2026
Journal article
Open Access
A multi-modal benchmark dataset for UAV wireless communication research
Alibabaie Najmeh, Calabrò Antonello, Marchetti Eda
Data-centric approaches are increasingly shaping wireless communication research, where the availability and quality of datasets directly influence the reliability of learning-based and model-driven methods. In this context, unmanned aerial vehicle (UAV) communication poses unique challenges, as it requires datasets that jointly capture geometric information, propagation conditions, and diverse link configurations. This work introduces a geometry-aware UAV communication dataset designed to support research on controlled UAV communication link directions and propagation scenarios. The dataset is generated using standardized 3GPP and ITU-R channel models across multiple urban, suburban, and rural regions, accounting for variations in altitude, carrier frequency, and node distribution. The dataset provides spatially resolved channel parameters along with geometry-rich files containing environmental features, which can be used to extract relevant parameters for UAV communication studies. These data support reproducible research in geometry-aware channel modelling, path-loss prediction, LOS/NLOS analysis, delay-related modelling, and trajectory-conditioned link-quality analysis.Source: DRONES, vol. 10 (issue 4)
DOI: 10.3390/drones10040244
Metrics:
Alibabaie Najmeh, Calabrò Antonello, Marchetti Eda
Data-centric approaches are increasingly shaping wireless communication research, where the availability and quality of datasets directly influence the reliability of learning-based and model-driven methods. In this context, unmanned aerial vehicle (UAV) communication poses unique challenges, as it requires datasets that jointly capture geometric information, propagation conditions, and diverse link configurations. This work introduces a geometry-aware UAV communication dataset designed to support research on controlled UAV communication link directions and propagation scenarios. The dataset is generated using standardized 3GPP and ITU-R channel models across multiple urban, suburban, and rural regions, accounting for variations in altitude, carrier frequency, and node distribution. The dataset provides spatially resolved channel parameters along with geometry-rich files containing environmental features, which can be used to extract relevant parameters for UAV communication studies. These data support reproducible research in geometry-aware channel modelling, path-loss prediction, LOS/NLOS analysis, delay-related modelling, and trajectory-conditioned link-quality analysis.Source: DRONES, vol. 10 (issue 4)
DOI: 10.3390/drones10040244
Metrics:
See at:
Drones 
| CNR IRIS | www.mdpi.com | CNR IRIS 
2026
Journal article
Open Access
Women-led sustainable innovation in small island agriculture: challenges and barriers
Nikghadam-Hojjati Sanaz, Marchetti Eda, Barata José
In small island agriculture, sustainable innovation is vital for strengthening resilience in the face of resource constraints and climate impacts. Despite women’s undeniable contribution to social, economic, and environmental sustainability in these societies, their leadership and decision-making capacity in developing sustainable innovative solutions for agricultural opportunities and challenges continue to face systemic barriers. Identifying and mitigating these barriers has a positive impact on the development, resilience, and well-being of small island societies. Using a mixed-methods approach, this conceptual expansion research identifies eleven key characteristics of small islands’ agriculture, introduces eighteen orientations for sustainable innovation within this context, and investigates women’s roles in sustainable innovation. It also identifies barriers and challenges that hinder women from attaining leadership roles in developing sustainable innovation in small island agriculture and proposes nine possible mitigation strategies and measures.Source: HUMANITIES AND SOCIAL SCIENCES COMMUNICATIONS, vol. 13 (issue 1)
DOI: 10.1057/s41599-026-06546-z
Metrics:
Nikghadam-Hojjati Sanaz, Marchetti Eda, Barata José
In small island agriculture, sustainable innovation is vital for strengthening resilience in the face of resource constraints and climate impacts. Despite women’s undeniable contribution to social, economic, and environmental sustainability in these societies, their leadership and decision-making capacity in developing sustainable innovative solutions for agricultural opportunities and challenges continue to face systemic barriers. Identifying and mitigating these barriers has a positive impact on the development, resilience, and well-being of small island societies. Using a mixed-methods approach, this conceptual expansion research identifies eleven key characteristics of small islands’ agriculture, introduces eighteen orientations for sustainable innovation within this context, and investigates women’s roles in sustainable innovation. It also identifies barriers and challenges that hinder women from attaining leadership roles in developing sustainable innovation in small island agriculture and proposes nine possible mitigation strategies and measures.Source: HUMANITIES AND SOCIAL SCIENCES COMMUNICATIONS, vol. 13 (issue 1)
DOI: 10.1057/s41599-026-06546-z
Metrics:
See at:
CNR IRIS | www.nature.com | CNR IRIS
2025
Conference article
Open Access
NB-IoT non-terrestrial network path loss estimation with precise 3D modeling of urban environment
Alibabaei Dermeni Najmeh, Calabrò A., Cassarà P., Gotta A., Marchetti E.
This study presents a novel simulation framework for Non-Terrestrial Networks (NTNs) that incorporates a realistic 3D ground model, including buildings and detailed environmental features, to enhance the accuracy of channel propagation modeling. Traditional approaches often rely on simplified terrain classifications, limiting their ability to capture the complexities of urban environments. To address this limitation, we integrate advanced ray-tracing techniques using Wireless InSite, MATLAB-based satellite constellation modeling, and high-resolution 3D urban mapping via Blender. This comprehensive framework allows for precise evaluations of NTN performance, including line-of-sight (LoS) and non-line-of-sight (N-LoS) conditions, by analyzing signal propagation characteristics with unprecedented granularity. The results demonstrate that detailed environmental modeling significantly impacts satellite visibility, signal attenuation, and multipath effects, highlighting the necessity of incorporating realistic urban structures in NTN simulations. The framework supports large-scale data analytics, enabling the application of machine learning techniques for network optimization, adaptive resource allocation, and enhanced connectivity planning. By bridging the gap between theoretical models and practical deployment scenarios, this work provides a powerful tool for advancing NTN research and improving global connectivity solutions.DOI: 10.1109/metroaerospace64938.2025.11114483
Project(s): RESTART “RESearch and innovation on future Telecommunications systems and networks, to make Italy more smart”
Metrics:
Alibabaei Dermeni Najmeh, Calabrò A., Cassarà P., Gotta A., Marchetti E.
