ITASEC & SERICS 2025
Joint National Conference on Cybersecurity 2025

Table of Contents

• Preface
  Summary: There were 144 papers submitted for peer-review to this conference. Out of these, 70 papers were accepted for this volume.

• A Classification of Malware Sandboxes and Their Architectures
  Stefano Bistarelli , Emanuele Burberi , Francesco Santini
• Adversarial Training to Improve Accuracy and Robustness of a Windows PE Malware Detection Model
  Luca Lobascio , Giuseppina Andresini , Annalisa Appice , Donato Malerba
• Towards the Responsible/Trustworthy AI in Multi-Domain Operations for Cyber Social Security: A Black-Box AML Case Study in the CAN Bus Frame Detection Task
  Vita Santa Barletta , Danilo Caivano , Christian Catalano , Samuele del Vescovo , Michele Scalera
• Improving MQTT Security Through the Generation of Malicious Test Cases
  Camilla Cespi Polisiani , Maria Carla Calzarossa , Marco Zuppelli , Luca Caviglione , Massimo Guarascio
• Undercover Disruption: Stealth Jamming Attacks on 5G Synchronization Stages
  Rosolino Alaimo , Silvia Schilleci , Alessandra Dino , Stefano Mangione , Ilenia Tinnirello , Domenico Garlisi , Roberto Corallo
• Application of Quantum Resistant Cryptography to Smart Grid deployments
  David Domingo Martín , Rodrigo Martín Sánchez-Ledesma , Marta Irene García Cid
• Advancing Ethical Hacking with AI: A Linux-Based Experimental Study
  Haitham Al-Sinani , Nabil Sahli , Chris Mitchell , Mohamed Al-Siyabi
• Attack Originality Detector Using Machine Learning
  Charlotte Millan , Lotfi Chaari , Amel Aissaoui , Eric Gilbert
• On the Feasibility of Android Stegomalware: A Detection Study
  Diego Soi , Silvia Lucia Sanna , Angelica Liguori , Marco Zuppelli , Leonardo Regano , Davide Maiorca , Luca Caviglione , Giuseppe Manco , Giorgio Giacinto
• Securing Telephone Communication with Trusted Services
  Francesco Buccafurri , Vincenzo De Angelis , Sara Lazzaro , Carmen Licciardi
• A GPU Covert Channel Based on Workload Manipulation Through the CuPy Library
  Gianluca De Lucia , Alessio Merlo , Luca Caviglione
• Revocable Anonymous Credentials from Attribute-Based Encryption
  Giovanni Bartolomeo
• HDDroid: Federated Hyperdimensional Computing for Mobile Malware Detection
  Andrea Augello , Alessandra De Paola , Giuseppe Lo Re , Antoine Menager
• Guessing As A Service: Large Language Models Are Not Yet Ready For Vulnerability Detection
  Francesco Panebianco , Andrea Isgrò , Stefano Longari , Stefano Zanero , Michele Carminati
• How effective are Large Language Models (LLMs) at inferring people’s personality based on texts they authored?
  Victoria Popa , Guglielmo Cola , Caterina Senette , Maurizio Tesconi
• Cross-chain Smart Contracts and dApps Verification by Static Analysis: Limits and Challenges
  Luca Olivieri , Aradhita Mukherjee , Nabendu Chaki , Agostino Cortesi
• Cognitive Filter Bubble: Investigating Bias and Neutrality Vulnerabilities of LLMs in Sensitive Contexts
  Maria Di Gisi , Giuseppe Fenza , Mariacristina Gallo , Vincenzo Loia , Claudio Stanzione
• Preventing Disinformation Spread Across Network Clusters by Strategic Edge Deletions: a Lagrangian Heuristic
  Martina Cerulli , Manlio Gaudioso , Domenico Serra , Carmine Sorgente
• Multi-Domain Fake News Detection Exploiting Ensemble Learning Techniques
  Farwa Batool , Giuseppe Lo Re , Marco Morana , Mario Tortorici
• Multi-LLM Agents Architecture for Claim Verification
  Giuseppe Fenza , Domenico Furno , Vincenzo Loia , Pio Pasquale Trotta
• Key challenges in LoRaWAN-based Edge-Cloud infrastructures for security-sensitive smart cities applications
  Maurizio Giacobbe , Ida Falco , Sarah Zanafi , Carmine Colarusso , Jiregna Abdissa Olana , Antonio Puliafito , Eugenio Zimeo
• VMORPH: A Virtualization/Metamorphic Framework for Binary Obfuscation and Intellectual Property Protection
  Pierciro Caliandro , Matteo Ciccaglione , Andrea Pepe , Giuseppe Bianchi , Alessandro Pellegrini
