All Stories

  1. Cognition in Social Engineering Empirical Research: a Systematic Literature Review

    Article • ACM Transactions on Computer-Human Interaction, November 2023, ACM (Association for Computing Machinery)

    Nicola Zannone

  2. A Comprehensive Study on Third-Party User Tracking in Mobile Applications

    Article • August 2023, ACM (Association for Computing Machinery)

    Nicola Zannone

  3. Towards Obfuscation of Programmable Logic Controllers

    Article • August 2023, ACM (Association for Computing Machinery)

    Marco Lucchese, Nicola Zannone, Vittoria Cozza

  4. Mitigating Privilege Misuse in Access Control through Anomaly Detection

    Article • August 2023, ACM (Association for Computing Machinery)

    Nicola Zannone, Gelareh Hasel Mehri

  5. HoneyICS: A High-interaction Physics-aware Honeynet for Industrial Control Systems

    Article • August 2023, ACM (Association for Computing Machinery)

    Marco Lucchese, Nicola Zannone

  6. Privacy-Preserving Multi-Party Access Control for Third-Party UAV Services

    Article • May 2023, ACM (Association for Computing Machinery)

    Nicola Zannone

  7. Data Sharing in Social Networks

    Article • May 2023, ACM (Association for Computing Machinery)

    Nicola Zannone

  8. The Influence of Human Factors on the Intention to Report Phishing Emails

    Article • April 2023, ACM (Association for Computing Machinery)

    Nicola Zannone

  9. Towards A High-interaction Physics-aware Honeynet for Industrial Control Systems

    Article • March 2023, ACM (Association for Computing Machinery)

    Nicola Zannone, Marco Lucchese

  10. Poster: A Flexible Relationship-Based Access Control Policy Generator

    Article • June 2022, ACM (Association for Computing Machinery)

    Nicola Zannone

  11. PICO

    Article • April 2022, ACM (Association for Computing Machinery)

    Nicola Zannone

  12. Privacy-preserving policy evaluation in multi-party access control

    Article • Journal of Computer Security, October 2021, IOS Press

    Nicola Zannone

  13. Combining Text and Visual Features to Improve the Identification of Cloned Webpages for Early Phishing Detection

    Article • August 2021, ACM (Association for Computing Machinery)

    Nicola Zannone

  14. Testing the effectiveness of tailored phishing techniques in industry and academia

    Article • July 2020, ACM (Association for Computing Machinery)

    Nicola Zannone

  15. Survey on Access Control for Community-Centered Collaborative Systems

    Article • ACM Computing Surveys, January 2019, ACM (Association for Computing Machinery)

    Nicola Zannone

  16. Behavior analysis in the medical sector

    Article • April 2018, ACM (Association for Computing Machinery)

    Nicola Zannone

  17. Formal analysis of XACML policies using SMT

    Article • Computers & Security, May 2017, Elsevier

    Nicola Zannone

  18. Role Mining with Missing Values

    Article • August 2016, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone, Mr Sokratis Vavilis

  19. A severity-based quantification of data leakages in database systems

    Article • Journal of Computer Security, June 2016, IOS Press

    Nicola Zannone, Mr Sokratis Vavilis

  20. A Hybrid Framework for Data Loss Prevention and Detection

    Article • May 2016, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  21. A Policy Framework for Data Fusion and Derived Data Control

    Article • January 2016, ACM (Association for Computing Machinery)

    Nicola Zannone

  22. Risk-based Analysis of Business Process Executions

    Article • January 2016, ACM (Association for Computing Machinery)

    Nicola Zannone

  23. An Authorization Service for Collaborative Situation Awareness

    Article • January 2016, ACM (Association for Computing Machinery)

    Nicola Zannone

  24. Collaborative Access Decisions: Why Has My Decision Not Been Enforced?

    Article • January 2016, Springer Science + Business Media

    Nicola Zannone

  25. Data Governance and Transparency for Collaborative Systems

    Article • January 2016, Springer Science + Business Media

    Nicola Zannone

  26. Constructing Probable Explanations of Nonconformity: A Data-Aware and History-Based Approach

    Article • December 2015, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  27. An anomaly analysis framework for database systems

    Article • Computers & Security, September 2015, Elsevier

    Mr Sokratis Vavilis, Nicola Zannone

  28. Flow-based reputation with uncertainty: evidence-based subjective logic

    Article • International Journal of Information Security, August 2015, Springer Science + Business Media

