Showing posts with label soa security governance. Show all posts
Showing posts with label soa security governance. Show all posts

9 May 2011

Industrial internship opportunities

I've started the recruitment for the next wave of SOA governance & security related internships.

UK, SOA Governance, BT, summer 2012, http://home.agh.edu.pl/~pdl/index_files/BT%20AGH%20krakow%20uni%20internship%20offer.pdf

Sweden, SOA Security, Axiomatics, summer 2011, http://home.agh.edu.pl/~pdl/index_files/axiomatics%20AGH%20krakow%20uni%20internship%20offer.pdf

Obviously students from AGH-UST, especially from the katedra informatyki, will be considered first.

16 November 2009

Summer tour 2009 part 2, more submissions and writing up

It seems a bit late to write about the second part of last summer but here goes.

Following ICWS, I kept writing on my thesis (and still am) as well as polishing an article for a special edition “Security and Trust Management for Dynamic Coalitions” of the Wiley's Journal on Security and Communication Networks [1].

This was hard work that finally paid off thanks to David, Aris and couldn't have been done without Theo's guidance [2]. For the record this was a 6 months long denouement, with the 1st submission in January (2009) of 70ish pages which was accepted with major revisions, the 2nd submission of 20 pages long but which didn't comprise a change log that specified what and why we did changes in function of the reviews provided, before finally this last one...

By the way kudos to the reviewers for not only accepting the tedious task of going through and reviewing 70 pages of technical text but also doing it as well as they did! This is probably the best pieces of reviewing I have seen to date.

[1] http://www3.interscience.wiley.com/journal/114299116/home?CRETRY=1&SRETRY=0

[2] David Brossard, Nektarios Georgalas and Theo Dimitrakos

21 July 2009

Summer tour 2009 part 1, AFIN and ICWS

AFIN’09 [1], in Glyfada, earlier this summer was a blast. These IARIA conferences might have a bad reputation amongst the academic community but I keep having a good time. This time I hooked up with some old acquaintance from Luxembourg University and met Reijo Savola from VTT amongst other Finns. We talked a bit about the GEMOM project [2] which seem to share a set of common goals with what we are working on at BT [3]. Hopefully further discussions with Reijo and Habtamu Abie from the Norwegian Computing Center will happen and be fruitful!

At the very opposite, ICWS [4], one of the top event in SOA in the academic calendar was very disappointing…Organisation was poor and the sessions I went to were almost empty. In addition, how can a paper on federated identity such as [5] can even make it to a research conference (especially one like ICWS) is staggering. As far as I can see there is no innovation, XACML solutions have been out there for 2-3 years at least now. Works from industry leaders like Layer 7, Vordel, Microsoft, Axiomatics and academic organisations like Newcastle, Vrije Universiteit and plenty others have been completely missed…very poor choice of paper. A quick look at that paper and its related work section will, I think, shock any SOA security researcher.

[1] The First International Conference on Advances in Future Internet, AFIN 2009, June 18-23, 2009 - Athens/Glyfada, Greece, http://www.iaria.org/conferences2009/AFIN09.html

[2] Genetic Message Oriented Genetic Middleware (GEMOM), A FP7 European Project - January 2008 – June 2010, http://www.gemom.eu

[3] Dimitrakos, T., Brossard, D. and de Leusse, P., Securing the Service Oriented Infrastructure: research challenges and emerging solutions, Handbook on communications and information security, Stavroulakis, P, 2009, To be published

[4] IEEE 7th International Conference on Web Services (ICWS 2009), July 6-10, 2009, Los Angeles, CA, USA, http://conferences.computer.org/icws/2009/

[5] Regina N. Hebig, Christoph Meinel, Michael Menzel, Ivonne Thomas, Robert Warschofsky, A Web Service Architecture for Decentralised Identity- and Attribute-based Access Control, Proc. 7th IEEE ICWS (Application and Industry Track), Los Angeles, USA, July 2009

12 March 2009

Self Managed Security Cell, a security model for the Internet of Things and Services (IoTS)

I'm delighted to announce that my paper with Panos [1] and Theo [2] on Self Managed Security Cell, a security model for the Internet of Things and Services (IoTS) has been accepted at AFIN 2009 [3].

This paper discusses what we feel is necessary for security to work efficiently in the IoTS. IoTS is such an exciting domain and this paper is a written version of dicussions on the topic we've had at work/coffee/home/in front of the XBox...:)

[1] http://periorellis.blogspot.com/

[2] http://labs.bt.com/cissr/People.html

[3] The First International Conference on Advances in Future Internet AFIN 2009

10 March 2009

IFIPTM'09 SOA security governance demonstration

No post for ages as I've been kept very busy for the last few months.

But some results are starting to show up and to start: a demonstration proposal from David Brossard and myself has been accepted at IFIPTM 09 [1]. I'll present a prototype of SOA security governance I'm working on (the evaluation bit of my thesis). Some interesting (complex) middleware that allows to simplify and render security more dynamic for distributed systems. I cannot write much more about it since BT is attempting to patent it but it's both interesting and cool ;).

I've seen in the accepted papers that my ex colleague at Newcastle University Georgios PITSILIS is presenting his research. I hope I'll be able to catch up with him and see what he's up to now [2].

[1] The 3rd IFIP International Conference on Trust Management (IFIPTM'09) http://projects.cerias.purdue.edu/IFIPTM/

[2] Georgios PITSILIS. Trust-enhanced Recommender Systems for Efficient
On-line collaboration http://projects.cerias.purdue.edu/IFIPTM/apaper.html