Abstract
Most of the modern object-oriented programming languages offer strong type system. Unlike scripting languages, they promise to catch type mismatch errors in compile time. Unfortunately, such errors still regularly happen in large industrial software systems. We investigate the reason for this phenomenon and argue for using “strong types” to help the compiler to detect these situations. We demonstrate that although implicit conversions between related types are convenient for the programmer, they can cause undetected errors in real-world software. We show how static analysis helps to reveal such faults, can be used to refactor existing software and prevent the problem in new code.
Biography
Zoltán Porkoláb Habil. PhD. received his doctoral degree in Computer Science from the Eötvös Loránd University (ELTE), Budapest in 2004. He is an Associate Professor of the Department of Programming Languages and Compilers at the Faculty of Informatics, ELTE, Budapest, Hungary. His research area is the C++ programming language, template metaprograms, and static analysis. At the same time, at Ericsson Hungary Ltd. He is manager of several test-related developer tools, including CodeChecker, the open-source static analysis tool and the Titan TTCN-3 compiler family.
Abstract
Securing constrained IoT devices such as the medical ones requires a global approach facilitating the application code generation leveraging the security mechanisms available on the device and fulfilling the safety constraints. To do so, both the hardware architecture and the software development chains are modified to generate a safe and secure code. During this presentation, we will first detail the approach and the related challenges before to illustrate it on different architectures and use cases.
Biography
David Hely obtained his Master degree in 2002 from the National Institute of Applied Sciences of Lyon. He then obtained his PhD degree in 2005 from the University of Montpellier 2 working on the design for testability of secure IC in collaboration with STMicroelectronics and the LIRMM laboratory.
From 2005 to 2009, he held several positions in R&D within STMicroelectronics and then Sagem Défense Sécurité focusing on the architecture, the design and certification of robust system on chip and system on programmable chip dedicated to secure (smartcard) or safe (aeronautics) application. Since September 2009, he is Associate Professor at the Grenoble Institute of Technology and is member of the LCIS laboratory. His research interests and skills concern the design and test of digital system with a specific focus on robustness for security and safety applications