This study presents a novel simulation framework for Non-Terrestrial Networks (NTNs) that incorporates a realistic 3D ground model, including buildings and detailed environmental features, to enhance the accuracy of channel propagation modeling. Traditional approaches often rely on simplified terrain classifications, limiting their ability to capture the complexities of urban environments. To address this limitation, we integrate advanced ray-tracing techniques using Wireless InSite, MATLAB-based satellite constellation modeling, and high-resolution 3D urban mapping via Blender. This comprehensive framework allows for precise evaluations of NTN performance, including line-of-sight (LoS) and non-line-of-sight (N-LoS) conditions, by analyzing signal propagation characteristics with unprecedented granularity. The results demonstrate that detailed environmental modeling significantly impacts satellite visibility, signal attenuation, and multipath effects, highlighting the necessity of incorporating realistic urban structures in NTN simulations. The framework supports large-scale data analytics, enabling the application of machine learning techniques for network optimization, adaptive resource allocation, and enhanced connectivity planning. By bridging the gap between theoretical models and practical deployment scenarios, this work provides a powerful tool for advancing NTN research and improving global connectivity solutions.DOI: 10.1109/metroaerospace64938.2025.11114483
Project(s): RESTART “RESearch and innovation on future Telecommunications systems and networks, to make Italy more smart”
Metrics:
See at:
CNR IRIS | ieeexplore.ieee.org | CNR IRIS | CNR IRIS
2025
Conference article
Open Access
Improving cybersecurity for smart home systems
Waheed T., Marchetti E., Calabrò A.
Smart home systems consist of various interconnected devices that can be vulnerable to security risks, potentially compromising the integrity of the entire system. This paper aims to address cybersecurity challenges and identify research gaps to enhance cybersecurity for smart home systems. We aim to highlight the significance and impact of testing on smart home systems, with a focus on the drawbacks of current testing strategies. The limitations in current testing methodologies have identified the lack of user involvement in the testing process. We have proposed our user-centric SCTM (Smart-home Cybersecurity Testing Methodology) and its behavioral model to leverage cybersecurity in smart home systems.Source: WEBIST (SETÚBAL), pp. 220-227. Marbella, Spain, 21-23 October 2025
DOI: 10.5220/0013783700003985
Metrics:
Waheed T., Marchetti E., Calabrò A.
Smart home systems consist of various interconnected devices that can be vulnerable to security risks, potentially compromising the integrity of the entire system. This paper aims to address cybersecurity challenges and identify research gaps to enhance cybersecurity for smart home systems. We aim to highlight the significance and impact of testing on smart home systems, with a focus on the drawbacks of current testing strategies. The limitations in current testing methodologies have identified the lack of user involvement in the testing process. We have proposed our user-centric SCTM (Smart-home Cybersecurity Testing Methodology) and its behavioral model to leverage cybersecurity in smart home systems.Source: WEBIST (SETÚBAL), pp. 220-227. Marbella, Spain, 21-23 October 2025
DOI: 10.5220/0013783700003985
Metrics:
See at:
CNR IRIS | www.scitepress.org | doi.org | CNR IRIS
2025
Conference article
Open Access
ACCURATE - eternAl infrastruCture for seCUrity in softwaRe and hArdware developmenT and assessmEnt
Calabrò A., Marchetti E., Nikghadam-Hojjati S.
This paper addresses the increasing complexity of cybersecurity and the need for compliance with evolving EU regulations, highlighting the limitations of traditional software and hardware development processes in managing security, trust, and long-term compliance. To bridge these gaps, the paper proposes a novel lifecycle and supporting architecture named ACCURATE (eternal infrastructure for security in software and hardware development and assessment). ACCURATE is inspired by the DevOps approach and integrates continuous real-time monitoring, detection, and vulnerability management throughout the entire lifecycle. ACCURATE is designed for software and hardware development, as well as post-development continuous assessment. The main novelty is conceiving the “Eternal” stage, focusing on ongoing post-deployment assessment and protection, ensuring systems remain resilient against emerging threats. ACCURATE aims to transform the security landscape by embedding continuous safeguarding mechanisms throughout the development and operational stages, ultimately ensuring the integrity and reliability of both software and hardware systems in a rapidly evolving technological environment.Source: WEBIST (SETÚBAL), pp. 157-164. Marbella, Spain, 21-23 October 2025
DOI: 10.5220/0013704700003985
Metrics:
Calabrò A., Marchetti E., Nikghadam-Hojjati S.
This paper addresses the increasing complexity of cybersecurity and the need for compliance with evolving EU regulations, highlighting the limitations of traditional software and hardware development processes in managing security, trust, and long-term compliance. To bridge these gaps, the paper proposes a novel lifecycle and supporting architecture named ACCURATE (eternal infrastructure for security in software and hardware development and assessment). ACCURATE is inspired by the DevOps approach and integrates continuous real-time monitoring, detection, and vulnerability management throughout the entire lifecycle. ACCURATE is designed for software and hardware development, as well as post-development continuous assessment. The main novelty is conceiving the “Eternal” stage, focusing on ongoing post-deployment assessment and protection, ensuring systems remain resilient against emerging threats. ACCURATE aims to transform the security landscape by embedding continuous safeguarding mechanisms throughout the development and operational stages, ultimately ensuring the integrity and reliability of both software and hardware systems in a rapidly evolving technological environment.Source: WEBIST (SETÚBAL), pp. 157-164. Marbella, Spain, 21-23 October 2025
DOI: 10.5220/0013704700003985
Metrics:
See at:
CNR IRIS | www.scitepress.org | doi.org | CNR IRIS
2025
Conference article
Open Access
From plain English to XACML policies: an AI-based pipeline approach
Paratore M. T., Marchetti E., Calabrò A.
