Isabella Mastroeni

Foto,  February 3, 2016
Position
Associate Professor
Academic sector
INF/01 - INFORMATICS
Office
Ca' Vignal 2,  Floor 1,  Room 58
Telephone
+39 045 802 7089
Mobile
+39 3204352533
Fax
+39 045 802 7068
E-mail
isabella|mastroeni*univr|it <== Replace | with . and * with @ to have the right email address.
Personal web page
http://profs.sci.univr.it/mastroeni/

Office Hours

Wednesday, Hours 2:30 PM - 4:30 PM,   Ca' Vignal 2, floor 1, room 58
Su appuntamento.

Curriculum

Il lavoro di ricerca di Isabella Mastroeni si focalizza su:
- Interpretazione astratta 
- Sicurezza
In particolare nella prima area, si occupa dello studio di semantiche di linguaggi di programmazione e tecniche di analisi statica che permettano di analizzare linguaggi di programmazione (inclusi i linguaggi di programmazione dinamici). 
Nell'ambito di sicurezza, la ricerca tocca vari ambiti:
- Sicurezza basata sui linguaggi, con particolare attenzione dei modelli e delle tecniche di analisi di proprietà di confidenzialità basati su non-interferenza;
- Rilevazione e riconoscimento di malware mediante lo studio di modelli che permettono di analizzare la similarità di codice, ovvero la similarità tra malware noti e loro evoluzioni;  
- Protezione del codice mediante offuscamento, che permette di rendere un codice incomprensibile mediante una manipolazione sintattica guidata dalle proprietà semantiche che si vogliono preservare del programma;
- Studio di tecniche di analisi di proprietà di sicurezza che permettono di prevenire attacchi basati sulla presenza di vulnerabilità di code injection.

Le sue pubblicazioni si concentrano maggiormente su riviste e conferenze internazionali del settore dei linguaggi di programmazione (POPL, ESOP, SAS, PEPM...), della sicurezza (TOPS, JCS,...) e degli aspetti formali dell'informatica (FACJ, TCS, MSCS,...).

Modules

Modules running in the period selected: 32.
Click on the module to see the timetable and course details.

Course Name Total credits Online Teacher credits Modules offered by this teacher
Master's degree in Computer Science and Engineering Analysis of information systems (2017/2018)   6  eLearning
Bachelor's degree in Computer Science Programming languages (2017/2018)   6  eLearning
Master's degree in Computer Science and Engineering Analysis of information systems (2016/2017)   6  eLearning
Bachelor's degree in Computer Science Foundations of Computing (2016/2017)   6  eLearning
Master's degree in Computer Science and Engineering Software security (2016/2017)   6  eLearning
Master's degree in Computer Science and Engineering Analysis of information systems (2015/2016)   6  eLearning
Bachelor's degree in Computer Science Foundations of Computing (2015/2016)   6  eLearning
Bachelor's degree in Computer Science Foundations of Computing (2014/2015)   6  eLearning
Bachelor's degree in Computer Science Languages and compilers (2014/2015)   12  eLearning LINGUAGGI
Master's degree in Computer Science and Engineering Systems security (2014/2015)   6  eLearning
Master's degree in Computer Science and Engineering Advanced Compilers (2013/2014)   6  eLearning
Bachelor's degree in Computer Science Foundations of Computing (2013/2014)   6     
Bachelor's degree in Computer Science Languages and compilers (2013/2014)   12  eLearning LINGUAGGI
Master's degree in Computer Science and Engineering Static analysis and code protection (2013/2014)   6     
Master's degree in Computer Science and Engineering Systems security (2013/2014)   6  eLearning
Master's degree in Computer Science and Engineering Advanced Compilers (2012/2013)   6   
Bachelor's degree in Computer Science Languages and compilers (2012/2013)   12    LINGUAGGI
Master's degree in Computer Science and Engineering Systems security (2012/2013)   6   
Master's degree in Computer Science and Engineering Systems security (2011/2012)   6   
Master's degree in Computer Science and Engineering Systems security (2010/2011)   6   
Master's degree in Computer Science and Engineering Systems security (2009/2010)   6   
Masters in Computer Science Computational Complexity (2008/2009)   5   
Bachelor in Computer Science (until 2008-2009 academic year) Algorithms and Data Structures (2007/2008)   10      Laboratorio
Bachelor's degree in Multimedia Information Technology (until 2008-2009) Algorithms and Data Structures (2007/2008)   10      Laboratorio
Masters in Computer Science Computational Complexity (2007/2008)   5   
Bachelor in Computer Science (until 2008-2009 academic year) Algorithms and Data Structures (2006/2007)   10    Laboratorio
Bachelor's degree in Multimedia Information Technology (until 2008-2009) Algorithms and Data Structures (2006/2007)   10    Laboratorio
Masters in Computer Science Computational Complexity (2006/2007)   5   
Level 1 Masters in Network Planning and Management Protocolli e ambienti per la sicurezza (2006/2007)   5     
Bachelor in Computer Science (until 2008-2009 academic year) Algorithms and Data Structures (2005/2006)   10    Laboratorio
Bachelor's degree in Multimedia Information Technology (until 2008-2009) Algorithms and Data Structures (2005/2006)   10    Laboratorio
Bachelor in Computer Science (until 2008-2009 academic year) Introduction to Programming [Cognomi A-P] (2005/2006)   12    Laboratorio

 

Research groups

SPY
Skills
Topic Description Research area
Static Analysis Study of techniques for the static analysis of programming languages. Inference of properties of the heap memory used by programs. Inference of security properties for information manipulated by computer programs. Ingegneria del software e sicurezza
Software and its engineering - Software organization and properties
Formal software and application security Development of models and analyses, based on abstract interpretation, for the security application verification and for security properties enforcement. Ingegneria del software e sicurezza
Security and privacy - Software and application security
Code protection Development of formal techniques and tools for the protection of software. Ingegneria del software e sicurezza
Security and privacy - Formal methods and theory of security
Program semantics Development of semantic models for characterizing security and analysis problems of programming languages Informatica teorica
Theory of computation - Semantics and reasoning
Code synthesis Study and development of techniques for the synthesis of code (or code transformers) from the specification of semantic code properties. Ingegneria del software e sicurezza
Software and its engineering - Software creation and management
Projects
Title Starting date
Abstract interpretation based analysis of Scripting Languages - Joint Projects 2014 12/1/14
Static analysis methods for the static derivation 6/5/13
Security Horizons 2/1/13
Combinazione di analisi e sintesi di programmi: co-generazione di astrazioni e raffinamenti per l'analisi e la sintesi di programmi (PRIN 2009 valutato positivamente ma non finanziato) 7/15/11
Shadowcode: code protection in .net by abstract and dynamic steganography - Joint Project 2007 3/12/09
Analisi du NUllness via weB Interattivo (ANUBI) - Joint Projects 2009 2/1/09
FUCSIA2008 - Obfuscation and Steganography by Abstract Interpretation 11/27/08
Modelli e tecniche di analisi formale per la sicurezza dei sistemi software (PRIN 2007) 9/22/08
FUCSIA2007 - Obfuscation and Steganography by Abstract Interpretation 3/26/08
Analisi statica e dinamica per la certificazione automatica di sicurezza di programmi (PRIN 2006) 2/9/07
Abstract interpretation and model checking for the verification of embedded systems 2/21/03
(CoVer) Constraint-based Verification of Reactive systems 12/1/02
Abstraction for verification 6/1/02
Abstract Interpretation, type systems and control-flow analysis 11/26/00