Nuno Santos

Phone: +351 21 3100 213

Distributed, Parallel and Secure Systems
Rua Alves Redol 9, Room 503
1000-029 Lisbon, Portugal


I am an Associate Professor from the Department of Computer Science and Engineering (DEI) at Instituto Superior Técnico (IST), University of Lisbon. I also serve as a senior researcher at INESC-ID Lisbon, where I'm an active member of the Distributed, Parallel and Secure Systems (DPSS) group. Within this group, I lead the SysSec team, focusing on systems security and privacy. I received my Ph.D. degree in 2013 from the Max Planck Institute for Software Systems (MPI-SWS) in affiliation with Saarland University under the supervision of Rodrigo Rodrigues and Krishna P. Gummadi. In 2010, I interned at Microsoft Research Redmond. Later in 2018, I spent a sabbatical at the Vrije Universiteit Amsterdam with the Systems and Network Security Group (VUSec). My research has been published in top security and systems venues, such as Usenix Security, S&P, CCS, NDSS, ASPLOS, and SIGMOD. I’ve served as a PC member in top security venues, including CCS in 2021, 2022, and 2023, Usenix Security in 2023 and 2024, and ASIACCS in 2014 and 2023. I’ve been awarded the Teaching Excellence Award multiple times for my course on digital forensics, and the IST Outstanding Teaching Award in 2019/2020.

[ Full Publication List | Citations | CienciaVitae]

Research & Teaching

My research interests lie in the field of computer and networked systems security. To learn more about my research and teaching activities, please follow these links: research, teaching.

Selected Publications

NDSS 2024 Flow Correlation Attacks on Tor Onion Service Sessions with Sliding Subset Sum
Daniela Lopes, Jin-Dong Dong, Daniel Castro, Pedro Medeiros, Diogo Barradas, Bernardo Portela, João Vinagre, Bernardo Ferreira, Nicolas Christin, Nuno Santos
[paper] [repo]
IEEE Transactions on Reliability 2023 Study of JavaScript Static Analysis Tools for Vulnerability Detection in Node.js Packages
Tiago Brito, Mafalda Ferreira, Miguel Monteiro, Pedro Lopes, Miguel Barros, José Fragoso Santos, Nuno Santos
S&P 2023 RuleKeeper: GDPR-Aware Personal Data Compliance for Web Frameworks
Mafalda Ferreira, Tiago Brito, José Fragoso Santos, Nuno Santos
USENIX Security 2022 ReZone: Disarming TrustZone with TEE Privilege Reduction
David Cerdeira, José Martins, Nuno Santos, Sandro Pinto
SIGMOD 2022 Secure and Policy-Compliant Query Processing on Heterogeneous Computational Storage Architectures
Harshavardhan Unnibhavi, David Cerdeira, Antonio Barbalace, Nuno Santos, Pramod Bhatotia
NDSS 2021 FlowLens: Enabling Efficient Flow Classification for ML-based Network Security Applications
Diogo Barradas, Nuno Santos, Luís Rodrigues, Salvatore Signorello, Fernando Ramos, André Madeira
CCS 2020 Poking a Hole in the Wall: Efficient Censorship-Resistant Internet Communications by Parasitizing on WebRTC
Diogo Barradas, Nuno Santos, Luís Rodrigues, Vítor Nunes
[paper] [code] [talk] [teaser] [poster]
S&P 2020 SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems
David Cerdeira, Nuno Santos, Pedro Fonseca, Sandro Pinto
ACM Computing Surveys 2019 Demystifying Arm TrustZone: A Comprehensive Survey
Sandro Pinto, Nuno Santos
USENIX Security 2018 Effective Detection of Multimedia Protocol Tunneling using Machine Learning
Diogo Barradas, Nuno Santos, Luís Rodrigues
[paper] [code]
PoPETS 2017 DeltaShaper: Enabling Unobservable Censorship-resistant TCP Tunneling over Videoconferencing Streams
Diogo Barradas, Nuno Santos, Luís Rodrigues
[paper] [code]
ASPLOS 2014 Using ARM TrustZone to Build a Trusted Language Runtime for Mobile Applications
Nuno Santos, Himanshu Raj, Stefan Saroiu, Alec Wolman
USENIX Security 2012 Policy-Sealed Data: A New Abstraction for Building Trusted Cloud Services
Nuno Santos, Rodrigo Rodrigues, Krishna P. Gummadi, Stefan Saroiu
[paper] [slides]
HotCloud 2009 Towards Trusted Cloud Computing
Nuno Santos, Krishna P. Gummadi, Rodrigo Rodrigues
[paper] [slides]

Recent, current, and upcoming service

  • SysTEX @ IEEE SP 2024: Program Committee Co-Chair
  • USENIX Security 2024, 2023: Program Committee
  • CCS 2023, 2022, 2021: Program Committee
  • ASIACCS 2023, 2014: Program Committee
  • INFORUM 2023, 2022, 2021, 2019, 2018, 2016, 2015: Program Committee
  • DINPS @ ICDCS 2022: Program Committee
  • BlockTEE @ DisCoTec 2022: Program Committee
  • DPSC 2022, 2021, 2020: Program Committee
  • CCGrid 2021: Program Committee
  • DI2F @ IFIP Networking 2021: Program Committee Co-Chair
  • Eurosys 2021: Doctoral Workshop Committee
  • Middleware 2020: Doctoral Symposium Committee
  • SECRYPT 2020, 2019, 2018, 2017, 2016: Program Committee
  • ISOC.PT ANRW 2020: Program Committee
  • CRYPTACUS Training School 2018: Organization Committee
  • INFORUM 2017: Track Co-Chair
  • INFORUM 2016: Track Chair
  • TRUDEVICE Training School 2014: Organization Committee
  • OSDI 2014 Poster Session: Program Committee