arXiv subjects

Gabriele Costa

Publications and source records attributed to Gabriele Costa.

15 recordsLinked to original sources

arXiv2026

Extended Bose-Hubbard Model on Small Grids: Exact Diagonalization and Monte Carlo Studies

The superfluid-insulator transition in systems of lattice bosons is usually analyzed in the framework of the Bose-Hubbard model, and has been extensively studied by theory and simulations. Less attention has been paid to the remnants of the transition in truncated lattices, with or without periodic boundary conditions. Here we consider the hard-core limit of the extended Bose-Hubbard model on small square and triangular grids -- i.e., sections of the square and triangular lattices containing up to 13 sites. By mapping out the zero-temperature phase diagram through exact diagonalization, we find ground-state characteristics that are markedly different from those emerging in the thermodynamic limit, together with similarities. The dichotomy between superfluid-like and insulating-like behavior is then investigated in two-dimensional systems of a few interacting bosons in the continuum, subject to confining and optical-lattice potentials mimicking the $3\times 3$ square grid. Using path-integral Monte Carlo simulations, we compute kinetic and potential energies, as well as superfluidity and exchange-cycle statistics, finding hints of Bose-Hubbard behavior even in systems of just five particles.

cond-mat.quant-gas↗

arXiv2026

Onset of stripe order in classical fluids: Lessons from lattice-gas mixtures

When two molecular species with mutual affinity are mixed together, various self-assembled phases can arise at low temperature, depending on the shape of like and unlike interactions. Among them, stripes -- where layers of one type are regularly alternated with layers of another type -- hold a prominent place in materials science, occurring e.g. in the structure of superconductive doped antiferromagnets. Stripe patterns are relevant for the design of functional materials, with applications in optoelectronics, sensing, and biomedicine. In a purely classical setting, an open question pertains to the features that spherically-symmetric particle interactions must have to foster stripe order. Here we address this challenge for a lattice-gas mixture of two particle species, whose equilibrium properties are exactly determined by Monte Carlo simulations with Wang-Landau sampling, in both planar and spherical geometry, and for equal chemical potentials of the species. Somewhat surprisingly, stripes can emerge from largely different off-core interactions, featuring various combinations of repulsive like interactions with a predominantly attractive unlike interaction. In addition to stripes, our survey also unveils crystals and crystal-like structures, cluster crystals, and networks, which considerably broaden the catalog of possible patterns. Overall, our study demonstrates that stripes are more widespread than generally thought, as they can be generated by several distinct mechanisms, thereby explaining why stripe patterns are observed in systems as diverse as cuprate materials, biomaterials, and nanoparticle films.

cond-mat.soft↗

arXiv2026

Wang-Landau study of lattice gases on geodesic grids

We study a family of lattice-gas systems defined on semiregular grids, obtained by projecting the vertices of three different geodesic icosahedra onto a spherical surface. By using couplings up to third neighbors we explore various interaction patterns, ranging from core-corona repulsion to square-well attraction and short-range attractive, long-range repulsive potentials. The relatively small number of sites in each grid ($\sim 100$) enables us to compute the exact statistical properties of the systems as a function of temperature and chemical potential by Wang-Landau sampling. For each case considered we highlight the existence of distinct low-temperature ``phases'', featuring, among others, regular-polyhedral, cluster-crystal, and worm-like structures. We highlight similarities and differences between these motifs and those observed on the triangular lattice under the same conditions. Finally, we discuss the relevance of our results for the bottom-up realization of spherical templates with desired functionalities.

cond-mat.stat-mech↗

arXiv2025

The Postman: A Journey of Ethical Hacking in PosteID/SPID Borderland

This paper presents a vulnerability assessment activity that we carried out on PosteID, the implementation of the Italian Public Digital Identity System (SPID) by Poste Italiane. The activity led to the discovery of a critical privilege escalation vulnerability, which was eventually patched. The overall analysis and disclosure process represents a valuable case study for the community of ethical hackers. In this work, we present both the technical steps and the details of the disclosure process.

cs.CR↗

arXiv2025

Managerial Insights on Investment Strategy in Cybersecurity: Findings from Multi-Country Research

This study examines the strategic role of cybersecurity based on survey data from 1,083 managers across Europe, the UK, and the United States. The findings indicate growing recognition of cybersecurity as a source of competitive advantage, although firms continue to face barriers such as limited resources, talent shortages, and cultural resistance. Larger and high-tech firms tend to adopt more proactive strategies, while SMEs and low-tech sectors display greater variability. Key managerial tensions emerge in balancing security with innovation and agility. Notable country-level differences are observed across Europe, the UK, and the United States. Across all contexts, leadership and employee engagement appear central to closing the gap between strategic intent and operational practice.

