Publications

M. Casagrande, R. Cestaro, E. Losiouk, M. Conti, D. Antonioli (2026). E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on the Xiaomi E-Scooter Ecosystem. USENIX VehicleSec.

Cite BH USA'25 BH USA'25 Slides Dark Reading

T. Sacchetti, D. Antonioli, N. Rattanavipanon (2026). HardaBLE: Hardening BLE Against Software Compromise. ACM WiSec.

T. Sacchetti, K. Rasmussen, D. Antonioli (2026). BlueBrothers: Three New Protocols to Secure Bluetooth. ACM WiSec.

F. Zohdi, D. Antonioli (2026). MaDoS: Matter DoS Attacks via Secure Channel Status Reports. ACM AsiaCCS.

F. Hofhammer, D. Antonioli, M. Payer (2026). PrivacyShield: Relaying BLE Beacons to Counter Unsolicited Tracking. USENIX SEC.

T. Sacchetti, D. Antonioli (2026). BLERP: BLE Re-Pairing Attacks and Defenses. ISOC NDSS.

PDF Cite Code Slides PI Demo CVE-2025-62235 BH Asia'26 BH Asia'26 Slides

T. Sacchetti, M. Bognar, J. De Meulemeester, B. Gierlichs, F. Piessens, V. Bezsmertnyi, MC. Molteni, S. Cristalli, A. Gringiani, O. Thomas, D. Antonioli (2025). AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modeling. ACM TECS.

PDF Cite Code Tutorial

D. Donadel, G. Crestanello, G. Morandini, D. Antonioli, M. Conti, M. Merro (2025). SimProcess: High Fidelity Simulation of Noisy ICS Physical Processes. ACM CPSS.

PDF Cite Code Slides BPA 🏆

S. Boussaha, V. Fresno-Gomez, T. Barber, D. Antonioli (2025). EmuOCPP: Effective and Scalable OCPP Security and Privacy Testing. USENIX VehicleSec.

PDF Cite Code Video MitM Demo Imp Demo DEF CON SG DEF CON Slides

V. Zubkov, T. Sacchetti, D. Antonioli, M. Strohmeier (2025). Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Study . USENIX WOOT.

PDF Cite Code Poster Video DEF CON 32

M. Casagrande, D. Antonioli (2025). CTRAPS: CTAP Impersonation and API Confusion on FIDO2. IEEE Euro S&P.

PDF Cite Code Poster Slides Demos CVE-2024-35311 YSA-2024-02 DEF CON 33 Almanack Off By One

S. Boussaha, V. Fresno-Gomez, T. Barber, D. Antonioli (2025). CheckOCPP: Automatic OCPP Packet Dissection and Compliance Check. IEEE ACSW.

PDF Cite Code Slides DEF CON SG

M. Casagrande, R. Cestaro, E. Losiouk, M. Conti, D. Antonioli (2024). E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Battery-powered Embedded Systems. arxiv.

Preprint Cite BH USA'25 BH USA'25 Slides Dark Reading

S. Boussaha, L. Hock, M. Bermejo, R. Cuevas Rumin, A. Cuevas Rumin, D. Klein, M. Johns, L. Compagna, D. Antonioli, T. Barber (2024). FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholds. PETS.

PDF Cite Code Slides Video

D. Antonioli (2023). BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. ACM CCS.

PDF Cite Code Slides 37c3 37c3 Slides THCON'24 CVE-2023-24023

M. Casagrande, R. Cestaro, E. Losiouk, M. Conti, D. Antonioli (2023). E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystem. ACM WiSec.

PDF Cite Code Poster Slides Video Demos THCON'24

M. Casagrande, E. Losiouk, M. Conti, M. Payer, D. Antonioli (2022). BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem. IACR CHES.

PDF Cite Code Poster Slides Video Demos HWIO'23

D. Antonioli, M. Payer (2022). On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats. IEEE WOOT.

PDF Cite Code Slides Video CVE-2019-9506 CVE-2020-10135

D. Antonioli, N. O. Tippenhauer, K. Rasmussen, M. Payer (2022). BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy. ACM AsiaCCS.

PDF Cite Code Slides Video Website CVE-2020-15802 CVE-2022-20361

J. Wu, R. Wu, D. Antonioli, M. Payer, N. O. Tippenhauer, D. Xu, D. J. Tian, A. Bianchi (2021). LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacks. USENIX SEC.

PDF Cite Code Slides Video

DP3T Team (2020). Early Evidence of Effectiveness of Digital Contact Tracing for SARS-CoV-2 in Switzerland. EMH Swiss medical weekly.

D. Antonioli, N. O. Tippenhauer, K. Rasmussen, M. Payer (2020). BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy. arXiv.

PDF Cite Disclosure CVE-2020-15802

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2020). Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy. ACM TOPS.

PDF Cite Code knobattack.com CVE-2019-9506

DP3T Team (2020). Decentralized Privacy-Preserving Proximity Tracing. IEEE DEB.

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2020). BIAS: Bluetooth Impersonation AttackS. IEEE S&P.

PDF Cite Code Slides Video Teaser Website CVE-2020-10135

D. Antonioli (2019). Design, Implementation, and Evaluation of Secure Cyber-Physical and Wireless Systems. PhD Thesis, SUTD.

PDF Cite Slides

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2019). The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation of Bluetooth BR/EDR. USENIX SEC.

PDF Cite Code Slides Video Website CVE-2019-9506 CyberWire Oxford IR1915

D. Antonioli, N. O. Tippenhauer, K. Rasmussen (2019). Nearby Threats: Reversing, Analyzing, and Attacking Google’s ‘Nearby Connections’ on Android. ISOC NDSS.

PDF Cite Code Slides Video Reddit

D. Antonioli, G. Bernieri, N. O. Tippenhauer (2018). Taking Control: Design and Implementation of Botnets for Cyber-Physical Attacks with CPSBot. arXiv.

H. R. Ghaeini, D. Antonioli, F. Brasser, A. R. Sadeghi, N. O. Tippenhauer (2018). State-Aware Anomaly Detection for Industrial Control Systems. SAC.

D. Antonioli, H. R. Ghaeini, S. Adepu, M. Ochoa, N. O. Tippenhauer (2017). Gamifying ICS Security Training and Research: Design, Implementation, and Results of S3. ACM CPS-SCP.

PDF Cite Code Slides

D. Antonioli, S. Siby, N. O. Tippenhauer (2017). Practical Evaluation of Passive COTS Eavesdropping in 802.11b/n/ac WLAN. CANS.

PDF Cite Slides

J. H. Castellanos, D. Antonioli, N. O. Tippenhauer, M. Ochoa (2017). Legacy-Compliant Data Authentication for Industrial Control System Traffic. ACNS.

PDF Cite Slides US Patent

D. Antonioli, A. Agrawal, N. O. Tippenhauer (2016). Towards high-interaction virtual ICS honeypots-in-a-box. ACM CPS-SCP.

PDF Cite Poster Slides BPA 🏆

D. Antonioli, N. O. Tippenhauer (2015). MiniCPS: A toolkit for security research on CPS networks. ACM CPS-SCP.

PDF Cite Code Poster Slides

V. B. Suresh, D. Antonioli, W. P. Burleson (2013). On-chip lightweight implementation of reduced NIST randomness test suite. IEEE HOST.

D. Antonioli (2013). Design and Testing of Random Number Generators (RNG). MSc Thesis, UniBO.

PDF Cite Slides