Topic Workshops
May, 12-13: "Security Properties in Security Engineering" in Augsburg
The first RS3 Topic Workshop "Security Properties in Security Engineering" takes place in Augsburg on May 12-13, 2011. 9 researchers from projects FM-SecEng, IFlow, ModelSec, and MoVeSPAcI meet to explore how to formally model and specify security requirements in the software development process. Initiated by the projects FM-SecEng and Iflow, this meeting continues the active discussions in the Security Engineering cluster during the RS3 KickOff.November, 3-4: "Information Flow Control for Mobile Devices" in Darmstadt
On November 3-4, ten researchers from the projects IFC for Mobile Components, IFlow, ModelSec, and RSCP met in Darmstadt for a topic workshop. One of the goals pursed by the participants was to establish a plausible connection between the state-of-the-art security vulnerabilities on Android and the static information flow control techniques. During the fruitful discussions a tangible progress has been achieved. Motivated by privilege escalation attacks, the researchers explored a possibility to statically enforce system-wide information flow policies on Android. It turned out, that the sketched solution perfectly fits the "security-in-the-large" guiding theme of the priority programme. The collaboration on this exciting topic will be continued.November, 21: "E-Voting and Information Flow" in Karlsruhe
On November 21st, the topic workshop "E-voting and Information Flow" took place in Karlsruhe, with four participating projects: (1) Implementation-Level Analysis of E-Voting Systems, (2) DeduSec: Program-level Specification and Deductive Verification of Security Properties, (3) IFC for Mobile Components: Information Flow Control for Mobile Components Based on Precise Analysis for Parallel Programs, and (4) MoVeSPAcI: Modular Verification of Security Properties in Actor Implementations.The workshop participants presented the progress achieved so far on analyzing specific security properties of the e-voting system developed within RS3. Remaining technical challenges were discussed in detail and concrete plans for joint publications were made. Overall the workshop showed that the approaches taken thus far in the e-voting scenario are very promising and that they will be further pursued.
