[Talk Ideas] – 14th of April 2023, Alexandru Iosup, Vrije Universiteit Amsterdam (VU)

14th of April, at 14h00, Alexandru Iosup will give a presentation entitled“Massivizing Graph Processing: The Science, Design, and Engineering of a Complex Ecosystem” 
Location: A5.4

Bio
Dr.ir. Alexandru Iosup is a full professor at Vrije Universiteit Amsterdam (VU), a high-quality research university in the Netherlands. He is the tenured chair of the Massivizing Computer Systems research group at the VU and visiting researcher at TU Delft. He is also elected chair of the SPEC-RG Cloud Group. His work in distributed systems and ecosystems includes over 150 peer-reviewed articles with high scientific impact, and has applications in cloud computing, big data, scientific and business-critical computing, and online gaming. His research has received prestigious recognition, including membership in the (Young) Royal Academy of Arts and Sciences of the Netherlands, the Netherlands ICT Researcher of the Year award, and a PhD from TU Delft. His leadership and innovation in education led to various awards, including the prestigious Netherlands Higher-Education Teacher of the Year. He has received a knighthood for cultural and scientific merits. Contact Alexandru at A.Iosup@vu.nl or @AIosup, or visit http://atlarge.science/aiosup

Abstract

Wherever we turn, our society is digital. Digital data and digitalized processes are becoming critical for science and engineering, decision-making and business-critical operations, and online education and gaming. An emerging building block of digitalization in the 21st century, graph representation of both real and digital states, is becoming common in practice. At societal and even global scale, these digital elements depend, often transparently from the perspective of their clients, on the effective inter-operation of efficient computer systems into large ecosystems, managed largely without a developer and even client input. However successful until now, we cannot take these ecosystems for granted: the core does not rely on sound principles of science and design, and there are warning signs about the scalability, dependability, and sustainability of engineering operations. This is the challenge of massivizing computer systems, and, as the focus here, of massivizing graph processing. 
In this talk, inspired by the recently started EU project Graph Massivizer [1], and by our experience with distributed computer systems for over 15 years, we focus on understanding, deploying, scaling, and evolving graph-processing ecosystems successfully. We explain GraphMassivizer’s ambitious, comprehensive research program that aims to develop a serverless, sustainable, graph processing platform, with applications to sustainable ICT infrastructure, AI/ML, FinTech, and Industry 4.0. We posit that we can address the fundamental challenges of massivizing graph processing by focusing on computer ecosystems rather than merely on (individual, small-scale) computer systems. We showcase diverse results in massivizing graph processing, including (1) a reference architecture, and a resource management and scheduling framework, that can span the computing continuum, (2) the design and development of graph processing engines, and (3) the development of a benchmark and performance analysis framework that led to a fundamental performance result. 
The session will be interactive, so bring over your questions, comments, and curiosity. We will have a team with diverse professional backgrounds ready to answer them. Thank you for joining!
[1] Graph Massivizer website: https://graph-massivizer.eu/

[Conference] – ISSRE 2023

Established in 1990, the Symposium is the major annual event for exchange of ideas between academic and industry thought leaders. Software reliability research community and ISSRE as the leading conference have become more international, diverse, and inclusive. Over the past 33 years ISSRE published research results from more than 2,100 authors in 1,200 rigorously reviewed papers. These papers were cited more than 35,000 times, making ISSRE one of the most influential references for software engineering R&D.

In 2023, SSE member Nuno Laranjeiro acted as chair of the Program Committee.

[Talk Ideas] – 12th of April, Anamta Khan and Jessica Castro

12th of March at 16h00, Anamta Khan and Jessica Castro  will give two short presentations, to promote discussion on two relevant ongoing or disruptive topics. Afterwards, there will be a social gathering where everyone can talk freely on whatever subjects they like.
Location: G4.1

Anamta Khan – “A Machine Learning driven Fault Tolerance Mechanism for UAVs’ Flight Controller” 

Bio
Anamta Khan is a PhD student in the SSE group at DEI. She obtained her Master’s and Bachelor’s degrees in Computer Science from the Institute of Business Administration (IBA) in Karachi. Her research focus since 2021 has been on creating a safer airspace with maximum and efficient utilization of drones. She utilizes fault injection in a simulation-based environment to identify vulnerabilities and their impact, and then uses machine learning-based techniques to address them.

