I am an Assistant Researcher at INESC TEC (DSR HASLab group) and an Invited Assistant Professor at University of Minho. My research focuses on diagnosing and benchmarking distributed and data-centric applications, as well as enhancing systems security and data privacy.

Much of my recent work builds on eBPF, both to observe and diagnose systems with low overhead and to extend eBPF itself for performance tuning and security.

News

Sep 2026My PhD student Carlos Machado presented our poster Context Matters: Expanding the Potential of eBPF at the eBPF’26 workshop, co-located with SOSP’26.
Jul 2026Gave an invited talk at OWASP Porto Meet #12 – Cerberus, sharing what we have learned about ransomware behavior and how to build more resilient defenses.
Jul 2026🏆 Very proud of my PhD student Bruno Pereira, who won the Best Presentation Award at WORMA’26 (co-located with EuroS&P) for our work It Works on My Machine.
May 2026Started working on INOCULUM, a new project on storage systems designed so that ransomware cannot destroy critical data.
Apr 2026Gave hands-on Docker and Kubernetes workshops to students at ENEI’26 (National Meeting of Informatics Students), together with João Paulo.

All news →

Selected Publications

  1. journal When amnesia strikes: Understanding and reproducing data loss bugs with fault injectionRamos, M., Azevedo, J., Kingsbury, K., Pereira, J., Esteves, T., Macedo, R., & Paulo, J.Proceedings of the VLDB Endowment (PVLDB).

  2. conference CRIBA: A Tool for Comprehensive Analysis of Cryptographic Ransomware’s I/O BehaviorEsteves, T., Pereira, B., Oliveira, R. P., Marco, J., & Paulo, J.In 42nd International Symposium on Reliable Distributed Systems (SRDS’23). IEEE

  3. conference CAT: Content-aware tracing and analysis for distributed systemsEsteves, T., Neves, F., Oliveira, R., & Paulo, J.In 22nd International Middleware Conference (Middleware’21).

All publications →

Ongoing Projects

INOCULUM — Boosting the Immunity of Storage Systems Against Ransomware

Rescueware — Intelligent and Self-configurable Cybersecurity and Data Recovery for Ransomware Resilience

BringTrust — Strengthening CI/CD Pipeline Cybersecurity and Safeguarding the Intellectual Property

All projects →