Igino Corona
Igino Corona received the M.Sc. Degree in Electronic Engineering from the University of Cagliari, in 2006. In his MSc thesis (in Italian), he discussed the design and the implementation (in Python and C++ programming languages) of an anomaly-based, unsupervised Intrusion Detection System for the analysis of the HTTP traffic. The Clusit Association awarded this work as one of the best Italian research thesis on computer system security.
Since February 2007, he is a member of the Pattern Recognition and Applications Group (Dept. of Electrical and Electronic Engineering). In the period January/June 2009 he worked with the research group headed by Prof. Wenke Lee, Georgia Institute of Technology, Altlanta, USA) as a visiting PhD student. During such a period, Igino Corona and Roberto Perdisci developed Flux Buster, an advanced system which is able to detect fast flux service networks by means of passive analysis of DNS traffic in large networks.
In march 2010 Igino Corona received the PhD degree in Computer Engineering from the University of Cagliari, with the following dissertation: Detection of web-based attacks. Igino Corona is manager of the Computer Security Technical Committee of the GIRPR (Italian Group of Pattern Recognition researchers, affiliated to IAPR) and one of the organizers of the International Summer School on Computer Security & Privacy. Igino Corona is the author of SuStorID, an advanced intrusion detection system for web services based on machine learning, released in January 2012 under open source licence.
In August 2015, together with five colleagues within PraLab (Davide Ariu, Luca Piras, Battista Biggio, Fabi Roli, Giorgio Giacinto), Igino Corona founded the University Spin-off Pluribus One, in which he has the role of Chief Technology Officer for computer security. Igino Corona is also the author of the main product of the spin-off for the protection of web services, named Attack Prophecy.
Teaching
Igino Corona teaches Computer Security to M.Sc. students in Electroning/Telecommunications Engineering and PhD Students in Computer Engineering.
Research Interests
Research interests include many aspects of computer security:
- Detection of and Protection against Web Attacks (both client-side and server-side)
- Detection of Phishing attacks, Typosquatting
- Detection of Illegal pharmacy websites
- Detection of Botnets, and in particular, Fast Flux Networks
- Ideation, development, and testing of advanced Intrusion Detection Systems (IDS) based on Machine Learning
- Evaluation of Machine-learning systems against poisoning and evasion attacks
- Android Security
In order to ease the comparison of experimental results and allow security administrators to better protect their systems, most of programs ideated and developed by Igino Corona will be offered with open-source licence. Currently, the following tools are available:
- HMM-Web: a framework to the detection of web attacks
- SuStorID: anomaly-based Web Intrusion Protection system
- Modsecurity for SuStorID: extended version of modsecurity which is able to interact with SuStorID
- AdversariaLib: a general-purpose library for the automatic evaluation of machine learning-based classifiers under adversarial attacks
Projects
- DOGANA Europroject (Sept 2015 - Aug 2018) - Budget (€): 4,999,558
- FORC Europroject (Jan 2017 - Oct 2019) - Budget (€): 899,213
- ILLBuster Europroject (Feb 2014 - Feb 2016) - Budget (€): 364,000
- CyberROAD Europroject (Jan 2014 - Dec 2015) - Budget (€): 1,289,764
- sTATA - secure Technologies Against Targeted-Attacks (Nov 2013 - May 2015) - Budget (€): 219,100
More details in the Projects section of this site.