Abstract
Unmanned Aerial Vehicles (UAVs), similar to other robotic systems, are susceptible to various hazards (e.g., software or hardware failures or security attacks) that may hinder mission completion and compromise safety by violating the separation minima (i.e., the minimum distance that must be maintained between UAVs in order to ensure safe and efficient operations). To address this issue, this paper proposes a new machine learning-based fault-tolerant mechanism for UAV flight controllers that tolerates GPS-related hazards and improves safety. Machine learning models were built using 884,410 data records from 1,985 flight logs collected from the PX4 public repository. The trained models are used to predict the expected position of the UAV during a mission, and separation minima are used as a threshold to detect the GPS hazards by comparing it with the distance between two consecutive position values. When a hazard is detected (i.e., the distance is higher than separation minima), the predicted values by machine learning models are fed into the position estimator (i.e., EKF) of the flight controller. To evaluate the effectiveness of this approach, validation experiments were conducted on several realistically defined missions while being exposed to different types of failure conditions (e.g., Noise and GPS failure), both with and without using the proposed fault-tolerant mechanism. The results show a remarkable reduction in the safety violations from 94 to 1 (violation of the separation minima counts), indicating a significant improvement in safety. Additionally, the proposed mechanism demonstrated a notable improvement in the distance covered and duration of the flight mission in failure conditions, demonstrating its ability to mitigate faults effectively. These findings support the effectiveness of the proposed fault tolerance mechanism in enhancing UAV mission performance by improving safety and tolerating issues caused by GPS.

Jessica Castro – “Attack Detection in Microservice Applications” 

Bio
Jessica Castro is a PhD candidate in Informatics Engineering at the University of Coimbra, Portugal. She received a BSc. in Computer Science and an MSc in Informatics from Universidade Federal da Paraíba, Brazil. Her research interests include attack detection, microservices/containerised applications, and self-adaptive systems.

Abstract
A microservices-based architecture decreases the complexity of developing new systems, making them highly scalable and manageable. However, its distributed nature, the high granularity of services, and the large attack surface increase the challenge of securing those systems. We will present the challenges of monitoring and identifying attacks in microservice applications at runtime and how we aim to use logic scoring of preference to calculate scores that allow identifying possible attacks.

[Conference] – ICPE 2023

The International Conference on Performance Engineering (ICPE) 2023 (https://icpe2023.spec.org) was organised in Coimbra, by SSE member Marco Vieira as General Chair. ICPE originated 14 years ago from the fusion of an ACM workshop on software and performance prediction and a SPEC workshop focused on benchmarking and performance evaluation.

ICPE continues true to its origins with focus both on software performance modeling, prediction, and measurement as well as on benchmark-based performance evaluation. The areas to which such principles are applied have evolved over the years with the technological evolution in academia and industry.

[Conference] – DSN 2023

The 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) 2023 (https://dsn2023.dei.uc.pt) was organized by SSE members Henrique Madeira and Marco Vieira as General Chairs. Over the years DSN has become a forum to present the best world research in the fusion between dependability and security research, understanding the need to simultaneously fight against accidental faults, intentional cyber-attacks, design errors, and unexpected operating conditions.  

[Talk Ideas] – 29th of March, Gabriel Campos

29th of March, at 16h00, Gabriel Campos will give a presentation entitled“Towards safe autonomous driving” 
Location: G4.1  (speaker will be remote)

Bio
Gabriel R. Campos is a Technical Expert on Precautionary Safety and Research Manager at Zenseact, where he works on safe planning and decision making for ADAS and AD systems. With a background on control theory, his research interests include safety assurance, behavioural prediction and threat-assessment and decision-making techniques. He has driven and participated to several production and research projects on robotic and autonomous vehicles topics, with a particular emphasis on safety critical systems and collision avoidance techniques. He received his Ph.D. in Automatic Control in 2012 from Grenoble University/Grenoble INP, France. Prior to joining the Zenseact, he was a visiting researcher at KTH, Sweden, as well as a postdoctoral fellow with the Department of Signals and Systems, Chalmers University of Technology, Sweden and the DEIB, Politecnico di Milano, Italy.

