A Design Methodology for Computer Security Testing

The field of "computer security" is often considered something in between Art and Science. This is partly due to the lack of widely agreed and standardized methodologies to evaluate the degree of the security of a system. This dissertation intends to contribute to this area by investigating the most common security testing strategies applied nowadays and by proposing an enhanced methodology that may be effectively applied to different threat scenarios with the same degree of effectiveness. Security testing methodologies are the first step towards standardized security evaluation processes and understanding of how the security threats evolve over time. This dissertation analyzes some of the most used identifying differences and commonalities, useful to compare them and assess their quality. The dissertation then proposes a new enhanced methodology built by keeping the best of every analyzed methodology. The designed methodology is tested over different systems with very effective results, which is the main evidence that it could really be applied in practical cases. Most of the dissertation discusses and proves how the presented testing methodology could be applied to such different systems and even to evade security measures by inverting goals and scopes. Real cases are often hard to find in methodology' documents, in contrary this dissertation wants to show real and practical cases offering technical details about how to apply it. Electronic voting systems are the first field test considered, and Pvote and Scantegrity are the two tested electronic voting systems. The usability and effectiveness of the designed methodology for electronic voting systems is proved thanks to this field cases analysis. Furthermore reputation and anti virus engines have also be analyzed with similar results. The dissertation concludes by presenting some general guidelines to build a coordination-based approach of electronic voting systems to improve the security without decreasing the system modularity.

Stili cognitivi e sofisticazione politica, un approccio sperimentale allo studio del comportamento di voto dei giovani elettori Italiani e Bielorussi

L’oggetto della nostra ricerca è l’opinione pubblica e il comportamento dell’elettore in una prospettiva comparata. L’obiettivo della ricerca è stato analizzare la relevanza degli approcci psicologici per una migliore comprensiore della partecipazione politica, delle opinioni e delle scelte elettorali degli studenti Italiani e Bielorussi. Nella parte teorica, noi discutiamo i modelli dell'approccio cognitivo al comportamento di voto. Discutiamo inoltre il concetto dello stile cognitivo e le sue cinque categorie: stile sintetico, idealistico, pragmatico, analitico o realistico, come descritti da A.Harrison and R.M. Branson e adattati da A. Alexeev and L. Gromova. Nonostante il fatto che la ricerca tratta il caso degli studenti, noi crediamo che i risultati siano pertinenti per un’ulteriore ricerca dell’auditorio più vasto e variegato.

The Council of Ministers of the European Union After the Lisbon Treaty

The Treaty of Lisbon has brought remarkable changes and innovations to the European Union. As far as the Council of Ministers of the European Union (“the Council” hereinafter) is concerned, there are two significant innovations: double qualified majority voting and new rotating Presidency scheme, which are considered to make the working of the Council more efficiently, stably and consistently. With the modification relating to other key institutions, the Commission and the European Parliament, and with certain procedures being re-codified, the power of the Council varies accordingly, where the inter-institutional balance counts for more research. As the Council is one of the co-legislatures of the Union, the legislative function of it would be probably influenced, positively or negatively, by the internal innovations and the inter-institutional re-balance. Has the legislative function of the Council been reinforced or not? How could the Council better reach its functional goal designed by the Treaties’ drafter? How to evaluate the Council’s evolution after Lisbon Treaty in the light of European integration? This thesis is attempting to find the answers by analyzing two main internal innovations and inter-institutional re-balance thereinafter.

