publications

publications by categories in reversed chronological order. generated by jekyll-scholar.

2026

  1. IEEE SaTML
    Beyond the TESSERACT: Trustworthy Dataset Curation for Sound Evaluations of Android Malware Classifiers
    Theo Chow, Mario D’Onghia, Lorenz Linhardt, Zeliang Kan, Daniel Arp, Lorenzo Cavallaro, and Fabio Pierazzi
    In IEEE Conference on Secure and Trustworthy Machine Learning (SaTML), 2026
  2. AAAI
    DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift
    Shae McFadden, Myles Foley, Mario D’Onghia, Chris Hicks, Vasilios Mavroudis, Nicola Paoletti, and Fabio Pierazzi
    In Proc. 40th Annual AAAI Conference on Artificial Intelligence (AAAI-26), 2026
  3. USENIX Sec
    SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity
    Shae McFadden, Myles Foley, Elizabeth Bates, Ilias Tsingenopoulos, Sanyam Vyas, Vasilios Mavroudis, Chris Hicks, and Fabio Pierazzi
    In Proc. of USENIX Security Symposium, 2026
  4. arXiv
    REPLICANT: Learning Policies for Evading and Hardening Malware Detectors
    Shae McFadden, Ilias Tsingenopoulos, Mario D’Onghia, Alexander Herzog, Myles Foley, Chris Hicks, Lorenzo Cavallaro, and Fabio Pierazzi
    2026
  5. IEEE EuroS&P
    KnowML: Improving Generalization of ML-NIDS with Attack Knowledge Graphs
    Xin Fan Guo, Xinran Zheng, Albert Merono Penuela, Lorenzo Cavallaro, Sergio Maffeis, and Fabio Pierazzi
    In Proc. 11th IEEE European Symposium on Security and Privacy (EuroS&P), 2026
  6. ACM ToSEM
    Unraveling the Key of Machine Learning-based Android Malware Detection
    Jiahao Liu, Jun Zeng, Fabio Pierazzi, Ziqi Yang, Lorenzo Cavallaro, and Zhenkai Liang
    ACM Transactions on Software Engineering and Methodology (ToSEM), 2026

2025

  1. RAID
    The Adaptive Arms Race: Redefining Robustness in AI Security
    Ilias Tsingenopoulos, Vera Rimmer, Davy Preuveneers, Fabio Pierazzi, Lorenzo Cavallaro, and Wouter Joosen
    In Proc. of the International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2025
  2. IEEE SaTML
    ML-Based Behavioral Malware Detection Is Far From a Solved Problem
    Yigitcan Kaya, Yizheng Chen, Marcus Botacin, Shoumik Saha, Fabio Pierazzi, Lorenzo Cavallaro, David Wagner, and Tudor Dumitras
    In IEEE Conference on Secure and Trustworthy Machine Learning (SaTML), 2025
  3. arXiv
    Unveiling ECC Vulnerabilities: LSTM Networks for Operation Recognition in Side-Channel Attacks
    Alberto Battistello, Guido Bertoni, Michele Corrias, Lorenzo Nava, Davide Rusconi, Matteo Zoia, Fabio Pierazzi, and Andrea Lanzi
    2025
  4. ACM TOPS
    Intriguing properties of adversarial ML attacks in the problem space [Extended Version]
    Jacopo Cortellazzi, Feargus Pendlebury, Daniel Arp, Erwin Quiring, Fabio Pierazzi, and Lorenzo Cavallaro
    In ACM Transactions on Privacy and Security (TOPS), 2025

2024

  1. ARTMAN
    The Impact of Active Learning on Availability Data Poisoning for Android Malware Classifiers
    Shae McFadden, Zeliang Kan, Lorenzo Cavallaro, and Fabio Pierazzi
    In Proc. of the 2nd Workshop on Recent Advances in Resilient and Trustworthy MAchine learning-driveN systems (ARTMAN), 2024
  2. AISec
    When Adversarial Perturbations meet Concept Drift: an Exploratory Analysis on ML-NIDS
    Giovanni Apruzzese, Aurore Fass, and Fabio Pierazzi
    In Proc. of the ACM Workshop on Artificial Intelligence and Security (AISec), 2024

