Summary
Dr Sergio Maffeis is a Senior Lecturer in Computer Security. His current research interests include web security, machine learning, formal methods and verification, programming language semantics. Maffeis received his Ph.D. from Imperial College London, and his MSc from University of Pisa, Italy.
Research Group: Foundations of Secure Web Programming.
See also: Personal web page.
Selected Publications
Journal Articles
Bansal C, Bhargavan K, Delignat-Lavaud A, et al., 2014, Discovering concrete attacks on website authorization by formal analysis, Journal of Computer Security, Vol:22, Pages:601-657
Bengtson J, Bhargavan K, Fournet C, et al., 2011, Refinement Types for Secure Implementations, ACM Transactions on Programming Languages and Systems, Vol:33, ISSN:0164-0925
Fournet C, Gordon AD, Maffeis S, 2007, A type discipline for authorization policies, ACM Transactions on Programming Languages and Systems, Vol:29, ISSN:0164-0925, Pages:25-25
Conference
Bodin M, Chargueraud A, Filaretti D, et al., 2014, A Trusted Mechanised JavaScript Specification, 41st Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), Association for Computing Machinery (ACM), Pages:87-100, ISSN:1523-2867
Filaretti D, Maffeis S, 2014, An Executable Formal Semantics of PHP, European Conference on Object-Oriented Programming (ECOOP'14), Pages:120-145
Bhargavan K, Delignat-Lavaud A, Maffeis S, 2013, Language-based defenses against untrusted browser origins, 22nd Usenix Security Symposium, Pages:653-670
Bansal C, Bhargavan K, Delignat-Lavaud A, et al., 2013, Keys to the Cloud: Formal Analysis and Concrete Attacks on Encrypted Web Storage, Conference on Principles of Security and Trust (POST'13), Pages:126-146
Maffeis S, Mitchell JC, Taly A, 2010, Object Capabilities and Isolation of Untrusted Web Applications, Symposium on Security and Privacy, IEEE COMPUTER SOC, Pages:125-140, ISSN:1081-6011
Maffeis S, Mitchell JC, Taly A, 2009, Isolating JavaScript with Filters, Rewriting, and Wrappers, 14th European Symposium on Research in Computer Security (ESORICS 2009), SPRINGER-VERLAG BERLIN, Pages:505-+, ISSN:0302-9743