Andrea Lanzi

Publication Activity (10 Years)

Years Active: 2005-2022
Publications (10 Years): 26

Top Topics

Dynamic Analysis

Virtual Machine

Top Venues

J. Comput. Secur.

USENIX Security Symposium

Publications

Antonio Nappa, Aaron Úbeda-Portugués, Panagiotis Papadopoulos, Matteo Varvello, Juan Tapiador, Andrea Lanzi
Scramblesuit: An effective timing side-channels framework for malware sandbox evasion. J. Comput. Secur. 30 (6) (2022)
Danilo Bruschi, Andrea Di Pasquale, Silvio Ghilardi, Andrea Lanzi, Elena Pagani
A Formal Verification of ArpON - A Tool for Avoiding Man-in-the-Middle Attacks in Ethernet Networks. IEEE Trans. Dependable Secur. Comput. 19 (6) (2022)
Luca Buccioli, Stefano Cristalli, Edoardo Vignati, Lorenzo Nava, Daniele Badagliacca, Danilo Bruschi, Long Lu, Andrea Lanzi
JChainz: Automatic Detection of Deserialization Vulnerabilities for the Java Language. STM (2022)
Antonio Nappa, Panagiotis Papadopoulos, Matteo Varvello, Daniel Aceituno Gomez, Juan Tapiador, Andrea Lanzi
POW-HOW: An enduring timing side-channel to evadeonline malware sandboxes. CoRR (2021)
Antonio Nappa, Christopher Hobbs, Andrea Lanzi
Deja-Vu: A Glimpse on Radioactive Soft-Error Consequences on Classical and Quantum Computations. CoRR (2021)
Fabio Pierazzi, Stefano Cristalli, Danilo Bruschi, Michele Colajanni, Mirco Marchetti, Andrea Lanzi
Glyph: Efficient ML-Based Detection of Heap Spraying Attacks. IEEE Trans. Inf. Forensics Secur. 16 (2021)
Antonio Nappa, Panagiotis Papadopoulos, Matteo Varvello, Daniel Aceituno Gomez, Juan Tapiador, Andrea Lanzi
PoW-How: An Enduring Timing Side-Channel to Evade Online Malware Sandboxes. ESORICS (1) (2021)
Muhammad Rizwan Asghar, Steven D. Galbraith, Andrea Lanzi, Giovanni Russello, Lukas Zobernig
Towards a Theory of Special-Purpose Program Obfuscation. TrustCom (2020)
Andrea Lanzi
Editorial: Advanced Techniques for Memory Forensics Analysis. Mob. Networks Appl. 25 (1) (2020)
Muhammad Rizwan Asghar, Steven D. Galbraith, Andrea Lanzi, Giovanni Russello, Lukas Zobernig
Towards a Theory of Special-purpose Program Obfuscation. CoRR (2020)
Stefano Cristalli, Long Lu, Danilo Bruschi, Andrea Lanzi
Detecting (absent) app-to-app authentication on cross-device short-distance channels. ACSAC (2019)
Nir Nissim, Aviad Cohen, Jian Wu, Andrea Lanzi, Lior Rokach, Yuval Elovici, C. Lee Giles
Sec-Lib: Protecting Scholarly Digital Libraries From Infected Papers Using Active Machine Learning Framework. IEEE Access 7 (2019)
Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. CoRR (2019)
Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. CODASPY (2019)
Michele Carminati, Mario Polino, Andrea Continella, Andrea Lanzi, Federico Maggi, Stefano Zanero
Security Evaluation of a Banking Fraud Analysis System. ACM Trans. Priv. Secur. 21 (3) (2018)
Sergio Mascetti, Nadia Metoui, Andrea Lanzi, Claudio Bettini
EPIC: a Methodology for Evaluating Privacy Violation Risk in Cybersecurity Systems. Trans. Data Priv. 11 (3) (2018)
Eran Toch, Claudio Bettini, Erez Shmueli, Laura Radaelli, Andrea Lanzi, Daniele Riboni, Bruno Lepri
The Privacy Implications of Cyber Security Systems: A Technological Survey. ACM Comput. Surv. 51 (2) (2018)
Stefano Cristalli, Edoardo Vignati, Danilo Bruschi, Andrea Lanzi
Trusted Execution Path for Protecting Java Applications Against Deserialization of Untrusted Data. RAID (2018)
Andrea Possemato, Andrea Lanzi, Simon Pak Ho Chung, Wenke Lee, Yanick Fratantonio
ClickShield: Are You Hiding Something? Towards Eradicating Clickjacking on Android. CCS (2018)
Danilo Bruschi, Andrea Di Pasquale, Silvio Ghilardi, Andrea Lanzi, Elena Pagani
Formal Verification of ARP (Address Resolution Protocol) Through SMT-Based Model Checking - A Case Study -. IFM (2017)
Nir Nissim, Aviad Cohen, Jian Wu, Andrea Lanzi, Lior Rokach, Yuval Elovici, C. Lee Giles
Scholarly Digital Libraries as a Platform for Malware Distribution. SG-CRC (2017)
Andrea Continella, Michele Carminati, Mario Polino, Andrea Lanzi, Stefano Zanero, Federico Maggi
Prometheus: Analyzing WebInject-based information stealers. J. Comput. Secur. 25 (2) (2017)
Nicola Basilico, Andrea Lanzi, Mattia Monga
A Security Game Model for Remote Software Protection. ARES (2016)