The increasing adoption of generative artificial intelligence, particularly conversational Large Language Models (LLMs), has presented new opportunities for addressing challenges in software development. This paper explores the potential of LLMs in generating eXtensible Access Control Markup Language (XACML) policies. This paper investigates current solutions and strategies for leveraging LLMs to produce verified, secure, compliant access control policies. Specifically, by discussing current methods for enhancing LLM performances in generating structured text, it introduces a pipeline approach that integrates conversational LLMs with syntactic and semantic validators. This approach ensures correctness and reliability of the generated policies. Our proposal is showcased by using real policies and compares various LLMs’ performances (ChatGPT, Claude, Gemini, and LLaMA). Our findings suggest a promising direction for future developments in automated access control policy formulation, bridging the gap between human intent and machine interpretation.DOI: 10.5220/0013357200003896
Metrics:
Paratore M. T., Marchetti E., Calabrò A.
The increasing adoption of generative artificial intelligence, particularly conversational Large Language Models (LLMs), has presented new opportunities for addressing challenges in software development. This paper explores the potential of LLMs in generating eXtensible Access Control Markup Language (XACML) policies. This paper investigates current solutions and strategies for leveraging LLMs to produce verified, secure, compliant access control policies. Specifically, by discussing current methods for enhancing LLM performances in generating structured text, it introduces a pipeline approach that integrates conversational LLMs with syntactic and semantic validators. This approach ensures correctness and reliability of the generated policies. Our proposal is showcased by using real policies and compares various LLMs’ performances (ChatGPT, Claude, Gemini, and LLaMA). Our findings suggest a promising direction for future developments in automated access control policy formulation, bridging the gap between human intent and machine interpretation.DOI: 10.5220/0013357200003896
Metrics:
See at:
CNR IRIS | www.scitepress.org | CNR IRIS | CNR IRIS
2025
Other
Open Access
ISTI-day 2025 Proceedings
Del Corso G., Pedrotti A., Federico G., Gennaro C., Carrara F., Amato G., Di Benedetto M., Gabrielli E., Belli D., Matrullo Zoe, Miori V., Tolomei Gabriele, Waheed T., Marchetti E., Calabrò Antonello., Rossetti G., Stella Massimo, Cazabet Rémy, Abramski K., Cau E., Citraro S., Failla A., Mesina V., Morini V., Pansanella V., Colantonio S., Germanese D., Pascali M. A., Bianchi L., Messina N., Falchi F., Barsellotti L., Pacini G., Cassese M., Puccetti G., Esuli A., Volpi L., Moreo Alejandro, Sebastiani F., Sperduti G., Nguyen Dong, Broccia G., Ter Beek M. H., Ferrari A., Massink M., Belmonte Gina, Ciancia V., Papini O., Canapa G., Catricalà B., Manca M., Paternò F., Santoro C., Zedda E., Gallo S., Maenza S., Mattioli A., Simeoli L., Rucci D., Carlini E., Dazzi P., Kavalionak H., Mordacchini M., Rulli C., Muntean Cristina Ioana, Nardini F. M., Perego R., Rocchietti G., Lettich F., Renso C., Pugliese C., Casini G., Haldimann Jonas, Meyer Thomas, Assante M., Candela L., Dell'Amico A., Frosini L., Mangiacrapa F., Oliviero A., Pagano P., Panichi G., Peccerillo B., Procaccini M., Mannocci A., Manghi P., Lonetti F., Kang Dongjae, Di Giandomenico F., Jee Eunkyoung, Lazzini G., Conti F., Scopigno R., D'Acunto M., Moroni D., Cafiso M., Paradisi P., Callieri M., Pavoni G., Corsini M., De Falco A., Sala F., Saraceni Q., Gattiglia Gabriele
ISTI-Day is an annual information and networking event organized by the Institute of Information Science and Technologies "A. Faedo" (ISTI) of the Italian National Research Council (CNR). This event features an opening talk of the Director of the Dept. DIITET (Emilio F. Campana) as well as an overview of the Institute's activities presented by the ISTI Director (Roberto Scopigno). Those institutional segments are complemented by dedicated presentations and round tables featuring former staff members, as well as internal and external collaborators. To foster a network of knowledge and collaboration among newcomers, the 2025 ISTI Day edition also includes a large poster session that provides a comprehensive overview of current research activities. Each of the 13 laboratories contributes 1–3 posters, highlighting the most innovative work and offering early-career researchers a platform for discussion. Thus these proceedings include the posters selected for ISTI-Day 2025, reflecting the diverse and innovative nature of the Institute's research.
Del Corso G., Pedrotti A., Federico G., Gennaro C., Carrara F., Amato G., Di Benedetto M., Gabrielli E., Belli D., Matrullo Zoe, Miori V., Tolomei Gabriele, Waheed T., Marchetti E., Calabrò Antonello., Rossetti G., Stella Massimo, Cazabet Rémy, Abramski K., Cau E., Citraro S., Failla A., Mesina V., Morini V., Pansanella V., Colantonio S., Germanese D., Pascali M. A., Bianchi L., Messina N., Falchi F., Barsellotti L., Pacini G., Cassese M., Puccetti G., Esuli A., Volpi L., Moreo Alejandro, Sebastiani F., Sperduti G., Nguyen Dong, Broccia G., Ter Beek M. H., Ferrari A., Massink M., Belmonte Gina, Ciancia V., Papini O., Canapa G., Catricalà B., Manca M., Paternò F., Santoro C., Zedda E., Gallo S., Maenza S., Mattioli A., Simeoli L., Rucci D., Carlini E., Dazzi P., Kavalionak H., Mordacchini M., Rulli C., Muntean Cristina Ioana, Nardini F. M., Perego R., Rocchietti G., Lettich F., Renso C., Pugliese C., Casini G., Haldimann Jonas, Meyer Thomas, Assante M., Candela L., Dell'Amico A., Frosini L., Mangiacrapa F., Oliviero A., Pagano P., Panichi G., Peccerillo B., Procaccini M., Mannocci A., Manghi P., Lonetti F., Kang Dongjae, Di Giandomenico F., Jee Eunkyoung, Lazzini G., Conti F., Scopigno R., D'Acunto M., Moroni D., Cafiso M., Paradisi P., Callieri M., Pavoni G., Corsini M., De Falco A., Sala F., Saraceni Q., Gattiglia Gabriele
ISTI-Day is an annual information and networking event organized by the Institute of Information Science and Technologies "A. Faedo" (ISTI) of the Italian National Research Council (CNR). This event features an opening talk of the Director of the Dept. DIITET (Emilio F. Campana) as well as an overview of the Institute's activities presented by the ISTI Director (Roberto Scopigno). Those institutional segments are complemented by dedicated presentations and round tables featuring former staff members, as well as internal and external collaborators. To foster a network of knowledge and collaboration among newcomers, the 2025 ISTI Day edition also includes a large poster session that provides a comprehensive overview of current research activities. Each of the 13 laboratories contributes 1–3 posters, highlighting the most innovative work and offering early-career researchers a platform for discussion. Thus these proceedings include the posters selected for ISTI-Day 2025, reflecting the diverse and innovative nature of the Institute's research.
