CASSIS: Construction and Analysis of Safe, Secure and Interoperable Smart Devices

by Gilles Barthe, Benjamin Grégoire, Marieke Huisman and Jean-Louis Lanet

Following last year edition in Marseilles, the second edition of the International Workshop on the Construction and Analysis of Safe, Secure and Interoperable Smart Devices was held in Nice, 8-11 March 2005.

The aim of the CASSIS workshop is to bring together experts from the smart devices industry and academic researchers, with a view to stimulate research on formal methods and security, and to encourage the smart device industry to adopt innovative solutions drawn from academic research. In order to address the different issues raised by the evolution of smart devices, the workshop consisted of seven thematic sessions:

Session 1: Research trends in smart devices. The session was organized by Jean-Jacques Vandewalle, from Gemplus. The session was dedicated to providing perspectives on possible evolutions of smart devices. The keynote speaker was Gilles Privat, from France Telecom R&D.
Session 2: Web services. The session was organized by Cédric Fournet and Andy Gordon, from Microsoft Research Cambridge. This session focused on security issues for web services, including trust and identity management, and formal and automatic verification of web services deployments. The session was followed by a panel discussion on web services security, chaired by Andy Gordon. The keynote speaker was Cédric Fournet.
Session 3: Virtual machine technology. This session covered new developments in Java technologies and in for developing generic, adaptable and maintainable platforms for smart devices. The keynote speaker was Sophia Drossopoulou, from Imperial College London.
Session 4: Security. This session was devoted to security issues from a wider perspective, and addressed issues such as elecronic voting, Internet threat analysis, privacy and language-based security. The keynote speaker was Dan Wallach, from Rice University, Texas.
Session 5: Validation and formal methods. This session, organized by Thomas Jensen, from IRISA Rennes, focused on verification techniques for Java-like applications, including run-time verification, program analyses, and interactive verification. The keynote speaker was Klaus Havelund, from Kestrel Technology at NASA Ames Research Center.
Session 6: Proof-Carrying Code. The session was organized by Adriana Compagnoni. It was devoted to the presentation of Proof-Carrying Code architectures, and of their applications to advanced security policies about resouce control and information flow. The keynote speaker was George Necula, from the University of California at Berkeley.
Session 7: Embedded devices. The final session was organized by Traian Muntean, from Marseilles University, and Jean-Louis Lanet, now at Gemplus. The session focused on technology issues that arise from the evolution of embedded devices into networked mobile devices. The keynote speaker was Rajesh Gupta, from the University of California at Irvine.

The workshop was attended by over 70 participants. The organizers would like to thank the session organizers, speakers and participants for contributing to make CASSIS 2005 a stimulating and enjoyable event. The organizers would also like to acknowledge financial support from ERCIM, Gemplus International S.A, and Oberthur Card Systems. A special thanks goes to the support teams at INRIA Sophia-Antipolis, and in particular to Nathalie Bellesso and Monique Simonetti for their help in organizational matters.

Link:
CASSIS’05: http://www-sop.inria.fr/everest/events/cassis05/index.html

Please contact:
Gilles Barthe, INRIA
Tel: +33 4 92 38 79 38
E-mail: Gilles.Barthesophia.inria.fr