Publications 2013

Thèses et habilitations à diriger les recherches

1. Azzeddine Amiar. Aide à l'analyse de traces d'exécution dans le contexte des microcontrôleurs. Thèse de l'Université de Grenoble, France, Novembre 2013.
2. Sofia Bekrar. Recherche de vulnérabilités logicielles par combinaison d'analyses de code binaire et de frelatage (fuzzing). Thèse de l'Université de Grenoble, France, Octobre 2013.
3. Taha Triki. Réduction et filtrage de tests combinatoires. Thèse de l'Université de Grenoble, France, Octobre 2013.
4. Yves Grasland. Test fonctionnel de propriétés hybrides. Thèse de l'Université de Grenoble, France, Février 2013.

Ouvrages

1. Proceedings of GreHack 2013, the Second International Symposium on Research in Grey-Hat Hacking. Fabien Duchene (ed.), Springer, Grenoble, France, Novembre 2013. download

Articles de journaux

1. Michele Amoretti, Gianluigi Ferrari, Jean-Luc Richier, Andrzej Duda. Patents on IPv6-Related Technologies. Recent Patents on Computer Science, 6(3):170-180, 2013.
2. Y. Falcone, M. Jaber, Th-H. Nguyen, M. Bozga, S. Bensalem. Runtime Verification of Component-Based Systems in the BIP Framework with Formally-Proved Sound and Complete Instrumentation. SOSYM, SOftware and SYstem Modeling, 2013.
3. M. Shahbaz, R. Groz. Analysis and testing of black-box component based systems by inferring partial models. Software Testing, Verification and Reliability, Février 2013. download

Chapitres de livres

1. Y. Falcone, K. Havelung, G. Reger. A Tutorial on Runtime Verification. In Summer School Marktoberdorf 2012 - Engineering Dependable Software Systems, Manfred Broy, Doron Peled (eds.), pp. 141-176, IOS Press, 2013.
2. Muhammad Naeem Irfan, Catherine Oriat, Roland Groz. Model Inference and Testing. In Advances in Computers, Atif Memon (ed.), Vol. 89, pp. 89-139, Elsevier, Avril 2013.

Conférences internationales

1. Azzeddine Amiar, Mickaël Delahaye, Yliès Falcone, Lydie du Bousquet. Single-Trace Fault Localization in Embedded Software. In 24th IEEE International Symposium on Software Reliability Engineering (ISSRE 2013), Pages 148-157, Pasadena, CA, USA, 2013.
2. Frédéric Dadeau, Kalou Cabrera Castillos, Yves Ledru, Taha Triki, German Vega, Julien Botella, Safouan Taha. Test Generation and Evaluation from High-Level Properties for Common Criteria Evaluations - The TASCCC Testing Tool. In 2013 IEEE Sixth International Conference on Software Testing, Verification and Validation (ICST 2013), Pages 431-438, Luxembourg, 2013. download
3. Mickaël Delahaye, Nikolai Kosmatov. A Late Treatment of C Precondition in Dynamic Symbolic Execution Testing Tools. In Runtime Verification (RV 2013), LNCS, Volume 8174, Pages 328-333, Rennes, France, 2013.
4. Yliès Falcone, Sebastian Currea, Mohamad Jaber. Runtime Verification and Enforcement for Android Applications with RV-Droid. In Third International Conference on Runtime Verification, RV 2012, Pages 88-95, 2013.
5. Srinivas Pinisetty, Yliès Falcone, Thierry Jéron, Hervé Marchand, Antoine Rollet, Omer Landry Nguena-Timo. Runtime Enforcement of Timed Properties. In Third International Conference on Runtime Verification, RV 2012, Pages 229-244, 2013.
6. Muhammad Nafees Qamar, Johannes Faber, Yves Ledru, Zhiming Liu. Automated Reviewing of Healthcare Security Policies. In Postproceedings of the 2nd Intl Symposium on the Foundations of Health Information Engineering and Systems - FHIES 2012, Lecture Notes in Computer Science, Volume 7789, Pages 176-193, 2013.
7. Sanjay Rawat, Fabien Duchene, Roland Groz, Jean-Luc Richier. Evolving Indigestible Codes: Fuzzing Interpreters with Genetic Programming. In IEEE Symposium on Computational Intelligence in Cyber Security (CICS 2013), in association with the IEEE Symposium Series on Computational Intelligence (SSCI 2013), Pages 37-39, Singapore, Singapore, 2013.
8. Yliès Falcone, Hervé Marchand. Runtime Enforcement of K-step Opacity. In 52nd IEEE Conference on Decision and Control (CDC 2013), Pages 7271-7278, Florence, Italy, Décembre 2013.
9. Fabien Duchene. Fuzz in the Dark: Genetic Algorithm for Black-Box Fuzzing. In Black-Hat, São Paulo, Brazil, Novembre 2013.
10. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. LigRE: Reverse-Engineering of Control and Data Flow Models for Black-Box XSS Detection. In Working Conference in Reverse Engineering (WCRE 2013), Volume 20, Pages 252-261, Koblenz-Landau, Germany, Octobre 2013.
11. Mickaël Delahaye, Lydie du Bousquet. A Comparison of Mutation Analysis Tools for Java. In International Conference on Quality Software (QSIC 2013), Pages 187-195, Juillet 2013.
12. Azzeddine Amiar, Mickaël Delahaye, Yliès Falcone, Lydie du Bousquet. Compressing Microcontroller Execution Traces to Assist System Analysis. In International Embedded Systems Symposium (IESS), Pages 139-150, Juin 2013.
13. Akram Idani, Yves Ledru, Adil Anwar. A rigorous reasoning about model transformations using the B method. In International Conference on Exploring Modelling Methods for Systems Analysis and Design (EMMSAD'2013), held at CAiSE 2013, Pages 426-440, Valencia, Spain, Juin 2013.
14. Y. Grasland, L du Bousquet, R. Groz, I. Parissis. A Functional Testing Approach for Hybrid Safety Properties with Incomplete Information. In Sixth International Conference on Software Testing, Verification and Validation (ICST 2013), Pages 104-113, Luxembourg, Avril 2013.
15. Mickaël Delahaye, Nikolai Kosmatov, Julien Signoles. Common Specification Language for Static and Dynamic Analysis of C Programs. In 28th Annual ACM Symposium on Applied Computing (SAC 2013), Pages 1230-1235, Mars 2013.
16. Mickaël Delahaye, Nikolai Kosmatov. A Late Treatment of C Precondition in Dynamic Symbolic Execution. In Fifth Workshop on the Constraints in Software Testing, Verification and Analysis (CSTVA 2013), Pages 230-231, Mars 2013.
17. Karim Hossen, Roland Groz, Catherine Oriat, Jean-Luc Richier. Automatic generation of test drivers for model inference of web applications. In Fourth International Workshop on Security Testing (SECTEST 2013), Workshop of the IEEE Sixth International Conference on Software Testing, Verification and Validation (ICST 2013), Pages 441-444, Luxembourg, Mars 2013.

