Send email Copy Email Address

Email

Address

Kaiserstraße 21
66386 St. Ingbert (Germany)

Awards (selection)

2017: Busy Beaver Award for "Cybersecurity I"

Further Information

Short Bio

Dr. Giancarlo Pellegrino is a tenured faculty at CISPA Helmholtz Center for Information Security. Before that he was a visiting assistant professor at Stanford University and research group leader at CISPA as part of the CISPA-Stanford Center for Cybersecurity. He got his PhD at Eurecom in Sophia-Antipolis (France) under the supervision of Davide Balzarotti. Until August 2013, Giancarlo was a researcher associate in the Security and Trust group at the SAP research labs.

CV: Last stations

Since 2017
Faculty at CISPA Helmholtz Center for Information Security
Since 2017
Visiting Assistant Professor at Stanford University
2017 - 2018
Visiting Scholar at Stanford University
2015 - 2017
Postdoctoral Researcher at Saarland University

Publications by Giancarlo Pellegrino

Year 2024

Conference / Medium

Usenix Security Symposium (USENIX-Security) SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications

Conference / Medium

IEEE European Symposium on Security and Privacy (EuroS&P) Uncovering the Role of Support Infrastructure in Clickbait PDF Campaigns

Conference / Medium

IEEE Symposium on Security and Privacy (S&P) The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web

Conference / Medium

ACM Conference on Computer and Communications Security (CCS) The Big Brother’s New Playground: Unmasking the Illusion of Privacy in Web Metaverses from a Malicious User’s Perspective

Conference / Medium

Usenix Security Symposium (USENIX-Security) SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements

Year 2023

Conference / Medium

Annual Computer Security Applications Conference (ACSAC) From Attachments to SEO: Click Here to Learn More about Clickbait PDFs!

Conference / Medium

IEEE Symposium on Security and Privacy (S&P)

Conference / Medium

IEEE Symposium on Security and Privacy (S&P) The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web

Year 2022

Year 2021

Conference / Medium

International Symposium on Research in Attacks Intrusions and Defenses (RAID) Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks