corpus.blog
41554 blogs · [ { "id": "01a08779-9432-72e9-a170-6a677fa188f7", "title": "The Zen of Bluetooth Security (ZOBS)", "url": "https://francozappa.github.io/post/2026/zobs-init/", "published_at": "2026-07-15T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a677fe19124", "title": "ShadowICS: Detecting OT Sandboxes via Passive Industrial Traffic Monitoring", "url": "https://francozappa.github.io/publication/2026/shadowics/", "published_at": "2026-07-13T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67801623c4", "title": "The Zen of Bluetooth Security", "url": "https://francozappa.github.io/publication/2026/zobs/", "published_at": "2026-07-06T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6780820dd5", "title": "E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on the Xiaomi E-Scooter Ecosystem", "url": "https://francozappa.github.io/publication/2026/etrojans/", "published_at": "2026-05-04T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67815ddd05", "title": "BlueBrothers: Three New Protocols to Secure Bluetooth", "url": "https://francozappa.github.io/publication/2026/bbro/", "published_at": "2026-04-16T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678168caf2", "title": "HardaBLE: Hardening BLE Against Software Compromise", "url": "https://francozappa.github.io/publication/2026/hardable/", "published_at": "2026-04-16T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67820a89e6", "title": "MaDoS: Matter DoS Attacks via Secure Channel Status Reports", "url": "https://francozappa.github.io/publication/2026/mados/", "published_at": "2026-03-31T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678234ba99", "title": "BLERP Peripheral Impersonation Attack Demo", "url": "https://francozappa.github.io/post/2026/blerp-pidemo/", "published_at": "2026-03-23T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6782ead135", "title": "E-Trojans Black Hat USA 25 Video", "url": "https://francozappa.github.io/post/2026/etro-bhusa/", "published_at": "2026-03-18T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67831c919f", "title": "DCS-CI: Design for Cyber Secure Critical Infra", "url": "https://francozappa.github.io/post/2026/dcsci-cfp/", "published_at": "2026-03-16T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6783e706f8", "title": "WiSec'26 Call for Posters and Demos", "url": "https://francozappa.github.io/post/2026/wisec-pd/", "published_at": "2026-03-16T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6784b86590", "title": "BLERP: BLE Re-Pairing Attacks and Defenses", "url": "https://francozappa.github.io/post/2026/blerp-ndss/", "published_at": "2026-02-14T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6785a14663", "title": "CTRAPS on the DEF CON 33 Hackers' Almanack", "url": "https://francozappa.github.io/post/2026/defcon-almanack/", "published_at": "2026-02-14T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678601efe5", "title": "BLERP: BLE Re-Pairing Attacks and Defenses", "url": "https://francozappa.github.io/publication/2026/blerp/", "published_at": "2026-01-05T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67863053c1", "title": "PrivacyShield: Relaying BLE Beacons to Counter Unsolicited Tracking", "url": "https://francozappa.github.io/publication/2026/pshield/", "published_at": "2026-01-05T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6786af2cdf", "title": "AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modeling", "url": "https://francozappa.github.io/publication/2025/adf/", "published_at": "2025-10-15T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6786fbe726", "title": "CTRAPS interview on Off By One Security", "url": "https://francozappa.github.io/post/2025/ctraps-offbyone/", "published_at": "2025-09-22T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678712f4b3", "title": "CTRAPS at Euro S&P'25 and DEF CON 33", "url": "https://francozappa.github.io/post/2025/ctraps-eurosp25/", "published_at": "2025-07-04T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67878e724d", "title": "CTRAPS: CTAP Client Impersonation and API Confusion on FIDO2", "url": "https://francozappa.github.io/talk/ctraps-ctap-client-impersonation-and-api-confusion-on-fido2/", "published_at": "2025-06-20T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678810757a", "title": "NDSS'26 Artifact Evaluation Committee Self-Nomination", "url": "https://francozappa.github.io/post/2025/ae-ndss26/", "published_at": "2025-06-13T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6788582885", "title": "Security and Privacy