Davide Balzarotti

ORCID

Publication Activity (10 Years)

Years Active: 2002-2024
Publications (10 Years): 78

Top Venues

USENIX Security Symposium

NDSS

AsiaCCS

IEEE Symposium on Security and Privacy

Publications

Afiqah Azahari, Davide Balzarotti
On the inadequacy of open-source application logs for digital forensics. Forensic Sci. Int. Digit. Investig. 49 (2024)
Davide Balzarotti
Malware Research: History, Milestones, and Open Questions. CODASPY (2024)
Antonio Ruggia, Dario Nisi, Savino Dambra, Alessio Merlo, Davide Balzarotti, Simone Aonzo
Unmasking the Veiled: A Comprehensive Analysis of Android Evasive Malware. AsiaCCS (2024)
Christian Scano, Giuseppe Floris, Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
ModSec-Learn: Boosting ModSecurity with Machine Learning. CoRR (2024)
Andrea Oliveri, Matteo Dell'Amico, Davide Balzarotti
An OS-agnostic Approach to Memory Forensics. NDSS (2023)
Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio
Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. AISec@CCS (2023)
Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio
Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. CoRR (2023)
Feras Al Kassar, Luca Compagna, Davide Balzarotti
WHIP: Improving Static Vulnerability Detection in Web Application by Forcing tools to Collaborate. USENIX Security Symposium (2023)
Savino Dambra, Yufei Han, Simone Aonzo, Platon Kotzias, Antonino Vitale, Juan Caballero, Davide Balzarotti, Leyla Bilge
Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance. CCS (2023)
Andrea Fioraldi, Alessandro Mantovani, Dominik Christian Maier, Davide Balzarotti
Dissecting American Fuzzy Lop - A FuzzBench Evaluation - RCR Report. ACM Trans. Softw. Eng. Methodol. 32 (2) (2023)
Simone Aonzo, Yufei Han, Alessandro Mantovani, Davide Balzarotti
Humans vs. Machines in Malware Classification. USENIX Security Symposium (2023)
Iskander Sánchez-Rola, Leyla Bilge, Davide Balzarotti, Armin Buescher, Petros Efstathopoulos
Rods with Laser Beams: Understanding Browser Fingerprinting on Phishing Pages. USENIX Security Symposium (2023)
Andrea Fioraldi, Alessandro Mantovani, Dominik Christian Maier, Davide Balzarotti
Dissecting American Fuzzy Lop: A FuzzBench Evaluation. ACM Trans. Softw. Eng. Methodol. 32 (2) (2023)
Addison Crump, Dongjia Zhang, Syeda Mahnur Asif, Dominik Christian Maier, Andrea Fioraldi, Thorsten Holz, Davide Balzarotti
CrabSandwich: Fuzzing Rust with Rust (Registered Report). FUZZING (2023)
Savino Dambra, Yufei Han, Simone Aonzo, Platon Kotzias, Antonino Vitale, Juan Caballero, Davide Balzarotti, Leyla Bilge
Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance. CoRR (2023)
Savino Dambra, Leyla Bilge, Davide Balzarotti
A Comparison of Systemic and Systematic Risks of Malware Encounters in Consumer and Enterprise Environments. ACM Trans. Priv. Secur. 26 (2) (2023)
Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning. CoRR (2023)
Andrea Oliveri, Davide Balzarotti
In the Land of MMUs: Multiarchitecture OS-Agnostic Virtual Memory Forensics. ACM Trans. Priv. Secur. 25 (4) (2022)
Fabio Pagani, Davide Balzarotti
AutoProfile: Towards Automated Profile Generation for Memory Analysis. ACM Trans. Priv. Secur. 25 (1) (2022)
Iskander Sánchez-Rola, Matteo Dell'Amico, Davide Balzarotti, Pierre-Antoine Vervier, Leyla Bilge
