Publications
My profiles
List of Publications
Venue rankings: conferences follow ICORE 2026 (A*, A, B, C); journal quartiles follow the SCImago Journal Rank 2025 best-quartile classification (Q1–Q4).
2026
- A hybrid static-dynamic analysis for identifying BYOVD vulnerabilities
A. Monzani, A. Parata, D. Netti, A. Romaniello, A. Oliveri, S. Aonzo, D. Balzarotti, A. Lanzi
Computers & Security (COSE) - Beyond Isolated Phishing Emails: Discovering Hidden Campaign Relationships with MCDA
E. Boulila, M. Dacier, S. P. V. Peroumal, N. Veys, S. Aonzo
International Conference on Information and Communications Security (ICICS), 2026 - SoK: Systematization, Detection, and Hunting of Windows Malware Persistence Techniques
J. van Nielen, A. Oliveri, J. Starink, A. Peter, M. Huisman, S. Aonzo, D. Balzarotti, A. Continella
ACM Asia Conference on Computer and Communications Security (ASIACCS), 2026 - Evasive Intelligence: Lessons from Malware Analysis for Evaluating AI Agents
S. Aonzo, M. Sahin, A. Francillon, D. Perito
arXiv preprint, 2026 - Trust Under Siege: Label Spoofing Attacks Against Machine Learning for Android Malware Detection
T. Lan, L. Demetrio, F. Nait-Abdesselam, Y. Han, S. Aonzo
IEEE Transactions on Information Forensics and Security, 2026 - Decompiling the Synergy: An Empirical Study of Human-LLM Teaming in Software Reverse Engineering
Z. Basque, S. Doria, A. Soneji, W. Gibbs, A. Doupé, Y. Shoshitaishvili, E. Losiouk, R. Wang, S. Aonzo
Network and Distributed System Security (NDSS), 2026 - Unveiling BYOVD Threats: Malware’s Use and Abuse of Kernel Drivers
A. Monzani, A. Parata, A. Oliveri, S. Aonzo, D. Balzarotti, A. Lanzi
Network and Distributed System Security (NDSS), 2026
2025
- Family Ties: A Close Look at the Influence of Static Features on the Precision of Malware Family Clustering
A. Vitale, K. van Liebergen, J. Caballero, S. Dambra, P. Kotzias, S. Aonzo, D. Balzarotti
APWG eCrime, 2025 - The Polymorphism Maze: Understanding Diversities and Similarities in Malware Families
A. Vitale, S. Aonzo, S. Dambra, N. Rani, L. Ippolito, P. Kotzias, J. Caballero, D. Balzarotti
European Symposium on Research in Computer Security (ESORICS), 2025 - A Closer Look at Modern Evasive Phishing Emails
E. Boulila, M. Dacier, S. P. V. Peroumal, N. Veys, S. Aonzo
IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2025 - Mnemocrypt: A Machine Learning Approach for Cryptographic Function Detection in x86 Executables
A. Pacteau, A. Vitale, D. Balzarotti, S. Aonzo
Workshop on Binary Analysis Research (BAR), Co-located with NDSS Symposium, 2025 - The Dark Side of Native Code on Android
A. Ruggia, A. Possemato, S. Dambra, A. Merlo, S. Aonzo, D. Balzarotti
ACM Transactions on Privacy and Security (TOPS), 2025
2024
- How to Train your Antivirus: RL-based Hardening through the Problem Space
I. Tsingenopoulos, J. Cortellazzi, B. Bošanský, S. Aonzo, D. Preuveneers, W. Joosen, F. Pierazzi, L. Cavallaro
International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2024 - Unmasking the Veiled: A Comprehensive Analysis of Android Evasive Malware
A. Ruggia, D. Nisi, S. Dambra, A. Merlo, D. Balzarotti, S. Aonzo
ACM Asia Conference on Computer and Communications Security (ASIACCS), 2024
2023
- Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance
S. Dambra, Y. Han, S. Aonzo, P. Kotzias, A. Vitale, J. Caballero, D. Balzarotti, L. Bilge
ACM Conference on Computer and Communications Security (CCS), 2023 - Android, notify me when it is time to go phishing
A. Ruggia, A. Possemato, A. Merlo, D. Nisi, S. Aonzo
IEEE European Symposium on Security and Privacy (EUROS&P), 2023- 🥈 A conference
- [PDF] [BibTeX]
- Press: s3blogpost, EurecomMedium, WiredIT
- Humans vs. Machines in Malware Classification
S. Aonzo, Y. Han, A. Mantovani, D. Balzarotti
USENIX Security Symposium (USENIX-Security), 2023
2022
- RE-Mind: a First Look Inside the Mind of a Reverse Engineer
A. Mantovani, S. Aonzo, Y. Fratantonio, D. Balzarotti
USENIX Security Symposium (USENIX-Security), 2022
2021
- Trust, But Verify: A Longitudinal Analysis Of Android OEM Compliance and Customization
A. Possemato, S. Aonzo, D. Balzarotti, Y. Fratantonio
IEEE Symposium on Security and Privacy (S&P), 2021 - Longitudinal study of the prevalence of malware evasive techniques
L. Maffia, D. Nisi, P. Kotzias, G. Lagorio, S. Aonzo, D. Balzarotti
arXiv preprint, 2021
2020
- Prevalence and impact of low-entropy packing schemes in the malware ecosystem
A. Mantovani, S. Aonzo, X. Ugarte-Pedrero, A. Merlo, D. Balzarotti
Network and Distributed System Security (NDSS), 2020- 🥇 A* conference
- [PDF] [BibTeX]
- Press: Talosintelligence Blog
- Obfuscapk: An open-source black-box obfuscation tool for Android apps
S. Aonzo, G. C. Georgiu, L. Verderame, A. Merlo
SoftwareX, Volume 11, 2020- 🥈 Q2 journal
- [PDF] [BibTeX]
- Website: https://github.com/Obfuscapk
- Low-Resource Footprint, Data-Driven Malware Detection on Android
S. Aonzo, A. Merlo, M. Migliardi, L. Oneto, F. Palmieri
IEEE Transactions on Sustainable Computing (T-SUSC), 2020
2019
- Droids in Disarray: Detecting Frame Confusion in Hybrid Android Apps
D. Caputo, L. Verderame, S. Aonzo, A. Merlo
IFIP Conference on Data and Applications Security and Privacy (DBSec), 2019
2018
- Phishing Attacks on Modern Android
S. Aonzo, A. Merlo, G. Tavella, Y. Fratantonio
ACM Conference on Computer and Communications Security (CCS), 2018- 🥇 A* conference
- [PDF] [BibTeX] [Video] [Slides]
- Website: http://www.s3.eurecom.fr/projects/modern-android-phishing/
- Press: SlashDot, The Register, Threat Post, ZDNet, Duo Security, Naked Security, Keeper Security, LastPass, Corriere della Sera [ITA]
2017
- RmPerm: a Tool for Android Permissions Removal
S. Aonzo, G. Lagorio, A. Merlo
International Conference on Security and Cryptography (SECRYPT), 2017- 🎖 C conference
- [PDF] [BibTeX]
- Website: https://github.com/RmPerm