Stefano Calzavara

Publication Activity (10 Years)

Years Active: 2010-2024
Publications (10 Years): 57

Top Topics

Static Analysis

Security Policies

Top Venues

USENIX Security Symposium

J. Comput. Secur.

Publications

Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Giulio Ermanno Pibiri
Verifiable Boosted Tree Ensembles. CoRR (2024)
Zubair Ahmad, Samuele Casarin, Stefano Calzavara
An Empirical Analysis of Web Storage and Its Applications to Web Tracking. ACM Trans. Web 18 (1) (2024)
Pedro Bernardo, Lorenzo Veronese, Valentino Dalla Valle, Stefano Calzavara, Marco Squarcina, Pedro Adão, Matteo Maffei
Web Platform Threats: Automated Detection of Web Security Issues With WPT. USENIX Security Symposium (2024)
Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi
Explainable Global Fairness Verification of Tree-Based Classifiers. SaTML (2023)
Stefano Calzavara, David A. Naumann
Special issue: 35th IEEE Computer Security Symposium - CSF 2022. J. Comput. Secur. 31 (5) (2023)
Stefano Calzavara, Pietro Ferrara, Claudio Lucchese
Certifying machine learning models against evasion attacks by program analysis. J. Comput. Secur. 31 (1) (2023)
Florian Hantke, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock
You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements. CCS (2023)
Stefano Calzavara, Lorenzo Cazzaro, Giulio Ermanno Pibiri, Nicola Prezza
Verifiable Learning for Robust Tree Ensembles. CCS (2023)
Stefano Calzavara, Lorenzo Cazzaro, Giulio Ermanno Pibiri, Nicola Prezza
Verifiable Learning for Robust Tree Ensembles. CoRR (2023)
Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi
Explainable Global Fairness Verification of Tree-Based Classifiers. CoRR (2022)
Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
Beyond robustness: Resilience verification of tree-based classifiers. Comput. Secur. 121 (2022)
Sebastian Roth, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock
The Security Lottery: Measuring Client-Side Web Security Inconsistencies. USENIX Security Symposium (2022)
Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese
AMEBA: An Adaptive Approach to the Black-Box Evasion of Machine Learning Models. AsiaCCS (2021)
Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
Beyond Robustness: Resilience Verification of Tree-Based Classifiers. CoRR (2021)
Stefano Calzavara, Tobias Urban, Dennis Tatang, Marius Steffens, Ben Stock
Reining in the Web's Inconsistencies with Site Policy. NDSS (2021)
Lorenzo Veronese, Stefano Calzavara, Luca Compagna
Bulwark: Holistic and Verified Security Monitoring of Web Protocols. CoRR (2021)
Stefano Calzavara, Hugo Jonker, Benjamin Krumnow, Alvise Rabitti
Measuring Web Session Security at Scale. Comput. Secur. 111 (2021)
Marco Squarcina, Stefano Calzavara, Matteo Maffei
The Remote on the Local: Exacerbating Web Attacks Via Service Workers Caches. SP Workshops (2021)
Stefano Calzavara, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
Feature partitioning for robust tree ensembles and their certification in adversarial scenarios. EURASIP J. Inf. Secur. 2021 (1) (2021)
Marco Squarcina, Mauro Tempesta, Lorenzo Veronese, Stefano Calzavara, Matteo Maffei
Can I Take Your Subdomain? Exploring Same-Site Attacks in the Modern Web. USENIX Security Symposium (2021)
Imane Fouad, Cristiana Santos, Feras Al Kassar, Nataliia Bielova, Stefano Calzavara
On Compliance of Cookie Purposes with the Purpose Specification Principle. EuroS&P Workshops (2020)
Stefano Calzavara, Mauro Conti, Riccardo Focardi, Alvise Rabitti, Gabriele Tolomei
Machine Learning for Web Vulnerability Detection: The Case of Cross-Site Request Forgery. IEEE Secur. Priv. 18 (3) (2020)
Stefano Calzavara, Riccardo Focardi, Alvise Rabitti, Lorenzo Soligo
A Hard Lesson: Assessing the HTTPS Deployment of Italian University Websites. ITASEC (2020)