Journey to the Center of the Cookie Ecosystem: Unraveling Actors' Roles and Relationships. IEEE Symposium on Security and Privacy (2022)
Alessandro Mantovani, Andrea Fioraldi, Davide Balzarotti
Fuzzing with Data Dependency Information. EuroS&P (2022)
Andrea Fioraldi, Dominik Christian Maier, Dongjia Zhang, Davide Balzarotti
LibAFL: A Framework to Build Modular and Reusable Fuzzers. CCS (2022)
Alessandro Mantovani, Simone Aonzo, Yanick Fratantonio, Davide Balzarotti
RE-Mind: a First Look Inside the Mind of a Reverse Engineer. USENIX Security Symposium (2022)
Savino Dambra, Iskander Sánchez-Rola, Leyla Bilge, Davide Balzarotti
When Sally Met Trackers: Web Tracking From the Users' Perspective. USENIX Security Symposium (2022)
Andrea Marcelli, Mariano Graziano, Xabier Ugarte-Pedrero, Yanick Fratantonio, Mohamad Mansouri, Davide Balzarotti
How Machine Learning Is Solving the Binary Function Similarity Problem. USENIX Security Symposium (2022)
Alessandro Mantovani, Luca Compagna, Yan Shoshitaishvili, Davide Balzarotti
The Convergence of Source Code and Binary Vulnerability Discovery - A Case Study. AsiaCCS (2022)
Feras Al Kassar, Giulia Clerici, Luca Compagna, Davide Balzarotti, Fabian Yamaguchi
Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications. NDSS (2022)
Jayakrishna Vadayath, Moritz Eckert, Kyle Zeng, Nicolaas Weideman, Gokulkrishna Praveen Menon, Yanick Fratantonio, Davide Balzarotti, Adam Doupé, Tiffany Bao, Ruoyu Wang, Christophe Hauser, Yan Shoshitaishvili
Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs. USENIX Security Symposium (2022)
Davide Quarta, Michele Ianni, Aravind Machiry, Yanick Fratantonio, Eric Gustafson, Davide Balzarotti, Martina Lindorfer, Giovanni Vigna, Christopher Kruegel
Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone. Checkmate@CCS (2021)
Andrea Fioraldi, Daniele Cono D'Elia, Davide Balzarotti
The Use of Likely Invariants as Feedback for Fuzzers. USENIX Security Symposium (2021)
Andrea Possemato, Simone Aonzo, Davide Balzarotti, Yanick Fratantonio
Trust, But Verify: A Longitudinal Analysis Of Android OEM Compliance and Customization. IEEE Symposium on Security and Privacy (2021)
Lorenzo Maffia, Dario Nisi, Platon Kotzias, Giovanni Lagorio, Simone Aonzo, Davide Balzarotti
Longitudinal Study of the Prevalence of Malware Evasive Techniques. CoRR (2021)
Erin Avllazagaj, Ziyun Zhu, Leyla Bilge, Davide Balzarotti, Tudor Dumitras
When Malware Changed Its Mind: An Empirical Study of Variable Program Behaviors in the Real World. USENIX Security Symposium (2021)
Dario Nisi, Mariano Graziano, Yanick Fratantonio, Davide Balzarotti
Lost in the Loader: The Many Faces of the Windows PE File Format. RAID (2021)
Miguel Martín-Pérez, Ricardo J. Rodríguez, Davide Balzarotti
Pre-processing memory dumps to improve similarity score of Windows modules. Comput. Secur. 101 (2021)
Flavio Toffalini, Andrea Oliveri, Mariano Graziano, Jianying Zhou, Davide Balzarotti
The evidence beyond the wall: Memory forensics in SGX environments. Digit. Investig. 39 (2021)
Alexander Küchler, Alessandro Mantovani, Yufei Han, Leyla Bilge, Davide Balzarotti
Does Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes. NDSS (2021)
Emily Stark, Joe DeBlasio, Devon O'Brien, Davide Balzarotti, William Enck, Samuel King, Angelos Stavrou
Certificate Transparency in Google Chrome: Past, Present, and Future. IEEE Secur. Priv. 19 (6) (2021)
