News: Data- och informationsteknikhttp://www.chalmers.se/sv/nyheterNews related to Chalmers University of TechnologyMon, 20 Jan 2020 13:15:52 +0100http://www.chalmers.se/sv/nyheterhttps://www.chalmers.se/en/departments/cse/news/Pages/Password-change-day.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/Password-change-day.aspxPassword change day – how to act<p><b>​Hello there Andrei Sabelfeld, Professor at the division of Information Security at Chalmers. January 20, is the annual Password Change Day set to remind us to review and change login to our Internet accounts. We often hear reports of leaked login information, hijacked accounts and are urged to choose a safe password. So how can we keep our accounts secure online?</b></p><strong>​</strong><span style="background-color:initial"><strong>What constitutes a good password?</strong></span><div>A good password is both difficult to guess for someone else and difficult to detect with a password cracker but it’s at the same time easy for the user to remember. Tools for cracking passwords usually test typical patterns using common words in different languages, common passwords and passwords that have leaked before, so those are important factors to consider when choosing a new password.</div> <div>There are various password meters for evaluating passwords, but one should be careful not to share sensitive password information for evaluation by a third party online.</div> <img src="/SiteCollectionImages/Areas%20of%20Advance/Information%20and%20Communication%20Technology/News%20events/CM/AndreiSabelfeld_170x220px.jpg" class="chalmersPosition-FloatRight" alt="" style="margin-right:10px" /><div><br /></div> <div><strong>Why change my password?</strong></div> <div>Unfortunately, password information is often breached. The list is long on companies and authorities, including Sony and Sega, where users' passwords have been leaked and circulated online. Therefore, it is important to change passwords sometimes.</div> <div><br /></div> <div><strong>How often should I change it?</strong></div> <div>It is good to change passwords every now and then, but at the same time you should not change them too often. It is not uncommon that guidelines tell us to change passwords, say every 90 days, but that can be quite confusing for the user. A rule of thumb is to change at least one, but preferably a few times a year and really consider your choice of password so that you can easily remember it, even after changing.</div> <div><br /></div> <div><strong>The security firm Splashdata has listed people's worst passwords, based on millions of leaked and scattered data. The 2019 list is topped by: &quot;123456&quot;, &quot;123456789&quot; and &quot;qwerty&quot;. In fourth place comes “Password”. What do you say about such passwords?</strong></div> <div>Unfortunately, it proves that users sometimes don't care about making stronger passwords. In addition, this shows that it is not always a good idea to rely on password-based authentication mechanisms.</div> <div><br /></div> <div><strong>Many people use the same password for multiple accounts. What is your word on that?</strong></div> <div>The problem with using the same password for multiple accounts is that leaked information about one account is enough to access other accounts with the same password. Different accounts may have different security requirements. Here, your email account is especially important. Because if the attacker manages to access an e-mail account, it is enough to reset the passwords of all accounts linked to that e-mail address. Therefore, one should take passwords for email account especially seriously.</div> <div><br /></div> <div><strong>What do you think about using a password manager?</strong></div> <div>One advantage is that password managers are good at generating strong passwords that the user does not need to remember. At the same time, some of the password managers have been susceptable to attacks. Therefore, one should be careful when choosing a password manager and make sure it is secure. There are both built-in password managers in most browsers and separate password managers that work on different devices.</div> <div><br /></div> <div><strong>To summarize, please give me your three best tips for my new passwords today?</strong></div> <div><ol><li>Try to avoid password-based authentication when possible. Use multifactor authentication, where instead of relying only on a single password, you present different proofs (factors) of your identity to log in. Such factors can be about something you know (for example, a password) combined with something you have (for example, a credit card) or something you are (for example, your fingerprint). Multifactor authentication is already widely used by, for example, the banks, which for their Internet services require either a bank card reader with a PIN code or a registered smartphone with software (Mobile Bank ID), which also requires a PIN code.</li> <li>If you do need a password, make sure to use a secure password manager.</li> <li>If you must come up with your own password, there are techniques to improve security. You often get the advice to use capital letters and special symbols, but such a password can be difficult to remember. One trick is to make up your own rule based on a phrase that is easy to remember. For example, you can pick the first letters of the words from a line in a song that is special to you and combine them with a few special symbols.</li></ol></div> <div><br /></div> <div>Text: Helena Österling af Wåhlberg<br />Photo: Pixabay/Anneli Andersson</div>Mon, 20 Jan 2020 08:00:00 +0100https://www.chalmers.se/en/departments/cse/news/Pages/Thorsten-Berger-awarded-Wallenberg-Academy-Fellow.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/Thorsten-Berger-awarded-Wallenberg-Academy-Fellow.aspxThorsten Berger awarded Wallenberg Academy Fellow<p><b>​Developing complex software for vehicles, telephones, computers or apps, requires managing many different versions or variants of the software. As a Wallenberg Academy Fellow Thorsten Berger will develop methods and tools for the next generation of version control systems that facilitate the age of continuous software development and artificial intelligence.</b></p>​<p><img src="/SiteCollectionImages/Institutioner/DoIT/News/191203_berger-thorsten-foto-markus-marcetic-239px.jpg" alt="Thorsten Berger. Photo: Markus Marcetic." class="chalmersPosition-FloatRight" style="margin:5px;width:200px;height:280px" />Thorsten Berger at the Department of Computer Science and Engineering, along with 28 other young researchers, has been awarded the <a href="https://kaw.wallenberg.org/en/wallenberg-academy-fellows">Wallenberg Academy Fellow</a>. The grant will facilitate for young researchers in Sweden to make important scientific breakthroughs by obtaining long-term research funding. As a Wallenberg Academy Fellow, Thorsten Berger will create a modern and digital system for handling different versions of software.</p> <p>– I am deeply honored to receive this award, says Thorsten Berger. I would like to take this opportunity to thank all my students and collaborators who contributed to the body of knowledge we established together in this area. I hope my research provides new perspectives on software evolution and contributes to building the software engineering methods and tools of the future.</p> <h2>Software development deeply dependent on version control systems</h2> <p>Software for modern technology is always under development and as such has become a multimillion-dollar industry. Large web hosting companies store source code and offer version control systems, which manage software versions and variants so that innovators can experiment and develop new ideas.