• CANPak: An Intrusion Detection System against Error Frame Attacks for Controller Area Network
  Sikandar Mehmood Abbasi , Stefano Longari
• A Deep Learning Approach for False Data Injection Attacks Detection in Smart Water Infrastructure
  Davide Giannubilo , Tommaso Giorgeschi , Michele Carminati , Stefano Zanero , Stefano Longari
• Micro-Mobility Security: A Holistic Approach via Mobile App Analysis
  Marco Balossini , Michele Carminati , Stefano Zanero , Stefano Longari
• On Policies for Bartering Access to Resources
  Lorenzo Bettini , Rosario Pugliese , Francesco Tiezzi
• Analysis and Study of a Cybersecurity Maturity Assessment System for SMEs
  Stefano Bistarelli , Sara Geoli , Chiara Luchini , Ivan Mercanti
• On the Usage of ChatGPT for Integrating CAPEC Attacks into ADVISE Meta Ontology
  Marzieh Kordi , Francesco Mariotti , Paolo Lollini , Roberto Magrini , Andrea Bondavalli
• BinSAFE: Extending Functions Embeddings to Entire Binaries
  Gianluca Capozzi , Giordano Laurenzi , Marco Mormando , Carmine Gianni , Gianluca Marcilli , Giuseppe Antonio Di Luna , Leonardo Querzoni
• Enhancing Training Time for Sustainability of Intrusion Detection Systems based on Machine Learning
  Isabella Marasco , Karina Chichifoi , Silvio Russo , Claudio Zanasi
• Digital Authoritarianism: ICT-enabled Repression Across Regime Types
  Martina Lucaccini
• Finding Vulnerabilities in Solidity Smart Contracts with In-Context Learning
  Badaruddin Chachar , Marc Cavazza , Andrea Bracciali , Pietro Ferrara , Agostino Cortesi
• Exposing the Cracks: A Case Study on the Quality of Public Linux Malware Data Sets
  Alessandro Sanna , Daniele Canavese , Leonardo Regano , Davide Maiorca , Giorgio Giacinto
• Challenging Antivirus against Elusive Android Malware over Time
  Danilo Dell'Orco , Lorenzo Valeriani , Giuseppe Bianchi , Alessandro Pellegrini , Alessio Merlo
• Advancing Internet-Connected Devices Posture Analysis with a Meta-Search Engine: A Case Study in Energy Systems
  Andrea Bernardini , Mario Lezoche , Simone Angelini , Giovanna Dondossola , Roberta Terruggia
• A Stackelberg Approach to Federated Learning for Malware Detection
  Andrea Augello , Alessandra De Paola , Giuseppe Lo Re , Marena Jestin
• Forgotten & Reclaimed: Detecting and Preventing Subdomain Takeover in the Italian Medical Landscape
  Lorenzo Bracciale , Matteo Coni , Pierpaolo Loreti , Emanuele Raso , Giuseppe Bianchi
• Evaluating SCAS Tests in Closed Source 5G Core Network
  Leonardo Sagratella , Andrea Bernardini , Francesco D'Alterio , Marina Settembre , Roberta Terruggia
• Towards Cyber Resilience against APTs
  Alessandro Gaudenzi , Lorenzo Nodari , Rodolfo Valentim , Danilo Giordano , Idilio Drago , Alessandra Russo , Federico Cerutti
• Stateful Handling of Critical Events: Leveraging eBPF to Realize eXtended Finite State Machine Abstractions
  Arianna Quinci , Giacomo Belocchi , Francesco Quaglia , Giuseppe Bianchi
• Cybersecurity Education Showdown: A Comparative Analysis of K-12 Education Systems in the United States, the European Union and China
  Berenice Fernandez Nieto , Daisy Romanini , Yuhui Zhu
• Managing Concept Drift in Online Intrusion Detection Systems with Active Learning
  Francesco Camarda , Alessandra De Paola , Salvatore Drago , Pierluca Ferraro , Giuseppe Lo Re
• The Internet of Quantum Things (IoQT) – A New Frontier in Quantum Emulation and Simulation
  Ioannis Kefaloukos , Nikolay Tcholtchev , Michail-Alexandros Kourtis , Giorgos Oikonomakis , Emmanouil Eleftherios Rompogiannakis , Evangelos Markakis
• Leveraging Pre-trained LLMs for GDPR Compliance in Online Privacy Policies
  Giovanni Ciaramella , Luca Petrillo , Margaret Varilek , Francesco Mercaldo , Giovanni Comandé , Fabio Martinelli
• Real-Time Anomaly Detection in Docker Containers: A Continuous Learning Approach Using SF-SOINN
  Dennis Glenn Ejeh , Gian Luca Foresti , Marino Miculan , Axel De Nardin
• VFSMon: an Innovative Reference Monitor in Linux
