From research to innovation. Anders Moen Hagalisletto Tuesday 1. March 2015 Kl. 17:00 19:00

Size: px

Start display at page:

Download "From research to innovation. Anders Moen Hagalisletto Tuesday 1. March 2015 Kl. 17:00 19:00"

Ralph Wheeler
3 years ago
Views:

What did the API allow for?
How many grants did the commercialization of the AIMS?
What transportation system did the project model?

1 From research to innovation Anders Moen Hagalisletto Tuesday 1. March 2015 Kl. 17:00 19:00

2 Personal Background My Father s family: Poor mountain farmers for centuries. My grandfather had 8 children invented and built a washing machine made of wood in order to make the daily life of his wife a bit easier. After the Second World War, Norway needed engineers: many young men from the country-side were encouraged to take higher education. My father became a diploma engineer Manager at Christiania Spigerverk But he was also Inventor he got several prices for his ideas at the end of his life also some commercial success.

3 My Background First generation of young boys that had a computer as teenagers we were programming a lot from the age of 14/15 in BASIC. I did not want to be like my father I wanted to study something purely theoreticai -> I studied mathematics and philosophy. Then I got more interested in logic and computer science Two master s: Philosophy and computer science. Started working at Norwegian Computing Center Interest: Using logic in understanding complex problems in computer science abstract Pi calculus to understand mobility.

4 Dot com crisis (2001/2002) Started on a PhD at Dept. of Informatics under Olaf Owe. Supervised three master students: practical and quite ambitious project modeling the entire railway net of Oslo Subway using Petri nets - 2 years Supervisor Olaf Owe said: «You should write a PhD in Security!» Okay..

5 What should I do? Interesting topics in security? There was little competence in security at UiO at that time Security protocols: automated search for attacks (1995, Gavin Lowe at Oxford)

6 I was running out of money (PhD) My former boss (Steinar Kristoffersen) wanted to prototype an algorithm for automated integration of distributed systems Steinar wanted to learn Pi calculus I wanted to prototype an algorithm. We filed for a patent application (US provisional) The project was called AIMS (2005)

8 AIMS history 2006: Steinar Kristoffersen & Hagalisletto IFI : algorithm for adhoc integration of moble services 2007: Commercialization grant (550 ): Steinar and Anders Moen Hagalisetto developed Blackjack implementation proof of concept 2008: FORNY grant: 1,9 mill. NOK. 2009: Changed project goal: Marius Storsten: Proactive Integration platform monitoring. 2010: Company establishment Automated monitoring and analysis of applications Integrates with Microsoft Biztalk 2011: New CEO Ivar Sagemo and commercial AIMS version released 2013: Received the «Frost and Sullivan APM Leadership Award» 2015: Development of API allowing monitoring of «any» integration service 2016: Aim to take global leadership in integration monitoring 2016: AIMS worth ca 40 million NOK

9 PROSA History Formalization of security requirements (Casenet-EU) PhD PROSA Core (Univ. Oslo) encap model New module: Confidentiality goals (RSE-NFR) Starting piloting sales for consultancy (Åsmund) mbricks New module: Automated code generation (HATS-EU) eresept BankID SIP protocol (EUX-NFR) New module: Implemented basic attack patterns (PCAS-EU) New module: State machine simulation PROSA project (FORNY) Hafslund Visma Customer encap Sparebank

10 The PROSA tool and method PROtocol Security Analysis Provides analysis of security protocols Provides a language for spesification of security protocols Building PROSA requires research-competence Analysis of security protocols is complex and difficult Using PROSA makes it easier Lots of unsolved challenges!

11 What PROSA is Software: Tool for supporting security architecture design and analysis Method: Builds on formal methods (logic + algebra+ programming language theory) Working process: Five steps: Automated support for design process Improving security awareness and assurance Service Consulting model-building Security analysis

12 Team Ivar Bergland (CEO/Inven2) Åsmund Skomedal (PhD comp. security - NTNU) Thor Kristoffersen (PhD comp. security - UNIK) Ivar Rummelhoff (PhD in math. logic - UiO) Sigurd Eskeland (PhD comp. security Aalborg University)

13 PROSA Security Architect

14 Tradisjonell metode versus PROSA Modeling Typical approach PROSA approach Effect PROSA (estimate) pages. Informal descriptions 3-10 A4 sider med presice system description 30 x quicker understanding of system Security requirements General requirements, imprecise, and concrete assets are not mentioned Precise characterization of assets and security goals 4 x more requirements Threats Sporadic, manual and expert based approach Presice analysis of threats 10 x more threats on design Risk analysis Causal method, expert-based approach Builds a systematic catalogue of threats 4 x quicker process of risk analysis

15 # Agents/components Complexity of cases 13 BankID encap 1 eresept Customer 1 Case 1 Case 2 Case 4 Case 3 4 Scyther ProVerif SATMC NRL Academia state-of-the-art # messages

16 Feedback from partners If the partner case is a success Sparebank1 group will model other systems Hafslund case: Aidon has asked to a beta-tester for PROSA Hafslund case: Embriq has asked to a beta-tester for PROSA Sparebank1 Gruppen case: Kantega has asked to a beta-tester for PROSA Encap want to use PROSA in order to demonstrate our solid approach to security to business partner and investor

17 The Prosa software modules MVP Protection graph System overview Asset detection presentation Confidentiality presentation Simple decision support Checklist manual workflow support Precise PROSA model providing: Specification editor Graphical interaction Outline view Integrity presentation User interaction Simple report generator Attack landscaping integrated with System view Listing of threats overview User interaction assigning likelihood and impact Feasibility Modeling Security requirements Security analysis Risk analysis Protection graph Asset detection eavesdropper simulation Confidentiality goals Impersonation patterns Integrity goals

18 What you might experience Reality (industry) might impose even harder research problems than you had as a PhD student or a post-doc. You have much shorter time to prove that you can solve them. You have to communicate your methods to customers - not scientists The problems you might solve are real problems using your methods to improve methods, products, and services «out there»

19 Thank you! 3/2/2016 Testpresentasjon: designforslag

Curriculum of Electronics Engineering Program

Curriculum of Electronics Engineering Program FIRST ACADEMIC SEMESTER EB 0101 Workshop on Methods of University Studies 2 -- -- -- 4 EB 0102 Workshop on Oral and Written Communications 2 -- -- -- 4 EB

From research to innovation. Anders Moen Hagalisletto Tuesday 1. March 2015 Kl. 17:00 19:00

What did the API allow for?

How many grants did the commercialization of the AIMS?

What transportation system did the project model?