Roberto Carbone

Publication Activity (10 Years)

Years Active: 2007-2024
Publications (10 Years): 35

Top Topics

Mobile Applications

Factor Authentication

Top Venues

ACM Trans. Priv. Secur.

Publications

Marco Pernpruner, Roberto Carbone, Giada Sciarretta, Silvio Ranise
An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols. IEEE Trans. Dependable Secur. Comput. 21 (4) (2024)
Amir Sharif, Francesco Antonio Marino, Giada Sciarretta, Giuseppe De Marco, Roberto Carbone, Silvio Ranise
Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities. ARES (2023)
Gianluca Sassetti, Amir Sharif, Giada Sciarretta, Roberto Carbone, Silvio Ranise
Assurance, Consent and Access Control for Privacy-Aware OIDC Deployments. DBSec (2023)
Zahra Ebadi Ansaroudi, Roberto Carbone, Giada Sciarretta, Silvio Ranise
Control is Nothing Without Trust a First Look into Digital Identity Wallet Trends. DBSec (2023)
Luca Verderame, Luca Caviglione, Roberto Carbone, Alessio Merlo
SecCo: Automated Services to Secure Containers in the DevOps Paradigm. RACS (2023)
Amir Sharif, Matteo Ranzi, Roberto Carbone, Giada Sciarretta, Silvio Ranise
SoK: A Survey on Technological Trends for (pre)Notified eIDAS Electronic Identity Schemes. ARES (2022)
Stefano Berlato, Umberto Morelli, Roberto Carbone, Silvio Ranise
End-to-End Protection of IoT Communications Through Cryptographic Enforcement of Access Control Policies. DBSec (2022)
Amir Sharif, Roberto Carbone, Giada Sciarretta, Silvio Ranise
Best current practices for OAuth/OIDC Native Apps: A study of their adoption in popular providers and top-ranked Android clients. J. Inf. Secur. Appl. 65 (2022)
Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
Formal Modelling and Automated Trade-off Analysis of Enforcement Architectures for Cryptographic Access Control in the Cloud. ACM Trans. Priv. Secur. 25 (1) (2022)
Marco Centenaro, Stefano Berlato, Roberto Carbone, Gianfranco Burzio, Giuseppe Faranda Cordella, Roberto Riggio, Silvio Ranise
Safety-Related Cooperative, Connected, and Automated Mobility Services: Interplay Between Functional and Security Requirements. IEEE Veh. Technol. Mag. 16 (4) (2021)
Salimeh Dashti, Amir Sharif, Roberto Carbone, Silvio Ranise
Automated Risk Assessment and What-if Analysis of OpenID Connect and OAuth 2.0 Deployments. DBSec (2021)
Stefano Berlato, Roberto Carbone, Silvio Ranise
Cryptographic Enforcement of Access Control Policies in the Cloud: Implementation and Experimental Assessment. SECRYPT (2021)
Andrea Bisegna, Roberto Carbone, Silvio Ranise
Integrating a Pentesting Tool for IdM Protocols in a Continuous Delivery Pipeline. ETAA (2021)
Andreas Heider-Aviet, Danny Roswin Ollik, Stefano Berlato, Silvio Ranise, Roberto Carbone, Van Thanh Le, Nabil El Ioini, Claus Pahl, Hamid R. Barzegar
Blockchain Based RAN Data Sharing. SMDS (2021)
Marco Pernpruner, Roberto Carbone, Silvio Ranise, Giada Sciarretta
The Good, the Bad and the (Not So) Ugly of Out-of-Band Authentication with eID Cards and Push Notifications: Design, Formal and Risk Analysis. CODASPY (2020)
Giada Sciarretta, Roberto Carbone, Silvio Ranise, Luca Viganò
Formal Analysis of Mobile Multi-Factor Authentication with Single Sign-On Login. ACM Trans. Priv. Secur. 23 (3) (2020)
Federico Sinigaglia, Roberto Carbone, Gabriele Costa, Nicola Zannone
A survey on multi-factor authentication for online banking in the wild. Comput. Secur. 95 (2020)
Amir Sharif, Roberto Carbone, Giada Sciarretta, Silvio Ranise
Automated and Secure Integration of the OpenID Connect iGov Profile in Mobile Native Applications. ETAA@ESORICS (2020)
Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
Exploring Architectures for Cryptographic Access Control Enforcement in the Cloud for Fun and Optimization. AsiaCCS (2020)
Marco Centenaro, Stefano Berlato, Roberto Carbone, Gianfranco Burzio, Giuseppe Faranda Cordella, Silvio Ranise, Roberto Riggio
Security Considerations on 5G-Enabled Back-Situation Awareness for CCAM. 5G World Forum (2020)
Andrea Bisegna, Roberto Carbone, Giulio Pellizzari, Silvio Ranise
Micro-Id-Gym: A Flexible Tool for Pentesting Identity Management Protocols in the Wild and in the Laboratory. ETAA@ESORICS (2020)
Amir Sharif, Roberto Carbone, Silvio Ranise, Giada Sciarretta
A Wizard-based Approach for Secure Code Generation of Single Sign-On and Access Delegation Solutions for Mobile Native Apps. ICETE (2) (2019)
Federico Sinigaglia, Roberto Carbone, Gabriele Costa, Silvio Ranise
MuFASA: A Tool for High-level Specification and Analysis of Multi-factor Authentication Protocols. ETAA@ESORICS (2019)