    Open Problem Paper
  3. CPSIoTSec
    EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems
    Davide Rusconi, Matteo Zoia, Luca Buccioli, Fabio Pierazzi, Danilo Bruschi, Lorenzo Cavallaro, Flavio Toffalini, and Andrea Lanzi
    In Proc. of the 6th Workshop on CPS and IoT Security (CPSIoTSec), 2024
  4. RAID
    How to Train your Antivirus: RL-based Hardening through the Problem Space
    Ilias Tsingenopoulos, Jacopo Cortellazzi, Branislav Bošanský, Simone Aonzo, Davy Preuveneers, Wouter Joosen, Fabio Pierazzi, and Lorenzo Cavallaro
    In Proc. of the International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2024
  5. ICRA
    Characterizing Physical Adversarial Attacks on Robot Motion Planners
    Wenxi Wu, Fabio Pierazzi, Yali Du, and Martim Brandao
    In Proc. of the IEEE International Conference on Robotics and Automation (ICRA), 2024
  6. arXiv
    On the Effectiveness of Adversarial Training on Malware Classifiers
    Hamid Bostani, Jacopo Cortellazzi, Daniel Arp, Fabio Pierazzi, Veelasha Moonsamy, and Lorenzo Cavallaro
    2024
  7. DLSP
    Wendigo: Deep Reinforcement Learning for Denial-of-Service Query Discovery in GraphQL
    Shae McFadden, Marcello Maugeri, Chris Hicks, Vasilis Mavroudis, and Fabio Pierazzi
    In Proc. of the IEEE Workshop on Deep Learning Security and Privacy (DLSP), 2024
  8. DLSP
    On Adaptive Decision-Based Attacks and Defenses
    Ilias Tsingenopoulos, Vera Rimmer, Davy Preuveneers, Fabio Pierazzi, Lorenzo Cavallaro, and Wouter Joosen
    In Proc. of the IEEE Workshop on Deep Learning Security and Privacy (DLSP), 2024

    Extended Abstract
  9. arXiv
    TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version)
    Zeliang Kan, Shae McFadden, Daniel Arp, Feargus Pendlebury, Roberto Jordaney, Johannes Kinder, Fabio Pierazzi, and Lorenzo Cavallaro
    2024

2023

  1. IEEE S&P Mag
    Are Machine Learning Models for Malware Detection Ready for Prime Time?
    Lorenzo Cavallaro, Johannes Kinder, Feargus Pendlebury, and Fabio Pierazzi
    IEEE Security & Privacy Magazine, 2023
  2. IEEE S&P Mag
    Taking the Red Pill: Lessons Learned on Machine Learning for Computer Security
    Daniel Arp, Erwin Quiring, Feargus Pendlebury, Alexander Warnecke, Fabio Pierazzi, Christian Wressnegger, Lorenzo Cavallaro, and Konrad Rieck
    IEEE Security & Privacy Magazine, 2023
  3. CCS Poster
    Poster: RPAL-Recovering Malware Classifiers from Data Poisoning using Active Learning
    Shae McFadden, Zeliang Kan, Lorenzo Cavallaro, and Fabio Pierazzi
    In Proc. of ACM Conference on Computer and Communications Security (CCS), 2023