cs.CR↗

arXiv2023

Automating the Generation of Cyber Range Virtual Scenarios with VSDL

A cyber range is an environment used for training security experts and testing attack and defence tools and procedures. Usually, a cyber range simulates one or more critical infrastructures that attacking (red) and defending (blue) teams must compromise and protect, respectively. The infrastructure can be physically assembled, but much more convenient is to rely on the Infrastructure as a Service (IaaS) paradigm. Although some modern technologies support the IaaS, the design and deployment of scenarios of interest is mostly a manual operation. As a consequence, it is a common practice to have a cyber range hosting few (sometimes only one), consolidated scenarios. However, reusing the same scenario may significantly reduce the effectiveness of the training and testing sessions. In this paper, we propose a framework for automating the definition and deployment of arbitrarily complex cyber range scenarios. The framework relies on the virtual scenario description language (VSDL), i.e., a domain-specific language for defining high-level features of the desired infrastructure while hiding low-level details. The semantics of VSDL is given in terms of constraints that must be satisfied by the virtual infrastructure. These constraints are then submitted to an SMT solver for checking the satisfiability of the specification. If satisfiable, the specification gives rise to a model that is automatically converted to a set of deployment scripts to be submitted to the IaaS provider.

cs.CR↗

arXiv2022

Condensation and crystal nucleation in a lattice gas with a realistic phase diagram

We reconsider model II of [J. Chem. Phys. 1968, 49, 1778--1783], a two-dimensional lattice-gas system featuring a crystalline phase and two distinct fluid phases (liquid and vapor). In this system, a particle prevents other particles from occupying sites up to third neighbors on the square lattice, while attracting (with decreasing strength) particles sitting at fourth- or fifth-neighbor sites. To make the model more realistic, we assume a finite repulsion at third-neighbor distance, with the result that a second crystalline phase appears at higher pressures. However, the similarity with real-world substances is only partial: on closer inspection the alleged liquid-vapor transition turns out to be a continuous (albeit sharp) crossover, even near the putative triple point. Closer to the standard picture is instead the freezing transition, as we show by computing the free-energy barrier to crystal nucleation from the "liquid".

cond-mat.stat-mech↗

arXiv2022

LiDiTE: a Full-Fledged and Featherweight Digital Twin Framework

The rising of the Cyber-Physical System (CPS) and the Industry 4.0 paradigms demands the design and the implementation of Digital Twin Frameworks (DTFs) that may support the quick build of reliable Digital Twins (DTs) for experimental and testing purposes. Most of the current DTF proposals allow generating DTs at a good pace but affect generality, scalability, portability, and completeness. As a consequence, current DTF are mostly domain-specific and hardly span several application domains (e.g., from simple IoT deployments to the modeling of complex critical infrastructures). Furthermore, the generated DTs often requires a high amount of computational resource to run. In this paper, we present LiDiTE, a novel DTF that overcomes the previous limitations by, on the one hand, supporting the building of general-purpose DTs at a fine-grained level, but, on the other hand, with a reduced resource footprint w.r.t. the current state of the art. We show the characteristics of the LiDiTE by building the DT of a complex and real critical infrastructure (i.e., the Smart Poligeneration Microgrid of the Savona Campus) and evaluating its resource consumption. The source code of LiDiTE, as well as the experimental dataset, is publicly available.

cs.DC↗

arXiv2021

A Protocol for Emotions

We tend to consider emotions a manifestation of our innermost nature of human beings. Emotions characterize our lives in many ways and they chaperon every rational activity we carry out. Despite their pervasiveness, there are still many things we ignore about emotions. Among them, our understanding of how living beings transfer emotions is limited. In particular, there are highly sophisticated interactions between human beings that we would like to comprehend. For instance, think of a movie director who knows in advance the strong emotional impact that a certain scene will have on the spectators. Although many artists rely on some emotional devices, their talent and vision are still the key factors. In this work we analyze high-level protocols for transferring emotions between two intelligent agents. To the best of our knowledge, this is the first attempt to use communication protocols for modeling the exchange of human emotions. By means of a number of examples, we show that our protocols adequately model the engagement of the two parties. Beyond the theoretical interest, our proposal can provide a stepping stone for several applications that we also discuss in this paper.