See at:
CNR IRIS | www.isti.cnr.it | CNR IRIS
2025
Conference article
Open Access
Evaluating use of ARQ strategies in communication protocols for search and rescue
Calabrò A., Marchetti E., Paratore M. T.
Search and Rescue (SAR) operations often occur in remote and challenging environments where conventional communication infrastructures are unavailable or unreliable. Effective communication is crucial for mission success. Low-power wide area network (LPWAN) protocols, particularly the LORA (Long Range) protocol, have gained traction due to their low power consumption and extended range. However, LORA's low reliability presents significant challenges in the time-sensitive context of SAR operations, necessitating effective communication strategies. This paper examines the reliability of communication protocols in real scenarios, focusing on Stop & Wait (S&W) and Selective Repeat (SR) Automatic Repeat reQuest (ARQ) protocols. It evaluates their suitability by addressing operational constraints such as geographic barriers, time sensitivity, and simplicity of implementation. Key contributions include investigating the current literature, a real implementation of the ARQ algorithm, and a comparative analysis of these protocols under real-world conditions. Furthermore, the study presents a real-world implementation of ARQ mechanisms and evaluates their operational trade-offs in SAR scenarios, considering both computational constraints and deployment feasibility.Source: WEBIST (SETÚBAL), pp. 59-70. Marbella, Spain, 21-23 October 2025
DOI: 10.5220/0013704800003985
Metrics:
Calabrò A., Marchetti E., Paratore M. T.
Search and Rescue (SAR) operations often occur in remote and challenging environments where conventional communication infrastructures are unavailable or unreliable. Effective communication is crucial for mission success. Low-power wide area network (LPWAN) protocols, particularly the LORA (Long Range) protocol, have gained traction due to their low power consumption and extended range. However, LORA's low reliability presents significant challenges in the time-sensitive context of SAR operations, necessitating effective communication strategies. This paper examines the reliability of communication protocols in real scenarios, focusing on Stop & Wait (S&W) and Selective Repeat (SR) Automatic Repeat reQuest (ARQ) protocols. It evaluates their suitability by addressing operational constraints such as geographic barriers, time sensitivity, and simplicity of implementation. Key contributions include investigating the current literature, a real implementation of the ARQ algorithm, and a comparative analysis of these protocols under real-world conditions. Furthermore, the study presents a real-world implementation of ARQ mechanisms and evaluates their operational trade-offs in SAR scenarios, considering both computational constraints and deployment feasibility.Source: WEBIST (SETÚBAL), pp. 59-70. Marbella, Spain, 21-23 October 2025
DOI: 10.5220/0013704800003985
Metrics:
See at:
CNR IRIS | www.scitepress.org | doi.org | CNR IRIS
2025
Journal article
Open Access
Gender-responsive research and innovation: issues and initiatives
Nikghadam-Hojjati S., Marchetti E., Gustavsson M., Ferrada F., Oliveira Ana I., Halvarsson Lundqvist A., Fogelberg Eriksson A., Matei O. Liviu, Barata J., Kalateh S., Božić N., Stojanova S., Daoudagh S., Andreica L.
The demands and preferences of men are often prioritized in societal challenges, despite women comprising half of the world’s population. Gender-Responsive Research and Innovation (GRRI) offers an approach to address this bias, promoting comprehensive and equitable solutions to better-understood real-world problems. The successful implementation of GRRI depends on recognizing obstacles, staying informed about relevant initiatives, and using this knowledge to develop effective strategies, ultimately contributing to a fairer and more responsive society. This research, using a mixed-methods approach, identified 10 critical GRRI concerns, measures, and strategies to address them, as well as 18 noteworthy initiatives across research, industrial, and regulatory contextual fields. It also enhances the understanding of GRRI, laying the groundwork for an ontology of GRRI that can benefit policymakers, organizations, and researchers seeking more inclusive strategies and practices.Source: SUSTAINABILITY, vol. 17 (issue 13)
DOI: 10.3390/su17136215
Metrics:
Nikghadam-Hojjati S., Marchetti E., Gustavsson M., Ferrada F., Oliveira Ana I., Halvarsson Lundqvist A., Fogelberg Eriksson A., Matei O. Liviu, Barata J., Kalateh S., Božić N., Stojanova S., Daoudagh S., Andreica L.
