Igino Corona

Igino Corona received the M.Sc. Degree in Electronic Engineering from the University of Cagliari, in 2006. In his MSc thesis (in Italian), he discussed the design and the implementation (in Python and C++ programming languages) of an anomaly-based, unsupervised Intrusion Detection System for the analysis of the HTTP traffic. The Clusit Association awarded this work as one of the best Italian research thesis on computer system security.

Since February 2007, he is a member of the Pattern Recognition and Applications Group (Dept. of Electrical and Electronic Engineering). In the period January/June 2009 he worked with the research group headed by Prof. Wenke Lee, Georgia Institute of Technology, Altlanta, USA) as a visiting PhD student. During such a period, Igino Corona and Roberto Perdisci developed Flux Buster, an advanced system which is able to detect fast flux service networks by means of passive analysis of DNS traffic in large networks.
In march 2010 Igino Corona received the PhD degree in Computer Engineering from the University of Cagliari, with the following dissertation: Detection of web-based attacks. Igino Corona is manager of the Computer Security Technical Committee of the GIRPR (Italian Group of Pattern Recognition researchers, affiliated to IAPR) and one of the organizers of the International Summer School on Computer Security & Privacy. Igino Corona is the author of SuStorID, an advanced intrusion detection system for web services based on machine learning, released in January 2012 under open source licence.


Igino Corona teaches Computer Security to M.Sc. students in Electroning/Telecommunications Engineering and PhD Students in Computer Engineering.  


Research Interests

Research interests include many aspects of computer security:
  • Detection of and Protection against Web Attacks  (both client-side and server-side)
  • Detection of Botnets, and in particular, Fast Flux Networks
  • Ideation, development, and testing of advanced Intrusion Detection Systems (IDS) based on Machine Learning
  • Evaluation of Machine-learning systems against poisoning and evasion attacks
  • Android Security
In order to ease the comparison of experimental results and allow security administrators to better protect their systems, most of programs ideated and developed by Igino Corona will be offered with open-source licence. Currently, the following tools are available:


  • ILLBuster Europroject (Febbraio 2014 - Febbraio 2016) - Budget (€): 364,000
  • CyberROAD Europroject (Gennaio 2014 - Dicembre 2015) - Budget (€): 1,289,764
  • sTATA - secure Technologies Against Targeted-Attacks (Novembre 2013 - Maggio 2015) - Budget (€): 219,100

More details in the Projects section of this site.