Tommaso Innocenti
- PhD Student, Northeastern University
- innocenti.t[at]northeastern[dot]edu
I am a forth year PhD student advised by Engin Kirda, working as a member of Secure Systems Lab (SecLab) at Northeaster University.
Previously, I studied in Politecnico di Milano, where I got my Bachelor's and Master's degrees in Computer Science Engineering. During this period, I also studied at Universidad Complutense de Madrid under the Erasmus exchange program.
Interests. Web security and privacy
Previously, I studied in Politecnico di Milano, where I got my Bachelor's and Master's degrees in Computer Science Engineering. During this period, I also studied at Universidad Complutense de Madrid under the Erasmus exchange program.
Interests. Web security and privacy
Publications
2023
- OAuth 2.0 Redirect URI Validation Falls Short, Literally ACSAC'23(A.R. 104/497= 20,9%).[Slide] [Code] [BibTex] Tommaso Innocenti, Matteo Golinelli, Ali Mirheidari, Kaan Onarlioglu, Bruno Crispo, Engin Kirda
2022
- FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies, USENIX'22.(A.R. 256/1414= 18,1%) [BibTex] Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi,Tommaso Innocenti, Kaan Onarlioglu, Engin Kirda
2021
- You’ve Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures, DIMVA2021(A.R. 19/66= 28,7%).[Slide] [BibTex] Tommaso Innocenti, Ali Mirheidari, Amin Kharraz, Bruno Crispo, Engin Kirda
2018
- Less is More (Secure) Deprecator : Automated Reduction of the Attack Surface in Modern Browsers, Master thesis. Tommaso Innocenti
Talks/Workshops
2023
- OAuth Security Workshop (OSW)'23 - London OAuth 2.0 Redirect URI Validation Falls Short, Literally [Slide]
2021
- Federal Trade Commission (FTC) invited talk - Virtual You’ve Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures [Slide]