    Poster Paper
  4. AISec
    Drift Forensics of Malware Classifiers
    Theo Chow, Zeliang Kan, Lorenz Linhardt, Lorenzo Cavallaro, Daniel Arp, and Fabio Pierazzi
    In Proc. of the ACM Workshop on Artificial Intelligence and Security (AISec), 2023
  5. DLSP
    Is It Overkill? Analyzing Feature-Space Concept Drift in Malware Detectors
    Zhi Chen, Zhenning Zhang, Zeliang Kan, Limin Yang, Jacopo Cortellazzi, Feargus Pendlebury, Fabio Pierazzi, Lorenzo Cavallaro, and Gang Wang
    In IEEE Deep Learning Security and Privacy Workshop (DLSP), 2023
  6. IEEE S&P
    Jigsaw Puzzle: Selective backdoor attack to subvert malware classifiers
    Limin Yang, Zhi Chen, Jacopo Cortellazzi, Feargus Pendlebury, Kevin Tu, Fabio Pierazzi, Lorenzo Cavallaro, and Gang Wang
    In IEEE Symposium on Security and Privacy (S&P), 2023
  7. IEEE SaTML
    “Real Attackers Don’t Compute Gradients”: Bridging the Gap Between Adversarial ML Research and Practice
    Giovanni Apruzzese, Hyrum S Anderson, Savino Dambra, David Freeman, Fabio Pierazzi, and Kevin Roundy
    In IEEE Conference on Secure and Trustworthy Machine Learning (SaTML), 2023

    Position Paper

2022

  1. IMC (Short)
    Exploring the security and privacy risks of chatbots in messaging services
    Jide Edu, Cliona Mulligan, Fabio Pierazzi, Jason Polakis, Guillermo Suarez-Tangil, and Jose Such
    In ACM Internet Measurement Conference (IMC) – Short Paper, 2022
  2. USENIX Sec
    Dos and don’ts of machine learning in computer security
    Daniel Arp, Erwin Quiring, Feargus Pendlebury, Alexander Warnecke, Fabio Pierazzi, Christian Wressnegger, Lorenzo Cavallaro, and Konrad Rieck
    In Proc. of USENIX Security Symposium, 2022

    Distinguished Paper Award
  3. IEEE S&P
    Transcending Transcend: Revisiting malware classification in the presence of concept drift
    Federico Barbero, Feargus Pendlebury, Fabio Pierazzi, and Lorenzo Cavallaro
    In IEEE Symposium on Security and Privacy (S&P), 2022

2021

  1. AISec
    Investigating labelless drift adaptation for malware detection
    Zeliang Kan, Feargus Pendlebury, Fabio Pierazzi, and Lorenzo Cavallaro
    In Proc. of the ACM Workshop on Artificial Intelligence and Security (AISec), 2021
  2. AISec
    INSOMNIA: Towards concept-drift robustness in network intrusion detection
    Giuseppina Andresini, Feargus Pendlebury, Fabio Pierazzi, Corrado Loglisci, Annalisa Appice, and Lorenzo Cavallaro
    In Proc. of the ACM Workshop on Artificial Intelligence and Security (AISec), 2021
  3. arXiv
    Realizable Universal Adversarial Perturbations for Malware
    Raphael Labaca-Castro, Luis Muñoz-González, Feargus Pendlebury, Gabi Dreo Rodosek, Fabio Pierazzi, and Lorenzo Cavallaro
    arXiv, 2021

2020

  1. IEEE TIFS
    Glyph: Efficient ML-based detection of heap spraying attacks
    Fabio Pierazzi, Stefano Cristalli, Danilo Bruschi, Michele Colajanni, Mirco Marchetti, and Andrea Lanzi
    IEEE Transactions on Information Forensics and Security (TIFS), 2020
  2. IEEE S&P
    Intriguing properties of adversarial ML attacks in the problem space
    Fabio Pierazzi, Feargus Pendlebury, Jacopo Cortellazzi, and Lorenzo Cavallaro
    In IEEE Symposium on Security and Privacy (S&P), 2020
  3. ACM TMIS
    A data-driven characterization of modern Android spyware
    Fabio Pierazzi, Ghita Mezzour, Qian Han, Michele Colajanni, and VS Subrahmanian
    ACM Transactions on Management Information Systems (TMIS), 2020

2019

  1. USENIX Sec
    TESSERACT: Eliminating experimental bias in malware classification across space and time
    Feargus Pendlebury, Fabio Pierazzi, Roberto Jordaney, Johannes Kinder, and Lorenzo Cavallaro
    In Proc. of USENIX Security Symposium, 2019
  2. IEEE TDSC
    DBank: Predictive Behavioral Analysis of Recent Android Banking Trojans
    Chongyang Bai, Qian Han, Ghita Mezzour, Fabio Pierazzi, and VS Subrahmanian
    IEEE Transactions on Dependable and Secure Computing (TDSC), 2019