for Connected Devices", "url": "https://francozappa.github.io/publication/2025/hdr-thesis/", "published_at": "2025-06-10T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6788cf06ac", "title": "EmuOCPP: Effective and Scalable OCPP Security and Privacy Testing", "url": "https://francozappa.github.io/publication/2025/emuocpp/", "published_at": "2025-05-13T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6788e1707a", "title": "SimProcess: High Fidelity Simulation of Noisy ICS Physical Processes", "url": "https://francozappa.github.io/publication/2025/simprocess/", "published_at": "2025-05-13T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678960d95b", "title": "Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Study", "url": "https://francozappa.github.io/publication/2025/btoolkit/", "published_at": "2025-04-11T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678a25b6c0", "title": "KNOB Attack and Crypto 101 by Alfred Menezes", "url": "https://francozappa.github.io/post/2025/crypto101-knob/", "published_at": "2025-04-01T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678ae9ff79", "title": "CheckOCPP: Automatic OCPP Packet Dissection and Compliance Check", "url": "https://francozappa.github.io/publication/2025/checkocpp/", "published_at": "2025-03-27T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678b1ceac6", "title": "CTRAPS: CTAP Impersonation and API Confusion on FIDO2", "url": "https://francozappa.github.io/publication/2025/ctraps/", "published_at": "2025-03-27T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678bc7cf13", "title": "FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholds", "url": "https://francozappa.github.io/talk/fp-tracer-fine-grained-browser-fingerprinting-detection-via-taint-tracking-and-multi-level-entropy-based-thresholds/", "published_at": "2025-03-18T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678cbb79c3", "title": "On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats", "url": "https://francozappa.github.io/talk/on-the-insecurity-of-vehicles-against-protocol-level-bluetooth-threats/", "published_at": "2025-03-14T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678d0227e4", "title": "CFP: ACSW 2025", "url": "https://francozappa.github.io/post/2025/cfp-acsw25/", "published_at": "2025-02-03T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678d558a89", "title": "AttackDefense Framework (ADF)", "url": "https://francozappa.github.io/project/adf/", "published_at": "2024-12-17T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678db2bb5c", "title": "The AttackDefense Framework (ADF)", "url": "https://francozappa.github.io/post/2024/adf-release/", "published_at": "2024-12-17T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678e76133b", "title": "E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Battery-powered Embedded Systems", "url": "https://francozappa.github.io/publication/2024/etrojans-preprint/", "published_at": "2024-12-09T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678f59886e", "title": "A Quest to Secure Standard and Proprietary Wireless Systems", "url": "https://francozappa.github.io/talk/a-quest-to-secure-standard-and-proprietary-wireless-systems/", "published_at": "2024-07-22T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a678fdd038c", "title": "Information and Entertainment for Automotive Researchers", "url": "https://francozappa.github.io/talk/information-and-entertainment-for-automotive-researchers/", "published_at": "2024-07-08T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6790c1d5b1", "title": "FP-tracer PETS'24 Paper and Artifact", "url": "https://francozappa.github.io/post/2024/fptracer-pets/", "published_at": "2024-07-01T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6791be5e3e", "title": "A Quest to Secure Proprietary and Standard Wireless Protocols", "url": "https://francozappa.github.io/talk/a-quest-to-secure-proprietary-and-standard-wireless-protocols/", "published_at": "2024-05-17T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6791fe68ed", "title": "A Quest to Secure Standard and Proprietary Wireless Protocols", "url": "https://francozappa.github.io/talk/a-quest-to-secure-standard-and-proprietary-wireless-protocols/", "published_at": "2024-05-14T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6792b0e286", "title": "BLUFFS: Breaking and fixing the Bluetooth standard. One More Time.", "url": "https://francozappa.github.io/talk/bluffs-breaking-and-fixing-the-bluetooth-standard.