Securing software & services
Mobile application security, Android protection, malware detection and policy enforcement in distributed systems.
University of Trento · DISI
Bruno Crispo
Professor · Computer security
Research in the security and privacy of connected systems — from mobile applications and IoT devices to authentication and trusted services.
Department of Information Engineering and Computer Science
University of Trento, Italy
Systems securityInternet of ThingsAuthentication & privacyTrust technologies
Research directions
All research areas →Trustworthy IoT
Protection of resource-constrained devices, trusted computing and intrusion detection in cyber-physical systems.
Authentication & privacy
Behavioural biometrics, OAuth security, access control and trust across organisational boundaries.
Projects in focus
Explore all 10 projects →Selected projects from the original research portfolio; activity status is historical.
MASTER
Monitoring, enforcing and auditing security and compliance in dynamic service architectures. Scientific coordination by Bruno Crispo.
NeCS
A European cybersecurity research and training network spanning technical, legal, socioeconomic and entrepreneurial perspectives.
TENSE+
Security and privacy for cyber-physical systems and IoT, including medical and wellness applications, with KU Leuven.
Research announcements
From the original website · 2022–2023
OAuth 2.0 Redirect URI Validation Falls Short, Literally
AppBox: A Black-Box Application Sandboxing Technique for Mobile App Management Solutions
A Survey of Human-Computer Interaction (HCI) & Natural Habits-based Behavioural Biometric Modalities for User Recognition Schemes
Doctoral supervision
Research spanning web security, IoT protection, mobile authentication and secure distributed systems.
Software-based Trusted Computing Architecture for Resource-constrained Internet of Things Devices
Confused by Path: Analysis of Path Confusion-Based Attacks
From the publication archive
Search the full archive →Historical bibliography, 1997–2010. More recent announcements appear above.
M. Conti, V. T. N. Nguyen, B. Crispo, "CRePE: Context-Related Policy Enforcement for Android" - 13th International Security Conference: ISC 2010, Lecture Notes in Computer Science 6531 Springer 2011, ISBN 978-3-642-18177-1, pp. 331-345
G. Gheorghe, B.Crispo, D. Schleicher, T. Anstett, F. Leymann, R. Mietzner, G. Monakova, "Combining Enforcement Strategies in Service Oriented Architectures" 8th International Conference on Service-Oriented Computing ICSOC 2010. Lecture Notes in Computer Science 6470 2010, ISBN 978-3-642-17357-8, pp. 288-302
S. Ortolani, M. Conti, B. Crispo, Roberto Di Pietro, "Event Handoff Unobservability in WSN". in IFIP WG 11.4 International Workshop, iNetSec 2010, pp. 20-28
Contact
Research enquiries & collaboration
Department of Information Engineering and Computer Science (DISI)
University of Trento, Italy