PhD Student

PhD candidate in Computer and Control Enegineering (Cybersecurity) at Politecnico di Torino (DAUIN department)

Research scolarship

IT Assistant and Technical support to infrastructures at SmartData@Polito.

Autonomous work

Creation of the company website for G.E.D.A.Service.

Master's Degree

Master's degree in Computer Enegineering - Cybersecurity at Politecnico di Torino. 110 cum laude

Young Talent Project

The Young Talent Project is an educational path of excellence that has beenimplemented by Politecnico di Torino and Fondazione CRT for the Bachelor's degree programmes in Engineering and Architecture. This initiative is intended for studentswho rank in the top 5 percent; it aims to promote a merit-based approach through alearning experience that is complementary to the traditional educational path, thus boosting students' attitudes and inclinations. Students who participate in this Project, besides receiving traditional training in the framework of their Bachelor's degree programme, have a unique opportunity to build a multidisciplinary approach tostudy and the ability to understand reality from an overall point of view.

Nowadays smart contexts (such as smart cities/homes, or Industry 4.0) are rapidly gaining popularity. These new paradigms are enabled by the adoption of smart devices, that allow several programmatically driven actions. The Internet of Things (IoT) is the network built by connecting these smart devices. A critical aspect of these devices is their limited hardware support for security functions. This makes protecting IoT devices very challenging, although very important because they implement critical functions, as in Cyber Physical Systems. In this case, the protection of these systems is of paramount importance because their compromise could cause not only digital but also physical damage. Remote Attestation (RA) is a security process that permits a trusted party to remotely verify devices integrity but this becomes challenging for IoT devices due to their hardware constraints. Swarm Attestation (SA) is a generalization of RA to reduce its overhead for IoT environments. In this way, it becomes possible to attest large IoT networks. This paper introduces SAFEHIVE, a new schema for SA to maximize dynamic swarm configuration and management. This schema permits to manage heterogeneous devices in a dynamic scenario, even in the case of great variability.

Nowadays, critical infrastructures are managed through paradigms such as cloud/fog/edge computing and Network Function Virtualization (NFV), providing advantages as flexibility, availability, and reduced management costs. These paradigms introduce several advantages but-given their nature of physically distributed systems-leave room for various security threats, such as software integrity attacks. To counter these threats, Trusted Computing and Remote Attestation (RA) techniques can be used, to allow a third party (Verifier) to verify the software and configuration integrity of a platform (Attester). In environments composed of different objects, several RA frameworks (hardware-based, software-based, or hybrid) might need to be deployed, depending on the capabilities of the attested elements. To ease this process, we propose a new design and implementation of our Trust Monitor (TM) architecture, which implements the Trust Manager specified by ETSI for NFV environments, making it more flexible and usable in different contexts. In addition, we define a generic model for performing RA in heterogeneous environments by employing various RA technologies. More specifically, the extended TM allows flexible RA in hybrid infrastructures composed of different objects, i.e., physical nodes, virtual machines, containers, pods, and enclaves. Through tests performed in an experimental testbed, we show that the proposed implementation is scalable and usable in heterogeneous contexts.