-one-more-time./", "published_at": "2024-04-04T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6793662515", "title": "E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystem", "url": "https://francozappa.github.io/talk/e-spoofer-attacking-and-defending-xiaomi-electric-scooter-ecosystem/", "published_at": "2024-04-04T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67945e5612", "title": "E-Spoofer and BLUFFS Talks at THCON'24", "url": "https://francozappa.github.io/post/2024/thcon-talks/", "published_at": "2024-03-13T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a679513b98d", "title": "FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholds", "url": "https://francozappa.github.io/publication/2024/fptracer/", "published_at": "2024-03-11T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6795a1427e", "title": "Bluetooth Security at NECS Winter School", "url": "https://francozappa.github.io/talk/bluetooth-security-at-necs-winter-school/", "published_at": "2024-01-08T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6796244f9a", "title": "Recorded BLUFFS Talk at 37c3", "url": "https://francozappa.github.io/post/2023/bluffs-37c3-video/", "published_at": "2023-12-30T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6796a9b571", "title": "BLUFFS Talk at 37c3", "url": "https://francozappa.github.io/post/2023/bluffs-37c3/", "published_at": "2023-12-22T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67977c17ed", "title": "BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses", "url": "https://francozappa.github.io/post/2023/bluffs-ccs23/", "published_at": "2023-11-27T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6797916d9d", "title": "BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses", "url": "https://francozappa.github.io/publication/2023/bluffs/", "published_at": "2023-11-06T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67982ed6e0", "title": "E-Spoofer paper presentation at WiSec'23", "url": "https://francozappa.github.io/post/2023/espoofer-wisec-video/", "published_at": "2023-08-07T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67984d6f52", "title": "Bluetooth Security and the KNOB Attack on BLE", "url": "https://francozappa.github.io/talk/bluetooth-security-and-the-knob-attack-on-ble/", "published_at": "2023-07-04T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a679861cdce", "title": "E-Spoofer master's thesis ranked 2nd for Italian CLUSIT Award", "url": "https://francozappa.github.io/post/2023/espoofer-clusit/", "published_at": "2023-06-26T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6798c8b7af", "title": "Hiring a postdoc interested in IIoT network security", "url": "https://francozappa.github.io/post/2023/hiring-postdoc-pepr5g/", "published_at": "2023-06-20T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a67994e101f", "title": "BreakMi: Reversing, Exploiting and Fixing Xiaomi (and Fitbit) Fitness Tracking Ecosystems", "url": "https://francozappa.github.io/talk/breakmi-reversing-exploiting-and-fixing-xiaomi-and-fitbit-fitness-tracking-ecosystems/", "published_at": "2023-06-03T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6799f8ba9c", "title": "On the (In)securities of Popular Standard and Proprietary Wireless Protocols", "url": "https://francozappa.github.io/talk/on-the-insecurities-of-popular-standard-and-proprietary-wireless-protocols/", "published_at": "2023-06-01T00:00:00+00:00" }, { "id": "01a08779-9432-72e9-a170-6a6799facd4f", "title": "E-Spoofer paper at WiSec'23", "url": "https://francozappa.github.io/post/2023/espoofer-wisec/", "published_at": "2023-05-31T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a18912f0", "title": "E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystem", "url": "https://francozappa.github.io/publication/2023/espoofer/", "published_at": "2023-05-30T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a1ae395d", "title": "EURECOM Digital Security opening for an Asst. Prof.", "url": "https://francozappa.github.io/post/2023/eurecom-hiring-prof/", "published_at": "2023-05-03T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a1f61974", "title": "BreakMi talk at Hardwear.io USA 2023 🐞", "url": "https://francozappa.github.io/post/2023/breakmi-hwio/", "published_at": "2023-04-12T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a2ce250b", "title": "BreakMI Poster Presentation at EURECOM SC", "url": "https://francozappa.github.io/post/2023/breakmi-poster/", "published_at": "2023-02-06T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a3babdcf", "title": "ENCOPIA", "url": "https://francozappa.github.io/project/encopia/", "published_at": "2023-01-26T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a48fe0c5", "title": "Open-source