Abstract
This talk will focus on Zenseact’s journey towards safe automation solutions. We will provide an overview of our technology and  development platform, and describe some of our concepts and visions regarding the development of autonomous vehicles. We will also provide an overview of our research activities and bring forward some challenges and future research avenues.

Critérios para avaliação da produtividade científica dos grupos do CISUC

Princípios

  • Mudar o mínimo essencial. Isto é, o objetivo é atualizar o modelo que temos em vez de propor algo completamente diferente.
  • Seguir o princípio de que a avaliação da produtividade tem como objetivo induzir mudança (e não recompensar, premiar, distinguir ou glorificar). Consequentemente, as pontuações não são exclusivamente relacionadas com o valor intrínseco de cada resultado, mas correspondem essencialmente à decisão da CC de incentivar o aumento de determinado tipo de resultados (e.g., a pontuação de artigos em revistas A pode ser desproporcionadamente alta, mas isso significa apenas que se pretende aumentar esse tipo de resultados).
  • A mudança que se pretende induzir não é mais do que a continuada busca do CISUC para mais qualidade e relevância científica. Pretende-se simplesmente que a avaliação da produtividade leve a mais qualidade na produção do CISUC. A ideia não é impedir quantidade, mas sim evitar que a quantidade (de produção pouco relevante) acabe por ter mais peso na avaliação da produtividade do que a produção de alta qualidade.
  • Os incentivos (financeiros e de exposição interna) associados à avaliação da produtividade de cada grupo são instrumentos de motivação e não objetivos da avaliação de produtividade.
  • Os critérios e os pesos devem reavaliados de três em três anos, podendo ser revistos no fim de cada triénio, se a CC do CISUC achar que é necessário alterar a mensagem/incentivo dado pela avaliação da produtividade dos grupos.
  • Os dados são validados. A recolha dos elementos pode ser feita por funcionários ou por processos automáticos, mas os dados têm de ser validados pelos coordenadores dos grupos (e inerentemente pela CC). O processo de recolha de dados do site do CISUC e a validação pelos coordenadores começa imediatamente a partir de 31 de dezembro e têm de estar concluídos até 15 de Janeiro do ano seguinte.
  • O responsável pela validação da produção em cada grupo é o respetivo coordenador.
  • A produção do ano deve ser enviada como um documento produzido pelocoordenador.

O que continua igual

  • Continuar a usar o site do CISUC como fonte para a avaliação da produtividade.
  • Continuar a integrar as avaliações dos últimos três anos, mantendo os pesos de cadaano (10%, 30%, 60%).
  • A maioria dos critérios (ver secção ‘critérios e pontuações’) continuam a serconsiderados, sendo alteradas as pontuações.

O que não se considera

  • Não se consideram resultados de importância excecional, mas cuja probabilidade é muito baixa (e.g., Turing Award, bolsas ERC, prémios de carreira, etc.). Não é considerado pela sua natureza excecional e pelas dificuldades em estabelecer pontuação consistente com o valor da realização.
  • Projetos financiados (o que já acontecia anteriormente). A determinação dos grupos em conseguir financiamento já é muito forte e não precisa de incentivos extra neste momento.
  • Citações (o que já acontecia nos últimos anos). Apesar de ser muito fácil considerar as citações usando bases de dados disponíveis (desde que se aceite que as auto-citações são residuais e não alteram o impacto), considera-se ser suficiente o foco nas publicações em revistas e conferências de alto impacto.
  • Uma enorme quantidade de realizações (e tarefas associadas) que fazem parte inerente da condição de investigador do CISUC e de professor universitário. A título de exemplo referimos revisão de artigos, cargos na organização de eventos não contemplados na secção ‘critérios e pontuações’, arguições de teses de doutoramento em universidades estrangeiras ou portuguesas, avaliação de propostas de projetos, participação em júris nacionais ou internacionais, construção de protótipos e de tecnologia (a menos que seja patenteada), consultoria científica, cargos de gestão científica, etc.