    Nicola Zannone

  29. Preventing Information Inference in Access Control

    Article • June 2015, ACM (Association for Computing Machinery)

    Nicola Zannone

  30. On Missing Attributes in Access Control

    Article • June 2015, ACM (Association for Computing Machinery)

    Nicola Zannone

  31. SAFAX – An Extensible Authorization Service for Cloud Environments

    Article • Frontiers in ICT, May 2015, Frontiers

    Nicola Zannone

  32. Pre-Distribution of Certificates for Pseudonymous Broadcast Authentication in VANET

    Article • May 2015, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  33. History-Based Construction of Alignments for Conformance Checking: Formalization and Implementation

    Article • January 2015, Springer Science + Business Media

    Nicola Zannone

  34. Analysis of XACML Policies with SMT

    Article • January 2015, Springer Science + Business Media

    Nicola Zannone

  35. Understanding Computer Security

    Article • Frontiers in ICT, October 2014, Frontiers

    Nicola Zannone

  36. A reference model for reputation systems

    Article • Decision Support Systems, May 2014, Elsevier

    Mr Sokratis Vavilis, Nicola Zannone

  37. CollAC: Collaborative access control

    Article • May 2014, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  38. Data minimisation in communication protocols: a formal analysis framework and application to identity management

    Article • International Journal of Information Security, April 2014, Springer Science + Business Media

    Nicola Zannone

  39. Conviviality-driven access control policy

    Article • Requirements Engineering, February 2014, Springer Science + Business Media

    Nicola Zannone

  40. Data Leakage Quantification

    Article • January 2014, Springer Science + Business Media

    Mr Sokratis Vavilis, Nicola Zannone

  41. Reduction of access control decisions

    Article • January 2014, ACM (Association for Computing Machinery)

    Nicola Zannone

  42. Are On-Line Personae Really Unlinkable?

    Article • January 2014, Springer Science + Business Media

    Nicola Zannone

  43. Privacy Implications of Privacy Settings and Tagging in Facebook

    Article • January 2014, Springer Science + Business Media

    Nicola Zannone

  44. POSTER

    Article • January 2014, ACM (Association for Computing Machinery)

    Nicola Zannone

  45. Controlling Break-the-Glass through Alignment

    Article • September 2013, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  46. Data reliability in home healthcare services

    Article • June 2013, Institute of Electrical & Electronics Engineers (IEEE)

    Mr Sokratis Vavilis, Nicola Zannone

  47. Privacy-Aware Web Service Composition and Ranking

    Article • June 2013, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  48. A SEMANTIC SECURITY FRAMEWORK FOR SYSTEMS OF SYSTEMS

    Article • International Journal of Cooperative Information Systems, March 2013, World Scientific Pub Co Pte Lt

    Nicola Zannone

  49. The POLIPO Security Framework

    Article • January 2013, Springer Science + Business Media

    Nicola Zannone

  50. PERSONA - A Personalized Data Protection Framework

    Article • January 2013, Springer Science + Business Media

    Nicola Zannone

  51. Symbolic Privacy Analysis through Linkability and Detectability

    Article • January 2013, Springer Science + Business Media

    Nicola Zannone

  52. Privacy Analysis of User Behavior Using Alignments

    Article • it - Information Technology, January 2013, De Gruyter

    Nicola Zannone

  53. Privacy-Aware Web Service Composition and Ranking

    Article • International Journal of Web Services Research, January 2013, IGI Global

    Nicola Zannone

  54. POSTER: TRIPLEX

    Article • January 2013, ACM (Association for Computing Machinery)

    Nicola Zannone

  55. Policy Administration in Tag-Based Authorization

    Article • January 2013, Springer Science + Business Media

    Nicola Zannone

  56. Formal Modelling of (De)Pseudonymisation: A Case Study in Health Care Privacy

    Article • January 2013, Springer Science + Business Media

    Nicola Zannone

  57. GEM: A distributed goal evaluation algorithm for trust management

    Article • Theory and Practice of Logic Programming, December 2012, Cambridge University Press

    Nicola Zannone

  58. Enforcing Access Control in Virtual Organizations Using Hierarchical Attribute-Based Encryption

    Article • August 2012, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  59. FLOW-BASED REPUTATION: MORE THAN JUST RANKING

    Article • International Journal of Information Technology & Decision Making, May 2012, World Scientific Pub Co Pte Lt

