Luca Compagna

Publication Activity (10 Years)

Years Active: 2001-2024
Publications (10 Years): 17

Top Topics

Web Applications

Security Policies

Top Venues

Publications

Soumaya Boussaha, Lukas Hock, Miguel Bermejo, Rubén Cuevas Rumín, Ángel Cuevas Rumín, David Klein, Martin Johns, Luca Compagna, Daniele Antonioli, Thomas Barber
FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds. Proc. Priv. Enhancing Technol. 2024 (3) (2024)
Christian Scano, Giuseppe Floris, Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
ModSec-Learn: Boosting ModSecurity with Machine Learning. CoRR (2024)
Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio
Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. AISec@CCS (2023)
Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio
Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. CoRR (2023)
Feras Al Kassar, Luca Compagna, Davide Balzarotti
WHIP: Improving Static Vulnerability Detection in Web Application by Forcing tools to Collaborate. USENIX Security Symposium (2023)
Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning. CoRR (2023)
Alessandro Mantovani, Luca Compagna, Yan Shoshitaishvili, Davide Balzarotti
The Convergence of Source Code and Binary Vulnerability Discovery - A Case Study. AsiaCCS (2022)
Feras Al Kassar, Giulia Clerici, Luca Compagna, Davide Balzarotti, Fabian Yamaguchi
Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications. NDSS (2022)
Lorenzo Veronese, Stefano Calzavara, Luca Compagna
Bulwark: Holistic and Verified Security Monitoring of Web Protocols. CoRR (2021)
Luca Compagna, Hugo Jonker, Johannes Krochewski, Benjamin Krumnow, Merve Sahin
A preliminary study on the adoption and effectiveness of SameSite cookies as a CSRF defence. EuroS&P Workshops (2021)
Lorenzo Veronese, Stefano Calzavara, Luca Compagna
Bulwark: Holistic and Verified Security Monitoring of Web Protocols. ESORICS (1) (2020)
Avinash Sudhodanan, Roberto Carbone, Luca Compagna, Nicolas Dolgin, Alessandro Armando, Umberto Morelli
Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries. EuroS&P (2017)
Daniel Ricardo dos Santos, Silvio Ranise, Luca Compagna, Serena Elisa Ponta
Automatically finding execution scenarios to deploy security-sensitive workflows. J. Comput. Secur. 25 (3) (2017)
Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. CODASPY (2017)
Alessandro Armando, Roberto Carbone, Luca Compagna
SATMC: a SAT-based model checker for security protocols, business processes, and security APIs. Int. J. Softw. Tools Technol. Transf. 18 (2) (2016)
Avinash Sudhodanan, Alessandro Armando, Roberto Carbone, Luca Compagna
Attack Patterns for Black-Box Security Testing of Multi-Party Web Applications. NDSS (2016)
Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. TACAS (2016)
Daniel Ricardo dos Santos, Silvio Ranise, Luca Compagna, Serena Elisa Ponta
Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. DBSec (2015)
Roberto Carbone, Luca Compagna, Annibale Panichella, Serena Elisa Ponta
Security Threat Identification and Testing. ICST (2015)
Michele Bezzi, Frances Cleary, Luca Compagna
From Research Results to Strategy: A Mapping Exercise. ISSE (2014)
Alessandro Armando, Roberto Carbone, Luca Compagna
SATMC: A SAT-Based Model Checker for Security-Critical Systems. TACAS (2014)
Giancarlo Pellegrino, Luca Compagna, Thomas Morreggia
A Tool for Supporting Developers in Analyzing the Security of Web-Based Security Protocols. ICTSS (2013)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations. Comput. Secur. 33 (2013)
Luca Compagna, Pierre Guilleminot, Achim D. Brucker
Business Process Compliance via Security Validation as a Service. ICST (2013)
Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò
The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS (2012)
Wihem Arsac, Giampaolo Bella, Xavier Chantry, Luca Compagna
