Research/Publications


Publications (recent first)

2024


[IEEE ComMag’24] Towards Remotely Verifiable Software Integrity in Resource-Constrained IoT Devices


2023


[USENIX SEC’23] ACFA: Secure Runtime Auditing & Guaranteed Device Healing via Active Control Flow Attestation


[RTAS’23] ISC-FLAT: On the Conflict Between Control Flow Attestation and Real-Time Operations


[ICCAD’23] DiCA: A Hardware-Software Co-Design for Differential Check-Pointing in Intermittently Powered Devices


[ICCAD’23] PARseL: Towards a Verified Root-of-Trust over seL4


[ESORICS’23] Oblivious Extractors and Improved Security in Biometric-based Authentication Systems


2022


[ICCAD’22] CASU: Compromise Avoidance via Secure Updates for Low-end Embedded Systems


[S&P’22] Privacy-from-Birth: Protecting Sensed Data from Malicious Sensors with VERSA


[DAC’22] ASAP: Reconciling Asynchronous Real-Time Operations and Proofs of Execution in Simple Embedded Systems


[USENIX SEC’22] GAROTA: Generalized Active Root-Of-Trust Architecture (for Tiny Embedded Devices)


2021


[CCS’21] On the TOCTOU Problem in Remote Attestation


[DAC’21] DIALED: Data Integrity Attestation for Low-end Embedded Devices


[WiSec’21] Delegated Attestation: Scalable Remote Attestation of Commodity CPS by Blending Proofs of Execution with Software Attestation


[IPSN’21] On the Root of Trust Identification Problem


[DATE’21] Tiny-CFA: Minimalistic Control-Flow Attestation Using Verified Proofs of Execution


2020


[USENIX Sec’20] APEX: A Verified Architecture for Proofs of Execution on Remote Devices Under Full Software Compromise


2019


[USENIX Sec’19] VRASED: A Verified Hardware/Software Co-Design for Remote Attestation


[ICCAD’19] PURE: Using Verified Remote Attestation to Obtain Proofs of Update, Reset and Erasure in Low-End Embedded Systems


[ICDCS’19] Towards Systematic Design of Collective Remote Attestation Protocols


[FGCS’19] SNUSE: A Secure Computation Approach for Large-Scale User Re-Enrollment in Biometric Authentication Systems


2018


[ACNS’18] KRB-CCN: Lightweight Authentication & Access Control for Private Content-Centric Networks


[CSCML’18] Secure Non-Interactive User Re-Enrollment in Biometrics-based Identification and Authentication Systems


[IEEE ComMag’18] Combining Spatial and Social Awareness in D2D Opportunistic Routing


2017


[LCN’17] Namespace Tunnels in Content-Centric Networks


[MSWIM’17] GRM: Group Regularity Mobility Model


[ComNet’17] GROUPS-NET: Group Meetings Aware Routing in Multi-Hop D2D Networks


[ISCC’17] ST-Drop: A Novel Buffer Management Strategy for D2D Opportunistic Networks


2016


[SenSys’16] AoT: Authentication and Access Control for the Entire IoT Device Life-Cycle


[IEEE WCM’16] Leveraging D2D Multi-Hop Communication Through Social Group Meetings Awareness


[ICC’16] Group Mobility: Detection, Tracking and Characterization


2015


[SBRC (workshops)’15] Fault Tolerance in Strongly Minimum Energy Topology with MLD: A Distributed, Energy Efficient yet Simple Protocol


[SBRC (workshops)’15] Designing a Low Cost Home WSN for Remote Energy Monitoring and Eletronic Devices Control