The demands and preferences of men are often prioritized in societal challenges, despite women comprising half of the world’s population. Gender-Responsive Research and Innovation (GRRI) offers an approach to address this bias, promoting comprehensive and equitable solutions to better-understood real-world problems. The successful implementation of GRRI depends on recognizing obstacles, staying informed about relevant initiatives, and using this knowledge to develop effective strategies, ultimately contributing to a fairer and more responsive society. This research, using a mixed-methods approach, identified 10 critical GRRI concerns, measures, and strategies to address them, as well as 18 noteworthy initiatives across research, industrial, and regulatory contextual fields. It also enhances the understanding of GRRI, laying the groundwork for an ontology of GRRI that can benefit policymakers, organizations, and researchers seeking more inclusive strategies and practices.Source: SUSTAINABILITY, vol. 17 (issue 13)
DOI: 10.3390/su17136215
Metrics:
See at:
CNR IRIS | www.mdpi.com | CNR IRIS
2025
Conference article
Open Access
Advancing the future of integrated 5G-satellite networks: a practical framework for performance evaluation, dataset generation, and AI-driven approaches
Alibabaie N., Calabrò A., Cassarà P., Gotta A., Marchetti E.
This paper introduces a framework for Satellite, Terrestrial Integrated Network (STIN), a modular and joint simulation tool for simulating and evaluating integrated terrestrial and non-terrestrial communication systems. The framework comprises various modules designed to model real-world environments, compute and analyze constellation features, and perform channel modeling. Through the seamless integration of these components, the STIN framework enables users to assess the performance of satellite constellations under diverse conditions and select optimal configurations for enhanced coverage and communication efficiency. The paper discusses the methodology and workflow of the framework and a preliminary implementation, suggesting avenues for obtaining communication dataseis to support AI-driven approaches.DOI: 10.5220/0013564400003970
Metrics:
Alibabaie N., Calabrò A., Cassarà P., Gotta A., Marchetti E.
This paper introduces a framework for Satellite, Terrestrial Integrated Network (STIN), a modular and joint simulation tool for simulating and evaluating integrated terrestrial and non-terrestrial communication systems. The framework comprises various modules designed to model real-world environments, compute and analyze constellation features, and perform channel modeling. Through the seamless integration of these components, the STIN framework enables users to assess the performance of satellite constellations under diverse conditions and select optimal configurations for enhanced coverage and communication efficiency. The paper discusses the methodology and workflow of the framework and a preliminary implementation, suggesting avenues for obtaining communication dataseis to support AI-driven approaches.DOI: 10.5220/0013564400003970
Metrics:
See at:
CNR IRIS | www.scitepress.org | doi.org | CNR IRIS
2025
Journal article
Open Access
Leveraging large language models for automated access policies generation: an agentware approach
Paratore M. T., Marchetti E., Calabrò A., Trentanni G.
Large language models (LLMs) are probably the most popular type of foundation models (FMs) today. The growing adoption of conversational tools such as ChatGPT offers new solutions for software development challenges and opens new scenarios in which FMs can be employed to autonomously perform specialized tasks within a software architecture (the “agentware” paradigm). If properly trained or instructed, FMs can produce code even for highly specialized tasks, thus benefiting small companies which may be lacking specific domain experts. Integrating FMs in software design, on the other hand, introduces challenges that must be addressed. In this paper we present a software architecture employing agentware for automating XACML access control policy generation. We build on a prototype pipeline to propose an effective integration of agents into a software system. We will show that our design allows for optimal use of the generative power of FMs while tackling their intrinsic limitations.Source: IEEE SOFTWARE, pp. 1-8
DOI: 10.1109/ms.2025.3617078
Project(s): SEcurity and RIghts In the CyberSpace
Metrics:
Paratore M. T., Marchetti E., Calabrò A., Trentanni G.
Large language models (LLMs) are probably the most popular type of foundation models (FMs) today. The growing adoption of conversational tools such as ChatGPT offers new solutions for software development challenges and opens new scenarios in which FMs can be employed to autonomously perform specialized tasks within a software architecture (the “agentware” paradigm). If properly trained or instructed, FMs can produce code even for highly specialized tasks, thus benefiting small companies which may be lacking specific domain experts. Integrating FMs in software design, on the other hand, introduces challenges that must be addressed. In this paper we present a software architecture employing agentware for automating XACML access control policy generation. We build on a prototype pipeline to propose an effective integration of agents into a software system. We will show that our design allows for optimal use of the generative power of FMs while tackling their intrinsic limitations.Source: IEEE SOFTWARE, pp. 1-8
DOI: 10.1109/ms.2025.3617078
Project(s): SEcurity and RIghts In the CyberSpace
Metrics:
See at:
CNR IRIS | ieeexplore.ieee.org | CNR IRIS | CNR IRIS
2025
Conference article
Open Access
Vulnerability mapping and mitigation through AI code analysis and testing
Waheed T., Marchetti E., Calabrò A.
The research addresses the significant and complex challenge of vulnerability mapping and repairing code vulnerabilities, which is critical for enhancing cybersecurity in our increasingly technology-driven society. This paper aims to present an in-depth methodology and framework for effectively mapping software vulnerabilities through AI-driven code analysis and testing techniques. The proposed method and framework provide an automated environment that facilitates identifying and mitigating security vulnerabilities. This innovative framework benefits prosumers and developers, empowering them to confidently produce secure code, even with inadequate cybersecurity knowledge or extensive testing experience. By leveraging AI, the methodology streamlines the process of vulnerability detection and enhances overall software security.DOI: 10.5220/0013381500003896
DOI: https://doi.org/10.5220/0013381500003896
Project(s): SEcurity and RIghts In the CyberSpace
Metrics:
Waheed T., Marchetti E., Calabrò A.
The research addresses the significant and complex challenge of vulnerability mapping and repairing code vulnerabilities, which is critical for enhancing cybersecurity in our increasingly technology-driven society. This paper aims to present an in-depth methodology and framework for effectively mapping software vulnerabilities through AI-driven code analysis and testing techniques. The proposed method and framework provide an automated environment that facilitates identifying and mitigating security vulnerabilities. This innovative framework benefits prosumers and developers, empowering them to confidently produce secure code, even with inadequate cybersecurity knowledge or extensive testing experience. By leveraging AI, the methodology streamlines the process of vulnerability detection and enhances overall software security.DOI: 10.5220/0013381500003896
DOI: https://doi.org/10.5220/0013381500003896
Project(s): SEcurity and RIghts In the CyberSpace
Metrics:
2025
Journal article
Open Access
CONCERN: a model-based monitoring infrastructure
Calabrò A., Marchetti E., Skrzypek P., Marchel J.