  Edoardo Manenti , Pasquale Caporaso , Giuseppe Bianchi , Francesco Quaglia
• 5G Security Assurance: Lessons Learned from 3GPP SCAS Tests on Virtualized Network Architectures
  Francesco Mancini , Lorenzo Cannella , Giorgia Messina , Marco Centenaro , Ivan Di Pietro , Alessandro Greco , Samuela Persia , Francesca Cuomo , Giuseppe Bianchi
• A Comparative Analysis of Datasets for Intrusion Detection in Software-Defined Networks
  Francesco Di Gennaro , Alessandro Cucchiarelli , Christian Morbidoni , Luca Spalazzi
• OWSM: Empowering Rego for Stateful Access Control
  Massimiliano Baldo , Fabio Ionut Ion , Marino Miculan , Matteo Paier , Vincenzo Riccio
• Evaluating Explainability of Graph Neural Networks for Network Intrusion Detection with Structural Attacks
  Dimitri Galli , Andrea Venturi , Isabella Marasco , Mirco Marchetti
• Optimizing 5G Protocol Fuzzing: Structure-Aware Techniques and Feedback Integration
  Sara Da Canal , Francesco Mancini , Luca Mastrobattista , Giuseppe Bianchi
• The Security of Quantum Computing in 6G: from Technical Perspectives to Ethical Implications
  Luca Barbieri , Abdelkrim Menina , Riccardo Bassoli , Frank H.P. Fitzek
• CrawLLMentor: An LLM-Powered Tool to Assist Pen Testers in Identifying Business Logic Vulnerabilities
  Nicolò Romandini , Luca Capacci , Rebecca Montanari
• Children and Artificial Intelligence. Towards an Italian Discussion on Artificial Intelligence, Children’s Rights and Regulatory Sandboxes
  Sara Tibido' , Nadia Spatari , Azzurra Ragone
• Reporting potential vulnerabilities: a plea for coordination
  Federica Casarosa , Giovanni Comandé
• An Adaptive Dual-Stack QKD-PQC Framework for Secure and Reliable Inter-Site Communication
  Alessio Di Santo , Walter Tiberti , Dajana Cassioli
• An Experimental Analysis of Semi-supervised Learning for Malware Detection
  Luca Minnei , Giorgio Piras , Angelo Sotgiu , Maura Pintor , Ambra Demontis , Davide Maiorca , Battista Biggio
• A Proportional Approach to Cybersecurity Challanges in the Financial Sector: Ideas from Post-Quantum Cryptography Legal Analysis
  Maria Gagliardi , Chiara D'Elia
• Understanding Regression in Continual Learning for Malware Detection
  Daniele Ghiani , Daniele Angioni , Angelo Sotgiu , Maura Pintor , Battista Biggio
• LLM-based Fact-Checking: A Pipeline for Studying Information Disorder
  Gabriele Fioretti , Lorenzo Goglia , Eugenio Zimeo
• The informational disorder and Artificial Intelligence; between major insidies and possible contrasting tools
  Andrea Ruffo
• Unveiling Attack Patterns from CTF Network Logs with Process Mining Techniques
  Francesco Romeo , Francesco Blefari , Francesco Pironti , Angelo Furfaro
• Cyber-DRIVE: Dynamic Risk Versatile Engine for Cyber Security Risk Analysis, Situational Awareness and Incident Response
  Stefano Solari , Umberto Pedrotti , Enrico Castelli , Gianluca Ceccoli , Alessandro Oneto , Enrico Russo
• Automated Analysis of Key Management Policies
  Matteo Busi , Riccardo Focardi , Sana Gul , Flaminia L. Luccio
• A Survey of WebAssembly Usage for Embedded Applications: Safety and Portability Considerations
  Tancredi Orlando , Luca D'Agati , Francesco Longo , Giovanni Merlino
• PECSo: A Privacy Enhancing Framework for Applications in the Automotive Domain
  Giampaolo Bella , Sergio Esposito , Mirko Giuseppe Mangano , Salvatore Riccobene , Daniele Francesco Santamaria , Gabriele Veneziano Broccia
• A working experimentation model for cyber resilience regulatory sandboxes
  Fabio Seferi
• Integrating OpenTitan as a Security Controller for Cryptographic Tasks in RISC-V SoCs
  Alberto Musa , Emanuele Paisi , Luca Barbierato , Edoardo Patti , Andrea Acquaviva , Francesco Barchi
• CANter: Data-Link Layer Detection of Drop-and-Spoof Attacks on CAN and CAN FD
  Stefano Longari , Gregorio Galletti , Jan Holle , Stefano Zanero
• Confidential Computing: A Security Overview and Future Research Directions
  Alessandro Bertani , Danilo Caraccio , Stefano Zanero , Mario Polino