Marco Pistoia

Marco Pistoia

New York, New York, United States
19K followers 500+ connections

Activity

19K followers

See all activities

Experience

  • IonQ Graphic
  • -

    New York City Metropolitan Area

Education

Licenses & Certifications

  • JPMorgan Chase Prolific Inventor Graphic

    JPMorgan Chase Prolific Inventor

    JPMorgan Chase & Co.

    Issued
  • IBM Certified Open Source Strategic Commotter Graphic

    IBM Certified Open Source Strategic Commotter

    IBM

    Issued
  • Master Inventor

    -

Publications

  • Privacy Analysis of Android Apps: Implicit Flows and Quantitative Analysis

    In Proc. 14th International Conference on Computer Information Systems and Industrial Management, CISIM 2015, Warsaw, Poland, September 24-26, 2015. Lecture Notes in Computer Science 9339, Springer 2015, pag. 3-23. ISBN 978-3-319-24368-9

    A static analysis is presented, based on the theory of abstract interpretation, for verifying privacy policy compliance by mobile applications. This includes instances where, for example, the application releases the user’s location or device ID without authorization. It properly extends previous work on datacentric semantics for verification of privacy policy compliance by mobile applications by (i) tracking implicit information flow, and (ii) performing a quantitative analysis of information…

    A static analysis is presented, based on the theory of abstract interpretation, for verifying privacy policy compliance by mobile applications. This includes instances where, for example, the application releases the user’s location or device ID without authorization. It properly extends previous work on datacentric semantics for verification of privacy policy compliance by mobile applications by (i) tracking implicit information flow, and (ii) performing a quantitative analysis of information leakage. This yields to a novel combination of qualitative and quantitative analyses of information flows in mobile applications.

    See publication
  • Enabling Bring-Your-Own-Device Using Mobile Application Instrumentation.

    BM Journal of Research and Development: Volume 57, Issue 6 (2013), Page 7:1 - 7:11.

    Many enterprises are investigating Bring-Your-Own-Device (BYOD) policies, which allow employees to use their personal devices in the workplace. This has led to mixed-use scenarios, where consumer and enterprise software are installed on the same device. In this paper, we describe the Secured Application Framework for Enterprise (SAFE), a comprehensive system for enabling BYOD that allows enterprise and consumer applications to coexist side-by-side on the device. Rather than partition the device…

    Many enterprises are investigating Bring-Your-Own-Device (BYOD) policies, which allow employees to use their personal devices in the workplace. This has led to mixed-use scenarios, where consumer and enterprise software are installed on the same device. In this paper, we describe the Secured Application Framework for Enterprise (SAFE), a comprehensive system for enabling BYOD that allows enterprise and consumer applications to coexist side-by-side on the device. Rather than partition the device by profiles, SAFE embeds enterprise functions in each enterprise application; this allows for a seamless user experience and minimal intrusiveness on the part of the enterprise. We describe the SAFE toolset that implements the embedding of the SAFE instrumentation layer, and then provide an overview of several enterprise features that can be configured using SAFE. Specifically, we describe modeling for analytics, testing and replay, anomaly detection, and cloud data services, all enterprise features that can transparently be added to mobile applications.

  • Modular String-Sensitive Permission Analysis with Demand-Driven Precision

    International Conference on Software Engineering (ICSE)

  • The Case for Analysis Preserving Language Transformation

    International Symposium on Software Testing and Analysis (ISSTA)

Patents

  • Automatic optimization of string allocations in a computer program

    Issued US 8,473,899

    Access is obtained to an input object-oriented computer program. In the input object-oriented computer program, semantically equivalent objects are identified, which exist in different memory locations. If at least one of: a number of occurrences for the semantically equivalent objects exceeds a first threshold value, the threshold value being at least two; and a number of equality tests on the semantically equivalent objects exceeds a second threshold value, then a further step includes…

    Access is obtained to an input object-oriented computer program. In the input object-oriented computer program, semantically equivalent objects are identified, which exist in different memory locations. If at least one of: a number of occurrences for the semantically equivalent objects exceeds a first threshold value, the threshold value being at least two; and a number of equality tests on the semantically equivalent objects exceeds a second threshold value, then a further step includes identifying an application program interface to reduce the semantically equivalent objects to a single object in a single memory location.

    See patent
  • INCREMENTAL STATIC ANALYSIS

    Filed US 12/873,219

    A system, method and computer program product for incremental static analysis, including a change impact analyzer for identifying a changed portion of a computer software (e.g., an application), where the changed portion was changed subsequent to performing a static analysis on the application, a static analysis result invalidator for invalidating any static analysis result that is dependent on the changed portion, and an incremental static analyzer for performing a first incremental static…

    A system, method and computer program product for incremental static analysis, including a change impact analyzer for identifying a changed portion of a computer software (e.g., an application), where the changed portion was changed subsequent to performing a static analysis on the application, a static analysis result invalidator for invalidating any static analysis result that is dependent on the changed portion, and an incremental static analyzer for performing a first incremental static analysis on at least the changed portion, presenting the results of the first incremental static analysis, receiving a request to provide additional information regarding a selected result of the first incremental static analysis, performing, responsive to receiving the request, a second incremental static analysis on any portion of the application to gather the additional information, and presenting results of the second incremental static analysis, thereby providing the additional information regarding the selected result of the first incremental static analysis.

    See patent

View Marco’s full profile

  • See who you know in common
  • Get introduced
  • Contact Marco directly
Join to view full profile

Other similar profiles

Explore top content on LinkedIn

Find curated posts and insights for relevant topics all in one place.

View top content

Add new skills with these courses