Characteristics such as quality, trustworthiness, and cybersecurity are becoming essential in the ecosystems of Internet of Things (IoT) systems. Although significant efforts in industry and academia have been made to create solutions that ensure, monitor, and evaluate these attributes throughout the development process, time-to-market urgency, demands for higher productivity, and competitive pressures often result in faster release schedules. This situation calls for methods and means to quickly and accurately identify and avert anomalies and hazardous circumstances. Among them, a monitoring system is an effective solution for evaluating functional and non-functional attributes during the online execution. This paper proposes an integrated Runtime Monitoring solution called CONCERN (COmplex eveNt proCEssing monitoR iNfrastructure) for guaranteeing a consistent quality of services, managing the possible execution exceptions and interruptions, and providing a high system availability. The paper describes the CONCERN supporting architecture and proof-of-concept implementation of its components, validation of the CONCERN usability, and its performance in a real scenario taken from the financial domain. Finally, the paper reports the discussion, lessons learned, and the future work suggested by the showcase.Source: INTERNET OF THINGS, vol. 31 (issue 101557)
DOI: 10.1016/j.iot.2025.101557
Project(s): NRRP MUR program - NextGenerationEU
Metrics:
Calabrò A., Marchetti E., Skrzypek P., Marchel J.
Characteristics such as quality, trustworthiness, and cybersecurity are becoming essential in the ecosystems of Internet of Things (IoT) systems. Although significant efforts in industry and academia have been made to create solutions that ensure, monitor, and evaluate these attributes throughout the development process, time-to-market urgency, demands for higher productivity, and competitive pressures often result in faster release schedules. This situation calls for methods and means to quickly and accurately identify and avert anomalies and hazardous circumstances. Among them, a monitoring system is an effective solution for evaluating functional and non-functional attributes during the online execution. This paper proposes an integrated Runtime Monitoring solution called CONCERN (COmplex eveNt proCEssing monitoR iNfrastructure) for guaranteeing a consistent quality of services, managing the possible execution exceptions and interruptions, and providing a high system availability. The paper describes the CONCERN supporting architecture and proof-of-concept implementation of its components, validation of the CONCERN usability, and its performance in a real scenario taken from the financial domain. Finally, the paper reports the discussion, lessons learned, and the future work suggested by the showcase.Source: INTERNET OF THINGS, vol. 31 (issue 101557)
DOI: 10.1016/j.iot.2025.101557
Project(s): NRRP MUR program - NextGenerationEU
Metrics:
See at:
CNR IRIS | www.sciencedirect.com | CNR IRIS
2024
Journal article
Open Access
Transponder: support for localizing distressed people through a flying drone network
Calabrò A., Marchetti E.
In Search and Rescue (SAR) operations, the speed and techniques used by rescuers and effective communication with the person in need of rescue are vital for successful operations. Recently, drones have become an essential tool in SAR, used by both military and civilian organizations to locate and aid missing persons. Objective: The paper introduces Transponder, a Wi-Fi-based solution designed to enhance SAR efforts by tracking, localizing, and providing first aid information to distressed individuals, even in challenging environments such as forests, mountains, and urban areas lacking GSM/UMTS coverage or that are difficult to reach with terrestrial rescue. Methods: Provide an innovative mechanism based on Wi-Fi beacon detection, LoRa communication, and the possible mobile application to leverage the SAR operation. Provide the preliminary implementation of the Transponder and perform its assessment in scenarios with dense vegetation. Results: The Transponder functionalities have been proven to enhance and expedite the detection of missing persons. Additionally, responses to several research questions regarding its performance and effectiveness are provided. Conclusions: Transponder is an innovative detection mechanism that combines ground-based analysis with on-board analysis, optimizing energy consumption and realizing an efficient solution for real-world scenarios.Source: DRONES, vol. 8 (issue 9)
DOI: 10.3390/drones8090465
Project(s): RESearch and innovation on future Telecommunications systems and networks, to make Italy more smart”, SEcurity and RIghts In the CyberSpace
Metrics:
Calabrò A., Marchetti E.
In Search and Rescue (SAR) operations, the speed and techniques used by rescuers and effective communication with the person in need of rescue are vital for successful operations. Recently, drones have become an essential tool in SAR, used by both military and civilian organizations to locate and aid missing persons. Objective: The paper introduces Transponder, a Wi-Fi-based solution designed to enhance SAR efforts by tracking, localizing, and providing first aid information to distressed individuals, even in challenging environments such as forests, mountains, and urban areas lacking GSM/UMTS coverage or that are difficult to reach with terrestrial rescue. Methods: Provide an innovative mechanism based on Wi-Fi beacon detection, LoRa communication, and the possible mobile application to leverage the SAR operation. Provide the preliminary implementation of the Transponder and perform its assessment in scenarios with dense vegetation. Results: The Transponder functionalities have been proven to enhance and expedite the detection of missing persons. Additionally, responses to several research questions regarding its performance and effectiveness are provided. Conclusions: Transponder is an innovative detection mechanism that combines ground-based analysis with on-board analysis, optimizing energy consumption and realizing an efficient solution for real-world scenarios.Source: DRONES, vol. 8 (issue 9)
DOI: 10.3390/drones8090465
Project(s): RESearch and innovation on future Telecommunications systems and networks, to make Italy more smart”, SEcurity and RIghts In the CyberSpace
Metrics:
See at:
Drones | IRIS Cnr | CNR IRIS | www.mdpi.com | IRIS Cnr | IRIS Cnr | IRIS Cnr | CNR IRIS
2024
Journal article
Open Access
Towards enhanced monitoring framework with smart predictions
Calabrò A., Daoudagh S., Marchetti E.
