| 9:10 - 10:00 |
Talks I
StopCri: Stochastic Patrolling of Critical Infrastructure Presented by Jonáš Rosecký (FI MUNI) and Vojtěch Řehák (FI MUNI) Main Partners: FI MUNI, Regional Military Command Brno
Abstract: Patrolling critical infrastructure is one of the fundamental tasks of security forces. The traditional and widely used methodology of physical patrolling relies on optimizing deterministic routes traversed by patrollers. This methodology suffers from predictable patroller movements and weak coverage, especially in scenarios where the importance of checkpoints is not uniform. We present our tool StopCri, a system for designing, executing, and automatically adapting randomized patrolling strategies, which has been successfully deployed multiple times during Czech Armed Forces exercises to patrol selected critical infrastructure sites.
Post-Quantum Cryptography: From Math and Engineering to Products and Services Presented by Jan Hajný (FEEC BUT), Lukáš Kekely (CTO, DYNANIC) Main Partners: FEEC BUT, DYNANIC
Abstract: The transition from classical cryptography to quantum-safe systems is one of the hottest topics in cybersecurity. It involves not only the technical development of novel ciphers and their implementations, but also national roadmapping and public-awareness activities. In this talk, we describe the journey of developing, piloting, and transferring a post-quantum hardware-accelerated network encryptor, a technical outcome of R&D at FEKT VUT. We cover the development phase, supported by national projects and national security authorities; the piloting phase, supported by the Cyber-security Excellence Hub in Estonia and South Moravia (project CHESS); the technology transfer carried out with DYNANIC, a BUT spin-off; and upcoming activities that extend beyond the Czech Republic.
|
| 10:25 - 11:40 |
Talks II
Analysing secure IT products and system with sec-certs Presented by Václav (Vashek) Matyáš (FI MUNI) and Jaroslav Řezník (Red Hat) Main Partners: FI MUNI, Red Hat
Abstract: We present sec-certs, an open-source system that analyses certification documents of secure IT products and systems, covering the schemes of the Common Criteria for Information Technology Security Evaluation, FIPS 140-3 Security Requirements for Cryptographic Modules, and also the European Common Criteria-based Cybersecurity Certification Scheme (EUCC). These schemes cover over 13 000 IT products and systems, and sec-certs enables anybody to analyze the complex web of certification documents, track them to reported vulnerabilities and gain many novel insights from the ecosystem of certified products.
Perun: The Road From Academia to AI-assisted Performance Testing of Linux Kernels at Industry Scale. Presented by Jiří Pavela (FIT BUT) Main Partners: FI MUNI, FIT BUT, Red Hat
Abstract: In this talk, we will introduce Perun, a performance engineering tool suite, and discuss its evolution from an academic prototype to a production-ready tool. We will focus on the latest addition to the tool suite: the Report tool that provides a compact overview of performance changes between project revisions and leverages LLMs to speed up the analysis of performance regressions. We will also share the results and lessons learned from over two years of successful deployment of Perun by the Kernel Performance Engineering team at Red Hat, where Report is used for triage and root cause analysis of performance regressions in new kernel versions.
Resource-Bounded Machine Reasoning in Safety-Critical Aerospace Systems Presented by Zuzana Schulmeisterová (FI MUNI) Main Partners: FI MUNI, FIT BUT, Honeywell Aerospace
As the aerospace industry races towards safe advanced autonomous systems, the size and complexity of safety-critical code is rapidly accelerating, thereby increasing the cost to develop, maintain, and certify such systems. Based on our industrial experience, sufficiently expressive rule-based declarative languages paired with machine reasoning algorithms make the development and maintenance of such autonomous systems more tractable. Crucially, to be eligible for deployment in heavily regulated safety-critical aerospace domains, such systems must meet strict requirements. For instance, the worst-case time and memory bounds of executing rule-based programs must provably fit within the resource limits available on avionics hardware. In this talk, we introduce our tools and algorithms that (1) analyse the worst-case resource bounds of rule-based programs, and (2) guarantee small and bounded memory consumption during the execution of long-running rule-based reactive programs.
|