    Nicola Zannone

  60. Impact of ICT on Home Healthcare

    Article • January 2012, Springer Science + Business Media

    Mr Sokratis Vavilis, Nicola Zannone

  61. Measuring Privacy Compliance Using Fitness Metrics

    Article • January 2012, Springer Science + Business Media

    Nicola Zannone

  62. Requirements engineering within a large-scale security-oriented research project: lessons learned

    Article • Requirements Engineering, November 2011, Springer Science + Business Media

    Nicola Zannone

  63. Measuring Privacy Compliance with Process Specifications

    Article • September 2011, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  64. Security Risk Management by Qualitative Vulnerability Analysis

    Article • September 2011, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  65. A Security Framework for Systems of Systems

    Article • June 2011, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  66. Formal Privacy Analysis of Communication Protocols for Identity Management

    Article • January 2011, Springer Science + Business Media

    Nicola Zannone

  67. Engineering Secure Software and Systems

    Article • January 2011

    Nicola Zannone

  68. Purpose Control: Did You Process the Data for the Intended Purpose?

    Article • January 2011, Springer Science + Business Media

    Nicola Zannone

  69. Modeling Identity-Related Properties and Their Privacy Strength

    Article • January 2011, Springer Science + Business Media

    Nicola Zannone

  70. Organizational Patterns for Security and Dependability

    Article • International Journal of Secure Software Engineering, January 2011, IGI Global

    Nicola Zannone

  71. A Flexible Architecture for Privacy-Aware Trust Management

    Article • Journal of theoretical and applied electronic commerce research, August 2010, SciELO Comision Nacional de Investigacion Cientifica Y Tecnologica (CONICYT)

    Nicola Zannone

  72. Engineering and verifying agent-oriented requirements augmented by business constraints with $${\mathcal{B}}$$ -Tropos

    Article • Autonomous Agents and Multi-Agent Systems, May 2010, Springer Science + Business Media

    Nicola Zannone

  73. Engineering Secure Software and Systems

    Article • January 2010

    Nicola Zannone

  74. Security Requirements Engineering: The SI* Modeling Language and the Secure Tropos Methodology

    Article • January 2010, Springer Science + Business Media

    Nicola Zannone

  75. A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilities

    Article • Requirements Engineering, November 2009, Springer Science + Business Media

    Nicola Zannone

  76. THE SI* MODELING FRAMEWORK: METAMODEL AND APPLICATIONS

    Article • International Journal of Software Engineering and Knowledge Engineering, August 2009, World Scientific Pub Co Pte Lt

    Nicola Zannone

  77. S&D Pattern Deployment at Organizational Level: A Prototype for Remote Healthcare System

    Article • Electronic Notes in Theoretical Computer Science, August 2009, Elsevier

    Nicola Zannone

  78. POLIPO: Policies & OntoLogies for Interoperability, Portability, and autOnomy

    Article • July 2009, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  79. Towards the development of privacy-aware systems

    Article • Information and Software Technology, February 2009, Elsevier

    Nicola Zannone

  80. Engineering Secure Software and Systems

    Article • January 2009

    Nicola Zannone

  81. Goal-Equivalent Secure Business Process Re-engineering

    Article • January 2009, Springer Science + Business Media

    Nicola Zannone

  82. A Modeling Ontology for Integrating Vulnerabilities into Security Requirements Conceptual Foundations

    Article • January 2009, Springer Science + Business Media

    Nicola Zannone

  83. Reputation-Based Ontology Alignment for Autonomy and Interoperability in Distributed Access Control

    Article • January 2009, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  84. How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns

    Article • Artificial Intelligence and Law, November 2008, Springer Science + Business Media

    Nicola Zannone

  85. Why Eliciting and Managing Legal Requirements Is Hard

    Article • September 2008, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  86. Requirements model generation to support requirements elicitation: the Secure Tropos experience

    Article • Automated Software Engineering, May 2008, Springer Science + Business Media

    Nicola Zannone

  87. Risk as Dependability Metrics for the Evaluation of Business Solutions: A Model-driven Approach

    Article • March 2008, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  88. ${\cal B}$ -Tropos

    Article • January 2008, Springer Science + Business Media

    Nicola Zannone

  89. Perceived risk assessment

    Article • January 2008, ACM (Association for Computing Machinery)