</p> <h2>Today's system has to be handled manually</h2> <p>However, a major problem with current version control systems is that they are built upon old structures that were developed in the 1970s. The source code must be copied and saved manually in files and folders. This practice is time-consuming and hardly compatible with modern software development, in which programs are continuously improved, sometimes using artificial intelligence where the machine creates the code itself.</p> <h2>Methods and tools for the next generation of version control systems</h2> <p>Associate Professor Thorsten Berger from the Department of Computer Science and Engineering, will develop a new theory of software evolution as well as methods and tools for the next generation of version control systems. He will reuse the good elements from the contemporary systems and combine them with modern methods from software synthesis and software product lines, in which the software is flexibly put together from a number of different features. The aim is to create a version control system for modern technology that undergoes continuous change.</p> <p><br /></p> <p>Photo: Markus Marcetic</p> <p><br /></p> <p><strong>The Department of Computer Science and Engineering is shared between Chalmers University of Technology and University of Gothenburg.</strong><br /></p> Tue, 03 Dec 2019 12:00:00 +0100https://www.chalmers.se/en/departments/cse/news/Pages/CSE-students-show-the-invisible-at-Universeum.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/CSE-students-show-the-invisible-at-Universeum.aspxCSE students show the invisible at Universeum<p><b>​60 students from two of CSE&#39;s master programs presented their projects to 4,500 visitors at the Universeum during the exhibition &quot;Showing the Invisible&quot; on October 25-26, 2019.</b></p><p>For the seventh consecutive year, students from CSE's master programme <strong>Interaction Design and Technologies</strong> exhibited their projects at IDXPO, this year students from the <strong>Game Design &amp; Technology</strong> programme participate as well. Since 2016 the exhibition is held at the Universeum, and this year's visitors were able to follow the food's path through the body, test what it is like to be a cyborg and experience the northern lights.</p> <p>You can see more of the exhibition and the projects at <a href="http://www.idxpo.se/current/">idxpo.se</a></p> <p>For more information about idxpo, contact <a href="/sv/personal/Sidor/josef-widestrom.aspx">Josef Wideström</a>. </p> Thu, 21 Nov 2019 13:00:00 +0100https://www.chalmers.se/en/departments/mc2/news/Pages/130-participants-on-the-fourth-Centre-Day.aspxhttps://www.chalmers.se/en/departments/mc2/news/Pages/130-participants-on-the-fourth-Centre-Day.aspx130 participants on the fourth Centre Day<p><b>​With around 130 participants, the fourth joint day of the GigaHertz Centre and ChaseOn also became a success. &quot;We gather Sweden&#39;s industry and academia in wireless research, probably the best in Sweden,&quot; says Jan Grahn, director of the GigaHertz Centre.</b></p><div><img src="/SiteCollectionImages/Institutioner/MC2/News/centreday_191106_IMG_8116_665x330.jpg" alt="Picture from Centre Day 2019." style="margin:5px" /><br /><span style="background-color:initial">It was a huge agenda in Palmstedtsalen in the student union building on 6 November. And Gustav Adolf's baking was of course a mandatory element in honor of the day. One new feature for this year was a &quot;poster flash presentation&quot; where all the poster exhibitors held an elevator presentation of about a minute about their respective posters.</span><br /></div> <div><br /></div> <div>A number of speakers from Chalmers, the business community, other educational institutions and organisations replaced each other on the stage. Particularly invited keynote speaker was Dr Thomas Merkle from Fraunhofer IAF in Freiburg, Germany. </div> <div><img src="/SiteCollectionImages/Institutioner/MC2/News/centreday_191106_IMG_8155_isab_toppbild_750x340.jpg" alt="Picture from Centre Day 2019." style="margin:5px" /><br /><span style="background-color:initial">For the first time, all members of the International Scientific Advisory Board (ISAB) were also gathered, from left to right Christoph ​Mecklenbräuker, TU Vienna, Riana Geschke, Fraunhofer FHR, Christophe Gaquière, Univ. de Lille, IEMN, and Wolfgang Heinrich, FBH, Berlin.</span><br /></div> <div><br /></div> <div><img src="/SiteCollectionImages/Institutioner/MC2/News/centreday_191106_wolfgang_IMG_7924_350x305.jpg" alt="Picture from Centre Day 2019." class="chalmersPosition-FloatRight" style="margin:5px" />Professor Heinrich also gave a speech explaining why wireless is an ever-present area:</div> <div>&quot;Microwaves are everywhere, even in space. If you want to communicate between galaxies, you can only use microwaves. If you are looking for extraterrestrial life - either human or not - you can only use... that's right! ... microwaves&quot;, he said among other things.</div> <div>He predicted a bright future:</div> <div>&quot;Our biggest challenge is to make millimeter waves 5g-compatible.&quot;</div> <div><br /></div> <div>The Centre Day was organized by the departments Microtechnology and Nanoscience - MC2, Electrical Engineering and Computer Science and Engineering. This year the GigaHertz Centre hosted the event.</div> <div>&quot;What is unique about these events is the high industrial participation with Chalmers researchers and students&quot;, says Jan Grahn.</div> <div><br /></div> <div>Text and photo: Michael Nystås</div> <div><span style="background-color:initial"> </span><br /></div> <div><a href="/en/centres/ghz">Read more about the GigaHertz Centre​</a><span style="background-color:initial"> &gt;&gt;&gt;</span><br /></div> <div><br /></div> <div><a href="/en/centres/chaseon">Read more about ChaseOn</a> &gt;&gt;&gt;<span style="background-color:initial">​</span></div> <div><span style="background-color:initial"><br /></span></div> <div><span style="background-color:initial"><img src="/SiteCollectionImages/Institutioner/MC2/News/centreday_191106_IMG_8009_665x330.jpg" alt="Picture from Centre Day 2019." style="margin:5px" /><br /></span><em style="background-color:initial">Jan Grahn, head of the GigaHertz Centre, and Erik Ström, head of ChaseOn, were pleased with the Centre Day 2019.</em><span style="background-color:initial"><br /></span></div>Tue, 19 Nov 2019 10:00:00 +0100https://www.chalmers.se/en/departments/cse/news/Pages/CSE_VR-grants_2019.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/CSE_VR-grants_2019.aspxEight new projects at CSE funded by the Swedish Research Council<p><b>​Eight researchers at the department of Computer Science and Engineering were awarded grants by the Swedish Research Council within the Natural and engineering sciences 2019 call.</b></p><div> &quot;We are very pleased to see that our research is top notch in such a wide range, from computer architecture to type theory, from smart contracts to AI.” says Patrik Johansson, Deputy Head of Department at Computer Science and Engineering at Chalmers and University of Gothenburg. </div> <div> </div> <h2 class="chalmersElement-H2">Smart Contract Verification </h2> <div> </div> <div> </div> <div> </div> <div><em><strong><a href="/en/staff/Pages/ahrendt.aspx">Wolfgang Ahrendt</a> is a professor in the Formal Methods division.