ReSilient Hardware and software for Internet of thiNgs (ORSHIN)", "url": "https://francozappa.github.io/project/orshin/", "published_at": "2023-01-26T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a55b651a", "title": "ACM CPSS'23 CFP is Open!", "url": "https://francozappa.github.io/post/2022/cfp-cpss23/", "published_at": "2022-12-01T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a56b8ef4", "title": "BreakMi paper presented at IACR CHES'22", "url": "https://francozappa.github.io/post/2022/breakmi-ches/", "published_at": "2022-09-26T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a64bef49", "title": "BLURtooth video, new CVE, and GH repo", "url": "https://francozappa.github.io/post/2022/blur-updates/", "published_at": "2022-08-17T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a66c2adc", "title": "On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats Video", "url": "https://francozappa.github.io/post/2022/btcar-video/", "published_at": "2022-07-01T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a66e5018", "title": "C.A.S.E., il futuro dell'auto: opportunità e rischi", "url": "https://francozappa.github.io/talk/c.a.s.e.-il-futuro-dellauto-opportunita-e-rischi/", "published_at": "2022-06-29T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a6f3b375", "title": "BreakMI Paper and Repo", "url": "https://francozappa.github.io/post/2022/breakmi-announce/", "published_at": "2022-06-16T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a72d7d06", "title": "BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem", "url": "https://francozappa.github.io/publication/2022/breakmi/", "published_at": "2022-04-01T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a7bd3f87", "title": "On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats", "url": "https://francozappa.github.io/publication/2022/btcar/", "published_at": "2022-03-25T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a8ab6d06", "title": "BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy", "url": "https://francozappa.github.io/publication/2022/blur/", "published_at": "2022-03-06T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a911fa0d", "title": "Bluetooth BLUR Attacks (BLURtooth)", "url": "https://francozappa.github.io/project/blur/", "published_at": "2022-03-05T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a9864af3", "title": "CFP: JSys System Security", "url": "https://francozappa.github.io/post/2022/cfp-jsys/", "published_at": "2022-02-24T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a9c42c87", "title": "CFP Workshop on Offensive Technologies (WOOT) 2022", "url": "https://francozappa.github.io/post/2022/cfp-woot22/", "published_at": "2022-01-22T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91a9e6125b", "title": "CFP: ACM CPSS 2022", "url": "https://francozappa.github.io/post/2022/cfp-cpss22/", "published_at": "2021-11-08T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91aabf77be", "title": "Exploiting and Fixing the Bluetooth Standard", "url": "https://francozappa.github.io/talk/exploiting-and-fixing-the-bluetooth-standard/", "published_at": "2021-10-21T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91aac50b07", "title": "Breaking and Fixing the Bluetooth Standard", "url": "https://francozappa.github.io/talk/breaking-and-fixing-the-bluetooth-standard/", "published_at": "2021-07-01T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91ab744cbc", "title": "EURECOM Digital Security opening for an Asst. Prof.", "url": "https://francozappa.github.io/post/2021/eurecom-hiring-prof/", "published_at": "2021-06-25T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91ac23ee8a", "title": "Why is Hard to Secure Mobile Proximity Services", "url": "https://francozappa.github.io/talk/why-is-hard-to-secure-mobile-proximity-services/", "published_at": "2021-06-24T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91ac749181", "title": "SecMT'21 Talk About Security of Proximity Services", "url": "https://francozappa.github.io/post/2021/secmt21-talk/", "published_at": "2021-06-22T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91ad42e76d", "title": "Starting at EURECOM", "url": "https://francozappa.github.io/post/2021/eurecom-start/", "published_at": "2021-06-04T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91adbf74dc", "title": "CFP for Hardwear.io USA 2021 is Open (Tips and