| 2026 | AsiaCCS | TAGShield: Persistent Tagging for Robust Stack Memory Error Protection. | Michele Grisafi, Carlo Ramponi, Mahmoud Ammar, Silviu Vlasceanu, Bruno Crispo |
| 2026 | SAC | PoME: Distributed Execution Proofs for Modern Microservices. | Linh Nguyen-Thuy, Bruno Crispo |
| 2025 | DSN | A Model-based Approach for Cybersecurity Assessment of Off-Road and Defense Vehicles. | Umberto Bellini, Marzieh Kordi, Bruno Crispo, Paolo Lollini, Andrea Bondavalli, Davide Compar |
| 2025 | ICICS | Bridging the Interoperability Gaps Among Trusted Architectures in MCUs. | Sandro Pinto, Lus Cunha, Daniel Oliveira, Michele Grisafi, Emanuele Beozzo, Bruno Crispo |
| 2025 | SACMAT | Coordinated Enforcement of Obligations in Distributed Usage Control Systems [Work In Progress Paper]. | Hussein Joumaa, Ali Hariri, Theo Dimitrakos, Bruno Crispo |
| 2025 | SEC | Certified Secure Updates for IoT Devices. | Alberto Tacchella, Emanuele Beozzo, Bruno Crispo, Marco Roveri |
| 2025 | SECRYPT | Evaluating a Bimodal User Verification Robustness Against Synthetic Data Attacks. | Sandeep Gupta, Rajesh Kumar, Kiran B. Raja, Bruno Crispo, Carsten Maple |
| 2024 | RAID | Hidden Web Caches Discovery. | Matteo Golinelli, Bruno Crispo |
| 2024 | SACMAT | Obligation Management Framework for Usage Control. | Hussein Joumaa, Ali Hariri, Ana Petrovska, Oleksii Osliak, Theo Dimitrakos, Bruno Crispo |
| 2023 | ACSAC | OAuth 2.0 Redirect URI Validation Falls Short, Literally. | Tommaso Innocenti, Matteo Golinelli, Kaan Onarlioglu, Seyed Ali Mirheidari, Bruno Crispo, Engin Kirda |
| 2023 | ESORICS | μIPS: Software-Based Intrusion Prevention for Bare-Metal Embedded Systems. | Luca Degani, Majid Salehi, Fabio Martinelli, Bruno Crispo |
| 2023 | ESORICS | The Nonce-nce of Web Security: An Investigation of CSP Nonces Reuse. | Matteo Golinelli, Francesco Bonomi, Bruno Crispo |
| 2023 | ISCC | AppBox: A Black-Box Application Sandboxing Technique for Mobile App Management Solutions. | Maqsood Ahmad, Francesco Bergadano, Valerio Costamagna, Bruno Crispo, Giovanni Russello |
| 2023 | ISCC | Device Behavioral Profiling for Autonomous Protection Using Deep Neural Networks. | Sandeep Gupta, Bruno Crispo |
| 2022 | ISCC | Mollywood: Subtitles as an attack vector. | Elham Arshad, Giuliano Turri, Bruno Crispo |
| 2022 | SAC | Generative adversarial networks for subdomain enumeration. | Luca Degani, Francesco Bergadano, Seyed Ali Mirheidari, Fabio Martinelli, Bruno Crispo |
| 2022 | SACMAT | WiP: Metamodel for Continuous Authorisation and Usage Control. | Ali Hariri, Amjad Ibrahim, Theo Dimitrakos, Bruno Crispo |
| 2021 | DIMVA | The Full Gamut of an Attack: An Empirical Analysis of OAuth CSRF in the Wild. | Michele Benolli, Seyed Ali Mirheidari, Elham Arshad, Bruno Crispo |
| 2021 | DIMVA | You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures. | Tommaso Innocenti, Seyed Ali Mirheidari, Amin Kharraz, Bruno Crispo, Engin Kirda |
| 2021 | SEC | SIUV: A Smart Car Identity Management and Usage Control System Based on Verifiable Credentials. | Ali Hariri, Subhajit Bandopadhyay, Athanasios Rizos, Theo Dimitrakos, Bruno Crispo, Muttukrishnan Rajarajan |