<br /></strong></em></div> <div> </div> <div> <img src="/SiteCollectionImages/Institutioner/DoIT/Profile%20pictures/ST/Wolfgang.gif" alt="Wolfgang Ahrendt" class="chalmersPosition-FloatRight" style="margin:5px;width:150px;height:150px" /></div> <div> </div> <div>Blockchain is an open infrastructure in the internet that records transactions between parties which do not trust each other, without relying on any central authority. The most famous application of blockchain is cryptocurrencies like Bitcoin. Another one is 'smart contracts', which are programs automating the exchange of cryptocurrencies and information between parties. If there is any error in the programming of a smart contract, the error can be exploited by malicious users, causing substantial financial damage, in some cases millions of Dollars. </div> <div> </div> <div> </div> <div> </div> <div>In this project, we will develop methods to verify, with mathematical certainty, whether a smart contract is free of errors. The outcome of the project will contribute to the safety of the arising digital market places.</div> <div> </div> <div> </div> <div> </div> <div><strong>Funding: 4 year project grant, total of 4 million SEK.</strong><br /> </div> <div> </div> <div> </div> <div> </div> <h2 class="chalmersElement-H2">Information, Fairness and Socially Beneficial Artificial Intelligence</h2> <div> </div> <div> </div> <div> </div> <div><em><strong>Christos Dimitrakakis is a docent in the Data Science and AI division. To read more about fairness in artificial intelligence, <a href="https://sites.google.com/view/bayesianfairness/home"> visit this page</a></strong></em>. <div><img src="/SiteCollectionImages/Institutioner/DoIT/Profile%20pictures/CS/Christos.gif" class="chalmersPosition-FloatRight" alt="Christos Dimitrakakis" style="margin:5px;width:150px;height:194px" /> </div> <div> Artificially intelligent (AI) systems are playing an ever increasing role in society. To ensure that they are beneficial, we must guarantee that they act not only according to the designer's intentions, but also in a way that is fair to all individuals and groups affected by their decisions. Many applications integrate human and AI decisions, such as crowdsourcing, recommendation systems, navigation and autonomous vehicles, as well as decision support systems for credit risk and criminal recidivism. AI systems are also deployed in semi-automated design tools, and diagnostics in medicine. Humans interact with a pre-designed AI, which may be unaware of the motivations, behaviour or knowledge of people. When such an AI is used at scale, it must take into account broader, societal considerations, such as fairness and privacy. Our project will create algorithms for automatically aligning AI behaviour with societal values.</div> <div><strong>Funding: 4 year project grant, total of 4 million SEK</strong>.<br /></div> <h2 class="chalmersElement-H2">Context-Infused Automated Software Test Generation</h2> <div><em><strong>Gregory Gay is a senior lecturer in the Software Engineering division. More information about his research is available at <a href="http://greggay.com/">http://greggay.com/<br /></a></strong></em><div><img src="/SiteCollectionImages/Institutioner/DoIT/Profile%20pictures/SE/Gregory-Gay.jpg" class="chalmersPosition-FloatRight" alt="Gregory Gay" style="margin:5px;width:150px;height:150px" /> Software testing is invaluable in ensuring reliability. It is also difficult and expensive, with serious consequences. Automation is critical in controlling costs and focusing developers. A promising avenue of automation is search-based test generation – the framing of tasks such as input selection as optimization problems. However, current approaches to search-based generation fail to match the effectiveness of human developers because of the use of naive universal strategies to guide input selection. Developers are driven by context – domain, requirements, and past experience. Effective automated test generation requires this context to control &quot;how&quot; code is executed. The next generation of test generation tools must be multi-objective, incorporate domain-specific information, and be adaptable to the system under test. I propose two families of context-infused strategies and a new self-adaptive generation approach that can customize its selection of strategies. These research advances should yield more &quot;human-like&quot; – and human-competitive – results.</div> <div><strong>Funding: 4 year starting grant, total of 3,9 million SEK.</strong><br /></div> <h2 class="chalmersElement-H2">Non-Functional Requirements for Machine Learning: Facilitating Continuous Quality Awareness (iNFoRM)</h2> <em><strong><a href="/en/Staff/Pages/jenho.aspx">Jennifer Horkoff</a> is an associate professor in the Software Engineering division. </strong></em><br /><div><img src="/SiteCollectionImages/Institutioner/DoIT/Profile%20pictures/SE/Jennifer-Horkoff.png" class="chalmersPosition-FloatRight" alt="Jennifer Horkoff" style="margin:5px;width:150px;height:150px" /> <div>Machine Learning (ML) uses big data to enable software algorithms to “learn”, solving difficult problems such as recognizing images and diagnosing cancer. Software Engineering (SE) focuses on understanding, decomposing, managing, formalizing and reasoning over software qualities (e.g., performance, reliability, security, maintainability, usability), also called non-functional requirements (NFRs). </div> <div>From an SE perspective, the meaning of certain qualities, how to refine those qualities, and how to use such qualities for design and run time decision making is relatively well established and understood. However, in a context where the solution involves ML, much of our knowledge about NFRs no longer applies. E.g., what does it mean for a ML enabled system to be maintainable, modifiable and testable? How are these qualities measured for an ML solution? Are NFRs such as compatibility and modularity still relevant for ML solutions? Furthermore, new NFRs such as fairness and transparency have become critical from an ML perspective, including knowledge of new NFR tradeoffs, e.g., fairness vs. accuracy. <br /></div> <div>The overall objective of the project is to create a framework to define, decompose, express, monitor, and reason (make tradeoffs) over NFRs for systems involving ML, accounting for the uniqueness of ML solutions compared to typical software.</div> <div><strong>Funding: 4 year project grant, total of 4 million SEK.</strong><br /></div> <h2 class="chalmersElement-H2">X-LEGAL: smart legal contracts <br /></h2> <strong><em><a href="/en/staff/Pages/gersch.aspx">Gerardo Schneider</a> is a professor in the Formal Methods division</em></strong><em><strong>. </strong></em><br /><em><strong></strong></em><div><img src="/SiteCollectionImages/Institutioner/DoIT/Profile%20pictures/ST/Gerardo-Schneider2.jpg" class="chalmersPosition-FloatRight" alt="" style="margin:5px;width:150px;height:225px" /> <div>This project aims at legal automation, by integrating two notions of &quot;contracts&quot;: legal contracts, i.e., legally binding normative documents establishing mutual agreements between competent and freely participating parties, and &quot;smart contracts&quot;, computer programs executed in the blockchain. The problem today is that smart contracts are not &quot;smart&quot; nor &quot;contracts&quot;. The dream of executable legal contracts is still not a reality but a desirable outcome on blockchain technologies. We will bridge this gap by proposing two languages: one closer to the non-technical users having an explicit and clear presentation of the contractual clauses, the other one closer to executable code but still in connection with the contractual language. </div> <div><strong>Funding: 4 year project grant, total of 4 million SEK.