Publications


POSTER: Policy-driven security-aware scheduling in Kubernetes

Matthew Rossi, Michele Beretta, Dario Facchinetti, Stefano Paraboschi

In Proc. of the 20th ACM ASIA Conference on Computer and Communications Security (ASIACCS)
Hanoi, Vietnam, August 25-29, 2025

More info

PDF BibTeX Cite


POSTER: Transparent Temporally-Specialized System Call Filters

Matthew Rossi, Michele Beretta, Dario Facchinetti, Stefano Paraboschi

In Proc. of the 20th ACM ASIA Conference on Computer and Communications Security (ASIACCS)
Hanoi, Vietnam, August 25-29, 2025

More info

PDF BibTeX Cite


Supporting Data Owner Control in IPFS Networks

Marco Abbadini, Michele Beretta, Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Gianluca Oldani, Stefano Paraboschi, Pierangela Samarati, Matthew Rossi

In Proc. of the IEEE International Conference on Communications (IEEE ICC 2024)
Denver, Colorado, USA, June 9-13, 2024

More info

PDF BibTeX Cite


Multi-Dimensional Flat Indexing for Encrypted Data

Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Gianluca Oldani, Stefano Paraboschi, Matthew Rossi, Pierangela Samarati

In IEEE Transactions on Cloud Computing
June 2024

More info

PDF BibTeX Cite


Lightweight Cloud Application Sandboxing

Marco Abbadini, Michele Beretta, Dario Facchinetti, Gianluca Oldani, Matthew Rossi, Stefano Paraboschi

In Proc. of the 14th IEEE International Conference on Cloud Computing Technology and Science (IEEE CLOUDCOM 2023)
Naples, Italy, December 4-6, 2023

More info

PDF BibTeX Cite


NatiSand: Native Code Sandboxing for JavaScript Runtimes

Marco Abbadini, Dario Facchinetti, Gianluca Oldani, Matthew Rossi, Stefano Paraboschi

In Proc. of the 26th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)
Hong Kong, China, October 16-18, 2023

More info

PDF BibTeX Cite

CSAW 2023 Poster


POSTER: Leveraging eBPF to enhance sandboxing of WebAssembly runtimes

Marco Abbadini, Michele Beretta, Dario Facchinetti, Gianluca Oldani, Matthew Rossi, Stefano Paraboschi

In Proc. of the 18th ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2023)
Melbourne, Australia, June 10-14, 2023

More info

PDF BibTeX Cite

USENIX Security 2022 Poster


Cage4Deno: A Fine-Grained Sandbox for Deno Subprocesses

Marco Abbadini, Dario Facchinetti, Gianluca Oldani, Matthew Rossi, Stefano Paraboschi

In Proc. of the 18th ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2023)
Melbourne, Australia, June 10-14, 2023

More info

PDF BibTeX Cite


Scalable Distributed Data Anonymization for Large Datasets

Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Giovanni Livraga, Gianluca Oldani, Stefano Paraboschi, Matthew Rossi, Pierangela Samarati

In IEEE Transactions on Big Data
September 2022

More info

PDF BibTeX Cite


Multi-Dimensional Indexes for Point and Range Queries on Outsourced Encrypted Data

Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Gianluca Oldani, Stefano Paraboschi, Matthew Rossi, Pierangela Samarati

In Proc. of the 2021 IEEE Global Communications Conference (GLOBECOM 2021)
Madrid, Spain, December 7-11, 2021

More info

PDF BibTeX Cite


I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts

Enrico Bacis, Dario Facchinetti, Marco Guarnieri, Marco Rosa, Matthew Rossi, Stefano Paraboschi

In Proc. of the 16th International Conference on Availability, Reliability and Security (ARES 2021)
Virtual, August 17-20, 2021

More info

PDF BibTeX Cite


SEApp: Bringing Mandatory Access Control to Android Apps

Matthew Rossi, Dario Facchinetti, Enrico Bacis, Marco Rosa, Stefano Paraboschi

In Proc. of the 30th {USENIX} Security Symposium ({USENIX} Security 21)
Virtual, August 11-13, 2021

More info

PDF BibTeX Cite

CSAW 2021 Poster
USENIX Security 2022 Poster
CSAW 2021 Applied Research Competition Finalist A & B


Artifact: Scalable Distributed Data Anonymization

Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Gianluca Oldani, Stefano Paraboschi, Matthew Rossi, Pierangela Samarati

In Proc. of the 19th International Conference on Pervasive Computing and Communications (PerCom 2021)
Kassel, Germany, March 22-26, 2021

More info

PDF BibTeX Cite

IEEE PerCom'21 Best Artifact Award


Scalable Distributed Data Anonymization

Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Gianluca Oldani, Stefano Paraboschi, Matthew Rossi, Pierangela Samarati

In Proc. of the 19th International Conference on Pervasive Computing and Communications (PerCom 2021)
Kassel, Germany, March 22-26, 2021

