Ioannis Papagiannis

Contact Me

Projects @Meta

I love the space of privacy/security/abuse prevention and I've been involved in many projects in the area while at Meta. Some examples:

User Data Deletion and Retention
Data Access tooling, such as Download Your Information
Data Portability tooling, such as the Data Transfer Project
Privacy Policy and Transparency
Cookies, and their handling
End to End Encryption in Messenger
Link shimming
Text Clustering and Cluster Classification for Abuse Prevention

Recently I also started dipping into non-Privacy areas, e.g. Accessibility.

Academic Life

I got my PhD on web application security from Imperial College London in 2013. My PhD thesis was on taint tracking, a technique to secure applications by monitoring data propagation at runtime.

I come from Athens, Greece. I graduated from the Electrical and Computer Engineering Department of the National Technical University of Athens.

Peer-Reviewed Publications

Gabriela Jacques-Silva, Evangelia Kalyvianaki, Katriel Cohn-Gordon, Adham Meguid, Huy Nguyen, Danny Ben-David, Carl Nayak, Varun Saravagi, George Stasa, Ioannis Papagiannis, David Taieb, Kalkidan Tamirat, Haiyang Wu, Bo Xi, Taining Zhang, Qi Zhou, "Unified Lineage System: Tracking Data Provenance at Scale", SIGMOD '25, Berlin, Germany, August 2025.
pdf
Will Shackleton, James Gill, Luke Petre, Katriel Cohn-Gordon, Nachiappan Nagappan, Giorgi Megreli, Peter C. Rigby, Karim Nakad, Patrick Riggs, Rui Abreu, Ioannis Papagiannis, James Saindon, "Dead Code Removal at Meta: Automatically Deleting Millions of Lines of Code and Petabytes of Deprecated Data", ACM Foundations of Software Engineering (ESEC/FSE). December 2023.
pdf
Katriel Cohn-Gordon, Georgios Damaskinos, Divino Neto, Joshi Cordova, Benoît Reitz, Benjamin Strahs, Daniel Obenshain, Paul Pearce, Ioannis Papagiannis, "DELF: Safeguarding deletion correctness in Online Social Networks", Usenix Security, Online, August 2020.
pdf
Paul Marinescu, Chad Parry, Marjori Pomarole, Yuan Tian, Patrick Tague, Ioannis Papagiannis "IVD: Automatic Learning and Enforcement of Authorization Rules in Online Social Networks", IEEE Security & Privacy, San Jose, CA, May 2017.
pdf | bib
Ioannis Papagiannis, Pijika Watcharapichat, Divya Muthukumaran and Peter Pietzuch, "BrowserFlow: Imprecise Data Flow Tracking to Prevent Accidental Data Disclosure", IEEE/ICFP/ACM Middleware 2016, Trento, Italy, December 2016.
pdf | bib
Jean Bacon, David Eyers, Thomas Pasquier, Jatinder Singh, Ioannis Papagiannis and Peter Pietzuch, "Information Flow Control for Secure Cloud Computing", IEEE Transactions on Network and Service Management, 2014.
pdf | bib
Ioannis Papagiannis, "Practical and Efficient Runtime Taint Tracking", PhD Thesis, Imperial College London, February 2013. Examiners: Herbert Bos, Alexander Wolf
pdf | bib
Ioannis Papagiannis and Peter Pietzuch, "CloudFilter: Practical Control of Sensitive Data Propagation to the Cloud", ACM Cloud Computing Security Workshop (CCSW12), Raleigh, NC, USA, October 2012.
pdf | bib | slides
Petr Hosek, Matteo Migliavacca, Ioannis Papagiannis, David M. Eyers, David Evans, Brian Shand, Jean Bacon, and Peter Pietzuch, "SafeWeb: A Middleware for Securing Ruby-based Web Applications", IEEE/ICFP/ACM Middleware 2011, Lisbon, Portugal, December 2011.
pdf | bib
Ioannis Papagiannis, Matteo Migliavacca, and Peter Pietzuch, "PHP Aspis: Using Partial Taint Tracking To Protect Against Injection Attacks", USENIX Conference on Web Application Development (WebApps), Portland, OR, USA, June 2011
pdf | bib | poster | slides | github
Matteo Migliavacca, Ioannis Papagiannis, David M. Eyers, Brian Shand, Jean Bacon, and Peter Pietzuch, "Distributed Middleware Enforecement of Event Flow Security Policy", IEEE/ICFP/ACM Middleware 2010, Bangalore, India, December 2010.
pdf | bib
Matteo Migliavacca, Ioannis Papagiannis, David M. Eyers, Brian Shand, Jean Bacon, and Peter Pietzuch, "DEFCon: High-Performance Event Processing with Information Security", USENIX Annual Technical Conference (USENIX ATC), Boston, MA, USA, June 2010.
pdf | bib
Ioannis Papagiannis, Matteo Migliavacca, David M. Eyers, Brian Shand, Jean Bacon, and Peter Pietzuch, "Enforcing User Privacy in Web Applications using Erlang", IEEE Web 2.0 Security and Privacy, Oakland, CA, USA, May 2010.
pdf | bib | slides
Kuen Hung Tsoi, Ioannis Papagiannis, Matteo Migliavacca, Wayne Luk, and Peter Pietzuch, "Accelerating Publish/Subscribe Matching on Reconfigurable Supercomputing Platforms", Many-Core and Reconfigurable Supercomputing Conference (MRSC), Rome, Italy, April 2010.
pdf | bib
Dimosthenis Kyriazis, Konstantinos Tserpes, Ioannis Papagiannis, Kleopatra Konstanteli, and Theodora Varvarigou, "A QoS-Based Selection Mechanism Exploiting Business Relationships in Workflows", Geocon 2009, August 2009, Delft, The Netherlands.
pdf
Ioannis Papagiannis, Jean Bacon, David Eyers, Matteo Migliavacca, Peter Pietzuch, and Brian Shand, "PrivateFlow: Decentralised Information Flow Control in Event Based Middleware (Demo)", 3rd ACM International Conference on Distributed Event-Based Systems (DEBS), Nashville, TN, USA, July 2009.
pdf
Ioannis Papagiannis, Dimosthenis Kyriazis, Magdalini Kardara, Vassiliki Andrinikou and Theodora Varvarigou, "Business Relationships in Grid Workflows" Geocon 2008, August 2008, Gran Canaria, Spain.
pdf