Andrew Fasano, Tiemoko Ballo, Marius Muench, Tim Leek, Alexander Bulekov, Brendan Dolan-Gavitt, Manuel Egele, Aurélien Francillon, Long Lu, Nick Gregory, Davide Balzarotti, William Robertson
SoK: Enabling Security Analyses of Embedded Systems via Rehosting. AsiaCCS (2021)
Hojjat Aghakhani, Fabio Gritti, Francesco Mecca, Martina Lindorfer, Stefano Ortolani, Davide Balzarotti, Giovanni Vigna, Christopher Kruegel
When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features. NDSS (2020)
Alessandro Mantovani, Simone Aonzo, Xabier Ugarte-Pedrero, Alessio Merlo, Davide Balzarotti
Prevalence and Impact of Low-Entropy Packing Schemes in the Malware Ecosystem. NDSS (2020)
Iskander Sánchez-Rola, Davide Balzarotti, Christopher Kruegel, Giovanni Vigna, Igor Santos
Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web. WWW (2020)
Savino Dambra, Leyla Bilge, Davide Balzarotti
SoK: Cyber Insurance - Technical Challenges and a System Security Roadmap. IEEE Symposium on Security and Privacy (2020)
Emanuele Cozzi, Pierre-Antoine Vervier, Matteo Dell'Amico, Yun Shen, Leyla Bilge, Davide Balzarotti
The Tangled Genealogy of IoT Malware. ACSAC (2020)
Iskander Sánchez-Rola, Matteo Dell'Amico, Platon Kotzias, Davide Balzarotti, Leyla Bilge, Pierre-Antoine Vervier, Igor Santos
Can I Opt Out Yet?: GDPR and the Global Illusion of Cookie Control. AsiaCCS (2019)
Eric Gustafson, Marius Muench, Chad Spensky, Nilo Redini, Aravind Machiry, Yanick Fratantonio, Davide Balzarotti, Aurélien Francillon, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
Toward the Analysis of Embedded Firmware through Automated Re-hosting. RAID (2019)
Xabier Ugarte-Pedrero, Mariano Graziano, Davide Balzarotti
A Close Look at a Daily Dataset of Malware Samples. ACM Trans. Priv. Secur. 22 (1) (2019)
Iskander Sánchez-Rola, Davide Balzarotti, Igor Santos
BakingTimer: privacy analysis of server-side request processing time. ACSAC (2019)
Fabio Pagani, Davide Balzarotti
Back to the Whiteboard: a Principled Approach for the Assessment and Design of Memory Forensic Techniques. USENIX Security Symposium (2019)
Fabio Pagani, Oleksii Fedorov, Davide Balzarotti
Introducing the Temporal Dimension to Memory Forensics. ACM Trans. Priv. Secur. 22 (2) (2019)
Iskander Sánchez-Rola, Igor Santos, Davide Balzarotti
Clock Around the Clock: Time-Based Device Fingerprinting. CCS (2018)
Marius Muench, Jan Stijohann, Frank Kargl, Aurélien Francillon, Davide Balzarotti
What You Corrupt Is Not What You Crash: Challenges in Fuzzing Embedded Devices. NDSS (2018)
Xiao Han, Nizar Kheir, Davide Balzarotti
Deception Techniques in Computer Security: A Research Perspective. ACM Comput. Surv. 51 (4) (2018)
Emanuele Cozzi, Mariano Graziano, Yanick Fratantonio, Davide Balzarotti
Understanding Linux Malware. IEEE Symposium on Security and Privacy (2018)
Fabio Pagani, Matteo Dell'Amico, Davide Balzarotti
Beyond Precision and Recall: Understanding Uses (and Misuses) of Similarity Hashes in Binary Analysis. CODASPY (2018)
Iskander Sánchez-Rola, Igor Santos, Davide Balzarotti
Extension Breakdown: Security Analysis of Browsers Extension Resources Control Policies. USENIX Security Symposium (2017)
Xiao Han, Nizar Kheir, Davide Balzarotti
Evaluation of Deception-Based Web Attacks Detection. MTD@CCS (2017)
Iskander Sánchez-Rola, Davide Balzarotti, Igor Santos
The Onions Have Eyes: A Comprehensive Structure and Privacy Analysis of Tor Hidden Services. WWW (2017)