Stefano Calzavara, Sebastian Roth, Alvise Rabitti, Michael Backes, Ben Stock
A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. USENIX Security Symposium (2020)
Stefano Calzavara, Ben Stock
SecWeb 2020 Preface. EuroS&P Workshops (2020)
Stefano Calzavara, Riccardo Focardi, Niklas Grimm, Matteo Maffei, Mauro Tempesta
Language-Based Web Session Integrity. CoRR (2020)
Sebastian Roth, Timothy Barron, Stefano Calzavara, Nick Nikiforakis, Ben Stock
Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. NDSS (2020)
Stefano Calzavara, Pietro Ferrara, Claudio Lucchese
Certifying Decision Trees Against Evasion Attacks by Program Analysis. CoRR (2020)
Stefano Calzavara, Claudio Lucchese, Federico Marcuzzi, Salvatore Orlando
Feature Partitioning for Robust Tree Ensembles and their Certification in Adversarial Scenarios. CoRR (2020)
Lorenzo Veronese, Stefano Calzavara, Luca Compagna
Bulwark: Holistic and Verified Security Monitoring of Web Protocols. ESORICS (1) (2020)
Marco Squarcina, Mauro Tempesta, Lorenzo Veronese, Stefano Calzavara, Matteo Maffei
Can I Take Your Subdomain? Exploring Related-Domain Attacks in the Modern Web. CoRR (2020)
Stefano Calzavara, Pietro Ferrara, Claudio Lucchese
Certifying Decision Trees Against Evasion Attacks by Program Analysis. ESORICS (2) (2020)
Stefano Calzavara, Claudio Lucchese, Gabriele Tolomei, Seyum Assefa Abebe, Salvatore Orlando
Treant: training evasion-aware decision trees. Data Min. Knowl. Discov. 34 (5) (2020)
Stefano Calzavara, Riccardo Focardi, Niklas Grimm, Matteo Maffei, Mauro Tempesta
Language-Based Web Session Integrity. CSF (2020)
Stefano Calzavara, Mauro Conti, Riccardo Focardi, Alvise Rabitti, Gabriele Tolomei
Mitch: A Machine Learning Approach to the Black-Box Detection of CSRF Vulnerabilities. EuroS&P (2019)
Stefano Calzavara, Alvise Rabitti, Alessio Ragazzo, Michele Bugliesi
Testing for Integrity Flaws in Web Sessions. ESORICS (2) (2019)
Stefano Calzavara, Claudio Lucchese, Gabriele Tolomei
Adversarial Training of Gradient-Boosted Decision Trees. CIKM (2019)
Stefano Calzavara, Riccardo Focardi, Matús Nemec, Alvise Rabitti, Marco Squarcina
Postcards from the Post-HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem. IEEE Symposium on Security and Privacy (2019)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Sub-session hijacking on the web: Root causes and prevention. J. Comput. Secur. 27 (2) (2019)
Stefano Calzavara, Claudio Lucchese, Gabriele Tolomei, Seyum Assefa Abebe, Salvatore Orlando
Treant: Training Evasion-Aware Decision Trees. CoRR (2019)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Semantically Sound Analysis of Content Security Policies. FORTE (2019)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Semantics-Based Analysis of Content Security Policy Deployment. ACM Trans. Web 12 (2) (2018)
Stefano Calzavara, Riccardo Focardi, Marco Squarcina, Mauro Tempesta
Surviving the Web: A Journey into Web Session Security. WWW (Companion Volume) (2018)
Stefano Calzavara, Riccardo Focardi, Matteo Maffei, Clara Schneidewind, Marco Squarcina, Mauro Tempesta
WPSE: Fortifying Web Protocols via Browser-Side Security Monitoring. USENIX Security Symposium (2018)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Dr Cookie and Mr Token - Web Session Implementations and How to Live with Them. ITASEC (2018)
Stefano Calzavara, Riccardo Focardi, Matteo Maffei, Clara Schneidewind, Marco Squarcina, Mauro Tempesta
WPSE: Fortifying Web Protocols via Browser-Side Security Monitoring. CoRR (2018)
Michele Bugliesi, Stefano Calzavara, Riccardo Focardi
Formal methods for web security. J. Log. Algebraic Methods Program. 87 (2017)
Stefano Calzavara, Ilya Grishchenko, Adrien Koutsos, Matteo Maffei
A Sound Flow-Sensitive Heap Abstraction for the Static Analysis of Android Applications. CSF (2017)
