Mafalda Ferreira

Welcome! I am a PhD student in Computer Science and Engineering at Instituto Superior Técnico (IST), University of Lisbon, being kindly advised by professor Nuno Santos. I am a junior researcher at INESC-ID Lisbon and member of the Distributed Systems Group (GSD), as part of the SysSec team.

I am interested in Web security and privacy. Specifically, my research focuses on developing systems based on static analysis techniques to identify security vulnerabilities and privacy violations in JavaScript code.

Previously, I received my MSc in Computer Science and Engineering at IST in 2021, under the guidance of professor Nuno Santos. My dissertation, entitled Building GDPR-Compliant Web Applications with RuleKeeper is available in the Publications section.

I have been a teaching assistant at IST, University of Lisbon since 2019. To learn more about my teaching activities, check my Teaching section.

News

Apr 9, 2024	Our paper on vulnerability detection in Node.js applications was accepted at PLDI’24!
Jun 7, 2023	Our study on vulnerability detection tools in Node.js packages was accepted at IEEE ToR’23!
Dec 13, 2022	Our paper on building GDPR-compliant web applications was accepted at S&P’23!
Sep 26, 2022	Visited Microsoft Research Lab, in Cambridge, and gave a talk about my ongoing work. Had a wonderful time and met a lot of interesting people .

Selected Publications

PLDI

Efficient Static Vulnerability Analysis for JavaScript with Multiversion Dependency Graphs

Ferreira, Mafalda, Monteiro, Miguel, Brito, Tiago, Coimbra, Miguel E. and 3 more authors

Proc. ACM Program. Lang. (to appear). Jun 2024

PDF

ToR

Study of JavaScript Static Analysis Tools for Vulnerability Detection in Node.js Packages

Brito, Tiago, Ferreira, Mafalda, Monteiro, Miguel, Lopes, Pedro and 3 more authors

In IEEE Transactions on Reliability Jun 2023

Bib PDF Website

@inproceedings{vulcan_tor,
  author = {Brito, Tiago and Ferreira, Mafalda and Monteiro, Miguel and Lopes, Pedro and Barros, Miguel and Santos, José Fragoso and Santos, Nuno},
  booktitle = {IEEE Transactions on Reliability},
  title = {Study of JavaScript Static Analysis Tools for Vulnerability Detection in Node.js Packages},
  year = {2023},
  volume = {},
  number = {},
  pages = {1-16},
  doi = {10.1109/TR.2023.3286301},
}

S&P

RuleKeeper: GDPR-Aware Personal Data Compliance for Web Frameworks

Ferreira, Mafalda, Brito, Tiago, Santos, José Fragoso, and Santos, Nuno

In Proceedings of 44th IEEE Symposium on Security and Privacy (S&P’23) May 2023

Bib PDF Website

@inproceedings{ferreira_sp23,
  author = {Ferreira, Mafalda and Brito, Tiago and Santos, José Fragoso and Santos, Nuno},
  title = {RuleKeeper: GDPR-Aware Personal Data Compliance for Web Frameworks},
  booktitle = {Proceedings of 44th IEEE Symposium on Security and Privacy (S&P'23)},
  year = {2023},
  doi = {10.1109/SP46215.2023.00058},
  pages = {1014-1031},
  publisher = {IEEE Computer Society},
  address = {Los Alamitos, CA, USA},
}

CCS

Poster: A Systems Approach to GDPR Compliance-by-Design in Web Development Stacks

Ferreira, Mafalda, Brito, Tiago, Santos, José Fragoso, and Santos, Nuno

In Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS’22) Nov 2022

Bib PDF Website

@inproceedings{ferreira_ccs22,
  author = {Ferreira, Mafalda and Brito, Tiago and Santos, José Fragoso and Santos, Nuno},
  title = {Poster: A Systems Approach to GDPR Compliance-by-Design in Web Development Stacks},
  booktitle = {Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS'22)},
  year = {2022},
  isbn = {9781450394505},
  doi = {10.1145/3548606.3563521},
}

Contact

E-mail: mafalda.baptista@tecnico.ulisboa.pt

Address:
Room 501, INESC-ID
Rua Alves Redol 9
1000-029 Lisbon, Portugal