Roberto Carbone, Silvio Ranise, Giada Sciarretta
Design and Security Assessment of Usable Multi-factor Authentication and Single Sign-On Solutions for Mobile Applications - A Workshop Experience Report. Privacy and Identity Management (2018)
Giada Sciarretta, Roberto Carbone, Silvio Ranise, Luca Viganò
Design, Formal Specification and Analysis of Multi-Factor Authentication Solutions with a Single Sign-On Experience. POST (2018)
Avinash Sudhodanan, Roberto Carbone, Luca Compagna, Nicolas Dolgin, Alessandro Armando, Umberto Morelli
Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries. EuroS&P (2017)
Gabriele Costa, Federico Sinigaglia, Roberto Carbone
PolEnA: Enforcing Fine-grained Permission Policies in Android. SAFECOMP Workshops (2017)
Federico Sinigaglia, Roberto Carbone, Gabriele Costa
Strong Authentication for e-Banking: A Survey on European Regulations and Implementations. SECRYPT (2017)
Giada Sciarretta, Roberto Carbone, Silvio Ranise, Alessandro Armando
Anatomy of the Facebook solution for mobile single sign-on: Security assessment and improvements. Comput. Secur. 71 (2017)
Alessandro Armando, Roberto Carbone, Luca Compagna
SATMC: a SAT-based model checker for security protocols, business processes, and security APIs. Int. J. Softw. Tools Technol. Transf. 18 (2) (2016)
Giada Sciarretta, Alessandro Armando, Roberto Carbone, Silvio Ranise
Security of Mobile Single Sign-On: A Rational Reconstruction of Facebook Login Solution. SECRYPT (2016)
Giada Sciarretta, Roberto Carbone, Silvio Ranise
A delegated authorization solution for smart-city mobile applications. RTSI (2016)
Avinash Sudhodanan, Alessandro Armando, Roberto Carbone, Luca Compagna
Attack Patterns for Black-Box Security Testing of Multi-Party Web Applications. NDSS (2016)
Alessandro Armando, Roberto Carbone, Gabriele Costa, Alessio Merlo
Android Permissions Unleashed. CSF (2015)
Roberto Carbone, Luca Compagna, Annibale Panichella, Serena Elisa Ponta
Security Threat Identification and Testing. ICST (2015)
Alessandro Armando, Roberto Carbone, Eyasu Getahun Chekole, Silvio Ranise
Attribute based access control for APIs in spring security. SACMAT (2014)
Alessandro Armando, Roberto Carbone, Luca Compagna
SATMC: A SAT-Based Model Checker for Security-Critical Systems. TACAS (2014)
Alessandro Armando, Roberto Carbone, Eyasu Getahun Chekole, Claudio Petrazzuolo, Andrea Ranalli, Silvio Ranise
Selective Release of Smart Metering Data in Multi-domain Smart Grids. SmartGridSec (2014)
Alessandro Armando, Roberto Carbone, Luca Zanetti
Formal Modeling and Automatic Security Analysis of Two-Factor and Two-Channel Authentication Protocols. NSS (2013)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations. Comput. Secur. 33 (2013)
Alessandro Armando, Roberto Carbone, Alessio Merlo
Formal Analysis of a Privacy-Preserving Billing Protocol. SmartGridSec (2012)
Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò
The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures. TACAS (2012)
Alessandro Armando, Giancarlo Pellegrino, Roberto Carbone, Alessio Merlo, Davide Balzarotti
From Model-Checking to Automated Testing of Security Protocols: Bridging the Gap. TAP@TOOLS (2012)
Alessandro Armando, Roberto Carbone, Silvio Ranise
Automated Analysis of Semantic-Aware Access Control Policies: A Logic-Based Approach. ICSC (2011)
Gabriela Gheorghe, Bruno Crispo, Roberto Carbone, Lieven Desmet, Wouter Joosen
Deploy, Adjust and Readjust: Supporting Dynamic Reconfiguration of Policy Enforcement. Middleware (2011)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti
From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure? SEC (2011)
Roberto Carbone, Marius Minea, Sebastian Mödersheim, Serena Elisa Ponta, Mathieu Turuani, Luca Viganò
Towards Formal Validation of Trust and Security in the Internet of Services. Future Internet Assembly (2011)
Roberto Carbone
LTL model-checking for security protocols. AI Commun. 24 (3) (2011)
Alessandro Armando, Roberto Carbone, Luca Compagna, Keqin Li, Giancarlo Pellegrino
Model-Checking Driven Security Testing of Web-Based Applications. ICST Workshops (2010)
Alessandro Armando, Roberto Carbone, Luca Compagna
LTL model checking for security protocols. J. Appl. Non Class. Logics 19 (4) (2009)
Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Llanos Tobarra
Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps. FMSE (2008)
Alessandro Armando, Roberto Carbone, Luca Compagna
LTL Model Checking for Security Protocols. CSF (2007)