redicting security and trust vulnerabilities and issues is crucial for IoT interconnected systems and ecosystems, especially when integrating new, third-party or open-source components. Objective: One way to ensure timely predictions is by using a smart monitoring framework to continuously verify functional and non-functional property violations during the executions of the systems and their components. Method: This paper presents a set of guidelines for the Smart Monitoring Framework definition and its application process. Results and Conclusion: The paper provides the reference architecture of the Smart Monitoring Framework and its possible implementation to promptly detect suspicious behavior or property violations. The paper also illustrates how the provided implementation satisfies the defined guidelines by design.Source: LOGIC JOURNAL OF THE IGPL, vol. 32 (issue 2), pp. 321-333
DOI: 10.1093/jigpal/jzae010
Project(s): BIECO
, CyberSec4Europe
Metrics:
Calabrò A., Daoudagh S., Marchetti E.
redicting security and trust vulnerabilities and issues is crucial for IoT interconnected systems and ecosystems, especially when integrating new, third-party or open-source components. Objective: One way to ensure timely predictions is by using a smart monitoring framework to continuously verify functional and non-functional property violations during the executions of the systems and their components. Method: This paper presents a set of guidelines for the Smart Monitoring Framework definition and its application process. Results and Conclusion: The paper provides the reference architecture of the Smart Monitoring Framework and its possible implementation to promptly detect suspicious behavior or property violations. The paper also illustrates how the provided implementation satisfies the defined guidelines by design.Source: LOGIC JOURNAL OF THE IGPL, vol. 32 (issue 2), pp. 321-333
DOI: 10.1093/jigpal/jzae010
Project(s): BIECO
, CyberSec4Europe Metrics:
See at:
academic.oup.com | CNR IRIS | Logic Journal of IGPL | IRIS Cnr | CNR IRIS | CNR IRIS
2024
Conference article
Open Access
Nextgen of search and rescue operations through trustworthy doped drones fleet
Calabrò A., Marchetti E.
Search and rescue operations are critical and involve logistical and human infrastructures, requiring high technology trustworthiness. A multi-layer secure architecture on top of a drone mesh is presented to address these challenges. It is leveraged by security features such as blockchain and CIA-compliant communication paradigms.DOI: 10.1109/seaa64295.2024.00077
Metrics:
Calabrò A., Marchetti E.
Search and rescue operations are critical and involve logistical and human infrastructures, requiring high technology trustworthiness. A multi-layer secure architecture on top of a drone mesh is presented to address these challenges. It is leveraged by security features such as blockchain and CIA-compliant communication paradigms.DOI: 10.1109/seaa64295.2024.00077
Metrics:
See at:
CNR IRIS | ieeexplore.ieee.org | doi.org | CNR IRIS | CNR IRIS
2024
Conference article
Restricted
Behavioral and human-centric access control model in XACML reference architecture: design and implementation of EHR case study
Farhadighalati N., Barata J., Nikghadam-Hojjati S., Marchetti E.
Privacy and security are crucial for using Electronic Patient Records (EHRs) within healthcare systems, as clinical data is sensitive. In response to this, several access control approaches have been recently developed to limit access to sensitive information. This paper presents a novel human-centric access control model, Behavioral-Based Access Control (BBAC), inspired by the Internet of Behavior paradigm. The proposed model implements behavioral modeling, allowing privacy-preserving data sharing based on user behaviors in complex healthcare environments. The model enhances security and privacy in distributed healthcare systems by adjusting access permissions according to user behavior, location, and time, as evaluated in a simulated scenario. The proposed model uses the XACML policy language to implement BBAC, which determines whether to allow or deny user access requests. This approach enables personalized and secure access control by analyzing user behavioral patterns and adjusting permissions accordingly. The ability to regulate access based on individual user behavior represents a shift towards more adaptive and tailored security mechanisms and discusses its dynamic potential for future research.Source: IFIP ADVANCES IN INFORMATION AND COMMUNICATION TECHNOLOGY, vol. 716, pp. 192-203. Caparica, Portugal, 3-5/07/2024
DOI: 10.1007/978-3-031-63851-0_13
Metrics:
Farhadighalati N., Barata J., Nikghadam-Hojjati S., Marchetti E.
Privacy and security are crucial for using Electronic Patient Records (EHRs) within healthcare systems, as clinical data is sensitive. In response to this, several access control approaches have been recently developed to limit access to sensitive information. This paper presents a novel human-centric access control model, Behavioral-Based Access Control (BBAC), inspired by the Internet of Behavior paradigm. The proposed model implements behavioral modeling, allowing privacy-preserving data sharing based on user behaviors in complex healthcare environments. The model enhances security and privacy in distributed healthcare systems by adjusting access permissions according to user behavior, location, and time, as evaluated in a simulated scenario. The proposed model uses the XACML policy language to implement BBAC, which determines whether to allow or deny user access requests. This approach enables personalized and secure access control by analyzing user behavioral patterns and adjusting permissions accordingly. The ability to regulate access based on individual user behavior represents a shift towards more adaptive and tailored security mechanisms and discusses its dynamic potential for future research.Source: IFIP ADVANCES IN INFORMATION AND COMMUNICATION TECHNOLOGY, vol. 716, pp. 192-203. Caparica, Portugal, 3-5/07/2024
DOI: 10.1007/978-3-031-63851-0_13
Metrics:
See at:
doi.org | IRIS Cnr | CNR IRIS | CNR IRIS | link.springer.com
2024
Conference article
Open Access
Fostering trustworthiness evolution of smart solutions in agrifood: challenges and barriers
Marchetti E., Calabrò A., Nikghadam-Hojjati S., Barata J.
