Fulvio Valenza

Toward Correctness by Construction for Network Security Configuration

Automated firewall configuration in virtual networks

A new methodology to automatically define the allocation scheme and configuration of packet filters in the logical topology of a virtual network is proposed, based on solving a carefully designed partial weighted Maximum Satisfiability Modulo Theories problem by means of a state of the art solver.

and offline security policy assessment

This work proposes a novel approach to monitor and manage enforced configurations in production environments that is complementary to PBNM and can be effectively used to analyse several types of IT infrastructures.

Automatic, Verifiable and Optimized Policy-based Security Enforcement for SDN-aware IoT networks

A novel methodology which leverages Maximum Satisfiability Modulo Theories (MaxSMT) to automatically compute a formally correct and optimized allocation scheme and configuration of SDN switches by refining security policies, user-defined or derived from detected attacks is proposed.

Comparative analysis of the environmental performance of delivery routes in the city center and peri-urban area

This demo presents a looping process that autonomously mitigates ongoing attacks by extracting security policies from intrusion detection system alerts and automatically reconfiguring distributed firewalls via a provably correct and optimized approach.

Improving error messages for eBPF programs

Pretty Verifier significantly improves the developer’s experience and facilitates the resolution of critical security issues by improving the readability of eBPF verifier messages and strengthening their connection to the original C source code.