Fabio Pagani, Matteo De Astis, Mariano Graziano, Andrea Lanzi, Davide Balzarotti
Measuring the Role of Greylisting and Nolisting in Fighting Spam. DSN (2016)
Stefano Cristalli, Mattia Pagnozzi, Mariano Graziano, Andrea Lanzi, Davide Balzarotti
Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks. USENIX Security Symposium (2016)
Mariano Graziano, Lorenzo Flore, Andrea Lanzi, Davide Balzarotti
Subverting Operating System Properties Through Evolutionary DKOM Attacks. DIMVA (2016)
Mariano Graziano, Davide Canali, Leyla Bilge, Andrea Lanzi, Davide Balzarotti
Needles in a Haystack: Mining Information from Public Dynamic Analysis Sandboxes for Malware Intelligence. USENIX Security Symposium (2015)
Aristide Fattori, Andrea Lanzi, Davide Balzarotti, Engin Kirda
Hypervisor-based malware protection with AccessMiner. Comput. Secur. 52 (2015)
Babak Rahbarinia, Roberto Perdisci, Andrea Lanzi, Kang Li
PeerRush: Mining for unwanted P2P traffic. J. Inf. Secur. Appl. 19 (3) (2014)
Gábor Pék, Andrea Lanzi, Abhinav Srivastava, Davide Balzarotti, Aurélien Francillon, Christoph Neumann
On the feasibility of software attacks on commodity virtual machine monitors via direct device assignment. AsiaCCS (2014)
Stefano Bianchi Mazzone, Mattia Pagnozzi, Aristide Fattori, Alessandro Reina, Andrea Lanzi, Danilo Bruschi
Improving Mac OS X security through gray box fuzzing technique. EUROSEC (2014)
Babak Rahbarinia, Roberto Perdisci, Andrea Lanzi, Kang Li
PeerRush: Mining for Unwanted P2P Traffic. DIMVA (2013)
Mariano Graziano, Andrea Lanzi, Davide Balzarotti
Hypervisor Memory Forensics. RAID (2013)
Davide Canali, Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda
A quantitative study of accuracy in system call-based malware detection. ISSTA (2012)
Leyla Bilge, Andrea Lanzi, Davide Balzarotti
Thwarting real-time dynamic unpacking. EUROSEC (2011)
Abhinav Srivastava, Andrea Lanzi, Jonathon T. Giffin, Davide Balzarotti
Operating System Interface Obfuscation and the Revealing of Hidden Operations. DIMVA (2011)
Kaan Onarlioglu, Leyla Bilge, Andrea Lanzi, Davide Balzarotti, Engin Kirda
G-Free: defeating return-oriented programming through gadget-less binaries. ACSAC (2010)
Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda
AccessMiner: using system-centric models for malware protection. CCS (2010)
Monirul I. Sharif, Andrea Lanzi, Jonathon T. Giffin, Wenke Lee
Automatic Reverse Engineering of Malware Emulators. IEEE Symposium on Security and Privacy (2009)
Monirul I. Sharif, Wenke Lee, Weidong Cui, Andrea Lanzi
Secure in-VM monitoring using hardware virtualization. CCS (2009)
Andrea Lanzi, Monirul I. Sharif, Wenke Lee
K-Tracer: A System for Extracting Kernel Malware Behavior. NDSS (2009)
Roberto Perdisci, Andrea Lanzi, Wenke Lee
Classification of packed executables for accurate computer virus detection. Pattern Recognit. Lett. 29 (14) (2008)
Monirul I. Sharif, Andrea Lanzi, Jonathon T. Giffin, Wenke Lee
Impeding Malware Analysis Using Conditional Code Obfuscation. NDSS (2008)
Roberto Perdisci, Andrea Lanzi, Wenke Lee
McBoost: Boosting Scalability in Malware Collection and Analysis Using Statistical Classification of Executables. ACSAC (2008)
Lorenzo Cavallaro, Andrea Lanzi, Luca Mayer, Mattia Monga
LISABETH: automated content-based signature generator for zero-day polymorphic worms. SESS (2008)
Abhinav Srivastava, Andrea Lanzi, Jonathon T. Giffin
System Call API Obfuscation (Extended Abstract). RAID (2008)
Andrea Lanzi, Lorenzo Martignoni, Mattia Monga, Roberto Paleari
A Smart Fuzzer for x86 Executables. SESS@ICSE (2007)
Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi
Diversified Process Replicæ for Defeating Memory Error Exploits. IPCCC (2007)
Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi
Static Analysis on x86 Executables for Preventing Automatic Mimicry Attacks. DIMVA (2007)
Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi
An Efficient Technique for Preventing Mimicry and Impossible Paths Execution Attacks. IPCCC (2007)
Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi, Mattia Monga
Replay Attack in TCG Specification and Solution. ACSAC (2005)
Danilo Bruschi, Igor Nai Fovino, Andrea Lanzi
A Protocol for Anonymous and Accurate E-Polling. TCGOV (2005)