Secure code liFEcycle for applications and netWoRking

Cleanse

Cleanse (CLoud nativE ApplicatioN SEcurity)

Overview

The Cleanse Co-Innovation Lab - CLoud nativE ApplicatioN SEcurity - is a joint investment between Deda and FBK for the sharing of its promoters’ strong competencies, with the aim of enabling the market to integrate new methodologies and new tools for the development of secure-by-design cloud-native software, so as to anticipate and respond to the increasingly high standards required in the field of cybersecurity — linked for example to the new NIS2 regulation — and to the complexity of the challenges posed by new technology and application scenarios.

GitHub Cleanse

Selected Publications

  • Andrea Bisegna, Roberto Carbone, Laura Cristiano, Pietro De Matteis, Silvio Ranise
    Towards Continuous Risk Assessment and Conformance Checking of IdM Deployments
    In: 2025 10th IEEE European Symposium on Security and Privacy Workshops (EuroSPW)
  • Giovanni Corti, Gianluca Sassetti, Amir Sharif, Serena Elisa Ponta, Matteo Rizzi, Pietro De Matteis, Luca Piras, Roberto Carbone, Silvio Ranise
    A First Appraisal of NIS2 and CRA Compliance Leveraging Open Source Tools
    In: IEEE 33rd International Requirements Engineering Conference Workshops (REW)
  • Stefano Berlato, Matteo Rizzi, Matteo Franzil, Silvio Cretti, Pietro De Matteis, Roberto Carbone
    Work-in-Progress: A Sidecar Proxy for Usable and Performance-Adaptable End-to-End Protection of Communications in Cloud Native Applications
    In: Proceedings of 2024 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) (DOI)

Selected Theses

  • Carlo Sorrentino (Bachelor's Thesis, University of Trento, 2025)
    Automazione di supporto alla selezione di immagini Docker sicure
    Supervisors: Domenico Siracusa | Co-supervisors: Pietro De Matteis, Luis Augusto Dias Knob
  • Niccolò Lechthaler (Bachelor's Thesis, University of Trento, 2025)
    Towards the Parametrization of Security Testing Tools for IdM Implementations: The MIG-T Case Study
    Supervisors: Silvio Ranise | Co-supervisors: Andrea Bisegna, Laura Cristiano, Pietro De Matteis
  • Mattia Maramotti (Bachelor's Thesis, University of Trento, 2025)
    Testing as a Service for the Security and Compliance of Identity Management Solutions: Enhancing MIG A Scalable Abstract Architecture for Conformance Verification of Network Protocol Implementations
    Supervisors: Silvio Ranise | Co-supervisors: Andrea Bisegna, Roberto Carbone, Laura Cristiano, Pietro De Matteis
  • Isaia Tonini (Bachelor's Thesis, University of Trento, 2025)
    Memory safety: dalla teoria alla pratica. Guida per una corretta gestione della memoria
    Supervisors: Silvio Ranise | Co-supervisors: Pietro De Matteis, Stefano Berlato
  • Filippo De Grandi (Bachelor's Thesis, University of Trento, 2024)
    BAS Tools - Implementation of an Attack Pattern to Mimic a Threat Actor
    Supervisors: Domenico Siracusa | Co-supervisors: Matteo Rizzi, Salvatore Manfredi, Pietro De Matteis
  • Matteo Bregola (Bachelor's Thesis, 2024)
    Comprehensive Analysis of Breach and Attack Simulation Tools
    Supervisors: Silvio Ranise | Co-supervisors: Pietro De Matteis, Matteo Rizzi, Salvatore Manfredi
  • Simone Vigasio (Bachelor's Thesis, University of Trento, 2024)
    Evaluation of an AI Approach for Static Code Analysis Based on the VULBERTA Model
    Supervisors: Domenico Siracusa | Co-supervisor: Pietro De Matteis
  • Roberto Savi (Bachelor's Thesis, University of Trento, 2024)
    Integrating Pentesting Tools for Identity Management Protocols into DevSecOps: The MIG-T Use Case
    Supervisors: Silvio Ranise | Co-supervisors: Andrea Bisegna, Roberto Carbone, Laura Cristiano, Pietro De Matteis

Involved People

Luca Piras

Luca Piras

Pietro De Matteis

Pietro De Matteis