|
XLAB's involvement in the security, trust and dependability has a long history, proven through our work in commercial applications, European Projects and participation in relevant organizations. Our work in the dependability area has begun with ensuring the quality of service of the ISLLight product family, where the communication layer ensures satisfiable operation even in poor network conditions. Our work on the DeDiSys project yielded useful research and later on empirically proven results, as the level of service did not degrade to an unsatisfiable state even when the underlying network was partitioned. Following with the XtreemOS project, we are involved in the Application Execution Management and Security workpackages – the natural consequence of security being interlaced with every application being run on the system. Our current work consists of implementation of the aforementioned AEM module and implementation of security in the Virtual Organisation Management Service (VOMS for short) on the application level. The DeDiSys and XtreemOS projects can be seen as the basis for the Odyssey project (Strategic Pan-European Ballistics Intelligence Platform for Combating Organised Crime and Terrorism), where security, trust and dependability are of utmost importance. XLAB's part in this project is mostly in the field of system architecture and secure data sharing through the distributed system and over various interested and authorized parties.
Turning into commercial area, our ISL product line is using the state-of-the-art firewall penetration (within legal boundaries) and dependable communication and transport layers. Our excellence in this area has been recognised by other companies as well. Another notable product is the Guarantees of Origin Registry (BoX-GoO), an online portal for registering, trading and issuing the energy origin certificates. The application is available at https://poi.borzen.si/.
Given the aforementioned R&D excellence, we also feel the need to participate in various working groups within NESSI – providing inputs for e.g. NESSI Strategic Research Agenda, participating in the Trust, Security and Dependability Working Group (TSD-WG) – thus helping in standardization of the topics, vocabulary and providing predictions on the outlooks in the areas we are strong in. On the other hand, we recognize the utmost importance of having a common base which is offered by NESSI in order to successfully collaborate, research and finally commercialize our knowledge.
Finally, XLAB is involved also in the national and EU security projects from the field of emergency response management and training. Most notable Slovene project is the SKU project, where we are implementing the distributed simulations system for crisis response management, including the complete security stack, from the visualisation to the the database and knowledge sharing modules. On the EU level, we're involved in the Pandora project, with roughly the same tasks but on a wider and more research oriented level.
Facts about XLAB's involvement in Trust, Security and Dependability:
- Dependability know-how proven in the ISL product line and DediSys project
- Trust, Security know-how proven in the ISL product line, XtreemOS, SKU, POI, etc. projects.
XLAB has the following know-how:
- Implementation of the high-level security in the distributed systems
- Implementation of the security in the network communication and transport layer
- Implementation of the complete security stack in critical applications
- Implementation of the complete security stack in distributed applications (on the level of national security).
Two important security projects are also:
Team XLAB on Defcon
Defcon is a computer security conference that was held in Las Vegas, USA. It draws security specialists, hackers and computer enthusiasts from around the world. Topics presented and discussed cover a wide spectrum of anything related to (computer) security. It gives people an oportunity to hear presentations of security related software, security holes, exploits and fixes and other security connected stuff directly from developers and also to discuss it with them in person. Besides the presentations many people also enjoy the competitions at defcon. They span from hacking contests to reverse engineering a piece of hardware.
A few days before Defcon the Black Hat conference was also held in Las Vegas. It is a conference that brings together people from all information security fields, some academics other from government and even underground researchers. It happenes annually in Tokyo, Amsterdam, Las Vegas and Washington DC. Besides shorter presentations Black Hat offers extensive trainings, where one can get hands on experience on different topics from higly respected experts (some of them provide certificates for their lectures, too).
|
Expertise