| 2020 | ACSAC | Verify&Revive: Secure Detection and Recovery of Compromised Low-end Embedded Devices. | Mahmoud Ammar, Bruno Crispo |
| 2020 | RAID | μSBS: Static Binary Sanitization of Bare-metal Embedded Devices for Fault Observability. | Majid Salehi, Danny Hughes, Bruno Crispo |
| 2019 | ESORICS | A Risk-Driven Model to Minimize the Effects of Human Factors on Smart Devices. | Sandeep Gupta, Attaullah Buriro, Bruno Crispo |
| 2019 | Mobiquitous | Detecting malicious applications using system services request behavior. | Majid Salehi, Morteza Amini, Bruno Crispo |
| 2019 | WiMob | A Decentralized and Scalable Model for Resource Discovery in IoT Network. | Mohammed B. Alshawki, Bruno Crispo, Pter Ligeti |
| 2019 | SOSP | Towards a standards-compliant pure-software trusted execution environment for resource-constrained embedded devices. | Hassaan Janjua, Mahmoud Ammar, Bruno Crispo, Danny Hughes |
| 2018 | ESORICS | SnapAuth: A Gesture-Based Unobtrusive Smartwatch User Authentication Scheme. | Attaullah Buriro, Bruno Crispo, Mojtaba Eskandari, Sandeep Gupta, Athar Mahboob, Rutger Van Acker |
| 2018 | Mobiquitous | Polyglot CerberOS: Resource Security, Interoperability and Multi-Tenancy for IoT Services on a Multilingual Platform. | Sven Akkermans, Bruno Crispo, Wouter Joosen, Danny Hughes |
| 2018 | WWW | Large-Scale Analysis of Style Injection by Relative Path Overwrite. | Sajjad Arshad, Seyed Ali Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William K. Robertson |
| 2018 | WiMob | WISE: Lightweight Intelligent Swarm Attestation Scheme for IoT (The Verifier's Perspective). | Mahmoud Ammar, Mahdi Washha, Bruno Crispo |
| 2017 | ESORICS | DLoc: Distributed Auditing for Data Location Compliance in Cloud. | Mojtaba Eskandari, Bruno Crispo, Anderson Santana de Oliveira |
| 2017 | EWSN | CerberOS: A Resource-Secure OS for Sharing IoT Devices. | Sven Akkermans, Wilfried Daniels, Gowri Sankar Ramachandran, Bruno Crispo, Danny Hughes |
| 2017 | Middleware | S | Wilfried Daniels, Danny Hughes, Mahmoud Ammar, Bruno Crispo, Nelson Matthys, Wouter Joosen |
| 2017 | SAC | TeICC: targeted execution of inter-component communications in Android. | Maqsood Ahmad, Valerio Costamagna, Bruno Crispo, Francesco Bergadano |
| 2016 | SP | Hold and Sign: A Novel Behavioral Biometrics for Smartphone User Authentication. | Attaullah Buriro, Bruno Crispo, Filippo Del Frari, Konrad S. Wrona |
| 2015 | ICIAP | Touchstroke: Smartphone User Authentication Based on Touch-Typing Biometrics. | Attaullah Buriro, Bruno Crispo, Filippo Del Frari, Konrad S. Wrona |
| 2014 | ACSAC | Less is more: cipher-suite negotiation for DNSSEC. | Amir Herzberg, Haya Schulmann, Bruno Crispo |
| 2014 | CCS | PIDGIN: privacy-preserving interest and content sharing in opportunistic networks. | Muhammad Rizwan Asghar, Ashish Gehani, Bruno Crispo, Giovanni Russello |
| 2014 | CloudCom | VLOC: An Approach to Verify the Physical Location of a Virtual Machine In Cloud. | Mojtaba Eskandari, Anderson Santana de Oliveira, Bruno Crispo |