2018

  1. CCS-Poster
    Poster: Enabling Fair ML Evaluations for Security
    Feargus Pendlebury, Fabio Pierazzi, Roberto Jordaney, Johannes Kinder, and Lorenzo Cavallaro
    In Proc. of ACM Conference on Computer and Communications Security (CCS), 2018

    Poster Paper

2017

  1. IEEE TDSC
    EC2: Ensemble clustering and classification for predicting android malware families
    Tanmoy Chakraborty, Fabio Pierazzi, and VS Subrahmanian
    IEEE Transactions on Dependable and Secure Computing (TDSC), 2017
  2. IEEE CyCon
    Scalable architecture for online prioritisation of cyber threats
    Fabio Pierazzi, Giovanni Apruzzese, Michele Colajanni, Alessandro Guido, and Mirco Marchetti
    In The 9th International Conference on Cyber Conflict (CyCon), 2017
  3. IEEE TETC
    Detection and threat prioritization of pivoting attacks in large networks
    Giovanni Apruzzese, Fabio Pierazzi, Michele Colajanni, and Mirco Marchetti
    IEEE Transactions on Emerging Topics in Computing (TETC), 2017
  4. IEEE TIFS
    A probabilistic logic of cyber deception
    Sushil Jajodia, Noseong Park, Fabio Pierazzi, Andrea Pugliese, Edoardo Serra, Gerardo I Simari, and VS Subrahmanian
    IEEE Transactions on Information Forensics and Security (TIFS), 2017

2016

  1. IEEE CyCon
    Countering Advanced Persistent Threats through security intelligence and big data analytics
    Mirco Marchetti, Fabio Pierazzi, Alessandro Guido, and Michele Colajanni
    In The 8th International Conference on Cyber Conflict (CyCon), 2016
  2. ComNet
    Analysis of high volumes of network traffic for advanced persistent threat detection
    Mirco Marchetti, Fabio Pierazzi, Michele Colajanni, and Alessandro Guido
    Elsevier Computer Networks, 2016
  3. CoSe
    Exploratory security analytics for anomaly detection
    Fabio Pierazzi, Sara Casolari, Michele Colajanni, and Mirco Marchetti
    Elsevier Computers & Security, 2016

2015

  1. IEEE NCCA
    The network perspective of cloud security
    Fabio Pierazzi, Andrea Balboni, Alessandro Guido, and Mirco Marchetti
    In IEEE Fourth Symposium on Network Cloud Computing and Applications (NCCA), 2015

2014

  1. IEEE ISCC
    Efficient detection of unauthorized data modification in cloud databases
    Luca Ferretti, Fabio Pierazzi, Michele Colajanni, Mirco Marchetti, and Marcello Missiroli
    In IEEE Symposium on Computers and Communications (ISCC), 2014
  2. LSAUC-HPCS
    Security and privacy of location-based services for in-vehicle device systems
    Marcello Missiroli, Fabio Pierazzi, and Michele Colajanni
    In LSAUC Workshop, International Conference on High Performance Computing & Simulation (HPCS), 2014
  3. IEEE TCC
    Scalable architecture for multi-user encrypted SQL operations on cloud database services
    Luca Ferretti, Fabio Pierazzi, Michele Colajanni, and Mirco Marchetti
    IEEE Transactions on Cloud Computing (TCC), 2014
  4. IEEE TCC
    Performance and cost evaluation of an adaptive encryption architecture for cloud databases
    Luca Ferretti, Fabio Pierazzi, Michele Colajanni, and Mirco Marchetti
    IEEE Transactions on Cloud Computing (TCC), 2014

2013

  1. SECURWARE
    Security and confidentiality solutions for public cloud database services
    Luca Ferretti, Fabio Pierazzi, Michele Colajanni, Mirco Marchetti, and others
    In The Seventh International Conference on Emerging Security Information, Systems and Technologies, 2013

    Best Paper Award