Differences

This shows you the differences between two versions of the page.

--- start [2022/07/12 09:08] – marco.patrignani@unitn.it
+++ start [2025/07/21 16:20] (current) – [NEW Openings] fabio.massacci@unitn.it
@@ Line 1: / Line 1: @@
-====== Security Research at the University of Trento ======
+======== Security Research at the University of Trento ======
 Welcome to the webpage on research and teaching in Security and Cryptography at the University of Trento.
-==== Research Topics ====
+===== Who We Are ====
-Our **[[research activities|research topics]]** cover these directions:
+See the [[security_group|members]] page to see the members of the security group.
-  * technological research (biometrics, mobile phone security, [[malware_analysis|testbeds and malware testing]], crypto for fintech, [[http://disi.unitn.it/~massacci/CryptoSAT/|SAT-based cryptanalysis]], etc.)
+==== NEW Openings ====
-  * empirical research ([[Security economics]], [[Validation of Risk and Security Requirements Methodologies|empirical risk assessment]], [[Vulnerability_discovery_models|vulnerability analysis]], etc.)
-  * fundamental research: [[https://squera.github.io/research/|programming language security and secure compilation]].
+We are always looking for interested phd and post-doc (so please send an email to security.positions.disi@unitn.it if you would like to express your interest). Beware that we always formally need to open a position and you'll need to apply.
-==== Members ====
+===== Research Topics ====
-The [[security_group|members]] of the Security Group includes people doing computer science, mathematics at the university of Trento and at  a local research center FBK.
+Our research topics span these directions:
+  * technological research (biometrics, mobile phone security, [[malware_analysis|testbeds and malware testing]], crypto for fintech)
-The DISI Security Group is member the [[http://www.first.org|First.org]] SIG Team working on the definition of the [[http://www.first.org/cvss/v3/development|Common Vulnerability Scoring System v3]].
+  * empirical research ([[Security economics]], [[Validation of Risk and Security Requirements Methodologies|empirical risk assessment]], [[Vulnerability_discovery_models|vulnerability analysis]])
+  * fundamental research: [[https://squera.github.io/research/|programming language security and secure compilation]], [[http://disi.unitn.it/~massacci/CryptoSAT/|SAT-based cryptanalysis]]
-==== Research Outputs (Papers, Tools and Datasets) ====
+===== Research Projects ====
-Most of our most recent work is available on the WiKi (they are also reported in the individual research topics).
+We participate in a number of research projects. The most recent ones are
-  * [[Publications]],
-  * [[Talks]],
-  * [[Software]],
-  * [[Datasets]].
-You might be interested also in our [[Policy Papers]] and [[Video]].
+  * Horizon Europe project [[https://www.sec4ai4sec.eu|Sec4AI4Sec]] on machine learning and software security
+  * Horizon Europe project [[https://crosscon.eu/|CrossCon]] on the O.S. software stack security
+  * Horizon Europe MSCA PF [[https://securitylab.disi.unitn.it/doku.php?id=prosved|ProSVED]] on forecasting vulnerabilities
+  * H2020 European Project [[https://assuremoss.eu|AssureMOSS]] on software vulnerability analysis
-We also keep a list of our major [[projects]].
+===== Courses and Seminars ====
-==== Courses and Seminars ====
 Our teaching programme spans the key subjects in the area ranging from security management to cryptography.
-  * **Academic Program:** the (English taught) [[teaching activities|Cyber Security track in Trento]] offered both as Entry and Exit point in the framework of the [[https://masterschool.eitdigital.eu/programmes/cse/|EIT Digital Master School, Cyber Security track]], of the [[https://www.eitdigital.eu/|European Institute of Innovation and Technology]] (EIT Digital). These courses can also be taken by the students enrolled in the Computer Science Master and the Master in Mathematics offered by the University of Trento.
+  * **Academic Program:** the  [[teaching activities|Cyber Security track in Trento]] offered both as Entry and Exit point in the framework of the [[https://masterschool.eitdigital.eu/programmes/cse/|EIT Digital Master School, Cyber Security track]], of the [[https://www.eitdigital.eu/|European Institute of Innovation and Technology]] (EIT Digital). These courses can also be taken by the students enrolled in the Computer Science Master and the Master in Mathematics offered by the University of Trento.
-  * **Professional courses:** the [[teaching activities:cvss|CVSS Training]] offers a one-day training course on the use and interpretation of the third revision of Common Vulnerability Scoring System (See above)
+  * **Professional courses:** Common Vulnerability Scoring System (CVSS) v4.0 is out! and Trento's researchers (Fabio Massacci and Giorgio Di Tizio) are again among the authors. In the past we have organized a [[teaching activities:cvss|CVSS v3.0 Training]] on the use and interpretation of the latest revision. If you are interested in getting a new version let us know.
+   * ** Osservatorio Cybersecurity ** (In Italian) provide information to companies and SMEs.  Find more information [[https://cybersecuritydisi.unitn.it|here]].
-  * **Professional presentations:** the [[presentation activities:environmental|CVSS V3 Environmental Metrics Presentation]] offers a one-day presentation on the use and interpretation of CVSS V3 - Environmental Metrics (See above)
+===== CTF Team ====
-==== CTF Project ====
 We have a local team of students at the department that train and participate to CTF competitions.
-We participate to [[https://cyberchallenge.it/ | Cyberchallenge.IT]]
+We participate to [[https://cyberchallenge.it/ | Cyberchallenge.IT]].
-If you want to join or know more about it please visit the  [[CTF]] section.
+If you want to join or know more about it please [[CTF | visit the CTF page]].
+===== Contacts ====
+You can use an email alias security research DOT disi AT unitn DOT it.
+Nevertheless, the best thing is to send an email directly to one of our members.
-==== Contacts ====
-You can use an email alias security AT disi DOT unitn DOT it. Otherwise the best thing is to send an email directly to one of our members.