</strong><br /></div></div> <h2 class="chalmersElement-H2">PRIME: Memory that can compute on stored data. </h2> <strong><em><a href="/en/staff/Pages/per-stenstrom.aspx">Per Stenström</a> is a professor in the Computer Engineering division.</em></strong><br /><div><img src="/SiteCollectionImages/Institutioner/DoIT/Profile%20pictures/CE/Per-Stenström.gif" class="chalmersPosition-FloatRight" alt="" style="margin:5px;width:150px;height:195px" /> <div>In today’s computers, most of the time is spent by the central processing unit (CPU) bringing the data from memory, performing the operations and sending the result back to memory. Such systems become very inefficient due to costly data transfers specially for modern applications such as Machine Learning and Big Data analytics, which perform many operations on large amounts of data stored in memory. </div> <div>With this project we exploit adding computation capabilities to the memory so that operations can be performed where the data is stored, thus eliminating the inefficient data transfers. We will develop a new computational model in which code move around instead of data, which is more inefficient. This will yield computer systems with substantially higher processing rates and lower energy consumption.</div> <div><strong>Funding: 4 year project grant, total of 4 million SEK.</strong> </div></div></div></div></div> <div> </div> <div> </div> <h2 class="chalmersElement-H2">Also granted</h2> <h3 class="chalmersElement-H3">Modal type theory with dependent types</h3> <div><em><strong>Andreas Abel, senior lecturer in the Logic and Types division.</strong></em></div> <div><strong>Funding: 4 year project grant, total of 4 million SEK.</strong><br /></div> <h3 class="chalmersElement-H3">Evidence theory and semantics for homotope theory in higher order categories</h3> <div> <em><strong>Christian Sattler, Logic and Types division. </strong></em></div> <div><strong>Funding: 4 year starting grant, total of 3,9 million SEK.</strong><br /></div> <div> </div> <div> </div>Tue, 19 Nov 2019 00:00:00 +0100https://www.chalmers.se/en/departments/cse/news/Pages/A-better-way-to-catch-bugs.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/A-better-way-to-catch-bugs.aspxA better way to catch bugs<p><b>​As software is becoming a key component in every part of society, the consequences and costs of errors in software are daunting. Out of sheer curiosity and playfulness, researchers at Chalmers developed the testing tool QuickCheck, now used by major companies to find and fix crucial bugs in software before it’s released.</b></p>​The cost of software errors is estimated to be over a trillion USD each year worldwide. Perhaps that is why software development companies spend half their effort on testing. Research into new ways of software testing is making it not only better and more efficient but also fun, at least according to professor John Hughes at the department of Computer Science and Engineering. He is one of the brains behind what is called property-based testing. “You’re not working with one test case at a time, you’re working with whole families of test cases. You’re not thinking about what your code should do for this particular input, you’re thinking about what your code should do in general. It’s just a higher level of abstraction. So, one of the strengths of property-based testing is that it’s actually a lot of fun.” <p>In traditional software testing the tester has to compose each test case individually. This is an enormous manual process, even when running the tests is automated. In property-based testing the software developer specifies general properties that the software should satisfy in a wide variety of cases. Examples to test these properties are then chosen automatically, enabling very many tests to be run and more bugs to be found. </p> <p>“And when there are bugs, instead of finding them a couple of weeks after writing the code, you find them just like that” says John, and snaps his fingers. “You see an example of the bug and realize, I never thought of this. Then you can go back and fix the code while it’s still fresh in your mind.”</p> <p><a href="https://www.youtube.com/watch?v=LnX3B9oaKzw"><img class="ms-asset-icon ms-rtePosition-4" src="/_layouts/images/ichtm.gif" alt="" /> Watch the video of John explaining functional programming</a></p> <p>John has been developing the idea of property-based testing for nearly two decades. Together with Koen Claessen he developed the first property-based testing tool, an open source tool called QuickCheck. It was followed by a commercial version developed by John’s company Quviq.  However, this success was not inevitable. If it hadn’t been for his curiosity and being in the right room at the right time, the idea might not have had the same impact.</p> <h3 class="chalmersElement-H3">The right idea in the right room</h3> <p>In 1999 John Hughes had just managed to meet an important deadline in his research and was, in his own words, “completely pooped”. With nothing else pressing, he started playing around with a few ideas. “I was just hacking away in my room. One of the ideas was to write properties and then generate random input to perhaps discover the ones that were false.” Koen Claessen, a PhD student in the department at the time, knocked on his door and asked what he was doing. Koen came up with ways to improve the idea, and showed up the next day with some code he’d written.  “I used that and kept hacking and made another version and showed it to him and so forth. We worked on it together and by the end of the week we had a first basic version working.” John says.</p> <p>They co-authored a paper about the research which, after initially being rejected, was published at the International Conference on Functional Programming in 2000. Ten years later they received the Most Influential Paper award at the same conference. “It’s quite funny. Now it’s the most cited paper from the ICFP, ever.” John adds.</p> <p>While the idea was now scientifically recognized, John Hughes didn’t quite realize the importance of the method they’d created until a meeting of SSF’s programme committee in 2005. The foundation asked the researchers they were funding to present their work to representatives from Swedish industry. In the room were both John’s first customer and one of Sweden’s leading entrepreneurs. John’s presentation included a short demo of the QuickCheck tool before he went on to explain other parts of his current research project. “At the end of the presentation Mike Williams from Ericsson basically said, that QuickCheck stuff, we want that.” </p> <p>Also there was serial entrepreneur Jane Walerud. She saw the potential of the idea and advised and pushed John to start a company based on QuickCheck. “I was very excited. I’d worked with my research for a long time and I wanted to see it have industrial impact. This was an opportunity to do just that.”</p> <p>As a result, John Hughes and his colleague Thomas Arts founded the company Quviq AB with the intent of developing, licensing and selling services around the commercial version of QuickCheck. During the next decade, the company would help find software bugs for customers in telecoms, the vehicle industry, healthcare, blockchains, online gaming, and other internet services. </p> <h3 class="chalmersElement-H3">Research goes to work</h3> <p>In 2006 the first commercial application of QuickCheck was at Ericsson, to their Media Proxy product. Several bugs were discovered, among them one that was quite bizarre, but it shows the strengths of property-based testing. The bug was provoked by adding two callers to a multimedia phone call, then removing one and adding another, then removing the third and adding a fourth, then removing the fourth, upon which the product would crash. “An oddly specific scenario like this would never be included in a hand-written test suite. But QuickCheck discovered not only the scenario but also a serious, underlying fault, that data corruption occurred every time a caller was removed from a call.” John explains. Thanks to this, Quviq earned Ericsson as a long-term customer.