Tricks)", "url": "https://francozappa.github.io/post/2021/hw21-suggestions/", "published_at": "2021-03-19T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91ae959e13", "title": "LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacks", "url": "https://francozappa.github.io/publication/2021/lightblue/", "published_at": "2021-02-18T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91af50e193", "title": "Joining EURECOM S3 as an Assistant Professor in June 2021", "url": "https://francozappa.github.io/post/2020/eurecom-asstprof/", "published_at": "2020-12-02T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91af768ccb", "title": "CFP: 2021 IEEE Workshop on Offensive Technologies (WOOT)", "url": "https://francozappa.github.io/post/2021/cfp-woot21/", "published_at": "2020-11-27T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b04bf8bb", "title": "Joining WOOT and SEC TPCs", "url": "https://francozappa.github.io/post/2021/cfp-woot21-sec21/", "published_at": "2020-11-22T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b0d4b3f1", "title": "BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy", "url": "https://francozappa.github.io/publication/2020/blur-preprint/", "published_at": "2020-10-01T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b1b6b226", "title": "Early Evidence of Effectiveness of Digital Contact Tracing for SARS-CoV-2 in Switzerland", "url": "https://francozappa.github.io/publication/2020/cte-journal/", "published_at": "2020-10-01T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b2b32daa", "title": "BLURtooth (BLUR Attacks) Disclosure", "url": "https://francozappa.github.io/post/2020/blur-announce/", "published_at": "2020-09-25T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b370765a", "title": "BIAS and KNOB attacks against Bluetooth BR/EDR/LE", "url": "https://francozappa.github.io/talk/bias-and-knob-attacks-against-bluetooth-br/edr/le/", "published_at": "2020-08-18T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b3abbf00", "title": "WAC3 Presentation is Online", "url": "https://francozappa.github.io/post/2020/wac320-video/", "published_at": "2020-08-12T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b4833f43", "title": "DP3T/GAEN for COVID-19", "url": "https://francozappa.github.io/project/gaen/", "published_at": "2020-08-07T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b4e24820", "title": "CFP: ACM AsiaCCS 2021", "url": "https://francozappa.github.io/post/2021/cfp-asiaccs21/", "published_at": "2020-08-05T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b53c37b9", "title": "WAC3 Talk About KNOB and BIAS Attacks", "url": "https://francozappa.github.io/post/2020/wac320-talk/", "published_at": "2020-07-21T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b5df7cc2", "title": "NSS 2020 Extended Call For Papers", "url": "https://francozappa.github.io/post/2020/nss20-cfp-ext/", "published_at": "2020-07-06T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b5ece733", "title": "Tutor Island: Matematica & Codice", "url": "https://francozappa.github.io/post/2020/tutor-island/", "published_at": "2020-06-20T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b6b95756", "title": "CFP: Conference on Network and System Security (NSS)", "url": "https://francozappa.github.io/post/2020/cfp-nss20/", "published_at": "2020-06-08T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b74c634d", "title": "Bluetooth BIAS Attacks", "url": "https://francozappa.github.io/project/bias/", "published_at": "2020-05-18T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b75c987e", "title": "Slides and video from our hardwear.io 2020 talk", "url": "https://francozappa.github.io/post/2020/knob-hw20-material/", "published_at": "2020-05-10T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b7acbd1d", "title": "From the Bluetooth Standard to Standard-Compliant 0-days", "url": "https://francozappa.github.io/talk/from-the-bluetooth-standard-to-standard-compliant-0-days/", "published_at": "2020-04-30T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b8859b80", "title": "Decentralized Privacy-Preserving Proximity Tracing", "url": "https://francozappa.github.io/publication/2020/dp3t-deb/", "published_at": "2020-04-26T00:00:00+00:00" }, { "id": "01a08779-9433-72c4-b3b5-9c91b8a38ecd", "title": "Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy", "url": "https://francozappa.github.io/post/2020/knob-tops/", "published_at": "2020-04-26T00:00:00+00:00" } ] posts Claim your blog
Back to francozappa.github.io
Blog · corpus.blog/blogs/francozappa.github.io/posts