Chaz Lever, Platon Kotzias, Davide Balzarotti, Juan Caballero, Manos Antonakakis
A Lustrum of Malware Network Communication: Evolution and Insights. IEEE Symposium on Security and Privacy (2017)
Onur Catakoglu, Marco Balduzzi, Davide Balzarotti
Attacks landscape in the dark side of the web. SAC (2017)
Fabio Pagani, Matteo De Astis, Mariano Graziano, Andrea Lanzi, Davide Balzarotti
Measuring the Role of Greylisting and Nolisting in Fighting Spam. DSN (2016)
Marius Muench, Fabio Pagani, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna, Davide Balzarotti
Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory. RAID (2016)
Giancarlo Pellegrino, Onur Catakoglu, Davide Balzarotti, Christian Rossow
Uses and Abuses of Server-Side Requests. RAID (2016)
Xabier Ugarte-Pedrero, Davide Balzarotti, Igor Santos, Pablo García Bringas
RAMBO: Run-Time Packer Analysis with Multiple Branch Observation. DIMVA (2016)
Xiao Han, Nizar Kheir, Davide Balzarotti
PhishEye: Live Monitoring of Sandboxed Phishing Kits. CCS (2016)
Flavio Toffalini, Maurizio Abbà, Damiano Carra, Davide Balzarotti
Google Dorks: Analysis, Creation, and New Defenses. DIMVA (2016)
Mariano Graziano, Davide Balzarotti, Alain Zidouemba
ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks. AsiaCCS (2016)
Stefano Cristalli, Mattia Pagnozzi, Mariano Graziano, Andrea Lanzi, Davide Balzarotti
Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks. USENIX Security Symposium (2016)
Onur Catakoglu, Marco Balduzzi, Davide Balzarotti
Automatic Extraction of Indicators of Compromise for Web Applications. WWW (2016)
Mariano Graziano, Lorenzo Flore, Andrea Lanzi, Davide Balzarotti
Subverting Operating System Properties Through Evolutionary DKOM Attacks. DIMVA (2016)
Xiao Han, Nizar Kheir, Davide Balzarotti
The Role of Cloud Services in Malicious Software: Trends and Insights. DIMVA (2015)
Mariano Graziano, Davide Canali, Leyla Bilge, Andrea Lanzi, Davide Balzarotti
Needles in a Haystack: Mining Information from Public Dynamic Analysis Sandboxes for Malware Intelligence. USENIX Security Symposium (2015)
Amin Kharraz, William K. Robertson, Davide Balzarotti, Leyla Bilge, Engin Kirda
Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. DIMVA (2015)
Lucian Cojocar, Jonas Zaddach, Roel Verdult, Herbert Bos, Aurélien Francillon, Davide Balzarotti
PIE: Parser Identification in Embedded Systems. ACSAC (2015)
Aristide Fattori, Andrea Lanzi, Davide Balzarotti, Engin Kirda
Hypervisor-based malware protection with AccessMiner. Comput. Secur. 52 (2015)
Xabier Ugarte-Pedrero, Davide Balzarotti, Igor Santos, Pablo García Bringas
SoK: Deep Packer Inspection: A Longitudinal Study of the Complexity of Run-Time Packers. IEEE Symposium on Security and Privacy (2015)
Giancarlo Pellegrino, Davide Balzarotti, Stefan Winter, Neeraj Suri
In the Compression Hornet's Nest: A Security Study of Data Compression in Network Services. USENIX Security Symposium (2015)
Davide Balzarotti, Roberto Di Pietro, Antonio Villani
The impact of GPU-assisted malware on memory forensics: A case study. Digit. Investig. (2015)
Andrei Costin, Jonas Zaddach, Aurélien Francillon, Davide Balzarotti
A Large-Scale Analysis of the Security of Embedded Firmwares. USENIX Security Symposium (2014)
Leyla Bilge, Sevil Sen, Davide Balzarotti, Engin Kirda, Christopher Kruegel
