Cyber Security
The University of Trento has performed research and offered courses in Security and Cryptography for many years. This research program represents the fulfilment of this activity as a first class citizen. The research focus spans from classical IT security (mobile systems, web services, etc.), to organizational security (Air Traffic Management, critical infrastructures, etc.).
Our research develops in two main directions: technological research, where we develop security technologies such as intrusion detection systems for keyloggers, on-card checkers of applets on smart card, cryptographic boxes for ciphers; and empirical research, where we experiment how technologies actually work in practice, to find out which vulnerabilities are actually exploited in the wild, how malware markets looks like, and so on.
In the past years the group has received several high-profile substantial grants for projects in which it participated either as a coordinator or as a scientific coordinator (IP-MASTER, STREP-S3MS, IP-SECURECHANGE, NoE-NESSOS, CP-SECONOMICS, CSA-CAPITAL, CSA_SECCORD, EIT-M-SHIELD, etc.)
The group is currently involved in several EIT Projects in Mobile Security (VAMOSS, OF2CEN, etc.), a large Marie Curie Training Network (NECS), and two projects with EuroControl on Air Traffic Security. It also participates in the CINI National Cyber-Security Lab and has now been entrusted with the organization of training courses in cyber-security for the Italian government.
Publications
8 publications for 6 currently enrolled students
On the Use of Imbalanced Datasets for Learning-Based Vulnerability Detection
Foulefack, Rosmael; Marchetto, Alessandro
in Testing Software and Systems, Cham (SW): Springer Science and Business Media Deutschland GmbH, 2026, p. 307-324. - (LECTURE NOTES IN COMPUTER SCIENCE). - ISBN: 978-3-032-05187-5. Proceedings of: 37th IFIP WG 6.1 International Conference on Testing Software and Systems, ICTSS 2025, Cyprus, September 17–19, 2025. - Publication URL . - DOI: 10.1007/978-3-032-05188-2_20
Enhancing Vulnerability Detection with Domain Knowledge: A Comparison of Different Mechanisms
Marchetto, Alessandro; Lekeufack Foulefack, Rosmael Zidane
in Testing Software and Systems. ICTSS 2024. Lecture Notes in Computer Science, Cham (SW): Springer Cham, 2025, p. 95-113. - (LECTURE NOTES IN COMPUTER SCIENCE). - ISBN: 9783031808883. Proceedings of: 36th IFIP WG 6.1 International Conference on Testing Software and Systems (ICTSS 2024), London, October 30 - November 1, 2024. - Publication URL . - DOI: 10.1007/978-3-031-80889-0_7
Enhanced Graph Neural Networks for Vulnerability Detection in Java via Advanced Subgraph Construction
Lekeufack Foulefack, Rosmael Zidane; Marchetto, Alessandro
in Testing Software and Systems, Cham (SW): Springer Cham, 2025, p. 131-148. - (LECTURE NOTES IN COMPUTER SCIENCE). - ISBN: 9783031808883. Proceedings of: 36th IFIP WG 6.1 International Conference on Testing Software and Systems (ICTSS 2024), London, UK, October 30 - November 1, 2024. - Publication URL . - DOI: 10.1007/978-3-031-80889-0_9
Incorporating Domain Knowledge into GNNs for Advanced Vulnerability Detection in Java
Foulefack, Rosmael; Marchetto, Alessandro
in 2025 IEEE/ACM International Conference on Automation of Software Test (AST 2025), NY: IEEE, 2025, p. 160-169. - ISBN: 979-8-3315-0179-2. Proceedings of: 2025 IEEE/ACM International Conference on Automation of Software Test (AST 2025), Canada, 26 April - 4 May 2025. - Publication URL . - DOI: 10.1109/AST66626.2025.00022
Rethinking NIDS Rule-Based Pre-Filtering
Brum, Henrique; Knob, Luis; Ferreto, Tiago; Siracusa, Domenico
in 2025 21st International Conference on Network and Service Management (CNSM), 345 E 47TH ST, NEW YORK, NY 10017 USA: IEEE (Institute of Electrical and Electronics Engineers), 2025, p. 1-5. - (INTERNATIONAL CONFERENCE ON NETWORK AND SERVICE MANAGEMENT). - ISBN: 978-3-903176-75-1. Proceedings of: 21st International Conference on Network and Service Management, CNSM 2025, Bologna, 27 - 31 October 2025. - Publication URL . - DOI: 10.23919/cnsm67658.2025.11297559
CPAD: Constraint-Projected Adversarial Attack for Dependable Network Intrusion Detection
Ntako Koungni, Michael Kevin; Siracusa, Domenico; Doriguzzi-Corin, Roberto
in 2025 3rd International Conference on Foundation and Large Language Models (FLLM), 345 E 47TH ST, NEW YORK, NY 10017 USA: IEEE (Institute of Electrical and Electronics Engineers), 2025. - ISBN: 979-8-3315-9409-1. Proceedings of: 2025 3rd International Conference on Foundation and Large Language Models (FLLM), Vienna, 25–28 November 2025. - Publication URL . - DOI: 10.1109/FLLM67465.2025.11391031
Towards the Use of Domain Knowledge to Enhance Transformer-Based Vulnerability Detection
Marchetto, Alessandro; Foulefack, Rosmael
in Quality of Information and Communications Technology (QUATIC 2024), Cham (SW): Springer Cham, 2024, p. 373-390. - (COMMUNICATIONS IN COMPUTER AND INFORMATION SCIENCE). - ISBN: 978-3-031-70244-0. Proceedings of: 17th International Conference on Quality of Information and Communications Technology, QUATIC 2024, Pisa, September 11–13, 2024. - Publication URL . - DOI: 10.1007/978-3-031-70245-7_26
A Rapid Review on Graph-Based Learning Vulnerability Detection
Foulefack, Rosmael; Marchetto, Alessandro
in Quality of Information and Communications Technology, Cham (SW): Springer Cham, 2024, p. 355-372. - (COMMUNICATIONS IN COMPUTER AND INFORMATION SCIENCE). - ISBN: 978-3-031-70244-0. Proceedings of: 17th International Conference on Quality of Information and Communications Technology, QUATIC 2024, Pisa, September 11-13, 2024. - Publication URL . - DOI: 10.1007/978-3-031-70245-7_25
Students
 | Becker Brum, Henrique | henrique.beckerbrum [at] unitn.it | webpage |
| Camporese, Maria | maria.camporese [at] unitn.it | webpage |
| Feng, Yuan | yuan.feng [at] unitn.it | webpage |
| Lekeufack Foulefack, Rosmael Zidane | rz.lekeufack [at] unitn.it | webpage |
| Ntako Koungni, Michael Kevin | michael.ntako [at] unitn.it | webpage |
 | Ramponi, Carlo | carlo.ramponi [at] unitn.it | webpage |