cs.HC↗

arXiv2021

Turning Federated Learning Systems Into Covert Channels

Federated learning (FL) goes beyond traditional, centralized machine learning by distributing model training among a large collection of edge clients. These clients cooperatively train a global, e.g., cloud-hosted, model without disclosing their local, private training data. The global model is then shared among all the participants which use it for local predictions. In this paper, we put forward a novel attacker model aiming at turning FL systems into covert channels to implement a stealth communication infrastructure. The main intuition is that, during federated training, a malicious sender can poison the global model by submitting purposely crafted examples. Although the effect of the model poisoning is negligible to other participants, and does not alter the overall model performance, it can be observed by a malicious receiver and used to transmit a single bit.

cs.CR↗

arXiv2020

Why Charles Can Pen-test: an Evolutionary Approach to Vulnerability Testing

Discovering vulnerabilities in applications of real-world complexity is a daunting task: a vulnerability may affect a single line of code, and yet it compromises the security of the entire application. Even worse, vulnerabilities may manifest only in exceptional circumstances that do not occur in the normal operation of the application. It is widely recognized that state-of-the-art penetration testing tools play a crucial role, and are routinely used, to dig up vulnerabilities. Yet penetration testing is still primarily a human-driven activity, and its effectiveness still depends on the skills and ingenuity of the security analyst driving the tool. In this paper, we propose a technique for the automatic discovery of vulnerabilities in event-based systems, such as web and mobile applications. Our approach is based on a collaborative, co-evolutionary and contract-driven search strategy that iteratively (i) executes a pool of test cases, (ii) identifies the most promising ones, and (iii) generates new test cases from them. The approach makes a synergistic combination of evolutionary algorithms where several "species" contribute to solving the problem: one species, the test species, evolves to find the target test case, i.e., the set of instruction whose execution lead to the vulnerable statement, whereas the other species, called contract species, evolve to select the parameters for the procedure calls needed to trigger the vulnerability. To assess the effectiveness of our approach, we implemented a working prototype and ran it against both a case study and a benchmark web application. The experimental results confirm that our tool automatically discovers and executes a number of injection flaw attacks that are out of reach for state-of-the-art web scanners.

cs.CR↗

arXiv2020

Private-Yet-Verifiable Contact Tracing

We propose PrYVeCT, a private-yet-verifiable contact tracing system. PrYVeCT works also as an authorization framework allowing for the definition of fine-grained policies, which a certain facility can define and apply to better model its own access rules. Users are authorized to access the facility only when they exhibit a contact trace that complies with the policy. The policy evaluation process is carried out without disclosing the personal data of the user. At the same time, each user can prove to a third party (e.g., a public authority) that she received a certain authorization. PrYVeCT takes advantage of oblivious automata evaluation to implement a privacy-preserving policy enforcement mechanism.

cs.CR↗

arXiv2020

Never Trust Your Victim: Weaponizing Vulnerabilities in Security Scanners

The first step of every attack is reconnaissance, i.e., to acquire information about the target. A common belief is that there is almost no risk in scanning a target from a remote location. In this paper we falsify this belief by showing that scanners are exposed to the same risks as their targets. Our methodology is based on a novel attacker model where the scan author becomes the victim of a counter-strike. We developed a working prototype, called RevOK, and we applied it to 78 scanning systems. Out of them, 36 were found vulnerable to XSS. Remarkably, RevOK also found a severe vulnerability in Metasploit Pro, a mainstream penetration testing tool.

cs.CR↗

arXiv2020

WAF-A-MoLE: Evading Web Application Firewalls through Adversarial Machine Learning

Web Application Firewalls are widely used in production environments to mitigate security threats like SQL injections. Many industrial products rely on signature-based techniques, but machine learning approaches are becoming more and more popular. The main goal of an adversary is to craft semantically malicious payloads to bypass the syntactic analysis performed by a WAF. In this paper, we present WAF-A-MoLE, a tool that models the presence of an adversary. This tool leverages on a set of mutation operators that alter the syntax of a payload without affecting the original semantics. We evaluate the performance of the tool against existing WAFs, that we trained using our publicly available SQL query dataset. We show that WAF-A-MoLE bypasses all the considered machine learning based WAFs.

cs.CR↗

arXiv2012

Metric-Aware Secure Service Orchestration

Secure orchestration is an important concern in the internet of service. Next to providing the required functionality the composite services must also provide a reasonable level of security in order to protect sensitive data. Thus, the orchestrator has a need to check whether the complex service is able to satisfy certain properties. Some properties are expressed with metrics for precise definition of requirements. Thus, the problem is to analyse the values of metrics for a complex business process. In this paper we extend our previous work on analysis of secure orchestration with quantifiable properties. We show how to define, verify and enforce quantitative security requirements in one framework with other security properties. The proposed approach should help to select the most suitable service architecture and guarantee fulfilment of the declared security requirements.

cs.CR↗