MetAcsl: Specification and Verification of High-Level Properties

Autor: Robles, Virgile, Kosmatov, Nikolai, Prevosto, Virgile, Rilling, Louis, Gall, Pascale Le

Modular deductive verification is a powerful technique capable to show that each function in a program satisfies its contract. However, function contracts do not provide a global view of which high-level (e.g. security-related properties of a whole s

Externí odkaz: http://arxiv.org/abs/1811.10509

Automated Risk Analysis of a Vulnerability Disclosure Using Active Learning

Autor: Elbaz, Clément, Rilling, Louis, Morin, Christine

Publikováno v: Proceedings of the 28th Computer & Electronics Security Application Rendezvous
Proceedings of the 28th Computer & Electronics Security Application Rendezvous, Nov 2021, Rennes, France
C&ESAR 2021-28th Computer & Electronics Security Application Rendezvous
C&ESAR 2021-28th Computer & Electronics Security Application Rendezvous, Nov 2021, Rennes, France. pp.1-19

International audience; Exhaustively listing the software and hardware components of an information system is non-trivial. This makes it even harder to analyze the risk created by a vulnerability disclosure in the context of a specific information sy

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::c02e61180273d7551f029c49c6fb5fa7
https://hal.inria.fr/hal-03515662/file/2021-cesar_3758460.pdf

Extraction automatisée de mot-clés de vulnérabilités « One-day » à leur divulgation

Autor: Elbaz, Clément, Rilling, Louis, Morin, Christine

Publikováno v: [Research Report] RR-9299, Inria Rennes-Bretagne Atlantique. 2019, pp.1-22

Common Vulnerabilities and Exposures (CVE) databases such as Mitre’s CVE List and NIST’s NVD database identify every disclosed vulnerability affecting any public software. However, during the early hours of a vulnerability disclosure, the metadat

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::4253427e7f009e88337ffd6ef4da3471
https://inria.hal.science/hal-02362062/file/automated_keyword_extration_from_one_day_vulnerabilities_at_disclosure.pdf

Defining Security Monitoring SLAs in IaaS Clouds: the Example of a Network IDS

Autor: Wonjiga, Amir Teshome, Rilling, Louis, Morin, Christine

Publikováno v: [Research Report] RR-9263, Inria Rennes Bretagne Atlantique. 2019, pp.1-37

In an IaaS cloud the physical infrastructure is controlled by service providers,including its security monitoring aspect. Clients hosting their information system need to trustand rely on what the providers claim. At the same time providers try to gi

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::431d93212699b2f276d60451c088087b
https://hal.inria.fr/hal-02079860v2/file/RR-9263.pdf

Mesurer et prévenir l'évolution de la menace dans un cloud d'infrastructure

Autor: Elbaz, Clément, Rilling, Louis, Morin, Christine

Publikováno v: ComPas'18-Conférence d’informatique en Parallélisme, Architecture et Système
ComPas'18-Conférence d’informatique en Parallélisme, Architecture et Système, Jul 2018, Toulouse, France. pp.1-7

National audience; Le cloud computing a permis le passage d'un paradigme d'obligation de moyen à celui d'obligation de résultat, mais cette transition montre ses limites dans le domaine de la sécurité. En effet, la sécurité effective d'un syst�

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::1250c9cb490fcd9e087ff646a5b02b19
https://inria.hal.science/hal-01816674