</p> <p>In 2010 staff from Ericsson were working at the financial service company Klarna. For six weeks they’d been trying to figure out why the main server was crashing every couple of months. Ericsson was responsible for the failing component causing the crashes, each time requiring the database to be restored from a backup, a process which took several hours each time. After weeks of looking for the now notorious bug in the Mnesia database, Ericsson contacted Quviq. “We were able to provoke the bugs in the database using at most six function calls. Once these simple test cases were found, Ericsson was able to fix each bug in less than a day” says John.</p> <p>During the last two years Quviq has been working with IOHK, who run the 13th largest crypto currency, called Cardano. The blockchain was initially built by consultants, but once it was up and running, then IOHK quickly realized there were problems with the quality of the code. Quviq was brought in to help train the 25 developers already using QuickCheck. Errors were found in one of the most crucial functions of the block chain, the allocation of new blocks, which is the way transactions are rercorded. For Cardano this is determined by what is called proof of stake. “You have a number of people that are candidates for committing the next block, and you elect someone to do it, and it’s supposed to be proportional to the stake that they put in. We discovered that because of their poor testing, it wasn’t.” The deviation in proportionality was too small to be significant, but still considered a serious bug since it affected such a crucial function. “They have now improved their testing dramatically, thanks to the work we did with them, and they’re able to link it directly to the theory that their blockchain is based on.”</p> <p>Property-based testing has proven to be somewhat more difficult than regular testing and requires properly trained testers. “But if you have those, I would argue that you save a lot of time, and you get much higher quality code.” John explains. </p> <p>For John the synthesis of research and business has been a rewarding experience. “It’s great to put your research to work for a customer. Then you really find out what works well and what needs improvement. I really like that!”</p> <p><br /></p> <p><strong>The Department of Computer Science and Engineering is shared between Chalmers University of Technology and University of Gothenburg.</strong><br /></p>Mon, 21 Oct 2019 12:00:00 +0200https://www.chalmers.se/en/departments/cse/news/Pages/Who-is-the-artist-behind-AI-generated-art.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/Who-is-the-artist-behind-AI-generated-art.aspxWho is the artist behind AI generated art<p><b>​Artificial intelligence is increasingly used in creative tasks. One example is the Google Dream project with its surreal imagery. But who is the actual artist behind the pictures, the computer or the humans who programme and use the computer? A new research article discusses the possibilities and problems with creative machines.</b></p><p>”If an algorithm is trained on paintings by Von Gogh it will generate a lot of pictures that will look like Van Gogh paintings. That is not what creativity is” explains Palle Dahlsted, Interaction Design division, Department of Computer Science and Engineering. In the <a href="https://www.cambridge.org/core/journals/european-review/article/big-data-and-creativity/E604C40A897436521970E110F8E1FBBA">article Big Data and Creativity</a> he summarizes the experience and research on creativity and computer-generated art. </p> <p>AI often uses so called probabilistic machine learning algorithms in creative work. Palle Dahlstedt say these types of algorithms lack the ability to create something truly new. He makes an example using the music of Johann Sebastian Bach.</p> <p>“If we study Bach’s fiftheen inventions they are quite different, but they all have something in common. Each part has similarities with the previous ones but is also a new addition to the idea-content. You can train an AI system on the works of Bach and get it to generate new parts that will sound like Bach, but they will lack something new. If Bach had written a sixteenth invention, it would, like all previous inventions, gone beyond the previous idea-content and added something new.”</p> <p>Since AI-system are largely controlled by humans, Palle Dahlstedt mean it’s wrong to talk about creative computers or that they have the ability to independently create works of art.</p> <p>“These are fantastic technologies; I love them and work with them all the time. They allow us to do something we previously couldn’t, to work with visual or musical material on a pattern level instead of for example note level. But the agency, the ability to make creative decisions, are partly in the hands of the programmer of the algorithms and partly in the hands of the person deciding the data set and setting the parameters for the algorithm.”</p> <p> <img src="/SiteCollectionImages/Institutioner/DoIT/News/AI-art-PD.jpg" alt="A self-portrait by Palle Dahlstedt created using Google Dream." class="chalmersPosition-FloatRight" style="margin:5px" />Today’s AI-systems are not creative but imitative. “A computer can imitate the symptoms or the result but not the causes of a work of art. That is the essence of it being imitative. It is not able to predict the next style change, which is the truly creative act.</p> <p>In the article Palle Dahlstedt write about the possibilities for truly creative artificial intelligence. “There is nothing that in principle prevents it, but we’re not there yet. For it to be interesting, the AI must have a life, an influx of information and an interaction with reality. If the AI has a life then maybe it could be creative, but then an equally interesting question arises. Should an AI create art for itself or for us humans? The result may be something beyond our range of understanding.</p> <p><em>Photo on the right: A self-portrait by Palle Dahlstedt created using Google Dream.</em></p> <h2>Read more</h2> <p><a href="https://www.researchgate.net/publication/326960637_Big_Data_and_Creativity_preprint">Article <em>Big Data and Creativity</em> as preprint at Research Gate</a></p> <p><a href="https://www.cambridge.org/core/journals/european-review/article/big-data-and-creativity/E604C40A897436521970E110F8E1FBBA">Article <em>Big Data and Creativity</em> in European Review</a></p> <p><a href="https://www.researchgate.net/publication/287122169_Between_Material_and_Ideas_A_Process-Based_Spatial_Model_of_Artistic_Creativity">The chapter <em>Between Material and Ideas: A Process-Based Spatial Model of Artistic Creativity</em> from the book <em>Computers and Creativity</em></a></p> <p><a href="https://play.gu.se/media/Big+Data+Symposium+-+n+EtudesA+Artistic+Intervention/0_0h2swtzr">Watch Palle Dahlstedt's lecutre n Etudes: Artistic Intervention at the Big Data Symposium</a></p> <p><strong><br /> </strong><strong>The Department of Computer Science and Engineering is shared between Chalmers University of Technology and University of Gothenburg.