Cookies Policy
The website need some cookies and similar means to function. If you permit us, we will use those means to collect data on your visits for aggregated statistics to improve our service. Find out More
Accept Reject
  • Menu
About

About

I work as an assistant professor at the Department of Informatics in the School of Engineering at the University of Minho. My main responsibility is teaching information security courses. Additionally, I am a senior researcher at INESC TEC where my research currently focuses on network security, energy-efficient communications, and non-authoritative identification systems.


Interest
Topics
Details

Details

  • Name

    João Marco
  • Role

    Senior Researcher
  • Since

    22nd December 2016
004
Publications

2024

A worldwide overview on the information security posture of online public services

Authors
Silva, JM; Ribeiro, D; Ramos, LFM; Fonte, V;

Publication
57th Hawaii International Conference on System Sciences, HICSS 2024, Hilton Hawaiian Village Waikiki Beach Resort, Hawaii, USA, January 3-6, 2024

Abstract

2023

Flexcomm Simulator: Exploring Energy Flexibility in Software Defined Networks with ns-3

Authors
Monteiro, RPC; Silva, JMC;

Publication
PROCEEDINGS OF THE 2023 WORKSHOP ON NS-3, WNS3 2023

Abstract
The digitalization of energy generation and distribution systems opens new opportunities for devising network operation and traffic engineering strategies capable of adapting to the energy availability and sources. Despite the potential, developing and testing new approaches are challenging in production environments. Furthermore, no simulators support such integration between the communication infrastructure and the power grid. Thus, this paper introduces Flexcomm Simulator, a tool based on ns-3 that supports developing and assessing multiple strategies toward green networking and communications driven by real-time information from the power grid (i.e., Energy Flexibility). The proof-of-concept results demonstrate this contribution's potential by implementing an energy-aware routing algorithm that adapts to real-world Energy Flexibility data in a Metropolitan Area Network (MAN). Also, it showcases the simulator's capacity to deal with large-scale simulations through MPI-based distributed environments.

2023

AGE: Automatic Performance Evaluation of API Gateways

Authors
Moreira, P; Ribeiro, A; Silva, JM;

Publication
Proceedings - IEEE Symposium on Computers and Communications

Abstract
The increasing use of microservices architectures has been accompanied by the profusion of tools for their design and operation. One relevant tool is API Gateways, which work as a proxy for microservices, hiding their internal APIs, providing load balancing, and multiple encoding support. Particularly in cloud environments, where the inherent flexibility allows on-demand resource deployment, API Gateways play a key role in seeking quality of service. Although multiple solutions are currently available, a comparative performance assessment under real workloads to support selecting the more suitable one for a specific service is time-consuming. In this way, the present work introduces AGE, a service capable of automatically deploying multiple API Gateways scenarios and providing a simple comparative performance indicator for a defined workload and infrastructure. The designed proof of concept shows that AGE can speed up API Gateway deployment and testing in multiple environments. © 2023 IEEE.

2022

Securing MPTCP Connections: A Solution for Distributed NIDS Environments

Authors
Meira, JP; Monteiro, RPC; Silva, JMC;

Publication
PROCEEDINGS OF THE 2022 47TH IEEE CONFERENCE ON LOCAL COMPUTER NETWORKS (LCN 2022)

Abstract
With continuous technological advancement, multihomed devices are becoming common. They can connect simultaneously to multiple networks through different interfaces. However, since TCP sessions are bound to one interface per device, it hampers applications from taking advantage of all the available connected networks. This has been solved by MPTCP, introduced as a seamless extension to TCP, allowing more reliable sessions and enhanced throughput. However, MPTCP comes with an inherent risk, as it becomes easier to fragment attacks towards evading NIDS. This paper presents a study of how MPTCP can be used to evade NIDS through simple cross-path attacks. It also introduces tools to facilitate assessing MPTCP-based services in diverse network topologies using an emulation environment. Finally, a new solution is proposed to prevent cross-path attacks through uncoordinated networks. This solution consists of a hostlevel plugin that allows MPTCP sessions only through trusted networks, even in the presence of a NAT.

2021

Towards a bottom-up approach to inclusive digital identity systems

Authors
Silva, JM; Fonte, V; Sousa, A;

Publication
ACM International Conference Proceeding Series

Abstract
The path towards the United Nations objective of providing legal identity for all, including free birth registrations, has been facing several challenges. Particularly, the diversity of social realities, limited ICT infrastructures, inadequate legal frameworks, and unstable political engagement have resulted in solutions highly fitted to a specific scenario, thus hard to be replicated in different regions. Paired with noncomprehensive public services of civil registration, these aspects impact the way identity records are created, stored and used by citizens in their daily interactions. To tackle these impairments, this work introduces IDINA, a non-authoritative approach aiming at a community-oriented identification system underpinned by relations of social trust, inclusiveness, and the use of cutting-edge accessible technologies. © 2021 Owner/Author.

Supervised
thesis

2022

Otimização de processos de amostragem de tráfego

Author
Joel Filipe Esteves Gama

Institution
UM

2022

Information security monitoring systems in digital and mobile identification environments

Author
Paulo Miguel Novais Gameiro

Institution
UM

2022

Análise de Problemas de Configuração e Conformidade em Infrastructure-as-Code

Author
Rafaela Maria Soares da Silva

Institution
UM

2021

Information security monitoring systems in digital and mobile identification environments

Author
Paulo Miguel Novais Gameiro

Institution
UM

2021

Automatic performance evaluation of API Gateways based on architectural models

Author
Pedro Miguel Braga Moreira

Institution
UM