Deleghe di voto e acquisto del controllo nelle societa' quotate

A fronte dal recepimento del direttiva SHR nel nostro ordinamento, realizzato dal d.lgs. 27/2010, il presente lavoro si propone anzitutto di analizzare l'attuale ruolo della delega di voto - sollecitata e non - per poi verificare quale sia l'interesse concretamente sotteso a un voto così esercitato, con particolare attenzione alla sollecitazione di deleghe di voto, oggi destinata espressamente (per la prevalente dottrina) a consentire al promotore il perseguimento di interessi propri. Le considerazioni riguardo all'interesse concretamente sotteso al voto esercitato per delega portano a vagliarne la rilevanza ai fini della nozione di controllo, ex art. 2359 c.c., la quale esclude espressamente dai voti rilevanti esclusivamente quelli esercitati "per conto terzi", e non, dunque, anche quelli esercitati nell'interesse proprio da un soggetto non titolare della partecipazione. Viene quindi affrontata la principale critica ad un controllo raggiunto per tale via e, più in generale, attraverso una delle varie forme di dissociazione tra titolarità della partecipazione e legittimazione all'esercizio del voto ad essa relativo, ovvero la apparente mancanza di stabilità. Considerando tuttavia che ogni ipotesi di controllo c.d. di fatto per definizione non gode di stabilità se non si scelga di ammettere una valutazione di tale requisito necessariamente prognostica ed ex ante, si giunge alla conclusione che la fattispecie di un controllo acquisito tramite sollecitazione di deleghe si distingue da altre ipotesi di controllo di fatto esclusivamente per la maggiore difficoltà dell'accertamento in fatto del requisito della stabilità. Si affronta infine la possibilità di garantire il diritto di exit (ovvero una tutela risarcitoria) del socio di minoranza che veda modificate le condizioni di rischio del proprio investimento a causa di una modifica del soggetto controllante derivante da sollecitazione di deleghe, tramite applicazione diretta della disciplina OPA ovvero riconducendo la fattispecie all'art. 2497quater, lett. d, ove ne ricorrano i presupposti.

Essays in Applied and Labor Economics

This thesis consists of three self-contained papers. In the first paper I analyze the labor supply behavior of Bologna Pizza Delivery Vendors. Recent influential papers analyze labor supply behavior of taxi drivers (Camerer et al., 1997; and Crawford and Meng, 2011) and suggest that reference-dependence preferences have an important influence on drivers’ labor-supply decisions. Unlike previous papers, I am able to identify an exogenous and transitory change in labor demand. Using high frequency data on orders and rainfall as an exogenous demand shifter, I invariably find that reference-dependent preferences play no role in their labor’ supply decisions and the behavior of pizza vendors is perfectly consistent with the predictions of the standard model of labor’ supply. In the second paper, I investigate how the voting behavior of Members of Parliament is influenced by the Members seating nearby. By exploiting the random seating arrangements in the Icelandic Parliament, I show that being seated next to Members of a different party increases the probability of not being aligned with one’s own party. Using the exact spatial orientation of the peers, I provide evidence that supports the hypothesis that interaction is the main channel that explain these results. In the third paper, I provide an estimate of the trade flows that there would have been between the UK and Europe if the UK had joined the Euro. As an alternative approach to the standard log-linear gravity equation I employ the synthetic control method. I show that the aggregate trade flows between Britain and Europe would have been 13% higher if the UK had adopted the Euro.

Law, Informal Institutions and Trust: an Experimental Perspective

This dissertation has studied how legal and non-legal mechanisms affect the levels of trust and trustworthiness in an economy, and whether and when subtle psychological factors are crucial for establishing trust and even for recovering trust from a breach of contract. The first Chapter has addressed the question of whether formal legal enforcement crowds out or crowds in the amount of trust in a society. We find that formal legal mechanisms, especially formal contracts backed by a powerful authority, normally undermine trust except when they are perceived as legitimate, or when there are no strong social norms of fairness (i.e. the population in a society is considerably heterogeneous), or when the environment in which repeated commercial relationships take place becomes highly uncertain. The second Chapter has examined whether the endogenous adoption of a collective punishment institution can help a society coordinate on an efficient outcome, characterized by high levels of trust and trustworthiness. The experimental results show that the endogenous introduction of collective punishment by means of a majority-voting rule does not significantly improve coordination on the efficient equilibrium. Not all subjects seem to be able to anticipate the change in behavior induced by the introduction of the mechanism, and a majority of them vote against it. The third Chapter has explored whether high-trustors adapt their behavior in response to others’ trustworthiness or untrustworthiness more quickly, which in turn supports them to maintain higher default expectations of others’ trustworthiness relative to low-trustors. Our experimental results reveal that high-trustors are better than low-trustors at predicting others’ trustworthiness because they are less susceptible to the anticipated aversive emotions aroused by the potential betrayal and thereby have a higher willingness to acquire the valuable information about their partner’s actions.