Sergio ESPOSITO

Sergio Esposito is a Researcher at the Department of Mathematics and Computer Science of the University of Catania.

He holds a PhD in Information Security from Royal Holloway, University of London. His main research area is IoT Security: he thoroughly investigated self-activation attacks, to understand to what extent commands played and captured by the same device can be a threat to the device users' security, safety and privacy. He is the author of the AvA attack (CVE-2022-25809), which was extensively discussed by media. Since 2021, he is a Teaching Assistant for the "Vulnerability Assessment and Penetration Testing" course at University of Catania.

Before becoming a researcher, he was a cybersecurity consultant for more than 60 client organisations, including SMB, SME and large enterprises. His consultancy services included GDPR gap analysis, penetration testing, vulnerability assessment, incident response & analysis, and training sessions on security topics.