The ongoing integration of innovative smart solutions in the agrifood sector significantly benefits productivity, sustainability, and resilience, but also raises concerns about trustworthiness. This paper provides an overview of the main challenges and barriers to trustworthiness and current strategies and cybersecurity measures to bolster trustworthiness. The paper also discusses a possible conceptual solution for the sustainable evolution of smart solutions in the agrifood sector and provides a preliminary implementation based on a digital innovation hub.Source: INTERNATIONAL ICE CONFERENCE ON ENGINEERING, TECHNOLOGY AND INNOVATION, pp. 1-7. Funchal, Portugal, 24-28/06/2024
DOI: 10.1109/ice/itmc61926.2024.10794290
Metrics:
Marchetti E., Calabrò A., Nikghadam-Hojjati S., Barata J.
The ongoing integration of innovative smart solutions in the agrifood sector significantly benefits productivity, sustainability, and resilience, but also raises concerns about trustworthiness. This paper provides an overview of the main challenges and barriers to trustworthiness and current strategies and cybersecurity measures to bolster trustworthiness. The paper also discusses a possible conceptual solution for the sustainable evolution of smart solutions in the agrifood sector and provides a preliminary implementation based on a digital innovation hub.Source: INTERNATIONAL ICE CONFERENCE ON ENGINEERING, TECHNOLOGY AND INNOVATION, pp. 1-7. Funchal, Portugal, 24-28/06/2024
DOI: 10.1109/ice/itmc61926.2024.10794290
Metrics:
See at:
CNR IRIS | ieeexplore.ieee.org | doi.org | CNR IRIS | CNR IRIS
2024
Journal article
Open Access
A methodological approach to securing cyber-physical systems for critical infrastructures
Calabrò A., Cambiaso E., Cheminod M., Cibrario Bertolotti I., Durante L., Forestiero A., Lombardi F., Manco G., Marchetti E., Orlando A., Papuzzo G.
Modern ICT infrastructures, i.e., cyber-physical systems and critical infrastructures relying on interconnected IT (Information Technology)- and OT (Operational Technology)-based components and (sub-)systems, raise complex challenges in tackling security and safety issues. Nowadays, many security controls and mechanisms have been made available and exploitable to solve specific security needs, but, when dealing with very complex and multifaceted heterogeneous systems, a methodology is needed on top of the selection of each security control that will allow the designer/maintainer to drive her/his choices to build and keep the system secure as a whole, leaving the choice of the security controls to the last step of the system design/development. This paper aims at providing a comprehensive methodological approach to design and preliminarily implement an Open Platform Architecture (OPA) to secure the cyber-physical systems of critical infrastructures. Here, the Open Platform Architecture (OPA) depicts how an already existing or under-design target system (TS) can be equipped with technologies that are modern or currently under development, to monitor and timely detect possibly dangerous situations and to react in an automatic way by putting in place suitable countermeasures. A multifaceted use case (UC) that is able to show the OPA, starting from the security and safety requirements to the fully designed system, will be developed step by step to show the feasibility and the effectiveness of the proposed methodology.Source: FUTURE INTERNET, vol. 16 (issue 11)
DOI: 10.3390/fi16110418
Project(s): SEcurity and RIghts in the CyberSpace
Metrics:
Calabrò A., Cambiaso E., Cheminod M., Cibrario Bertolotti I., Durante L., Forestiero A., Lombardi F., Manco G., Marchetti E., Orlando A., Papuzzo G.
Modern ICT infrastructures, i.e., cyber-physical systems and critical infrastructures relying on interconnected IT (Information Technology)- and OT (Operational Technology)-based components and (sub-)systems, raise complex challenges in tackling security and safety issues. Nowadays, many security controls and mechanisms have been made available and exploitable to solve specific security needs, but, when dealing with very complex and multifaceted heterogeneous systems, a methodology is needed on top of the selection of each security control that will allow the designer/maintainer to drive her/his choices to build and keep the system secure as a whole, leaving the choice of the security controls to the last step of the system design/development. This paper aims at providing a comprehensive methodological approach to design and preliminarily implement an Open Platform Architecture (OPA) to secure the cyber-physical systems of critical infrastructures. Here, the Open Platform Architecture (OPA) depicts how an already existing or under-design target system (TS) can be equipped with technologies that are modern or currently under development, to monitor and timely detect possibly dangerous situations and to react in an automatic way by putting in place suitable countermeasures. A multifaceted use case (UC) that is able to show the OPA, starting from the security and safety requirements to the fully designed system, will be developed step by step to show the feasibility and the effectiveness of the proposed methodology.Source: FUTURE INTERNET, vol. 16 (issue 11)
DOI: 10.3390/fi16110418
Project(s): SEcurity and RIghts in the CyberSpace
Metrics:
See at:
Future Internet | Future Internet | CNR IRIS | www.mdpi.com | CNR IRIS
2024
Conference article
Open Access
SECURER: user-centric cybersecurity testing framework for IoT system
Waheed T., Marchetti E., Calabrò A.
The rapid advancement of IoT systems and their interconnected nature highlight the critical need for strong cybersecurity measures. The SECURER framework is designed to offer a user-centric, adaptable, and comprehensive approach to cybersecurity testing. It aims to strengthen the security of IoT systems by prioritizing user behavior, aligning with evolving cyber threats, utilizing existing test suites, and ensuring regulatory compliance. We seek to showcase the functionality and applications of our user-centric cybersecurity testing framework (SECURER) by outlining a practical testing methodology to counteract cyber threats targeting the rolling code technology used in the automotive industry.DOI: 10.5220/0013062900003825
Metrics:
Waheed T., Marchetti E., Calabrò A.
The rapid advancement of IoT systems and their interconnected nature highlight the critical need for strong cybersecurity measures. The SECURER framework is designed to offer a user-centric, adaptable, and comprehensive approach to cybersecurity testing. It aims to strengthen the security of IoT systems by prioritizing user behavior, aligning with evolving cyber threats, utilizing existing test suites, and ensuring regulatory compliance. We seek to showcase the functionality and applications of our user-centric cybersecurity testing framework (SECURER) by outlining a practical testing methodology to counteract cyber threats targeting the rolling code technology used in the automotive industry.DOI: 10.5220/0013062900003825
Metrics:
See at:
CNR IRIS | www.scitepress.org | doi.org | CNR IRIS