Alessandro Armando

Title: The Innovations of Alessandro Armando

Introduction

Alessandro Armando is a notable inventor based in Genoa, Italy. He has made significant contributions to the field of security testing for web applications. His innovative approach focuses on enhancing the security of multi-party web applications through dynamic analysis.

Latest Patents

Alessandro Armando holds a patent for a security testing framework titled "Dynamic analysis security testing of multi-party web applications via attack patterns." This framework leverages attack patterns to generate test cases that evaluate the security of Multi-Party Web Applications (MPWAs). The attack patterns consist of structured artifacts that capture essential information for executing general-purpose attacker strategies. They identify commonalities between attacks, such as the abuse of security-critical parameters, and relate to protocol patterns associated with those parameters. The testing environment is designed to collect various types of HTTP traffic, while user interactions with the MPWA during security protocol execution are recorded. An inference module processes the recorded symbolic sessions, tagging elements in the HTTP traffic with labels. This labeled traffic is then referenced to determine specific attack patterns and corresponding test cases to be executed against the MPWA. The results of the attacks are reported back to the tester for evaluation. This innovative approach can be integrated with penetration testing tools to automate the execution of complex attacker strategies.

Career Highlights

Throughout his career, Alessandro has worked with prominent companies such as SAP SE and E-Phors S.P.A. His experience in these organizations has contributed to his expertise in security testing and web application development.

Collaborations

Alessandro has collaborated with notable professionals in his field, including Roberto Carbone and Luca Compagna. These collaborations have further enriched his work and contributed to the development of innovative security solutions.

Conclusion

Alessandro Armando's contributions to the field of security testing for web applications demonstrate his commitment to innovation and excellence. His patent and career achievements reflect his expertise and dedication to enhancing the security of multi-party web applications.