Publications

D. Donadel, G. Crestanello, G. Morandini, D. Antonioli, M. Conti, M. Merro (2025). SimProcess: High Fidelity Simulation of Noisy ICS Physical Processes. ACM CPSS.

S. Boussaha, V. Fresno-Gomez, T. Barber, D. Antonioli (2025). EmuOCPP: Effective and Scalable OCPP Security and Privacy Testing. USENIX VehicleSec.

Cite Project Project

V. Zubkov, T. Sacchetti, D. Antonioli, M. Strohmeier (2025). Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Study . USENIX WOOT.

Cite Code Project Project DEF CON 32

M. Casagrande, D. Antonioli (2025). CTRAPS: CTAP Impersonation and API Confusion on FIDO2. IEEE Euro S&P.

Preprint Cite Project Project

S. Boussaha, V. Fresno-Gomez, T. Barber, D. Antonioli (2025). CheckOCPP: Automatic OCPP Packet Dissection and Compliance Check. IEEE ACSW.

M. Casagrande, R. Cestaro, E. Losiouk, M. Conti, D. Antonioli (2024). E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Battery-powered Embedded Systems. Preprint.

Preprint Cite Project Project BHUS'25

T. Sacchetti, M. Bognar, J. De Meulemeester, B. Gierlichs, F. Piessens, V. Bezsmertnyi, MC. Molteni, S. Cristalli, A. Gringiani, O. Thomas, D. Antonioli (2024). AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modeling. ACM TECS.

PDF Cite Code Project Tutorial

S. Boussaha, L. Hock, M. Bermejo, R. Cuevas Rumin, A. Cuevas Rumin, D. Klein, M. Johns, L. Compagna, D. Antonioli, T. Barber (2024). FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholds. PETS.

PDF Cite Code Project Slides Video

D. Antonioli (2023). BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. ACM CCS.

PDF Cite Code Project Slides 37c3 37c3 Slides THCON'24 CVE-2023-24023

M. Casagrande, R. Cestaro, E. Losiouk, M. Conti, D. Antonioli (2023). E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystem. ACM WiSec.

PDF Cite Code Project Poster Slides Video Demos THCON'24

M. Casagrande, E. Losiouk, M. Conti, M. Payer, D. Antonioli (2022). BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem. IACR CHES.

PDF Cite Code Project Poster Slides Video Demos HWIO'23

D. Antonioli, M. Payer (2022). On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats. IEEE WOOT.

PDF Cite Code Project Project Slides Video CVE-2019-9506 CVE-2020-10135

D. Antonioli, N. O. Tippenhauer, K. Rasmussen, M. Payer (2022). BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy. ACM AsiaCCS.

PDF Cite Code Project Slides Video Website CVE-2020-15802 CVE-2022-20361

J. Wu, R. Wu, D. Antonioli, M. Payer, N. O. Tippenhauer, D. Xu, D. J. Tian, A. Bianchi (2021). LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacks. USENIX Security.

PDF Cite Code Slides Video

DP3T Team (2020). Early Evidence of Effectiveness of Digital Contact Tracing for SARS-CoV-2 in Switzerland. EMH Swiss medical weekly.

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2020). Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy. ACM TOPS.

PDF Cite Code Project knobattack.com CVE-2019-9506

DP3T Team (2020). Decentralized Privacy-Preserving Proximity Tracing. IEEE DEB.

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2020). BIAS: Bluetooth Impersonation AttackS. IEEE S&P.

PDF Cite Code Project Slides Video Teaser Website CVE-2020-10135

D. Antonioli (2019). Design, Implementation, and Evaluation of Secure Cyber-Physical and Wireless Systems. PhD Thesis, SUTD.

PDF Cite Code Slides

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2019). The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation of Bluetooth BR/EDR. USENIX Security.

PDF Cite Code Project Slides Video Website CVE-2019-9506 CyberWire Oxford IR1915

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2019). Nearby Threats: Reversing, Analyzing, and Attacking Google’s ‘Nearby Connections’ on Android. NDSS.

PDF Cite Code Project Slides Video Reddit

D. Antonioli, G. Bernieri, N. O. Tippenhauer (2018). Taking Control: Design and Implementation of Botnets for Cyber-Physical Attacks with CPSBot. arXiv.

H. R. Ghaeini, D. Antonioli, F. Brasser, A. R. Sadeghi, N. O. Tippenhauer (2018). State-Aware Anomaly Detection for Industrial Control Systems. SAC.

D. Antonioli, H. R. Ghaeini, S. Adepu, M. Ochoa, N. O. Tippenhauer (2017). Gamifying ICS Security Training and Research: Design, Implementation, and Results of S3. ACM CPS-SCP.

PDF Cite Code Project Slides

D. Antonioli, S. Siby, N. O. Tippenhauer (2017). Practical Evaluation of Passive COTS Eavesdropping in 802.11b/n/ac WLAN. CANS.

PDF Cite Slides

J. H. Castellanos, D. Antonioli, N. O. Tippenhauer, M. Ochoa (2017). Legacy-Compliant Data Authentication for Industrial Control System Traffic. ACNS.

PDF Cite Slides US Patent

D. Antonioli, A. Agrawal, N. O. Tippenhauer (2016). Towards high-interaction virtual ICS honeypots-in-a-box. ACM CPS-SCP.

PDF Cite Project Poster Slides

D. Antonioli, N. O. Tippenhauer (2015). MiniCPS: A toolkit for security research on CPS networks. ACM CPS-SCP.

PDF Cite Code Project Poster Slides

V. B. Suresh, D. Antonioli, W. P. Burleson (2013). On-chip lightweight implementation of reduced NIST randomness test suite. IEEE HOST.

D. Antonioli (2013). Design and Testing of Random Number Generators (RNG). MSc Thesis, UniBO.

PDF Cite Slides

D. Antonioli (2010). Artificial Optical Radiation Management, Risk and Safety in the Hospital Environment. Tecnica Ospedaliera.