Exposure: A Passive DNS Analysis Service to Detect and Report Malicious Domains. ACM Trans. Inf. Syst. Secur. 16 (4) (2014)
Davide Canali, Leyla Bilge, Davide Balzarotti
On the effectiveness of risk prediction based on users browsing behavior. AsiaCCS (2014)
Gábor Pék, Andrea Lanzi, Abhinav Srivastava, Davide Balzarotti, Aurélien Francillon, Christoph Neumann
On the feasibility of software attacks on commodity virtual machine monitors via direct device assignment. AsiaCCS (2014)
Amin Kharraz, Engin Kirda, William K. Robertson, Davide Balzarotti, Aurélien Francillon
Optical Delusions: A Study of Malicious QR Codes in the Wild. DSN (2014)
Luca Bruno, Mariano Graziano, Davide Balzarotti, Aurélien Francillon
Through the Looking-Glass, and What Eve Found There. WOOT (2014)
Jelena Isacenkova, Olivier Thonnard, Andrei Costin, Aurélien Francillon, Davide Balzarotti
Inside the SCAM Jungle: A Closer Look at 419 Scam Email Operations. EURASIP J. Inf. Secur. 2014 (2014)
Giancarlo Pellegrino, Davide Balzarotti
Toward Black-Box Detection of Logic Flaws in Web Applications. NDSS (2014)
Jonas Zaddach, Luca Bruno, Aurélien Francillon, Davide Balzarotti
AVATAR: A Framework to Support Dynamic Security Analysis of Embedded Systems' Firmwares. NDSS (2014)
Jelena Isacenkova, Davide Balzarotti
Shades of gray: a closer look at emails in the gray area. AsiaCCS (2014)
Rafael A. Rodríguez-Gómez, Gabriel Maciá-Fernández, Pedro García-Teodoro, Moritz Steiner, Davide Balzarotti
Resource monitoring for the detection of parasite P2P botnets. Comput. Networks 70 (2014)
Magnus Almgren, Davide Balzarotti, Marina Papatriantafilou, Valentin Tudor
Cybersecurity in the Smart Grid. ERCIM News 2013 (92) (2013)
Andrei Costin, Jelena Isacenkova, Marco Balduzzi, Aurélien Francillon, Davide Balzarotti
The role of phone numbers in understanding cyber-crime schemes. PST (2013)
Davide Canali, Davide Balzarotti
Behind the Scenes of Online Attacks: an Analysis of Exploitation Behaviors on the Web. NDSS (2013)
Mariano Graziano, Andrea Lanzi, Davide Balzarotti
Hypervisor Memory Forensics. RAID (2013)
Davide Canali, Davide Balzarotti, Aurélien Francillon
The role of web hosting providers in detecting compromised websites. WWW (2013)
Jonas Zaddach, Anil Kurmus, Davide Balzarotti, Erik-Oliver Blass, Aurélien Francillon, Travis Goodspeed, Moitrayee Gupta, Ioannis Koltsidas
Implementation and implications of a stealth hard-drive backdoor. ACSAC (2013)
Jelena Isacenkova, Olivier Thonnard, Andrei Costin, Davide Balzarotti, Aurélien Francillon
Inside the SCAM Jungle: A Closer Look at 419 Scam Email Operations. IEEE Symposium on Security and Privacy Workshops (2013)
Marco Balduzzi, Jonas Zaddach, Davide Balzarotti, Engin Kirda, Sergio Loureiro
A security analysis of amazon's elastic compute cloud service. SAC (2012)
Theodoor Scholte, Davide Balzarotti, Engin Kirda
Have things changed now? An empirical study on input validation vulnerabilities in web applications. Comput. Secur. 31 (3) (2012)
Theodoor Scholte, William K. Robertson, Davide Balzarotti, Engin Kirda
Preventing Input Validation Vulnerabilities in Web Applications through Automated Type Analysis. COMPSAC (2012)
Mariano Graziano, Corrado Leita, Davide Balzarotti
Towards network containment in malware analysis systems. ACSAC (2012)

Davide Balzarotti.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Davide Balzarotti