Stefano Calzavara, Riccardo Focardi, Marco Squarcina, Mauro Tempesta
Surviving the Web: A Journey into Web Session Security. ACM Comput. Surv. 50 (1) (2017)
Stefano Calzavara, Ilya Grishchenko, Matteo Maffei
HornDroid: Practical and Sound Static Analysis of Android Applications by SMT Solving. CoRR (2017)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
CCSP: Controlled Relaxation of Content Security Policies by Runtime Policy Composition. USENIX Security Symposium (2017)
Stefano Calzavara, Ilya Grishchenko, Adrien Koutsos, Matteo Maffei
A Sound Flow-Sensitive Heap Abstraction for the Static Analysis of Android Applications. CoRR (2017)
Stefano Calzavara, Riccardo Focardi, Niklas Grimm, Matteo Maffei
Micro-policies for Web Session Security. CSF (2016)
Stefano Calzavara, Ilya Grishchenko, Matteo Maffei
HornDroid: Practical and Sound Static Analysis of Android Applications by SMT Solving. EuroS&P (2016)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Content Security Problems?: Evaluating the Effectiveness of Content Security Policy in the Wild. CCS (2016)
Stefano Calzavara, Alvise Rabitti, Enrico Steffinlongo, Michele Bugliesi
Static Detection of Collusion Attacks in ARBAC-Based Workflow Systems. CSF (2016)
Michele Bugliesi, Stefano Calzavara, Sebastian Mödersheim, Paolo Modesti
Security protocol specification and verification with AnBx. J. Inf. Secur. Appl. 30 (2016)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Formal Verification of Liferay RBAC. ESSoS (2015)
Stefano Calzavara, Alvise Rabitti, Michele Bugliesi
Compositional Typed Analysis of ARBAC Policies. CSF (2015)
Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
Affine Refinement Types for Secure Distributed Programming. ACM Trans. Program. Lang. Syst. 37 (4) (2015)
Stefano Calzavara, Michele Bugliesi, Silvia Crafa, Enrico Steffinlongo
Fine-Grained Detection of Privilege Escalation Attacks on Browser Extensions. ESOP (2015)
Stefano Calzavara, Gabriele Tolomei, Andrea Casini, Michele Bugliesi, Salvatore Orlando
A Supervised Learning Approach to Protect Client Authentication on the Web. ACM Trans. Web 9 (3) (2015)
Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Wilayat Khan
CookiExt: Patching the browser against session hijacking attacks. J. Comput. Secur. 23 (4) (2015)
Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Wilayat Khan
Automatic and Robust Client-Side Protection for Cookie-Based Sessions. ESSoS (2014)
Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Wilayat Khan, Mauro Tempesta
Provably Sound Browser-Based Enforcement of Web Session Integrity. CSF (2014)
Stefano Calzavara, Gabriele Tolomei, Michele Bugliesi, Salvatore Orlando
Quite a mess in my cookie jar!: leveraging machine learning to protect web authentication. WWW (2014)
Wilayat Khan, Stefano Calzavara, Michele Bugliesi, Willem De Groef, Frank Piessens
Client Side Web Session Integrity as a Non-interference Property. ICISS (2014)
Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
Logical Foundations of Secure Resource Management in Protocol Implementations. POST (2013)
Michele Bugliesi, Stefano Calzavara, Alvise Spanò
Lintent: Towards Security Type-Checking of Android Applications. FMOODS/FORTE (2013)
Michele Bugliesi, Stefano Calzavara, Riccardo Focardi, Marco Squarcina
Gran: Model Checking Grsecurity RBAC Policies. CSF (2012)
Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
Affine Refinement Types for Authentication and Authorization. TGC (2012)
Michele Bugliesi, Stefano Calzavara, Fabienne Eigner, Matteo Maffei
Resource-Aware Authorization Policies for Statically Typed Cryptographic Protocols. CSF (2011)
Michele Bugliesi, Stefano Calzavara, Damiano Macedonio
Secrecy and Authenticity Types for Secure Distributed Messaging. ARSPA-WITS (2010)