., 2022)

Denial-of-Service Attack on Object Detection Model Using Universal Adversarial Perturbation. - Avishag Shapira; Alon Zolfi; Luca Demetrio; Battista Biggio; Asaf Shabtai (CoRR, 2022)

A Survey on Reinforcement Learning Security with Application to Autonomous Driving. - Ambra Demontis; Maura Pintor; Luca Demetrio; Kathrin Grosse; Hsiao-Ying Lin; Chengfang Fang; Battista Biggio; Fabio Roli (CoRR, 2022)

Practical Attacks on Machine Learning: A Case Study on Adversarial Windows Malware. - Luca Demetrio; Battista Biggio; Fabio Roli (IEEE Secur. Priv., 2022)

Towards learning trustworthily, automatically, and with guarantees on graphs: An overview. - Luca Oneto; Nicolò Navarin; Battista Biggio; Federico Errica; Alessio Micheli; Franco Scarselli; Monica Bianchini; Luca Demetrio; Pietro Bongini; Armando Tacchella; Alessandro Sperduti (Neurocomputing, 2022)

secml: Secure and explainable machine learning in Python. - Maura Pintor; Luca Demetrio; Angelo Sotgiu; Marco Melis; Ambra Demontis; Battista Biggio (SoftwareX, 2022)

Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. - Biagio Montaruli; Luca Demetrio; Maura Pintor; Luca Compagna; Davide Balzarotti; Battista Biggio (AISec@CCS, 2023)

Detecting Attacks Against Deep Reinforcement Learning for Autonomous Driving. - Maura Pintor; Luca Demetrio; Angelo Sotgiu; Hsiao-Ying Lin; Chengfang Fang; Ambra Demontis; Battista Biggio (ICMLC, 2023)

AI Security and Safety: The PRALab Research Experience. - Ambra Demontis; Maura Pintor; Luca Demetrio; Angelo Sotgiu; Daniele Angioni; Giorgio Piras; Srishti Gupta; Battista Biggio; Fabio Roli (Ital-IA, 2023)

Cybersecurity and AI: The PRALab Research Experience. - Maura Pintor; Giulia Orrù; Davide Maiorca; Ambra Demontis; Luca Demetrio; Gian Luca Marcialis; Battista Biggio; Fabio Roli (Ital-IA, 2023)

Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors. - Avishag Shapira; Alon Zolfi; Luca Demetrio; Battista Biggio; Asaf Shabtai (WACV, 2023)

Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning. - Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (CoRR, 2023)

ImageNet-Patch: A dataset for benchmarking machine learning robustness against adversarial patches. - Maura Pintor; Daniele Angioni; Angelo Sotgiu; Luca Demetrio; Ambra Demontis; Battista Biggio; Fabio Roli (Pattern Recognit., 2023)

Hardening RGB-D object recognition systems against adversarial patch attacks. - Yang Zheng; Luca Demetrio; Antonio Emanuele Cinà; Xiaoyi Feng; Zhaoqiang Xia; Xiaoyue Jiang; Ambra Demontis; Battista Biggio; Fabio Roli (Inf. Sci., 2023)

Living-off-The-Land Reverse-Shell Detection by Informed Data Augmentation. - Dmitrijs Trizna; Luca Demetrio; Battista Biggio; Fabio Roli (CoRR, 2024)

Certified Adversarial Robustness of Machine Learning-based Malware Detectors via (De)Randomized Smoothing. - Daniel Gibert; Luca Demetrio; Giulio Zizzo; Quan Le; Jordi Planes; Battista Biggio (CoRR, 2024)

A New Formulation for Zeroth-Order Optimization of Adversarial EXEmples in Malware Detection. - Marco Rando; Luca Demetrio; Lorenzo Rosasco; Fabio Roli (CoRR, 2024)

Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis. - Zhang Chen; Luca Demetrio; Srishti Gupta; Xiaoyi Feng; Zhaoqiang Xia; Antonio Emanuele Cinà; Maura Pintor; Luca Oneto; Ambra Demontis; Battista Biggio; Fabio Roli (CoRR, 2024)

ModSec-Learn: Boosting ModSecurity with Machine Learning. - Christian Scano; Giuseppe Floris; Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (CoRR, 2024)

Nebula: Self-Attention for Dynamic Malware Analysis. - Dmitrijs Trizna; Luca Demetrio; Battista Biggio; Fabio Roli (IEEE Trans. Inf. Forensics Secur., 2024)

AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples. - Antonio Emanuele Cinà; Jérôme Rony; Maura Pintor; Luca Demetrio; Ambra Demontis; Battista Biggio; Ismail Ben Ayed; Fabio Roli (AAAI, 2025)

Updating Windows malware detectors: Balancing robustness and regression against adversarial EXEmples. - Matous Kozák; Luca Demetrio; Dmitrijs Trizna; Fabio Roli (Comput. Secur., 2025)

SLIFER: Investigating performance and robustness of malware detection pipelines. - Andrea Ponte; Dmitrijs Trizna; Luca Demetrio; Battista Biggio; Ivan Tesfai Ogbu; Fabio Roli (Comput. Secur., 2025)

ModSec-AdvLearn: Countering Adversarial SQL Injections With Robust Machine Learning. - Giuseppe Floris; Christian Scano; Biagio Montaruli; Luca Demetrio; Andrea Valenza; Luca Compagna; Davide Ariu; Luca Piras 001; Davide Balzarotti; Battista Biggio (IEEE Trans. Inf. Forensics Secur., 2025)

Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection. - Tianwei Lan; Luca Demetrio; Farid Naït-Abdesselam; Yufei Han 001; Simone Aonzo (CoRR, 2025)

Empirical Quantification of Spurious Correlations in Malware Detection. - Bianca Perasso; Ludovico Lozza; Andrea Ponte; Luca Demetrio; Luca Oneto; Fabio Roli (CoRR, 2025)

Evaluating the Evaluators: Trust in Adversarial Robustness Tests. - Antonio Emanuele Cinà; Maura Pintor; Luca Demetrio; Ambra Demontis; Battista Biggio; Fabio Roli (CoRR, 2025)

Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates. - Daniele Angioni; Luca Demetrio; Maura Pintor; Luca Oneto; Davide Anguita; Battista Biggio; Fabio Roli (IEEE Trans. Pattern Anal. Mach. Intell., 2025)