Communications avec actes

1. Akram Idani, Yves Ledru, Mohamed-Amine Labiadh. B4MSecure : une plateforme IDM pour la modélisation et la validation de politiques de sécurité en Systèmes d'Information (démo). In Actes de la Conférence AFADL'13: Approches Formelles dans l'Assistance au Développement de Logiciels, Pages 85-89, Nancy, 2013.
2. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. Fuzzing Intelligent de XSS Type-2 Filtrés selon Darwin: KameleonFuzz. In Symposium sur la Sécurité des Technologies de l'Information et des Communications (SSTIC), Pages 289-311, Rennes, France, Juin 2013.

Rapports de recherche

1. Roland Groz, Keqin Li, Alexandre Petrenko. Verification of Modular Systems with Unknown Components Combining Testing and Inference. Research Report LIG, No 28, 2013.
2. Azzeddine Amiar, Mickaël Delahaye, Yliès Falcone, Lydie du Bousquet. CoMET: Compressing Microcontroller Execution Traces to Assist System Understanding. Research Report LIG, No 31, Février 2013.

Autres communications

1. Frédéric Dadeau, Kalou Cabrera Castillos, Yves Ledru, Lydie du Bousquet, Taha Triki, German Eduardo Vega Baez, Safouan Taha, Bruno Legeard, Julien Botella, Boutheina Chetali, Julien Bernet, David Rouillard. TASCCC - Project and Testing Tool (poster). Actes des Cinquièmes journées nationales du Groupement De Recherche CNRS du Génie de la Programmation et du Logiciel, pp. 198-198, Nancy, France, 2013.
2. Akram Idani, Yves Ledru, Mohamed-Amine Labiadh. B4MSecure : A MDE platform for modeling and validation of Secure Information Systems (poster). Actes des Cinquièmes journées nationales du Groupement De Recherche CNRS du Génie de la Programmation et du Logiciel, pp. 211-211, Nancy, France, 2013.
3. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. KameleonFuzz : The day Darwin drove my XSS Fuzzer!. talk given at the 1st European workshop on Web Application Security Research (WASR), with OWASP AppSecEU, Hamburg, Germany, Août 2013.
4. Karim Hossen. SIMPA: Model Based Testing Without the pain of Writing Models. talk given at the 1st European workshop on Web Application Security Research (WASR), with OWASP AppSecEU, Hambourg, Germany, Août 2013.
5. Fabien Duchene. BlackBox Web Vulnerability Detection with Model Inference assisted Evolutionary Fuzzing. 2nd SysSec Workshop, Poster presented at SysSec Workshop, Bochum, Germany, Juillet 2013.
6. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. A Hesitation Step into the BlackBox: Heuristic-Based Web Applications Reverse Engineering. NoSuchCon (NSC), Paris, France, Mai 2013.
7. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. Evolutionary Fuzz Testing Techniques - Advances and Applications (tutorial). the sixth IEEE International Conference on Software Testing, Verification, and Validation (ICST), Luxembourg, Mars 2013.