francozappa.github.io

francozappa.github.io

2026

The Zen of Bluetooth Security (ZOBS)original ↗
15 Jul 2026
ShadowICS: Detecting OT Sandboxes via Passive Industrial Traffic Monitoringoriginal ↗
13 Jul 2026
The Zen of Bluetooth Securityoriginal ↗
6 Jul 2026
E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on the Xiaomi E-Scooter Ecosystemoriginal ↗
4 May 2026
BlueBrothers: Three New Protocols to Secure Bluetoothoriginal ↗
16 Apr 2026
HardaBLE: Hardening BLE Against Software Compromiseoriginal ↗
16 Apr 2026
MaDoS: Matter DoS Attacks via Secure Channel Status Reportsoriginal ↗
31 Mar 2026
BLERP Peripheral Impersonation Attack Demooriginal ↗
23 Mar 2026
E-Trojans Black Hat USA 25 Videooriginal ↗
18 Mar 2026
DCS-CI: Design for Cyber Secure Critical Infraoriginal ↗
16 Mar 2026
WiSec'26 Call for Posters and Demosoriginal ↗
16 Mar 2026
BLERP: BLE Re-Pairing Attacks and Defensesoriginal ↗
14 Feb 2026
CTRAPS on the DEF CON 33 Hackers' Almanackoriginal ↗
14 Feb 2026
BLERP: BLE Re-Pairing Attacks and Defensesoriginal ↗
5 Jan 2026
PrivacyShield: Relaying BLE Beacons to Counter Unsolicited Trackingoriginal ↗
5 Jan 2026

2025

AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modelingoriginal ↗
15 Oct 2025
CTRAPS interview on Off By One Securityoriginal ↗
22 Sept 2025
CTRAPS at Euro S&P'25 and DEF CON 33original ↗
4 Jul 2025
CTRAPS: CTAP Client Impersonation and API Confusion on FIDO2original ↗
20 Jun 2025
NDSS'26 Artifact Evaluation Committee Self-Nominationoriginal ↗
13 Jun 2025
Security and Privacy for Connected Devicesoriginal ↗
10 Jun 2025
EmuOCPP: Effective and Scalable OCPP Security and Privacy Testingoriginal ↗
13 May 2025
SimProcess: High Fidelity Simulation of Noisy ICS Physical Processesoriginal ↗
13 May 2025
Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Studyoriginal ↗
11 Apr 2025
KNOB Attack and Crypto 101 by Alfred Menezesoriginal ↗
1 Apr 2025
CheckOCPP: Automatic OCPP Packet Dissection and Compliance Checkoriginal ↗
27 Mar 2025
CTRAPS: CTAP Impersonation and API Confusion on FIDO2original ↗
27 Mar 2025
FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholdsoriginal ↗
18 Mar 2025
On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threatsoriginal ↗
14 Mar 2025
CFP: ACSW 2025original ↗
3 Feb 2025

2024

AttackDefense Framework (ADF)original ↗
17 Dec 2024
The AttackDefense Framework (ADF)original ↗
17 Dec 2024
E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Battery-powered Embedded Systemsoriginal ↗
9 Dec 2024
A Quest to Secure Standard and Proprietary Wireless Systemsoriginal ↗
22 Jul 2024
Information and Entertainment for Automotive Researchersoriginal ↗
8 Jul 2024
FP-tracer PETS'24 Paper and Artifactoriginal ↗
1 Jul 2024
A Quest to Secure Proprietary and Standard Wireless Protocolsoriginal ↗
17 May 2024
A Quest to Secure Standard and Proprietary Wireless Protocolsoriginal ↗
14 May 2024
BLUFFS: Breaking and fixing the Bluetooth standard. One More Time.original ↗
4 Apr 2024
E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystemoriginal ↗
4 Apr 2024
E-Spoofer and BLUFFS Talks at THCON'24original ↗
13 Mar 2024
FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholdsoriginal ↗
11 Mar 2024
Bluetooth Security at NECS Winter Schooloriginal ↗
8 Jan 2024

2023

Recorded BLUFFS Talk at 37c3original ↗
30 Dec 2023
BLUFFS Talk at 37c3original ↗
22 Dec 2023
BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defensesoriginal ↗
27 Nov 2023
BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defensesoriginal ↗
6 Nov 2023
E-Spoofer paper presentation at WiSec'23original ↗
7 Aug 2023
Bluetooth Security and the KNOB Attack on BLEoriginal ↗
4 Jul 2023
E-Spoofer master's thesis ranked 2nd for Italian CLUSIT Awardoriginal ↗
26 Jun 2023
Hiring a postdoc interested in IIoT network securityoriginal ↗
20 Jun 2023
BreakMi: Reversing, Exploiting and Fixing Xiaomi (and Fitbit) Fitness Tracking Ecosystemsoriginal ↗
3 Jun 2023
On the (In)securities of Popular Standard and Proprietary Wireless Protocolsoriginal ↗
1 Jun 2023
E-Spoofer paper at WiSec'23original ↗
31 May 2023
E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystemoriginal ↗
30 May 2023
EURECOM Digital Security opening for an Asst. Prof.original ↗
3 May 2023
BreakMi talk at Hardwear.io USA 2023 🐞original ↗
12 Apr 2023
BreakMI Poster Presentation at EURECOM SCoriginal ↗
6 Feb 2023
ENCOPIAoriginal ↗
26 Jan 2023
Open-source ReSilient Hardware and software for Internet of thiNgs (ORSHIN)original ↗
26 Jan 2023

