Luca Borzacchiello, Ph.D.

Security Researcher

Info


Research interests:

cybersecurity, program analysis, symbolic execution.

Email:
lucaborza [at] gmail.com
Public Key:
download
Position:
Research Engineer @ TIM S.p.A.

Work Experience


Mar 2022 - now
Research Engineer at TIM S.p.A.
Firmware Analysis, Penetration Testing

Education


Nov 2018 - Feb 2022
PhD in Engineering in Computer Science at Sapienza University of Rome.
Final grade: cum laude. Advisor: Prof. Camil Demetrescu (demetres [at] dis.uniroma1.it).

Sept 2016 - Oct 2018
Master of Science in Engineering in Computer Science at Sapienza University of Rome.
GPA 29.64/30. Final grade: 110/110 summa cum laude. Thesis Advisor: Prof. Camil Demetrescu (demetres [at] dis.uniroma1.it).

Sept 2013 - Oct 2016
Bachelor of Science in Engineering in Computer Science at Sapienza University of Rome.
GPA 29.19/30. Final grade: 110/110 summa cum laude. Thesis Advisor: Prof. Camil Demetrescu (demetres [at] dis.uniroma1.it).

Sept 2008 - July 2013
Liceo Scientifico Isaac Newton, Rome. Final grade: 97/100.

Publications


  • Luca Borzacchiello, Emilio Coppa, Davide Maiorca, Andrea Columbu, Camil Demetrescu, and Giorgio Giacinto. Reach Me if You Can: On Native Vulnerability Reachability in Android Apps. European Symposium on Research in Computer Security (ESORICS), 2022. project site.
  • Luca Borzacchiello, Emilio Coppa, and Camil Demetrescu. Handling Memory-Intensive Operations in Symbolic Execution. Innovations in Software Engineering Conference (ISEC), 2022. preprint. project site.
  • Luca Borzacchiello, Emilio Coppa, and Camil Demetrescu. FUZZOLIC: mixing fuzzing and concolic execution. Computers & Security (COSE), 2021. preprint. project site.
  • Luca Borzacchiello, Emilio Coppa, and Camil Demetrescu. Fuzzing Symbolic Expressions. International Conference on Software Engineering (ICSE), 2021. preprint. project site.
  • Luca Borzacchiello, Emilio Coppa, Daniele Cono D'Elia, and Camil Demetrescu. Memory Models in Symbolic Execution: Key Ideas and New Thoughts. Software Testing, Verification and Reliability, 2019. preprint.
  • Marco Angelini, Graziano Blasilli, Luca Borzacchiello, Emilio Coppa, Daniele Cono D'Elia, Camil Demetrescu, Simone Lenti, Simone Nicchi, and Giuseppe Santucci. SymNav: Visually Assisting Symbolic Execution. IEEE Symposium on Visualization for Cyber Security (VizSec), 2019. preprint. project site.
  • Luca Borzacchiello, Emilio Coppa, Daniele Cono D'Elia, and Camil Demetrescu. Reconstructing C2 Servers for Remote Access Trojans with Symbolic Execution. International Symposium on Cyber Security Cryptology and Machine Learning (CSCML), 2019. preprint.

Teaching


Awards


2019
Completed flare-on 6 challenge [bageyelet]
2017
3rd place, pentesting cyberchallenge.it