Dr. Mourad Debbabi

Concordia University

Chasing Security Flaws in Software

In this talk, we will address the security aspect of software throughout the entire lifecycle. In this regard, we will discuss the important issues and the needed practices/techniques that contribute to a better engineering, deployment and maintenance of secure software. We will highlight the relevant research proposals that could be used to improve software security at all these stages. In particular, we will address the security hardening of software and show it could be done in a more scientific and systematic way. Finally, we will discuss the post-deployement forensic aspect that consists of investigating a cyber security incident. Accordingly, we will show how techniques from software engineering, program analysis and verification could be used to reach conclusive descriptions about the incident in question.

Biography

Dr. Debbabi is affiliated with the Concordia Institute for Information Systems Engineering, CIISE at Concordia University. His titles are:

• Full Professor
• CIISE Associate Director
• Concordia University Research Chair Tier I

Among his personal activities are:

• Specification Lead of 4 Java Specification Standards i.e. Java Specification Requests:
• JSR 164: JAIN SIMPLE Presence (based on the IETF SIP/SIMPLE Protocol)
• JSR 165: JAIN SIMPLE Instant Messaging (based on the IETF SIP/SIMPLE Protocol)
• JSR 186: JAIN Presence (protocol agnostic)
• JSR 187: JAIN Instant Messaging (protocol agnostic)
• Expert Group Member for the following Java Standards:
• JSR 123: JAIN PAM
• JSR 125: JAIN SIP Lite
• JSR 139: CLDC 1.1
• JSR 180: SIP for Java 2 Micro Edition (J2ME)
• JSR 185: Java Technology for Wireless Industry
• JAIN Council member
• JAIN IP Focus Team Member
• Participanted in the Executive Committee of the Java Community Process (representing Matsushita)