    Nicola Zannone

  90. An evaluation of business solutions in manufacturing enterprises

    Article • International Journal of Business Intelligence and Data Mining, January 2008, Inderscience Publishers

    Nicola Zannone, dr. Paolo Ciancarini

  91. Computer-aided Support for Secure Tropos

    Article • Automated Software Engineering, August 2007, Springer Science + Business Media

    Nicola Zannone

  92. FROM HIPPOCRATIC DATABASES TO SECURE TROPOS: A COMPUTER-AIDED RE-ENGINEERING APPROACH

    Article • International Journal of Software Engineering and Knowledge Engineering, April 2007, World Scientific Pub Co Pte Lt

    Nicola Zannone

  93. From Trust to Dependability through Risk Analysis

    Article • January 2007, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  94. How to capture, model, and verify the knowledge of legal, security, and privacy experts

    Article • January 2007, ACM (Association for Computing Machinery)

    Nicola Zannone

  95. Detecting Conflicts of Interest

    Article • September 2006, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  96. Requirements engineering for trust management: model, methodology, and reasoning

    Article • International Journal of Information Security, August 2006, Springer Science + Business Media

    Nicola Zannone

  97. Hierarchical hippocratic databases with minimal disclosure for virtual organizations

    Article • The VLDB Journal, August 2006, Springer Science + Business Media

    Nicola Zannone

  98. Privacy Is Linking Permission to Purpose

    Article • January 2006, Springer Science + Business Media

    Nicola Zannone

  99. Creating Objects in the Flexible Authorization Framework

    Article • January 2006, Springer Science + Business Media

    Nicola Zannone

  100. Designing Security Requirements Models Through Planning

    Article • January 2006, Springer Science + Business Media

    Nicola Zannone

  101. Using a security requirements engineering methodology in practice: The compliance with the Italian data protection legislation

    Article • Computer Standards & Interfaces, June 2005, Elsevier

    Nicola Zannone

  102. Modeling Social and Individual Trust in Requirements Engineering Methodologies

    Article • January 2005, Springer Science + Business Media

    Nicola Zannone

  103. Minimal Disclosure in Hierarchical Hippocratic Databases with Delegation

    Article • January 2005, Springer Science + Business Media

    Nicola Zannone

  104. Security and Trust Requirements Engineering

    Article • January 2005, Springer Science + Business Media

    Nicola Zannone

  105. Maintaining privacy on derived objects

    Article • January 2005, ACM (Association for Computing Machinery)

    Nicola Zannone

  106. Modeling security requirements through ownership, permission and delegation

    Article • January 2005, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  107. ST-tool: a CASE tool for security requirements engineering

    Article • January 2005, Institute of Electrical & Electronics Engineers (IEEE)

    Nicola Zannone

  108. ST-Tool: A CASE Tool for Modeling and Analyzing Trust Requirements

    Article • January 2005, Springer Science + Business Media

    Nicola Zannone

  109. Requirements Engineering Meets Trust Management

    Article • January 2004, Springer Science + Business Media

    Nicola Zannone

  110. Filling the Gap between Requirements Engineering and Public Key/Trust Management Infrastructures

    Article • January 2004, Springer Science + Business Media

    Nicola Zannone

  111. An Ontology for Secure Socio-Technical Systems

    Article • IGI Global

    Nicola Zannone

  112. An Ontology for Secure Socio-Technical Systems

    Article • IGI Global

    Nicola Zannone

  113. Formal Analysis of BPMN Via a Translation into COWS

    Article • Springer Science + Business Media

    Nicola Zannone

  114. Reasoning About Risk in Agent’s Deliberation Process: A Jadex Implementation

    Article • Springer Science + Business Media

    Nicola Zannone

  115. Privacy-Aware Web Service Composition and Ranking

    Article • IGI Global

    Nicola Zannone

  116. Organizational Patterns for Security and Dependability

    Article • IGI Global

    Nicola Zannone

  117. A Model-Driven Approach for the Specification and Analysis of Access Control Policies

    Article • Springer Science + Business Media

    Nicola Zannone

  118. Modelling Security and Trust with Secure Tropos

    Article • IGI Global

    Nicola Zannone

  119. Modelling Security and Trust with Secure Tropos

    Article • IGI Global

    Nicola Zannone

  120. Modelling Security and Trust with Secure Tropos

    Article • IGI Global

    Nicola Zannone

  121. Modelling Security and Trust with Secure Tropos

    Article • IGI Global

    Nicola Zannone