More info

PDF BibTeX Cite


Dynamic Allocation for Resource Protection in Decentralized Cloud Storage

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In Proc. of the 2019 IEEE Global Communications Conference (GLOBECOM 2019)
Waikoloa, Hawaii, USA, December 9-13, 2019

More info

PDF BibTeX Cite


Securing Resources in Decentralized Cloud Storage

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In IEEE Transactions on Information Forensics and Security
May 2019

More info

PDF BibTeX Cite


Multi-Provider Secure Processing of Sensors Data

Enrico Bacis, Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Giovanni Livraga, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In Proc. of the 17th IEEE International Conference on Pervasive Computing and Communications (PerCom 2019)
Kyoto, Japan, March 11-15, 2019

More info

PDF BibTeX Cite

Poster


Protecting Resources and Regulating Access in Cloud-Based Object Storage

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

From Database to Cyber Security: Essays Dedicated to Sushil Jajodia on the Occasion of his 70th Birthday, I. Ray and I. Ray and P. Samarati (eds.), Springer 2018

More info

PDF BibTeX Cite


Distributed Shuffle Index: Analysis and Implementation in an Industrial Testbed

Enrico Bacis, Alan Barrnet, Andrew Byrne, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In Proc. of the 5th IEEE Conference on Communications and Network Security (CNS 2017)
Las Vegas, NV, USA, October 9-11, 2017

More info

PDF BibTeX Cite

Poster


EncSwift and Key Management: An Integrated Approach in an Industrial Setting

Enrico Bacis, Marco Rosa, Ali Sajjad

In 2017 IEEE Conference on Communications and Network Security (CNS)
Las Vegas, USA, October 9-11, 2017

More info

PDF BibTeX Cite


Distributed Shuffle Index in the Cloud: Implementation and Evaluation

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In Proc. of the 4th IEEE International Conference on Cyber Security and Cloud Computing (IEEE CSCloud 2017)
New York, USA, June 26-28, 2017

More info

PDF BibTeX Cite


Managing Data Sharing in OpenStack Swift with Over-Encryption

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Daniele Guttadoro, Stefano Paraboschi, Marco Rosa, Pierangela Samarati, Alessandro Saullo

In Proc. of the 3rd ACM Workshop on Information Sharing and Collaborative Security (WISCS 2016)
Vienna, Austria, October 24, 2016

More info

PDF BibTeX Cite


Mix&Slice: Efficient Access Revocation in the Cloud

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In Proc. of the 23rd ACM Conference on Computer and Communication Security (CCS 2016)
Vienna, Austria, October 24-28, 2016

More info

PDF BibTeX Cite

Poster
CSAW 2017 Applied Research Competition Finalist


Access Control Management for Secure Cloud Storage

Enrico Bacis, Sabrina De Capitani di Vimercati, Sara Foresti, Stefano Paraboschi, Marco Rosa, Pierangela Samarati

In Proc. of the 12th EAI International Conference on Security and Privacy in Communication Networks (SecureComm 2016)
Guangzhou, China, October 10-12, 2016

More info

PDF BibTeX Cite


Improving Android security by widening the role of Mandatory Access Control

Enrico Bacis, Simone Mutti, Marco Rosa, Stefano Paraboschi

In Tiny Transactions on Computer Science
March 2016

More info

PDF BibTeX Cite


Extending Mandatory Access Control Policies in Android

Stefano Paraboschi, Enrico Bacis, Simone Mutti

In Proc. of the 11th International Conference on Information Systems Security (ICISS)
Kolkata, India, December 16-20, 2015

More info

PDF BibTeX Cite


SeSQLite: Security Enhanced SQLite

Simone Mutti, Enrico Bacis, Stefano Paraboschi

In Proc. of the 31st Annual Computer Security Applications Conference
Los Angeles, CA, USA, December 7-11, 2015

More info

PDF BibTeX Cite


Policy Specialization to Support Domain Isolation

Simone Mutti, Enrico Bacis, Stefano Paraboschi

In Proc. of the 2015 Workshop on Automated Decision Making for Active Cyber Defense (SafeConfig)
Denver, Colorado, USA, October 12, 2015

More info

PDF BibTeX Cite


DockerPolicyModules: Mandatory Access Control for Docker Containers

Enrico Bacis, Simone Mutti, Steven Capelli, Stefano Paraboschi

In 2015 IEEE Conference on Communications and Network Security (CNS)
Florence, Italy, September 28-30, 2015

More info

PDF BibTeX Cite

Poster


An SELinux-based Intent manager for Android

Simone Mutti, Enrico Bacis, Stefano Paraboschi

In 2015 IEEE Conference on Communications and Network Security (CNS)
Florence, Italy, September 28-30, 2015

More info

PDF BibTeX Cite

Poster
IEEE CNS15 Best Poster Award


AppPolicyModules: Mandatory Access Control for Third-Party Apps

Enrico Bacis, Simone Mutti, Stefano Paraboschi

In Proc. of the 10th ACM Symposium on Information, Computer and Communications Security (ASIACCS)
Singapore, Republic of Singapore, April 14-17, 2015

More info

PDF BibTeX Cite