Lyee Methodology Mohamed Mejri & Bchir Ktari Computer Science - - PowerPoint PPT Presentation

Lyee Methodology

Mohamed Mejri & Béchir Ktari Computer Science Department Laval University Quebec Canada

Agenda

Introduction Expertise

Projects Interest

Collaboration Conclusion

Introduction

Expertise

Languages, Semantics and Formal Methods Static and dynamic analysis of code Advanced compilation techniques:

Certified Compilation Typing etc.

Computer Security

Specification and analysis of cryptographic

protocols and e-commerce protocols

Malicious code detection

Network Level Application Level Correct cryptographic protocols Dynamic analysis / Monitoring

Projects

Static analysis Self-certified code Correct e-commerce protocols Intrusion Detection

Projects: Dymna

Dymna (cryptographic and e-commerce protocols

analysis)

Theory: logic, typing system, model-checking, abstract

interpretation, rewriting, etc.

Practice: A tool delivered to CSE (Canadian Security

Establishment)

Distinctions: Many articles in international conferences

and Journal

Collaboration: Standfort University (John Mitchel)

Dymna Inputs

Dymna Outputs

Projects: MaliCOTS

MaliCOTS (Detection of Malicious Code)

Theory: logic, semantics, model-checking, certified

compilation, static and dynamic analysis, etc.

Practice: Three tools delivered to CRDV Distinctions:

Thee Canadian prices:TechnoFed’2000, OCTAS’2001 et

CIPA’2001

Many technical reports and articles

Collaboration: Research Center CRDV.

MaliCOTS: Security Policy

Never do send after read(f).

Automata

start

read(f)

has_read

send() read(f)

– Logic (µ-calculus) Always( [ read(f) ] never( do( send ) ) )

bad

send()

νX.[read(f)](¬µY.<send>tt ∨ <all>Y) ∧ [all]X

MaliCOTS: SPCheck

MaliCOTS: SPCheck

Interest

Software Engineering:

Formal methods used to:

Specify, Implement, and Verify a software.

Programming Languages:

Syntax, semantics Different paradigms: procedural, functional, parallel,

• bject oriented, etc.

Compilation Techniques:

Proof Carrying Code, etc.

Computer Security

Collaboration

Collaboration

A deep Studying of the Lyee Methodology:

Compare Lyee with other methodologies Identify more beneficial features of Lyee methodology Identifying some sub-projects in order to

Formalize, simplify, or/and ameliorate (if

necessarily) some aspects of the methodology to make it more user-friendly

Develop some new modules for LyeeAll to address

• ther important aspects that are not handled yet

Collaboration

Evaluate the methodology at different aspects

Suitable for modularity: develop complex system

from small and simple ones

Suitable for hierarchical description: allows both

low level and high level description

Suitable for formal validation and verification

A proof that the program complies with security policies

Easiness to learn and use: requirement skills of

the users

Suitable for which kind of application Suitable for maintenance: Y2K problem Etc.

Collaboration

Program (Any Language) Legacy Lyee Structures LyeeAll Requirements (words, definitions conditions) LyeeBelt Program (Any Language)

Collaboration

Program (Any Language) Legacy Lyee Structures LyeeAll Requirements (words, definitions conditions) LyeeBelt Program (Any Language) LyeeParallel Parallel Program

Project I

Collaboration

PVM (Parallel Virual Machine)

P= P

1||

…|| P

n

PVM PVM PVM PVM PVM PVM P

1

P

2

P

3

P

4

P

4

P

n

Network

LyeeParallel Lyee Structures

Collaboration

Program (Any Language) Legacy Lyee Structures LyeeAll Requirements (words, definitions conditions) LyeeBelt Program (Any Language) LyeeOptimizer Optimized Program

Project 2

Collaboration

Program LyeeOptimizer Optimized Program

E= D+ 2* C D= C+ A+ B C= A+ B B= 2* A A= 1 A= 1 B= 2* A C= A+ B D= C+ A+ B E= D+ 2* C

Begin Iterate Begin Iterate

Collaboration

Program (Any Language) Legacy Lyee Structures LyeeAll Requirements (words, definitions conditions) LyeeBelt Program (Any Language) LyeeVerifier Reports

Project 3

Business Policies

Collaboration

Program (Any Language) Legacy Lyee Structures LyeeAll Requirements (words, definitions conditions) LyeeBelt Program (Any Language) LyeeAnalyser

(Equivalence, Profiling, etc.)

Reports

Project 4

Collaboration

State of the art

Studying Evaluate

LyeeParallel Etc.

I dentifying sub-projects

Compare

LyeeOptimizer LyeeVerifier LyeeAnalyzer

Collaboration

Contributions

Theoretical aspects: Articles, Conferences, etc. Practical aspects: Tools, prototypes, etc. Documentation: Technical reports , etc. Scientific exchanges : Meeting, seminaries,

presentations, etc.

High qualified students

A working group on Lyee Methodology

Conclusion

Lyee Methodology

Our feeling

Toward a promising methodology: Good ideas behind the

methodology

A lot of works are need to be done to show the power of

this methodology

Collaboration

We are motivated to participate on this methodology We believe that we can bring a significant contribution

• n this methodology