MON5 is a leading specialized company dedicated to the field of Operational Technology (OT) and critical infrastructure cybersecurity. With a strong commitment to safeguarding vital systems and networks, MON5 offers comprehensive solutions and expertise tailored to the unique challenges faced by organizations responsible for critical infrastructure.MON5's core mission is to provide robust protection for essential services such as energy, water, transportation, and manufacturing, which are vulnerable to cyber threats. The company's team of highly skilled professionals combines deep technical knowledge with a keen understanding of the intricacies of OT environments.Key offerings from MON5 include state-of-the-art intrusion detection, advanced threat analysis, network monitoring, and tailored security assessments. These solutions are designed to ensure uninterrupted operations, prevent downtime, and mitigate potential risks posed by cyberattacks on critical infrastructure.With a proven track record in helping organizations fortify their OT and critical infrastructure against evolving cyber threats, MON5 stands as a trusted partner dedicated to maintaining the resilience and security of essential systems in an increasingly interconnected digital world.

RTD-A Contract for MOST project.

As a Post-Doc researcher fellow, my work aims to study, design and implement innovative solutions that allow improving the safety and operational robustness of connected production industrial networks and devices for cyber-security contexts. The project will consider both real and actual industrial plants and machinery in their own right, such as smart devices and products made by a company and sold/installed at their customers.This project aims also to include:• an IT risk assessment that takes into account the characteristics of technological systems and industrial devices, and their interactions with processes business and business objectives;• Identification of not only technological solutions that allow to minimize the costs vulnerability that causes the production processes to be stopped or damaged, and to improve the integrity and confidentiality of sensitive data managed by machinery and interconnected devices;• The development of solutions that are compatible with the business reality of the territory, in terms of company size, turnover and investment constraints in Safety.

Teaching assistant of professor Marco Prandini for the laboratory activity for the course "Laboratory of System Administration". The goal of this course is to present the main subjects related to system administration, and to provide some fundamental skills needed to configure and monitor GNU/Linux systems in particular. The common thread of the lectures is an attention to safety/security as the ability to make systems resilient to faults, errors, and malicious attacks as well. In this course i provided support on the settings and configuration of the virtual lab and provided assistance to students in exercises and tests resolutions.

My research activity is mainly focused on computer security and architectural threat analysis. I have been working on analysis and defense of IoT and Serverless architectures, developing tools to test and protect these architectures and formal models to describe them. Actually my main focus is the study of security solutions for SDN architectures.

During this year i was part of the SMAll project teams. SMAll is a project funded by EIT Digital whose goal is to create a software platform that enables urban and extra-urban mobility services.In this project, my role has been twofold. With the team I have actively participated in the drafting of the software development process and the design of the platform invocation interfaces. In particular, I gave more emphasis to the security criticality introduced by this platform, from the insider threat problem to the issues of user privacy resulting from the management of personal data.

My job focuses on the security and privacy aspects of the Emilia-Romagna Regional Government project called "Mi Muovo" (I move). But above all my goal is to analyze the structure of the system architecture, with different kind of tests, perform analysis on the data produced by this system and try to discover security vulnerabilities and possible privacy violations.

I joined the Department of Mathematics and ComputerScience at University of Southern Denmark for 4 months as a Visiting Researcher and Professor. I'm now a Visiting Member of the team of Artificial Intelligence, Cybersecurity, and Programming Languages led by Prof. Fabrizio Montesi. During my research period, I worked, in addition to Prof. Jacopo Mauro on the design of a choreographic programming language for the development of advanced sdn and programmable data plane-based network architecture. I was also responsible for a 12-hour (5 ECTS) Master Course on "Applied Cybersecurity" followed by 12 students.

P-SCOR a constraint programming Northbound Interface with a P4 programmable dataplane. The main purpose of my work during this collaboration has been to show, the first integration of a CP level with a data plane programmable through P4, and show the benefits introduced.The main benefit of the union of the CP and P4 paradigm derives from the level of abstraction that the SDN philosophy offers. An SDN architecture aims to abstract the fixed and immutable intelligence of the physical network level at the controller level so that it can be processed and managed in a more complex and efficient way. The management of this complexity can be entrusted to different types of applications with different logics, one of which is precisely the CP. Through the CP it is possible to create applications that automate the calculation of networking solutions in a customizable and efficient way.My contribution in this project has been the integration of a P4 Data Plane into the SCORarchitecture and the creation of a specific model for delay link estimation that support SCOR in therouting solutions evaluations.