2022

ACM CPSS'23 CFP is Open!original ↗
1 Dec 2022
BreakMi paper presented at IACR CHES'22original ↗
26 Sept 2022
BLURtooth video, new CVE, and GH repooriginal ↗
17 Aug 2022
On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats Videooriginal ↗
1 Jul 2022
C.A.S.E., il futuro dell'auto: opportunità e rischioriginal ↗
29 Jun 2022
BreakMI Paper and Repooriginal ↗
16 Jun 2022
BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystemoriginal ↗
1 Apr 2022
On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threatsoriginal ↗
25 Mar 2022
BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energyoriginal ↗
6 Mar 2022
Bluetooth BLUR Attacks (BLURtooth)original ↗
5 Mar 2022
CFP: JSys System Securityoriginal ↗
24 Feb 2022
CFP Workshop on Offensive Technologies (WOOT) 2022original ↗
22 Jan 2022

2021

CFP: ACM CPSS 2022original ↗
8 Nov 2021
Exploiting and Fixing the Bluetooth Standardoriginal ↗
21 Oct 2021
Breaking and Fixing the Bluetooth Standardoriginal ↗
1 Jul 2021
EURECOM Digital Security opening for an Asst. Prof.original ↗
25 Jun 2021
Why is Hard to Secure Mobile Proximity Servicesoriginal ↗
24 Jun 2021
SecMT'21 Talk About Security of Proximity Servicesoriginal ↗
22 Jun 2021
Starting at EURECOMoriginal ↗
4 Jun 2021
CFP for Hardwear.io USA 2021 is Open (Tips and Tricks)original ↗
19 Mar 2021
LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacksoriginal ↗
18 Feb 2021

2020

Joining EURECOM S3 as an Assistant Professor in June 2021original ↗
2 Dec 2020
CFP: 2021 IEEE Workshop on Offensive Technologies (WOOT)original ↗
27 Nov 2020
Joining WOOT and SEC TPCsoriginal ↗
22 Nov 2020
BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energyoriginal ↗
1 Oct 2020
Early Evidence of Effectiveness of Digital Contact Tracing for SARS-CoV-2 in Switzerlandoriginal ↗
1 Oct 2020
BLURtooth (BLUR Attacks) Disclosureoriginal ↗
25 Sept 2020
BIAS and KNOB attacks against Bluetooth BR/EDR/LEoriginal ↗
18 Aug 2020
WAC3 Presentation is Onlineoriginal ↗
12 Aug 2020
DP3T/GAEN for COVID-19original ↗
7 Aug 2020
CFP: ACM AsiaCCS 2021original ↗
5 Aug 2020
WAC3 Talk About KNOB and BIAS Attacksoriginal ↗
21 Jul 2020
NSS 2020 Extended Call For Papersoriginal ↗
6 Jul 2020
Tutor Island: Matematica & Codiceoriginal ↗
20 Jun 2020
CFP: Conference on Network and System Security (NSS)original ↗
8 Jun 2020
Bluetooth BIAS Attacksoriginal ↗
18 May 2020
Slides and video from our hardwear.io 2020 talkoriginal ↗
10 May 2020
From the Bluetooth Standard to Standard-Compliant 0-daysoriginal ↗
30 Apr 2020
Decentralized Privacy-Preserving Proximity Tracingoriginal ↗
26 Apr 2020
Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energyoriginal ↗
26 Apr 2020
Next