André Nascimento

My name is André Nascimento, and I am a PhD student in Computer Science and Engineering at Instituto Superior Técnico (IST), under the supervision of professors José Fragoso Santos and Nuno Santos.

I am also a junior researcher at INESC-ID, where I have contributed to national and European-funded projects, including DIVINA, SmartRetail, and WebCap. My research focuses on using formal methods to enhance the security and reliability of modern web technologies, namely by designing static and dynamic analyses for JavaScript.

I am an advocate for well-typed languages that are simple, intuitive, and secure, such as OCaml. I enjoy designing sound, scalable, and practical tools that allow developers to reason about their code and produce safer, higher-quality software.

News

Feb 18, 2026	I am back teaching Software Engineering to third-year BSc students at Instituto Superior Técnico.
Feb 03, 2026	I gave a talk at PL@LX Epsilon hosted by OutSystems titled: “How to Find and Exploit Vulnerabilities in Node.js Packages?” together with Filipe Marques.
Jan 12, 2026	I gave a talk at the Theory and Practice of Static Analysis (TPSA) workshop in POPL’26 titled: “How to Identify Security Vulnerabilities in Node.js Packages?” together with Filipe Marques.
Aug 02, 2025	I won fully-funded PhD scholarship, sponsored by Fundação para a Ciência e Tecnologia (FCT).
Mar 06, 2025	Our paper Automated Exploit Generation for Node.js Packages was accepted at PLDI’25.

Selected Publications

PLDI

Automated Exploit Generation for Node.js Packages

Filipe Marques, Mafalda Ferreira, André Nascimento, and 4 more authors

In Proceedings of the 46th ACM SIGPLAN Conference on Programming Language Design and Implementation, Jun 2025

DOI Bib PDF

@inproceedings{marques2025-explodejs,
  title = {Automated Exploit Generation for Node.js Packages},
  author = {Marques, Filipe and Ferreira, Mafalda and Nascimento, Andr\'{e} and Coimbra, Miguel E. and Santos, Nuno and Jia, Limin and Fragoso Santos, Jos\'{e}},
  booktitle = {Proceedings of the 46th ACM SIGPLAN Conference on Programming Language Design and Implementation},
  year = {2025},
  month = jun,
  journal = {Proc. ACM Program. Lang.},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  volume = {9},
  number = {Pldi},
  numpages = {26},
  doi = {10.1145/3729304},
  url = {https://doi.org/10.1145/3729304}
}

MSc Thesis

A Typed Intermediate Language for Specifying the ECMAScript Standard

André Nascimento

Instituto Superior Técnico, Nov 2023

Bib PDF

@mastersthesis{nascimento2023-tesl,
  title = {A Typed Intermediate Language for Specifying the ECMAScript Standard},
  author = {Nascimento, Andr\'{e}},
  year = {2023},
  month = nov,
  school = {Instituto Superior T\'{e}cnico},
  address = {Lisbon, Portugal},
  copyright = {embargoed-access}
}