| 2014 | DBSEC | FSquaDRA: Fast Detection of Repackaged Applications. | Yury Zhauniarovich, Olga Gadyatskaya, Bruno Crispo, Francesco La Spina, Ermanno Moser |
| 2013 | CCS | Supporting complex queries and access policies for multi-user encrypted databases. | Muhammad Rizwan Asghar, Giovanni Russello, Bruno Crispo, Mihaela Ion |
| 2013 | CCS | Enabling trusted stores for android. | Yury Zhauniarovich, Olga Gadyatskaya, Bruno Crispo |
| 2013 | CRiSIS | CREPUSCOLO: A collusion resistant privacy preserving location verification system. | Eyp S. Canlar, Mauro Conti, Bruno Crispo, Roberto Di Pietro |
| 2013 | Middleware | Introducing concurrency in policy-based access control. | Maarten Decat, Bert Lagaisse, Wouter Joosen, Bruno Crispo |
| 2012 | CCS | Memoirs of a browser: a cross-browser detection model for privacy-breaching extensions. | Cristiano Giuffrida, Stefano Ortolani, Bruno Crispo |
| 2012 | CCS | Demonstrating the effectiveness of MOSES for separation of execution modes. | Giovanni Russello, Mauro Conti, Bruno Crispo, Earlence Fernandes, Yury Zhauniarovich |
| 2012 | SACMAT | MOSES: supporting operation modes on smartphones. | Giovanni Russello, Mauro Conti, Bruno Crispo, Earlence Fernandes |
| 2011 | CCS | Poster: ESPOON | Muhammad Rizwan Asghar, Giovanni Russello, Bruno Crispo |
| 2011 | CCS | Mind how you answer me!: transparently authenticating the user of a smartphone when answering or placing a call. | Mauro Conti, Irina Zachia-Zlatea, Bruno Crispo |
| 2011 | Middleware | Deploy, Adjust and Readjust: Supporting Dynamic Reconfiguration of Policy Enforcement. | Gabriela Gheorghe, Bruno Crispo, Roberto Carbone, Lieven Desmet, Wouter Joosen |
| 2011 | RAID | KLIMAX: Profiling Memory Write Patterns to Detect Keystroke-Harvesting Malware. | Stefano Ortolani, Cristiano Giuffrida, Bruno Crispo |
| 2011 | WoWMoM | Events privacy in WSNs: A new model and its application. | Stefano Ortolani, Mauro Conti, Bruno Crispo, Roberto Di Pietro |
| 2010 | CCS | An implementation of event and filter confidentiality in pub/sub systems and its application to e-health. | Mihaela Ion, Giovanni Russello, Bruno Crispo |
| 2010 | ICICS | Time Warp: How Time Affects Privacy in LBSs. | Luciana Marconi, Roberto Di Pietro, Bruno Crispo, Mauro Conti |
| 2010 | ICSOC | Combining Enforcement Strategies in Service Oriented Architectures. | Gabriela Gheorghe, Bruno Crispo, Daniel Schleicher, Tobias Anstett, Frank Leymann, Ralph Mietzner, Ganna Monakova |
| 2010 | NSS | Reasoning about Relation Based Access Control. | Alessandro Artale, Bruno Crispo, Fausto Giunchiglia, Fatih Turkmen, Rui Zhang |
| 2010 | RAID | Bait Your Hook: A Novel Detection Technique for Keyloggers. | Stefano Ortolani, Cristiano Giuffrida, Bruno Crispo |
| 2010 | SAC | A service-based context management framework for cross-enterprise collaboration. | Fatih Turkmen, Bruno Crispo, Pietro Mazzoleni |
| 2010 | SECRYPT | Providing Confidentiality in Content-based Publish/subscribe Systems. | Mihaela Ion, Giovanni Russello, Bruno Crispo |
| 2010 | SecureComm | Supporting Publication and Subscription Confidentiality in Pub/Sub Networks. | Mihaela Ion, Giovanni Russello, Bruno Crispo |