</strong><br /> </p>Mon, 21 Oct 2019 11:00:00 +0200https://www.chalmers.se/en/areas-of-advance/ict/news/Pages/Chalmers-contributes-to-Big-Data-research-in-Bulgaria.aspxhttps://www.chalmers.se/en/areas-of-advance/ict/news/Pages/Chalmers-contributes-to-Big-Data-research-in-Bulgaria.aspxChalmers contributes to Big Data research in Bulgaria<p><b>On 7th October, a new European centre of excellence in Big Data and Artificial Intelligence was launched. The GATE Institute is located in Sofia and is a partnership between Sofia University, Chalmers University of Technology and Chalmers Industrial Technologies.</b></p><p>​<br />The initiative is made through funding for seven years from the EU's Horizon 2020 Widespread programme, which aims to promote competence and innovation across Europe and thereby strengthen European competitiveness and ability to meet societal challenges. The goal is to build research capacity and promote innovation power.<br /><br />Graham Kemp at the Department of Computer Science and Engineering at Chalmers has been working with preparations and the application since 2017 and is very pleased that the Institute has now been launched.<br /><br /><img src="/SiteCollectionImages/Areas%20of%20Advance/Information%20and%20Communication%20Technology/News%20events/GATE/Gate_GrahamKemp.jpg" alt="Graham Kemp" class="chalmersPosition-FloatRight" style="margin:5px;vertical-align:middle;width:200px;height:288px" />“We see an opportunity to share knowledge and experience in a field that is developing extremely rapidly. Our participation in GATE will lead to greater international impact, perspectives and interaction. In the longer term the GATE Institute will become a strong partner for collaboration in Eastern Europe”, says Graham Kemp.<br /><br />The research is focused on four strategic application themes: future cities, intelligent government, smart industry and digital health. GATE will employ over 100 researchers and install three new research labs at Sofia University, City Living Lab, Digital Twin Lab, in multidisciplinary collaboration with industry, as well as Virtual Reality and Big Data Visualisation (Open Visualisation Lab).<br /><br />The GATE Institute, as the only Big Data centre of excellence in Eastern Europe, will form a hub in a European network of more than 50 Big Data centres. GATE thus plays a strategically important role in expanding the network and contributing to knowledge transfer and innovation that will provide exchange not only at national or regional level, but for the whole of Europe. GATE will gather and unite everyone with interest in the research field – academia, government, industry and society.<br /><br />To the webpage of Gate: <a href="http://www.gate-coe.eu/" target="_blank">www.gate-coe.eu <br /></a></p> <p><em>This project has received funding from the European Union’s Horizon 2020 WIDESPEAD-2018-2020 TEAMING Phase 2 programme under Grant Agreement No. 857155.</em></p> <p><br />Captions</p> <p><strong>Group photo:</strong> Participants at the GATE kick-off meeting on 7th October 2019, in Sofia, Bulgaria. Back row, from left: Oana Radu (Research Executive Agency, European Commission), Ales Fiala (Research Executive Agency, European Commission), Boyan Stefanov (Sofia University), Eleonora Getsova (Sofia University), Nils Munk Wirell (Chalmers Industrial Technologies), Camilla Johansson (Chalmers Industrial Technologies), Yannis Patias (Sofia University), Iva Krasteva (Sofia University), Petya Stancheva (DG RTD, European Commission), Vassil Vassilev (London Metropolitan University)<br />Front row, from left: Irena Pavlova (Sofia University), Dag Wedelin (Chalmers University of Technology), Graham Kemp (Chalmers University of Technology), Ivica Crnkovic (Chalmers University of Technology), Sylvia Ilieva (Project Coordinator, Sofia University), Golaleh Ebrahimpur (Chalmers Industrial Technologies), Magda De Carli (DG RTD, European Commission), Dessislava Petrova-Antonova (Sofia University).<br /><br /><strong>The press conference:</strong> Eleonora Getsova moderates a press conference with (seated, left-to-right) Magda De Carli (DG RTD, European Commission), Prof Sylvia Ilieva (GATE project coordinator, Sofia University), Prof Anastas Gerdjikov (Rector, Sofia University), Dr Golaleh Ebrahimpur (CEO, Chalmers Industrial Technologies) and Prof Ivica Crnkovic (Chalmers University of Technology).<br /><br /><strong>Audience:</strong> The GATE opening event took place in the Ceremonial Hall of Sofia University St. Kliment Ohridski.<br /><br /><strong>Photos: </strong>Oleg Konstantinov<br /></p> <p><br /><a href="http://www.gate-coe.eu/" target="_blank"></a></p>Mon, 14 Oct 2019 00:00:00 +0200https://www.chalmers.se/en/areas-of-advance/ict/news/Pages/A-future-with-social-drones.aspxhttps://www.chalmers.se/en/areas-of-advance/ict/news/Pages/A-future-with-social-drones.aspxA future with &quot;social drones<p><b>Drones are expected to become an increasingly common tool in our everyday lives. In a new research project led by Morten Fjeld, researchers from Chalmers University of Technology will be investigating how social drones are best used and regulated in order to benefit individuals and society as a whole.</b></p>​Social drones are expected to be part of society in the same way as cars and technological aids are today. They may also come to be used as personal companions and assistants. What could such interaction look like? The researchers involved in the project will investigate how this development affects both individuals and society as a whole, for example in terms of laws, policies and education. <br /><br />Some of the questions asked by the researchers are: How can you design drones so that their use improves the lives of individuals and society? Is the technology even useful, or do the risks outweigh the benefits? <br /><br /><strong>Project: The Rise of Social Drones: A Constructive Design Research Agenda</strong><br /><a href="/en/staff/Pages/morten-fjeld.aspx">Morten Fjeld</a>, Professor at the department of Computer Science and Engineering*<br /><a href="/sv/personal/Sidor/sara-ljungblad.aspx">Sara Ljungblad</a>, Assistant Professor at the department of Computer Science and Engineering*<br /><br />Part of a national research programme<br />The project is part of the national research programme WASP-HS, where the abbreviation HS stands for humanities and society. The research programme was initiated by Marianne and Marcus Wallenberg Foundation and Marcus and Amalia Wallenberg Foundation and encompasses a total of SEK 660 million over ten years. The programme will primarily analyse the ethical, economic, social, legal and labour market aspects that may be entailed by the ongoing technological shift in society.<br /><br /><div><em>Read the press release from WAPS HS:</em></div> <br /><strong>Funding granted to 16 projects in AI and autonomous systems</strong><br /><div>Marianne and Marcus Wallenberg Foundation has granted SEK 96 million to be shared by 16 research projects studying the impact of artificial intelligence and autonomous systems on our society and our behaviour. <a href="http://wasp-hs.org/">http://wasp-hs.org<br /></a></div> <div><br /></div> <div><br /></div> <div><em>*The Department of Computer Science and Engineering is shared between Chalmers University of Technology and University of Gothenburg.</em><br /><a href="http://wasp-hs.org/"></a></div>Thu, 12 Sep 2019 16:00:00 +0200https://www.chalmers.se/en/departments/cse/news/Pages/Project-to-improve-unmanned-aerial-vehicles-.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/Project-to-improve-unmanned-aerial-vehicles-.aspxProject to improve unmanned aerial vehicles<p><b>​Autonomous cyber-physical systems (ACPS) consist of smart and collaborative computational entities, interacting with physical components to accomplish tasks in unpredictable environments. They are emerging from rapid advancements in research areas like data acquisition, machine learning, embedded systems and formal methods, and have countless areas of use.