Andrea Fioraldi

Andrea Fioraldi is a Ph.D. student and researcher at EURECOM working under the supervision of Prof. Davide Balzarotti in the Software and Systems Security group. He specializes in improving security vulnerability discovery techniques, particularly through fuzz testing as part of the DARPA Chess project. His research has significant implications for software security and reliability.

Andrea earned his BSc in Computer and Control Engineering from Sapienza, University of Rome in 2018, followed by an MSc in Engineering in Computer Science from the same institution in 2020. His master's thesis focused on "Program State Abstraction for Feedback-driven Fuzz Testing using Likely Invariants" developed during an internship at EURECOM.

His research interests center on fuzz testing methodologies, memory safety analysis, binary format processing, and vulnerability discovery. He has made significant contributions to advancing fuzz testing capabilities, particularly through his work on AFL++ and LibAFL frameworks, which have become essential tools in the security research community.

Analysis of his publication record shows a clear progression from foundational work on fuzz testing techniques to more sophisticated approaches integrating emulation, memory safety analysis, and structured data handling. His research consistently bridges theoretical advances with practical implementations that have been adopted by the security community.

• Italian CyberChallenge winner (Malware Analysis, 2017)
• Participant in ENISA's European CyberSecurity Challenge (first Italian team)
• Active competitor in DEFCON CTF and CCC CTF with team mHACKeroni
• PC member for IEEE Workshop on Offensive Technologies (WOOT 2021, 2022)
• External reviewer for International Symposium on Code Generation and Optimization (CGO 2024)

Andrea serves as a maintainer for AFL++, one of the most advanced publicly available fuzzers, and has contributed significantly to the security research community through his open-source projects. He is actively involved in the DARPA Chess project, focusing on improving the effectiveness of security vulnerability discovery techniques.

He is a member of the mHACKeroni CTF team and regularly participates in top international cybersecurity competitions. His work bridges academic research with practical security applications, making significant contributions to both domains.