Matthew Rossi

PhD Student - Università degli Studi di Bergamo

I am a passionate developer who loves working on projects that matter. I work as a PhD student at Università degli Studi di Bergamo and my research focuses on computer security, mostly investigating the integration of security features in mobile & cloud systems, policy management and privacy of outsourced data. I love to solve problems and engage with projects that require me to learn new things.

Work Experience

Università degli Studi di Bergamo

Researcher

2019 - Present

UniBG Security Lab is the Computer Security group at Università degli Studi di Bergamo. Research interests include cloud and mobile security, with particular focus on policies and access control.

  • Extended the use of SELinux in Android to support 3rd party app's specific policies
  • Extended the secure by default approach of the Deno runtime to native code execution
  • Developed a sanitization algorithm to achieve k-anonymity on large datasets with Apache Spark
  • Developed a secure indexing tool enabling query execution over encrypted datasets
  • Developed a protocol to deploy Time-Locks using Multi-Party Computation, threshold cryptography and smart contracts
  • Developed an encrypted virtual filesystem using Filesystem in Userspace (FUSE)
  • Developed a policy engine evaluating access requests based on an ODRL-like policy language
  • Supervised 20+ thesis students

Università degli Studi di Bergamo

Teaching Assistant

2019 - Present

Teaching assistant for the bachelor's courses: "Informatica (modulo di programmazione)" and "Basi di dati e Web", and the master's courses: "Advanced Data Management" and "Sicurezza dei sistemi informatici". Lectures of these courses are about:

  • Programming in Python
  • Database technologies & Web development
  • Access control & Sanboxing
  • Distributed data processing with Apache Spark

Education

Università degli Studi di Bergamo

Software Engineering

Ph.D. program in Engineering and Applied Sciences

2020 - Present
Subject Area: Mobile systems security & Privacy
Supervisor: Prof. Stefano Paraboschi

Politecnico di Milano

Software Engineering

Master of Science (MSc)

2015 - 2018
Thesis: Mandatory Access Control for Third-Party Apps
GPA: 3.85/4.0

Università degli Studi di Bergamo

Software Engineering

Bachelor of Science (BSc)

2012 - 2015
Thesis: Access control and confidentiality using over-encryption in Openstack
GPA: 4.0/4.0 - Graduated summa cum laude

ITIS P. Paleocapa

Technical High School

High School

2007 - 2012

Projects

SEApp: Bringing Mandatory Access Control to Android Apps

Design and implemention of a SELinux solution to extend the Android's SELinux implementation to support 3rd party app's defined policy. The repository provides a set of changes to the Android Open Source Project.

Anonymization in Apache Spark

A Dockerized Apache Spark-based version of Mondrian, a sanitization algorithm to achieve k-anonimity. This version of Mondrian is meant to perform sanitization over large datasets, and it is executed on an Apache Spark cluster with a varying number of executors.

Multi-Dimensional Flat Indexing for Encrypted Databases

A secure indexing tool enabling query execution over encrypted datasets. It preprocesses the dataset to construct client-side mappings and uses them to wrap the dataset accordingly. It shows their runtime use, by automating the upload of the encrypted dataset to PostgresSQL and Redis, and querying them.

FreyaFS - a Mix&Slice virtual filesystem

An encrypted virtual filesystem implemented on top of Filesystem in Userspace (FUSE) that persists data using the Mix&Slice all-or-nothing transform.

ODRL-like Policy Engine

A policy engine evaluating access requests based on an ODRL-like policy language. It includes a SQL front end to extract the targets needed to perform a given query and therefore automate the target identification on relational databases access requests.

Music Recommender

A recommender system to suggest songs a user would likely add to one of her playlists based on: other tracks in the same playlist, other playlists created by the same user and other playlists created by other users.

Il Dottore Artificiale

A simplified implementation of a rule-based expert system in the medical field, with the goal to filter diseases a patient may be suffering based on the symptoms she presents. A chatbot interacts with the patient by generating questions and parsing their answers with regular expressions.

Command Prompt Snake

An implementation of Snake for the Windows Command Prompt.

Challenges

Coding Challenges

I am passionate about code challenges since high school, when I took part at Olimpiadi Italiane di Informatica, a national event on problem solving with focus on algorithm time and space complexity. More recently I have participated to Google's Code Jam, Hash Code and Kick Start, and Reply Code Challenge.

Publications

Scalable Distributed Data Anonymization for Large Datasets

Transactions on Big Data (Early Access)

2022-09

Multi-dimensional indexes for point and range queries on outsourced encrypted data

GLOBECOM '21

2021-12

I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts

ARES '21

2021-08

SEApp: Bringing Mandatory Access Control to Android Apps

USENIX Security '21

2021-08

CSAW '21 Applied Research Competition Finalist

Scalable Distributed Data Anonymization

PerCom '21

2021-03

Artifact: Scalable Distributed Data Anonymization

PerCom '21

2021-03

Best Artifact Award

Skills

Programming

  • Python
  • Java
  • C/C++
  • Rust

Linux

  • Ubuntu
  • Regolith Linux

Security

  • SELinux
  • Landlock
  • seccomp-bpf
  • BPF

Privacy

  • k-anonymity
  • Differential Privacy
  • Fully homomorphic encyption

Engineering

  • Version Control
  • Databases

Distributed Systems

  • Apache Spark
  • Java Message Service
  • JAX-RS

DevOps

  • Docker
  • Docker Compose
  • Kubernetes

Languages

Italian

Native speaker

English

Fluent

Interests

Technology

Soccer

Travel

Videogames

References

available upon request