</b></p><p> Gerardo Schneider, Department of Computer Science and Engineering at University of Gothenburg and Chalmers, together with Sebastián Uchitel, University of Buenos Aires, have received a STINT Initiation grant for the project “Runtime Verification of Autonomous Systems”, in which they will attempt to program a UAV, an unmanned aerial vehicle, a special type of ACPS that can be used for instance for land recognition in rural areas. The system interacts tightly with physical components through sensors and activators, and needs to be able to accomplish complex tasks in unpredictable environments, independently or with minimal supervision from humans.<br /> <br /> “We are interested in building a UAV on a fixed wing airplane based on an architecture using Discrete Event Control. We will build upon a declarative mission specification, for example search and rescue, follow or surveillance, of a controller that runs on the plane and interacts with lower software layers that takes high-level commands in an interactive and flexible manner” explain Sebastián and Gerardo. </p> <p> The scientific aim of the project is to solve this problem allowing for dynamic mission planning with the aid of Runtime Verification, a technique for system monitoring and verification at runtime. From the educational point of view the objective is to promote dissemination of the knowledge to graduated students (in the form of PhD courses) as well as open presentations for a more general public.</p> <p>The project was launched in August with a workshop and a mini-course at the University of Gothenburg with visiting lecturers from the University of Buenos Aires.</p>Sun, 08 Sep 2019 13:00:00 +0200https://www.chalmers.se/en/centres/chair/news/Pages/Chalmers-and-Sahlgrenska-University-Hospital-in-research-cooperation.aspxhttps://www.chalmers.se/en/centres/chair/news/Pages/Chalmers-and-Sahlgrenska-University-Hospital-in-research-cooperation.aspxResearch cooperation on AI in healthcare<p><b>Sahlgrenska University Hospital aims to be a driving force in the development of artificial intelligence in healthcare. Chalmers has complementary expertise. A joint research agenda will give the hospital and Chalmers the ability to develop the high-tech healthcare of tomorrow.</b></p>​If we wish to take on the challenges that a growing and ageing population pose to healthcare, we must take help from new technology to make changes to working methods. Artificial intelligence (AI) has great potential to be put into practical use in the healthcare sector.<p></p> <p>Chalmers AI Research Centre (CHAIR) was formed at the start of the year, and conducts research in areas such as autonomous vehicles, industry 4.0, and e-health. Chair and Sahlgrenska University Hospital have entered into a strategic research cooperation on AI in healthcare. The hospital benefits from the AI expertise found at Chalmers, while Chalmers benefits from the university hospital’s medical expertise.</p> <p>&quot;Chalmers has a long tradition of successful collaboration with Sahlgrenska University Hospital, and the research cooperation in AI will strengthen this greatly. Through the AI collaboration, we will achieve exciting new results that are important not only to both partners, but also to society in general,&quot; says Ivica Crnkovic, Director of Chalmers AI Research Centre. </p> <p>Sahlgrenska University Hospital is an arena for outstanding research, and a number of development projects currently being conducted at the hospital use AI as support for areas such as diagnosis. The research cooperation now opens up new opportunities in the digital transition that the healthcare sector is facing.</p> <p>&quot;We need to advance our positions in artificial intelligence. At the hospital, we have very good collaborations with both academia and the business world, where new areas of collaboration pave the way for great progress in this field. AI is an important tool that will ultimately enable us to offer high-quality healthcare to everyone who needs it. Our collaboration with Chair is a big step in the right direction,&quot; says Ann-Marie Wennberg, Hospital Director of Sahlgrenska University Hospital.</p> <p><strong>Facts:</strong><br /></p> <ul><li><a href="/en/centres/chair">Chalmers AI Research Centre</a> is a competence centre aimed at increasing Chalmers’ expertise and excellence in artificial intelligence in partnership with industry and society. <br /><br /></li> <li><a href="https://www.sahlgrenska.se/en/">Sahlgrenska University Hospital </a>works in close collaboration with a number of innovation platforms, such as AI Innovation of Sweden and Medtech West. They also work in close collaboration with Sahlgrenska Academy and Sahlgrenska Science Park, to name a few. <br /><br /></li> <li> The partners (Chalmers and SU) have drafted a letter of intent aimed at entering into a research cooperation. An application has also been submitted to the Regional Development unit of Region Västra Götaland to seek support for the project. The formal research cooperation agreement has not yet been signed. </li></ul> Mon, 02 Sep 2019 12:00:00 +0200https://www.chalmers.se/en/departments/cse/news/Pages/dimva-2019-Gothenburg.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/dimva-2019-Gothenburg.aspxDIMVA 2019 Conference on Detection of Intrustions and Malware &amp; Vulnerability Assessment<p><b>The 16th DIMVA conference was hosted at Wallenberg Conference Center in Gothenburg on June 19-20, with representatives from industry and academia from around the world.</b></p><div>The annual DIMVA conference serves as a premier forum for advancing the state of the art in intrusion detection, malware detection, and vulnerability assessment. </div> <div><br /></div> <div>This year, the number of submissions to present was record-breaking and authors submitted papers from about 25 countries, with a majority from the United States and countries in Europe. 23 papers were chosen after peer-review to be presented in Gothenburg, with topics ranging from Cyber-Physical Systems, Web Security, Attack Mitigation, Malware, Network Security, and Software Security. </div> <div><br /></div> <div>The program also included two keynote speakers with talks on security testing and defending against transient execution attacks. </div> <div><br /></div> <div><a href="https://www.dimva2019.org/program/">Link to the full program with slides from the presentatations</a>.</div> <div><br /></div> <div><a href="http://link.springer.com/openurl.asp?genre=issue&amp;issn=0302-9743&amp;volume=11543">The proceedings are available from Springer</a>. <br /></div> <div><br /> </div> <br /><div><br /></div> <div><img src="/SiteCollectionImages/Institutioner/DoIT/News/DIMVA-2019.gif" alt="Keynote at DIMVA 2019" style="margin:5px" /><br /></div> <br />Wed, 26 Jun 2019 00:00:00 +0200https://www.chalmers.se/en/departments/cse/news/Pages/This-avoids-collisions-with-self-driving-cars.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/This-avoids-collisions-with-self-driving-cars.aspxThis avoids collisions with self-driving cars<p><b>​In order for self-driving cars to be safe, they must be able to communicate with each other.</b></p>​<span style="background-color:initial">Using drones and algorithms, <a href="/sv/personal/Sidor/olafl.aspx">Olaf Landsiedel</a> and his researchers are developing the technology.</span><div><br /></div> <div>The film is produced by <strong>the Swedish Foundation for Strategic Research, SSF</strong>.