José Alexandre D'Abruzzo Pereira

José D'Abruzzo Pereira holds a Ph.D. in Informatics Engineering (Architectures, Networks and Cybersecurity) from the University of Coimbra (UC), is currently an Assistant Professor at the University of Coimbra, and member of the Software and System Engineering (SSE) group at CISUC. His research interests include security and vulnerability detection, static code analysis, software project management, databases, software quality, cloud computing, and self-adaptive systems. He received a MSc in Information Technology and Software Engineering from the University of Coimbra and Carnegie Mellon University, and a BSc. in Computer Science from the State University of Campinas (Unicamp).

Room D3.4

• ORCID
• Ciencia Vitae
• LinkedIn
• Curriculo Lattes (in Portuguese)

Published Papers:

Journal Papers:

• IEEE Access 2023: A Model-Driven Approach for the Management and Enforcement of Coding Conventions - Elder Rodrigues Jr, José D'Abruzzo Pereira, Leonardo Montecchi
• IEEE Access 2021: Characterizing Buffer Overflow Vulnerabilities in Large C/C++ Projects

Conference Papers:

• LADC 2019: An Exploratory Study on Machine Learning to Combine Security Vulnerability Alerts from Static Analysis Tools (additional content found here);
• EDCC 2020: On the Use of Open-Source C/C++ Static Analysis Tools in Large Projects
• SEAMS 2020: A Platform to Enable Self-Adaptive Cloud Applications Using Trustworthiness Properties (Demo Paper)
• EDCC 2021: Machine Learning to Combine Static Analysis Alerts with Software Metrics to Detect Security Vulnerabilities: An Empirical Study (additional content found here)
• LADC 2022: On the Use of Deep Graph CNN to Detect Vulnerable C Functions
• PRDC 2022: A Software Vulnerability Dataset of Large Open Source C/C++ Projects
• ISSRE 2023: An Approach to Characterize the Security of Open-Source Functions using LSP
• LADC 2024: Mining Vulnerability and Code Repositories to Study Software Security

Workshop Papers:

• ISSRE-Workshops 2020 (Doctoral Symposium): Techniques and Tools for Advanced Software Vulnerability Detection
• SAFELIFE 2021: On Building a Vulnerability Dataset with Static Information from the Source Code

Other publications:

• Inforum 2021: A study on software engineering team dysfunctions: an experience report (Communication paper)
• Inforum 2022: An Experimental Study of Elasticity in Kubernetes HPA for Microservice Applications - João Ribeiro, José D'Abruzzo Pereira and Nuno Antunes
• Inforum 2023: Automated Software Vulnerability Collection for a Database with Static Information - João Rafael Henriques, José D'Abruzzo Pereira
• LADC 2022: On the use of the TMA Framework to promote self-adaptation capabilities in TalkConnect - José D'Abruzzo Pereira, João Ribeiro, João Pires, Pedro Moita, Nuno Laranjeiro, Marco Vieira (Fast Abstract)

Projects:

International Projects:

• ATMOSPHERE: Adaptive, Trustworthy, Manageable, Orchestrated, Secure, Privacy-assuring, Hybrid Ecosystem for REsilient Cloud Computing
• AIDA: Adaptive, Intelligent and Distributed Assurance Platform
• ADVANCE: Addressing Verification and Validation Challenges in Future Cyber-Physical Systems

Portuguese Projects:

• METRICS: Monitoring and Measuring the Trustworthiness of Critical Cloud Systems
• TalkConnect - Voice Architecture over Distributed Network
• NEXUS Innovation Pact - Digital and Green Transition for Transports, Logistics and Mobility
• AI Secure Software Development

Conference Scientific Committee:

• Artifact Evaluation Committee DSN 2025
• Technical Program Committee LADC 2025
• Program Committee SBES 2025
• External Reserch Committee USENIX ATC 2024
• Technical Program Committee LADC 2024
• Program Committee ReSAISE 2024
• Technical Program Committee WAFERS 2023

Other activities:

• Web Chair ISSRE 2025
• Web Chair SRDS 2024
• Web Chair ICPE 2023
• Web Chair ISSRE 2023

Course taught:

• Software Engineering (@UC)
• Databases (@UC)
• Design and Development of Secure Software (@UC)
• Introduction to Procedural Programming (@UC)
• Studio of Software Project (@UC)
• Distributed Systems (@UC)
• Data Management Systems (@UC)
• Advanced Programming in Java (@UC)
• Software Project Management (@Unicamp)
• Introduction to DevOps (@Unicamp)