He obtained his PhD from the University of Trento, Italy, on vulnerability risk management with a Best Thesis award. Luca’s research focuses at economic aspects of IT risk, and in particular on the relation between attacker economics, cybercrime activities, and attack realization. Luca has multiple publications in top academic and industry venues, including ACM TISSEC, Risk Analysis, ACM CCS, and BlackHat, and has served as invited reviewer for multiple top-tier journals. Luca is the only academic authoring member (next to CMU) of the NIST worldwide standard for vulnerability measurement (CVSS), and the only European representative in the standard body.