</div> Fri, 07 Jun 2019 00:00:00 +0200https://www.chalmers.se/en/departments/m2/news/Pages/The-EU-is-investing-EUR-4-million-in-autonomous-vehicles.aspxhttps://www.chalmers.se/en/departments/m2/news/Pages/The-EU-is-investing-EUR-4-million-in-autonomous-vehicles.aspxInvestigates the safety effect of automated vehicles<p><b>​How can we make humans and automated vehicles cooperate? There are several unanswered questions about autonomous vehicles. The EU is, therefore, investing EUR 4 million in research within this research field. Chalmers has been entrusted with the task of coordinating the Marie Curie project.</b></p>​The researcher who has been entrusted with the task is Jonas Bärgman who works at the Department of Mechanics and Maritime Sciences and the Division of Vehicle Safety. The Marie Curie project has the title SHAPE-IT, Supporting the interaction of Humans and Automated vehicles: Preparing for the Environment of Tomorrow. It runs for four years and will fund 15 doctoral students, spread over six universities across the EU. The overall goal of the project is to enable rapid and reliable development of safe and user-centred automated vehicles for urban environments. <div><br /></div> <div>”In the project, we will conduct research with the goal to understand the interaction between humans and automated vehicles, how to best develop and design human-machine interfaces for automated vehicles, and how to evaluate the traffic safety effect of automated vehicles” says Jonas Bärgman. </div> <div><br /></div> <div>For each of these areas, two different aspects will be addressed: the interaction between humans and automated vehicles inside and outside automated vehicles, respectively. In addition to the coordination and project management, Chalmers will, and more specifically, the unit Crash Analysis and Prevention at the division of Vehicle Safety, have two PhD students. </div> <div><br /></div> <div>“One of the PhD-students will focus on quantitative modelling of the interaction between bicyclist and automated vehicles. The other PhD student will continue the research to develop and validate methods for assessment of traffic safety benefits of automated vehicles through virtual simulations of different scenarios” </div> <div><br /></div> <div>The Department of Computer Science and Engineering, which is a department shared between Chalmers and the University of Gothenburg, will also participate in the project with two doctoral students who, among other things, will do research on artificial intelligence (AI) linked to self-driving vehicles. This includes using AI- methods to provide a better understanding of the interaction between humans and automated vehicles, and about developing methods to integrate knowledge from the research domain of Human Factors Engineering and driver behaviour, into frameworks that are used to develop AI-based automated vehicles. </div> <div><br /></div> <div>Jonas Bärgman thinks that they will be able to address many of the questions that today there are no answers to with respect to automated vehicles and how they will/should interact with humans in city/urban environment – both from a designer perspective and from a traffic safety perspective. </div> <div><br /></div> <div>”My hopes are that we will be able to make automated vehicles much safer, while we improve the usability and acceptance for them, and, in general, build competencies around human behaviour inside and outside automated vehicles.&quot;</div> <div><div> </div></div> <h3 class="chalmersElement-H3">Read more</h3> <div><a href="/en/departments/m2/research/vehiclesafety">The Division of Vehicle Safety​​</a></div>Wed, 29 May 2019 14:00:00 +0200https://www.chalmers.se/en/departments/cse/news/Pages/the-question-of-granularity.aspxhttps://www.chalmers.se/en/departments/cse/news/Pages/the-question-of-granularity.aspxDistinguished paper answers the question of granularity<p><b>​A method to bridge the gap between different information flow control approaches, bringing us one step closer to building secure software systems. This groundbreaking result, that answers a long-standing open question in the security community, won a distinguished paper award at the Symposium on Principles of Programming Languages (POPL 2019) in Cascais, Portugal.</b></p><img src="/SiteCollectionImages/Institutioner/DoIT/News/MarcoVassena.gif" class="chalmersPosition-FloatRight" alt="" style="margin:5px" />Marco Vassena, PhD student in the information Security division at Computer Science and Engineering, was already excited that his paper had been accepted at the conference.  <div>“Then, the day right before flying to the conference, I found out that out of 77 accepted papers, mine was one of the six that had been distinguished by the program committee. I was on top of the world!” <br /></div> <div><br /></div> <div>Information-flow control is an emerging security mechanism that shows promising results in securing modern software systems, which are typically constructed using components of different origin. However, the practice has yet to see widespread use. Traditional heavyweight approaches rely on specific fully-fledged programming languages that require substantial efforts to develop and to adopt. Recent approaches based on information-flow control software libraries are lightweight, but have been considered too imprecise in practice. </div> <div><br /></div> <div><h2 class="chalmersElement-H2">The question of granularity</h2></div> <div></div> <div>Both fully-fledged information-flow control languages and libraries enforce security by tracking flows of information within a computer program, but they do it at different levels of granularity. Information-flow control languages inspect every single program instruction to detect information leaks in a <em>fine-grained fashion</em>, where information-flow control libraries focus only on specific input/output instructions, tracking information leaks in a <em>coarse-grained fashion</em>. </div> <div>“The security community has been discussing about the trade-offs that arise from the different granularity of these approaches for a long time, researchers have claimed that the coarse-grained approach is intrinsically more imprecise than the fine-grained approach and thus concluded that software libraries are bound to raise more false alarms than fully-fledged languages in practice” says Marco Vassena. </div> <div><br /></div> <div>In the paper “From Fine- to Coarse-Grained Dynamic Information Flow Control” Marco Vassena and his colleagues* present mathematical proof that these two different approaches are actually equally effective.</div> <div>“Our research disproves that unfunded claim. Software libraries can track information as precisely as fully-fledged languages and thus represent a viable approach to securing modern software systems.” </div>   <h2 class="chalmersElement-H2">Reading on the subject</h2> <div><span>*<a href="https://popl19.sigplan.org/event/popl-2019-research-papers-from-fine-to-coarse-grained-dynamic-information-flow-control-and-back">From Fine- to Coarse-Grained Dynamic Information Flow Control and Back</a> <br />Authors: Marco Vassena, Alejandro Russo, Deepak Garg, Vinset Rajani, Deian Stefan. Presented at the 46th ACM SIGPLAN Symposium on Principles of Programming Languages (POPL 2019), Cascais, Portugal. <span style="display:inline-block"></span></span><br /> </div> <div><br /></div> <div>Marco Vassena defended his PhD thesis on the subject of &quot;Veryfing Information Flow Control Libraries&quot; in February 2019. <br /></div> <div><a href="https://research.chalmers.se/publication/508494/file/508494_Fulltext.pdf">Full text version on line</a>. <br /></div> <div><br /></div> Mon, 04 Mar 2019 00:00:00 +0100