计算机软件新技术国家重点实验室
摘 要:
This
talk will brief our research results on applying formal methods for security
analytics. It will show how formal analysis identifies logic flaws from various
real-world applications, including web authentication, online payment and
mobile apps. This talk will then focus on our approach that uses software model
checking technique to verify Android apps. We have built a general framework
named DroidPF
which enables to explore the concrete state spaces, addresses the challenge
caused by event-driven execution paradigm, and alleviates state space
explosion.
报告人简介:
Dr.
Guangdong Bai is a Senior Lecturer in the University of Queensland, Australia.
He obtained his PhD degree from National University of Singapore, and master
and bachelor degrees from Peking University. His research interest includes
security, software engineering and formal methods. During his previous
research, he has worked on analyzing Web protocols, online payment, Android
security and IoT
security. His research has produced impactful results which contribute to
security enhancement of widely-used websites/applications like Sina
Weibo, Facebook, Helium, Mozilla and Hadoop, and mobile device vendors like
Samsung and Huawei (under CVE and SVE). His work appears on top academic
conferences and journals such as NDSS, TSE, ASE and FM.
时间:11月7日(星期四) 10:00
地点:计算机科学技术楼230室
|