Giancarlo Pellegrino

ORCID

Publication Activity (10 Years)

Years Active: 2010-2024
Publications (10 Years): 29

Top Venues

IEEE Symposium on Security and Privacy

CoRR

USENIX Security Symposium

NDSS

Télécom ParisTech, France (PHD)

Education History

Télécom ParisTech, France

PHD

Publications

Aleksei Stafeev, Giancarlo Pellegrino
SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements. USENIX Security Symposium (2024)
Malte Wessels, Simon Koch, Giancarlo Pellegrino, Martin Johns
SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications. USENIX Security Symposium (2024)
Soheil Khodayari, Giancarlo Pellegrino
It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses. SP (2023)
Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock
The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web. SP (2023)
Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino
From Attachments to SEO: Click Here to Learn More about Clickbait PDFs! ACSAC (2023)
Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino
A Large-Scale Study of Phishing PDF Documents. CoRR (2023)
Soheil Khodayari, Giancarlo Pellegrino
The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies. IEEE Symposium on Security and Privacy (2022)
Benjamin Eriksson, Giancarlo Pellegrino, Andrei Sabelfeld
Black Widow: Blackbox Data-driven Web Scanning. IEEE Symposium on Security and Privacy (2021)
Xhelal Likaj, Soheil Khodayari, Giancarlo Pellegrino
Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks. RAID (2021)
Soheil Khodayari, Giancarlo Pellegrino
JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals. USENIX Security Symposium (2021)
Qingchuan Zhao, Chaoshun Zuo, Brendan Dolan-Gavitt, Giancarlo Pellegrino, Zhiqiang Lin
Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps. IEEE Symposium on Security and Privacy (2020)
Simon Koch, Tim Sauer, Martin Johns, Giancarlo Pellegrino
Raccoon: automated verification of guarded race conditions in web applications. SAC (2020)
Edward Chou, Florian Tramèr, Giancarlo Pellegrino
SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems. SP Workshops (2020)
Giada Stivala, Giancarlo Pellegrino
Deceptive Previews: A Study of the Link Preview Trustworthiness in Social Platforms. NDSS (2020)
Qingchuan Zhao, Chaoshun Zuo, Giancarlo Pellegrino, Zhiqiang Lin
Geo-locating Drivers: A Study of Sensitive Data Leakage in Ride-Hailing Services. NDSS (2019)
Saba Eskandarian, Jonathan Cogan, Sawyer Birnbaum, Peh Chang Wei Brandon, Dillon Franke, Forest Fraser, Gaspar Garcia Jr., Eric Gong, Hung T. Nguyen, Taresh K. Sethi, Vishal Subbiah, Michael Backes, Giancarlo Pellegrino, Dan Boneh
Fidelius: Protecting User Secrets from Compromised Browsers. IEEE Symposium on Security and Privacy (2019)
Florian Tramèr, Pascal Dupré, Gili Rusak, Giancarlo Pellegrino, Dan Boneh
AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning. CCS (2019)
Saba Eskandarian, Jonathan Cogan, Sawyer Birnbaum, Peh Chang Wei Brandon, Dillon Franke, Forest Fraser, Gaspar Garcia Jr., Eric Gong, Hung T. Nguyen, Taresh K. Sethi, Vishal Subbiah, Michael Backes, Giancarlo Pellegrino, Dan Boneh
Fidelius: Protecting User Secrets from Compromised Browsers. CoRR (2018)
Edward Chou, Florian Tramèr, Giancarlo Pellegrino, Dan Boneh
SentiNet: Detecting Physical Attacks Against Deep Learning Systems. CoRR (2018)
Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes
The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy (2018)
Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow
Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. NDSS (2018)
Florian Tramèr, Pascal Dupré, Gili Rusak, Giancarlo Pellegrino, Dan Boneh
Ad-versarial: Defeating Perceptual Ad-Blocking. CoRR (2018)
Patrick Speicher, Marcel Steinmetz, Robert Künnemann, Milivoj Simeonovski, Giancarlo Pellegrino, Jörg Hoffmann, Michael Backes
Formally Reasoning about the Cost and Efficacy of Securing the Email Infrastructure. EuroS&P (2018)
Milivoj Simeonovski, Giancarlo Pellegrino, Christian Rossow, Michael Backes
Who Controls the Internet?: Analyzing Global Threats using Property Graph Traversals. WWW (2017)
Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CoRR (2017)
Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CCS (2017)
Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS (2016)
Giancarlo Pellegrino, Onur Catakoglu, Davide Balzarotti, Christian Rossow
Uses and Abuses of Server-Side Requests. RAID (2016)
Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium (2016)
Giancarlo Pellegrino, Christian Rossow, Fabrice J. Ryba, Thomas C. Schmidt, Matthias Wählisch
Cashing Out the Great Cannon? On Browser-Based DDoS Attacks and Economics. WOOT (2015)
Giancarlo Pellegrino, Davide Balzarotti, Stefan Winter, Neeraj Suri
In the Compression Hornet's Nest: A Security Study of Data Compression in Network Services. USENIX Security Symposium (2015)
Giancarlo Pellegrino, Constantin Tschürtz, Eric Bodden, Christian Rossow
jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications. RAID (2015)
Tsvetoslava Vateva-Gurova, Jesus Luna, Giancarlo Pellegrino, Neeraj Suri
On the Feasibility of Side-Channel Attacks in a Virtualized Environment. ICETE (Selected Papers) (2014)
Giancarlo Pellegrino, Davide Balzarotti
Toward Black-Box Detection of Logic Flaws in Web Applications. NDSS (2014)
Tsvetoslava Vateva-Gurova, Jesus Luna, Giancarlo Pellegrino, Neeraj Suri
Towards a Framework for Assessing the Feasibility of Side-channel Attacks in Virtualized Environments. SECRYPT (2014)
Giancarlo Pellegrino, Luca Compagna, Thomas Morreggia
A Tool for Supporting Developers in Analyzing the Security of Web-Based Security Protocols. ICTSS (2013)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations. Comput. Secur. 33 (2013)
Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò
The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS (2012)
Alessandro Armando, Giancarlo Pellegrino, Roberto Carbone, Alessio Merlo, Davide Balzarotti
From Model-Checking to Automated Testing of Security Protocols: Bridging the Gap. TAP@TOOLS (2012)
Wihem Arsac, Luca Compagna, Giancarlo Pellegrino, Serena Elisa Ponta
Security Validation of Business Processes via Model-Checking. ESSoS (2011)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure? SEC (2011)
Alessandro Armando, Roberto Carbone, Luca Compagna, Keqin Li, Giancarlo Pellegrino
Model-Checking Driven Security Testing of Web-Based Applications. ICST Workshops (2010)

Giancarlo Pellegrino.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Giancarlo Pellegrino