Having worked with web and mobile development, I've found my passion in backend systems engineering. I specialized in designing and building distributed systems at scale, creating robust solutions that handle millions of daily transactions.
Below are some of the recent technology I've been working with:
Programming Languages
Clojure
Java
Go
C#
Python
Development Paradigms
Microservices & Event-Driven Architecture
API Design & Development
Object-Oriented Programming (OOP)
Functional Programming
Databases & Data
DynamoDB
Datomic
Oracle
MySQL
Apache Kafka
Infrastructure & Monitoring
Kubernetes
Grafana
Prometheus
AWS
Researcher
I obtained my M.Sc. on Computer Science from CIn-UFPE. As a researcher, I was part of a
joint-effort project between US and Brazil addressing security problems on the Internet of Things (IoT). For more information, please refer to the official web page of the project.
Below are some of the work I was involved with:
Targeting IoT applications,
FlowFence is a
framework built for development of secure IoT applications on the Android platform.
Under supervision of Prof. Atul Prakash at the University of Michigan (UMICH), I've extended the FlowFence framework to support protection of sensitive UI data and network requests on Android apps*.
As a visiting scholar on the University of Illinois at Urbana-Champaign (UIUC) and under supervision of Prof. Darko Marinov, we did a comprehensive analysis of mobile apps responsible for controlling the Top 100 best-selling IoT devices
on Amazon to assess whether those apps contained potential
vulnerabilities in terms of security and privacy. To our surprise, we found that most of these apps
could be leveraged to create attacks and exploit the smart devices*.
*Published paper can be seen here. A CoRR extended version can be found here.
We proposed a security system that leverages a traditional autonomic computer architecture originally introduced by IBM (MAPE-K) to detect attacks on IoT infrastructures via Complex Event Processing (CEP) rules. The system acts on all TCP/IP network layers, promoting extensibility and a multilayer defense against both traditional and new attacks*.