| 2009 | SEC | Towards a Theory of White-Box Security. | Amir Herzberg, Haya Schulmann, Amitabh Saxena, Bruno Crispo |
| 2008 | ICCCN | Floodgate: A Micropayment Incentivized P2P Content Delivery Network. | Srijith Krishnan Nair, Erik Zentveld, Bruno Crispo, Andrew S. Tanenbaum |
| 2008 | ISCC | P-CDN: Extending access control capabilities of P2P systems to provide CDN services. | Fatih Turkmen, Pietro Mazzoleni, Bruno Crispo, Elisa Bertino |
| 2008 | PIMRC | An efficient weak secrecy scheme for network coding data dissemination in VANET. | Mario Gerla, Roberto G. Cascella, Zhen Cao, Bruno Crispo, Roberto Battiti |
| 2007 | ACSAC | Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices. | Iulia Ion, Boris Dragovic, Bruno Crispo |
| 2007 | SEC | A Hybrid PKI-IBC Based Ephemerizer System. | Srijith Krishnan Nair, Muhammad Torabi Dashti, Bruno Crispo, Andrew S. Tanenbaum |
| 2006 | ISCC | Security for the Mythical Air-Dropped Sensor Network. | Chandana Gamage, Kemal Bicakci, Bruno Crispo, Andrew S. Tanenbaum |
| 2006 | PERCOM | Is Your Cat Infected with a Computer Virus?. | Melanie R. Rieback, Bruno Crispo, Andrew S. Tanenbaum |
| 2006 | SACMAT | XACML policy integration algorithms: not to be confused with XACML policy combination algorithms! | Pietro Mazzoleni, Elisa Bertino, Bruno Crispo |
| 2006 | SecureComm | An Identity-based Ring Signature Scheme with Enhanced Privacy. | Chandana Gamage, Ben Gras, Bruno Crispo, Andrew S. Tanenbaum |
| 2005 | ACISP | Counting Abuses Using Flexible Off-line Credentials. | Kemal Bicakci, Bruno Crispo, Andrew S. Tanenbaum |
| 2005 | ACISP | RFID Guardian: A Battery-Powered Mobile Device for RFID Privacy Management. | Melanie R. Rieback, Bruno Crispo, Andrew S. Tanenbaum |
| 2005 | ICPADS | P-Hera: Scalable fine-grained access control for P2P infrastructures. | Bruno Crispo, Swaminathan Sivasubramanian, Pietro Mazzoleni, Elisa Bertino |
| 2005 | SAC | How to incorporate revocation status information into the trust metrics for public-key certification. | Kemal Bicakci, Bruno Crispo, Andrew S. Tanenbaum |
| 2004 | ACISP | Symmetric Key Authentication Services Revisited. | Bruno Crispo, Bogdan C. Popescu, Andrew S. Tanenbaum |
| 2004 | NSPW | Support for multi-level security policies in DRM architectures. | Bogdan C. Popescu, Bruno Crispo, Andrew S. Tanenbaum |
| 2004 | SACMAT | Security for grid-based computing systems issues and challenges. | Elisa Bertino, Bruno Crispo, James Joshi, Wengliang (Kevin) Du, Ravi S. Sandhu |
| 2003 | HotOS | Secure Data Replication over Untrusted Hosts. | Bogdan C. Popescu, Bruno Crispo, Andrew S. Tanenbaum |
| 2003 | ISCC | A Certificate Revocation Scheme for a Large-Scale Highly Replicated Distributed System. | Bogdan C. Popescu, Bruno Crispo, Andrew S. Tanenbaum |
| 2001 | ICICS | Reasoning about Accountability within Delegation. | Bruno Crispo, Giancarlo Ruffo |
| 2001 | ISCC | Delegation Protocols for Electronic Commerce. | Bruno Crispo |
| 1997 | CCS | Proactive Password Checking with Decision Trees. | Francesco Bergadano, Bruno Crispo, Giancarlo Ruffo |