Research

Research

Research

My research activity is centered on the study of cyber threat intelligence, with a particular focus on the ransomware ecosystem, dark web dynamics, and the observable behavior of cybercriminal actors.

My work combines empirical analysis, threat intelligence methodologies, and applied cybersecurity research to investigate how adversarial ecosystems evolve over time, how they structure coercive and extortion-based operations, and how these dynamics can be systematically analyzed.


Research Interests

My main research interests include:

  • Cyber Threat Intelligence (CTI)
  • Ransomware ecosystem analysis
  • Dark web monitoring and underground ecosystems
  • Threat actor behavior and operational evolution
  • Threat Intelligence Platforms (TIPs)
  • OSINT and CLOSINT methodologies
  • Data-driven models for cyber threat analysis
  • Adversarial infrastructures and observable disclosure dynamics

Current Academic Focus

My current research is primarily dedicated to the longitudinal analysis of ransomware activity, with particular attention to:

  • The structural evolution of ransomware groups
  • Data Leak Sites (DLS) as observable disclosure infrastructures
  • Extortion models and multi-extortion dynamics
  • Threat actor operational patterns and ecosystem resilience
  • Data-driven approaches for threat interpretation and prediction

This work is conducted as part of my PhD in Cyber Threat Intelligence and is aimed at bridging academic inquiry with operational relevance.


Research Perspective

Rather than treating cyber threats as isolated technical events, my research approaches them as complex socio-technical ecosystems, shaped by infrastructure, incentives, adaptation, and observable behavioral patterns.

This perspective supports a more structured understanding of cybercriminal activity and contributes to the development of more robust intelligence-driven approaches to threat analysis.


Publications and Outputs

A selection of publications, technical contributions, and academic outputs is available across this website and in the dedicated External Publications section.