Giancarlo Pellegrino

According to our database, Giancarlo Pellegrino authored at least 46 papers between 2010 and 2024.

Collaborative distances:

• Dijkstra number of three.
• Erdős number of four.

2024

Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks.

Gianluca De Stefano, Lea Schönherr, Giancarlo Pellegrino

CoRR, 2024

SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications.

Malte Wessels, Simon Koch, Giancarlo Pellegrino, Martin Johns

Proceedings of the 33rd USENIX Security Symposium, 2024

SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements.

Aleksei Stafeev, Giancarlo Pellegrino

Proceedings of the 33rd USENIX Security Symposium, 2024

The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web.

Soheil Khodayari, Thomas Barber, Giancarlo Pellegrino

Proceedings of the IEEE Symposium on Security and Privacy, 2024

Uncovering the Role of Support Infrastructure in Clickbait PDF Campaigns.

Giada Stivala, Gianluca De Stefano, Andrea Mengascini, Mariano Graziano, Giancarlo Pellegrino

Proceedings of the 9th IEEE European Symposium on Security and Privacy, 2024

The Big Brother's New Playground: Unmasking the Illusion of Privacy in Web Metaverses from a Malicious User's Perspective.

Andrea Mengascini, Ryan Aurelio, Giancarlo Pellegrino

Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 2024

2023

A Large-Scale Study of Phishing PDF Documents.

Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino

CoRR, 2023

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web.

Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses.

Soheil Khodayari, Giancarlo Pellegrino

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

From Attachments to SEO: Click Here to Learn More about Clickbait PDFs!

Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino

Proceedings of the Annual Computer Security Applications Conference, 2023

2022

The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies.

Soheil Khodayari, Giancarlo Pellegrino

Proceedings of the 43rd IEEE Symposium on Security and Privacy, 2022

2021

JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals.

Soheil Khodayari, Giancarlo Pellegrino

Proceedings of the 30th USENIX Security Symposium, 2021

Black Widow: Blackbox Data-driven Web Scanning.

Benjamin Eriksson, Giancarlo Pellegrino, Andrei Sabelfeld

Proceedings of the 42nd IEEE Symposium on Security and Privacy, 2021

Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks.

Xhelal Likaj, Soheil Khodayari, Giancarlo Pellegrino

Proceedings of the RAID '21: 24th International Symposium on Research in Attacks, 2021

2020

Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps.

Qingchuan Zhao, Chaoshun Zuo, Brendan Dolan-Gavitt, Giancarlo Pellegrino, Zhiqiang Lin

Proceedings of the 2020 IEEE Symposium on Security and Privacy, 2020

SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems.

Edward Chou, Florian Tramèr, Giancarlo Pellegrino

Proceedings of the 2020 IEEE Security and Privacy Workshops, 2020

Raccoon: automated verification of guarded race conditions in web applications.

Simon Koch, Tim Sauer, Martin Johns, Giancarlo Pellegrino

Proceedings of the SAC '20: The 35th ACM/SIGAPP Symposium on Applied Computing, online event, [Brno, Czech Republic], March 30, 2020

Deceptive Previews: A Study of the Link Preview Trustworthiness in Social Platforms.

Giada Stivala, Giancarlo Pellegrino

Proceedings of the 27th Annual Network and Distributed System Security Symposium, 2020

2019

Fidelius: Protecting User Secrets from Compromised Browsers.

Saba Eskandarian, Jonathan Cogan, Sawyer Birnbaum, Peh Chang Wei Brandon, Dillon Franke, Forest Fraser, Gaspar Garcia Jr., Eric Gong, Hung T. Nguyen, Taresh K. Sethi, Vishal Subbiah, Michael Backes, Giancarlo Pellegrino, Dan Boneh

Proceedings of the 2019 IEEE Symposium on Security and Privacy, 2019

Geo-locating Drivers: A Study of Sensitive Data Leakage in Ride-Hailing Services.

Qingchuan Zhao, Chaoshun Zuo, Giancarlo Pellegrino, Zhiqiang Lin

Proceedings of the 26th Annual Network and Distributed System Security Symposium, 2019

AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning.

Florian Tramèr, Pascal Dupré, Gili Rusak, Giancarlo Pellegrino, Dan Boneh

Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019

2018

SentiNet: Detecting Physical Attacks Against Deep Learning Systems.

Edward Chou, Florian Tramèr, Giancarlo Pellegrino, Dan Boneh

CoRR, 2018

Ad-versarial: Defeating Perceptual Ad-Blocking.

Florian Tramèr, Pascal Dupré, Gili Rusak, Giancarlo Pellegrino, Dan Boneh

CoRR, 2018

The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators.

Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes

Proceedings of the 2018 IEEE Symposium on Security and Privacy, 2018

Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications.

Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow

Proceedings of the 25th Annual Network and Distributed System Security Symposium, 2018

Formally Reasoning about the Cost and Efficacy of Securing the Email Infrastructure.

Patrick Speicher, Marcel Steinmetz, Robert Künnemann, Milivoj Simeonovski, Giancarlo Pellegrino, Jörg Hoffmann, Michael Backes

Proceedings of the 2018 IEEE European Symposium on Security and Privacy, 2018

2017

Who Controls the Internet?: Analyzing Global Threats using Property Graph Traversals.

Milivoj Simeonovski, Giancarlo Pellegrino, Christian Rossow, Michael Backes

Proceedings of the 26th International Conference on World Wide Web, 2017

Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs.

Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow

Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2017

2016

Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification.

Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes

Proceedings of the 25th USENIX Security Symposium, 2016

Uses and Abuses of Server-Side Requests.

Giancarlo Pellegrino, Onur Catakoglu, Davide Balzarotti, Christian Rossow

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2016

POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications.

Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

2015

Cashing Out the Great Cannon? On Browser-Based DDoS Attacks and Economics.

Giancarlo Pellegrino, Christian Rossow, Fabrice J. Ryba, Thomas C. Schmidt, Matthias Wählisch

Proceedings of the 9th USENIX Workshop on Offensive Technologies, 2015

In the Compression Hornet's Nest: A Security Study of Data Compression in Network Services.

Giancarlo Pellegrino, Davide Balzarotti, Stefan Winter, Neeraj Suri

Proceedings of the 24th USENIX Security Symposium, 2015

jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications.

Giancarlo Pellegrino, Constantin Tschürtz, Eric Bodden, Christian Rossow

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2015

Technical Implementation and Feasibility.

Gert Læssøe Mikkelsen, Kasper Damgård, Hans Guldager, Jonas Lindstrøm Jensen, Jesus Luna Garcia, Janus Dam Nielsen, Pascal Paillier, Giancarlo Pellegrino, Michael Bladt Stausholm, Neeraj Suri, Heng Zhang

Proceedings of the Attribute-based Credentials for Trust: Identity in the Information Society, 2015

2014

Towards a Framework for Assessing the Feasibility of Side-channel Attacks in Virtualized Environments.

Tsvetoslava Vateva-Gurova, Jesus Luna, Giancarlo Pellegrino, Neeraj Suri

Proceedings of the SECRYPT 2014, 2014

Toward Black-Box Detection of Logic Flaws in Web Applications.

Giancarlo Pellegrino, Davide Balzarotti

Proceedings of the 21st Annual Network and Distributed System Security Symposium, 2014

On the Feasibility of Side-Channel Attacks in a Virtualized Environment.

Tsvetoslava Vateva-Gurova, Jesus Luna, Giancarlo Pellegrino, Neeraj Suri

Proceedings of the E-Business and Telecommunications - 11th International Joint Conference, 2014

2013

Detection of logic flaws in multi-party business applications via security testing. (Détection d'anomalies logiques dans les logiciels d'entreprise multi-partis à travers des tests de sécurité).

Giancarlo Pellegrino

PhD thesis, 2013

An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations.

Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti

Comput. Secur., 2013

A Tool for Supporting Developers in Analyzing the Security of Web-Based Security Protocols.

Giancarlo Pellegrino, Luca Compagna, Thomas Morreggia

Proceedings of the Testing Software and Systems, 2013

2012

From Model-Checking to Automated Testing of Security Protocols: Bridging the Gap.

Alessandro Armando, Giancarlo Pellegrino, Roberto Carbone, Alessio Merlo, Davide Balzarotti

Proceedings of the Tests and Proofs - 6th International Conference, 2012

The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures.

Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Luca Compagna, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Elisa Ponta, Marco Rocchetto, Michaël Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò

Proceedings of the Tools and Algorithms for the Construction and Analysis of Systems, 2012

2011

From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure?

Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, Giancarlo Pellegrino, Alessandro Sorniotti

Proceedings of the Future Challenges in Security and Privacy for Academia and Industry, 2011

Security Validation of Business Processes via Model-Checking.

Wihem Arsac, Luca Compagna, Giancarlo Pellegrino, Serena Elisa Ponta

Proceedings of the Engineering Secure Software and Systems - Third International Symposium, 2011

2010

Model-Checking Driven Security Testing of Web-Based Applications.

Alessandro Armando, Roberto Carbone, Luca Compagna, Keqin Li, Giancarlo Pellegrino

Proceedings of the Third International Conference on Software Testing, 2010