Publications

Designing a Provenance Analysis for SGX Enclaves

Published in The 38th Annual Computer Security Applications Conference (ACSAC), 2022

Authors: Flavio Toffalini, Mathias Payer, Jianying Zhou, Lorenzo Cavallaro

Download here

Evocatio: Conjuring Bug Capabilities from a Single PoC

Published in ACM SIGSAC Conference on Computer and Communications Security, 2022

Authors: Zhiyuan Jiang, Shuitao Gan, Adrian Herrera, Flavio Toffalini, Lucio Romerio, Chaojing Tang, Manuel Egele, Chao Zhang, Mathias Payer

Download here

HolA: Holistic and Autonomous Attestation for IoT Networks

Published in The 20th International Conference on Applied Cryptography and Network Security, 2022

Authors: Alessandro Visintin, Flavio Toffalini, Eleonora Losiouk, Mauro Conti, Jianying Zhou

Download here

The evidence beyond the wall: Memory forensics in SGX environments

Published in Forensic Science International: Digital Investigation, 2021

Authors: Flavio Toffalini, Andrea Oliveri, Mariano Graziano, Jianying Zhou, Davide Balzarotti

Download here

SnakeGX: a sneaky attack against SGX Enclaves

Published in 19th International Conference on Applied Cryptography and Network Security, 2021

Authors: Flavio Toffalini, Mariano Graziano, Mauro Conti, Jianying Zhou

Download here

ScaRR: Scalable Runtime Remote Attestation for Complex Systems

Published in The 22nd International Symposium on Research in Attacks, Intrusions and Defenses, 2019

Authors: Flavio Toffalini, Eleonora Losiouk, Andrea Biondo, Jianying Zhou, Mauro Conti

Download here

Insight Into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures

Published in ACM Computing Surveys (CSUR), 2019

Authors: Ivan Homoliak, Flavio Toffalini, Juan Guarnizo, Yuval Elovici, Martín Ochoa

Download here

Careful-Packing: A Practical and Scalable Anti-Tampering Software Protection enforced by Trusted Computing

Published in The 9th ACM Conference on Data and Application Security and Privacy, 2019

Authors: Flavio Toffalini, Martín Ochoa, Jun Sun, Jianying Zhou

Download here

Practical static analysis of context leaks in Android applications

Published in Software: Practice and Experience, 2018

Authors: Flavio Toffalini, Jun Sun, Martín Ochoa

Download here

Static Analysis of Context Leaks in Android Applications

Published in The 40th International Conference on Software Engineering: Software Engineering in Practice (SEPA@ICSE), Gothenburg, Sweden, 2018

Authors: Flavio Toffalini, Jun Sun, Martín Ochoa

Download here

Detection of Masqueraders Based on Graph Partitioning of File System Access Events

Published in IEEE Security and Privacy Workshops (SPW), San Francisco, USA, 2018

Authors: Flavio Toffalini, Ivan Homoliak, Athul Harilal, Alexander Biner, Martín Ochoa

Download here

The Wolf Of SUTD (TWOS): A Dataset of Malicious Insider Threat Behavior Based on a Gamified Competition

Published in Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications (JoWUA), 2018

Authors: Athul Harilal, Flavio Toffalini, Ivan Homoliak, John Castellanos, Juan Guarnizo, Soumik Mondal, Martín Ochoa

Download here

TWOS: A Dataset of Malicious Insider Threat Behavior Based on a Gamified Competition

Published in The 9th ACM CCS International Workshop on Managing Insider Security Threats (MIST), Dallas, USA, 2017

Authors: Athul Harilal, Flavio Toffalini, John Castellanos, Juan Guarnizo, Ivan Homoliak, Martín Ochoa

Download here

Google Dorks: Analysis, Creation, and New Defenses

Published in The 13th Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), San Sebastian, Spain, 2016

Authors: Flavio Toffalini, Maurizio Abbà, Damiano Carra, Davide Balzarotti

Download here

REnvDB, a RESTful Database for Pervasive Environmental Wireless Sensor Networks

Published in The 30th International Conference on Distributed Computing Systems (ICDCS), Genova, Italy, 2010

Authors: Filippo de Stefani, Paolo Gamba, Emanuele Goldoni, Alberto Savioli, Davide Silvestri, Flavio Toffalini

Download here