Multi-Attacker Protocol Validation. J. Autom. Reason. 46 (3-4) (2011)
Wihem Arsac, Luca Compagna, Giancarlo Pellegrino, Serena Elisa Ponta
Security Validation of Business Processes via Model-Checking. ESSoS (2011)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure? SEC (2011)
Wihem Arsac, Luca Compagna, Samuel Paul Kaluvuri, Serena Elisa Ponta
Security validation tool for business processes. SACMAT (2011)
Alessandro Armando, Roberto Carbone, Luca Compagna, Keqin Li, Giancarlo Pellegrino
Model-Checking Driven Security Testing of Web-Based Applications. ICST Workshops (2010)
Luca Compagna, Paul El Khoury, Fabio Massacci, Ayda Saïdane
A Dynamic Security Framework for Ambient Intelligent Systems: A Smart-Home Based eHealth Application. Trans. Comput. Sci. 10 (2010)
Luca Compagna, Ulrich Flegel, Volkmar Lotz
Towards Validating Security Protocol Deployment in the Wild. COMPSAC (2) (2009)
Wihem Arsac, Giampaolo Bella, Xavier Chantry, Luca Compagna
Validating Security Protocols under the General Attacker. ARSPA-WITS (2009)
Luca Compagna, Paul El Khoury, Alzbeta Krausová, Fabio Massacci, Nicola Zannone
How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns. Artif. Intell. Law 17 (1) (2009)
Alessandro Armando, Roberto Carbone, Luca Compagna
LTL model checking for security protocols. J. Appl. Non Class. Logics 19 (4) (2009)
Wihem Arsac, Giampaolo Bella, Xavier Chantry, Luca Compagna
Attacking Each Other. Security Protocols Workshop (2009)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Llanos Tobarra
Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps. FMSE (2008)
Alessandro Armando, Luca Compagna
SAT-based model-checking for security protocols analysis. Int. J. Inf. Sec. 7 (1) (2008)
Luca Compagna, Volkmar Lotz, Fabio Massacci
Preface. Electron. Notes Theor. Comput. Sci. 197 (2) (2008)
Alessandro Armando, Roberto Carbone, Luca Compagna
LTL Model Checking for Security Protocols. CSF (2007)
Luca Compagna, Paul El Khoury, Fabio Massacci, Reshma Thomas, Nicola Zannone
How to capture, model, and verify the knowledge of legal, security, and privacy experts: a pattern-based approach. ICAIL (2007)
Alessandro Armando, Luca Compagna, Silvio Ranise
Rewriting and Decision Procedure Laboratory: Combining Rewriting, Satisfiability Checking, and Lemma Speculation. Mechanizing Mathematical Reasoning (2005)
Alessandro Armando, David A. Basin, Yohan Boichut, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Paul Hankes Drielsma, Pierre-Cyrille Héam, Olga Kouchnarenko, Jacopo Mantovani, Sebastian Mödersheim, David von Oheimb, Michaël Rusinowitch, Judson Santiago, Mathieu Turuani, Luca Viganò, Laurent Vigneron
The AVISPA Tool for the Automated Validation of Internet Security Protocols and Applications. CAV (2005)
Alessandro Armando, Luca Compagna
An Optimized Intruder Model for SAT-based Model-Checking of Security Protocols. Electron. Notes Theor. Comput. Sci. 125 (1) (2005)
Alessandro Armando, Luca Compagna
SATMC: A SAT-Based Model Checker for Security Protocols. JELIA (2004)
Alessandro Armando, Luca Compagna, Yuliya Lierler
Automatic Compilation of Protocol Insecurity Problems into Logic Programming. JELIA (2004)
Alessandro Armando, Luca Compagna, Pierre Ganty
SAT-Based Model-Checking of Security Protocols Using Planning Graph Analysis. FME (2003)
Alessandro Armando, Luca Compagna
Abstraction-Driven SAT-based Analysis of Security Protocols. SAT (2003)
Alessandro Armando, David A. Basin, Mehdi Bouallagui, Yannick Chevalier, Luca Compagna, Sebastian Mödersheim, Michaël Rusinowitch, Mathieu Turuani, Luca Viganò, Laurent Vigneron
The AVISS Security Protocol Analysis Tool. CAV (2002)
Alessandro Armando, Luca Compagna
Automatic SAT-Compilation of Protocol Insecurity Problems via Reduction to Planning. FORTE (2002)
Alessandro Armando, Luca Compagna, Silvio Ranise
System Description: RDL : Rewrite and Decision Procedure Laboratory. IJCAR (2001)