Dr Sergio Maffeis is a Senior Lecturer in Computer Security. His current research interests include web security, machine learning, formal methods and verification, programming language semantics. Maffeis received his Ph.D. from Imperial College London, and his MSc from University of Pisa, Italy.
Research Group: Foundations of Secure Web Programming.
See also: Personal web page.
et al., 2014, Discovering concrete attacks on website authorization by formal analysis, Journal of Computer Security, Vol:22, Pages:601-657
et al., 2011, Refinement Types for Secure Implementations, ACM Transactions on Programming Languages and Systems, Vol:33, ISSN:0164-0925
Fournet C, Gordon AD, Maffeis S, 2007, A type discipline for authorization policies, ACM Transactions on Programming Languages and Systems, Vol:29, ISSN:0164-0925, Pages:25-25
Filaretti D, Maffeis S, 2014, An Executable Formal Semantics of PHP, European Conference on Object-Oriented Programming (ECOOP'14), Pages:120-145
Bhargavan K, Delignat-Lavaud A, Maffeis S, 2013, Language-based defenses against untrusted browser origins, 22nd Usenix Security Symposium, Pages:653-670
et al., 2013, Keys to the Cloud: Formal Analysis and Concrete Attacks on Encrypted Web Storage, Conference on Principles of Security and Trust (POST'13), Pages:126-146
Maffeis S, Mitchell JC, Taly A, 2010, Object Capabilities and Isolation of Untrusted Web Applications, Symposium on Security and Privacy, IEEE COMPUTER SOC, Pages:125-140, ISSN:1081-6011