Marco Rocchetto's website
PUBLICATIONs
-
Challenges and Opportunities for Model-Based Security Risk Assessment of Cyber-Physical Systems
M Rocchetto, A Ferrari, V Senni
Resilience of Cyber-Physical Systems (Book Chapter), 2019 -
An Interpolation-based Method for the Verification of Security Protocols
Marco Rocchetto, Luca Viganò, Marco Volpe
Journal of Computer Security (JCS), 2017 -
Towards Formal Security Analysis of Industrial Control Systems
Marco Rocchetto, Nils Ole Tippenhauer
In Proceedings of the Asia Conference on Computer and Communications Security (AsiaCCS), Abu Dhabi (UAE), 2017 -
A Topological Categorization of Agents for the Definition of Attack States in Multi-Agent Systems
Katia Santacà, Matteo Cristani, Marco Rocchetto, Luca Viganò.
In Proceedings of the European Conference on Multi-Agent Systems (EUMAS), Valencia (Spain), 2016 -
CPDY: Extending the Dolev-Yao Attacker with Physical-Layer Interactions
Marco Rocchetto, Nils Ole Tippenhauer.
In Proceedings of the International Conference on Formal Engineering Methods (ICFEM), Tokyo (Japan), 2016- Download pdf
- ArXiv preprint arxiv:1607.02562 (download)
- Download slides
- CPDY tool
-
On Attacker Models and Profiles for Cyber-Physical Systems
Marco Rocchetto, Nils Ole Tippenhauer.
In Proceedings of the European Symposium on Research in Computer Security (ESORICS), Crete (Greece), 2016. -
Formal Analysis of Vulnerabilities of Web Applications Based on SQL Injection
Federico De Meo, Marco Rocchetto, Luca Viganò
In Proceedings of the International Workshop on Security and Trust Management (STM), Crete (Grece), 2016- Download pdf
- Download Extended Version
- ArXiv extended version arXiv:1605.00358
- SQLfast tool
-
Model-based Detection of CSRF
Marco Rocchetto, Martín Ochoa, Mohammad Torabi Dashti.
In Proceedings of the International Conference on Information Security and Privacy (IFIP-Sec), Marrakech (Marocco), 2014. -
Using Interpolation for the Verification of Security Protocols
Marco Rocchetto, Luca Viganò, Marco Volpe, Giacomo Dalle Vedove.
In Proceedings of the International Workshop on Security and Trust Management (STM), Egham (UK), 2013. -
The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures
Alessandro Armando, Wihem Arsac, Tigran Avanesov, Michele Barletta, Alberto Calvi, Alessandro Cappai, Roberto Carbone, Yannick Chevalier, Jorge Cuéllar, Gabriel Erzse, Simone Frau, Marius Minea, Sebastian Mödersheim, David von Oheimb, Giancarlo Pellegrino, Serena Ponta, Marco Rocchetto, Michael Rusinowitch, Mohammad Torabi Dashti, Mathieu Turuani, Luca Viganò.
In Proceedings of the International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS), Tallin (Estonia), 2012.
Formal Analysis of Vulnerabilities of Web Applications Based on SQL Injection (Extended Version)
Fedrico De Meo, Marco Rocchetto, Luca Viganò.
- ArXiv arXiv:1605.00358, 2016.
- Download pdf
Formal Analysis of Web Applications with Insecure Database APIs due to SQL Injection Attacks
Fedrico De Meo, Marco Rocchetto, Luca Viganò.
Analysis of Security APIs (ASA8), Verona (Italy), 2015.Using Interpolation for the Verification of Security Protocols (Extended Abstract)
Marco Rocchetto, Luca Viganò, Marco Volpe.
Interpolation: From Proofs to Applications (iPRA 2014), Vienna (Austria), 2014.-
Using Interpolation for the Verification of Security Protocols (Extended Abstract)
Giacomo Dalle Vedove, Marco Rocchetto, Luca Viganò, Marco Volpe.
FCS 2013 Workshop on Foundations of Computer Security (Informal Proceedings).