Critérios e pontuações

Patentes

São considerados dois casos:

  • Autoria de patentes, propriedade da UC.
  • Autoria de patentes, propriedade de terceiros, i.e., patentes que resultem deinvestigação realizada no CISUC mas que sejam registadas em nome de outras entidades, desde que o registo tenha uma base contratual com a UC e desde que se respeite o Regulamento da Propriedade Intelectual da UC.

Livros

  • Não devem ser considerados livros com edição nacional.
  • Só devem ser considerados livros científicos.
  • Não considerar livros publicados por editoras classificadas como predatórias:https://beallslist.net/
  • Edição de proceedings não é considerada como edição de livros.

Artigos em Revista

  • Artigos em revista seguem a classificação da FCTUC que esteja em vigor no momento de classificação dos dados recolhidos, sendo contabilizadas as revistas A ou B.
  • Um artigo em revista é contabilizado considerando a data de primeira publicação (i.e., a primeira versão online) e não a data de aceitação ou publicação da versão final.
  • “Outras” revistas não devem contar, visto que se deve desencorajar publicações nas mesmas.
  • Não considerar revistas de editoras classificadas como predatórias: https://beallslist.net/

Artigos em Conferência

  • São considerados apenas os full papers (i.e., short papers, fast abstracts, posters não são considerados) em conferências selecionadas (A*, A, H5>30; B, H5>15; ou 2 sem ranking escolhidas até ao fecho da recolha dos dados) e publicados na track de research (e.g., artigos em companion proceedings como a ISSREW, ou DSN-W não contam)
  • Os artigos são classificados usando o valor mais favorável das seguintes duas fontes: 
  • São considerados artigos premiados (e.g., best paperdistinguished papers) nas conferências selecionadas, mas não são considerados os que foram apenas nomeados para prémio (e não o conseguiram).
  • Artigos em conferência não devem ser contabilizados como capítulos de livros.

Organização de Eventos

  • É considerado o organizador do evento principal nas funções de General Chair ou PC- Chair nas conferências selecionadas (A*, A, H5>30; B, H5>15; ou as 2 sem ranking). Funções de organização de tracks dentro do evento principal (e.g, industry trackstudent forum, doctoral symposium), ou workshops, não são consideradas.

Edição de Revistas

  • Para o item Edição de Revistas são consideradas apenas as funções de Editor-in-ChiefAssociate Editor Guest Editor nas revistas da lista da FCTUC. De notar que os critérios não contemplam tarefas de Editor em conferências (que envolve identificação de reviewers e escrita de meta-reviews).
  • É considerado o momento em que encerra o call for papers para determinação do ano em que deve ser considerada a função.

Pontuação em itens partilhados

  • Quando há participação de grupos diferentes na Organização de Eventos, Autoria de Artigos ou PhDs concluídos, a contabilização é feita de forma simples, sendo calculada individualmente em cada grupo (i.e., sem divisão da pontuação), como fator de estímulo à colaboração entre grupos. Um resultado produzido por vários elementos de um só grupo é contabilizado uma só vez.

[Talk Ideas] – 8th of March, Gonçalo Carvalho and José Pereira

8th of March at 16h00, Gonçalo Carvalho and José Pereira will give two short presentations, to promote discussion on two relevant ongoing or disruptive topics. Afterwards, there will be a social gathering where everyone can talk freely on whatever subjects they like.
Location: G4.1

Gonçalo Carvalho – “From the ER+ conceptual model to its logical model” 
Bio

Gonçalo Carvalho has a background in Geography and after a change of field is currently doing his Ph.D. research in Data models for multi-layer systems. His major research interests are in the areas of databases, distributed systems, edge computing, cyber-physical systems, and green computing.

Abstract
Distributed databases and data transformation mechanisms are remarkably relevant for Business Intelligence and Data Analytics. The Entity-Relational (ER) model is fundamental for modeling complex enterprise systems, but has shortcomings. ER+ tackled the representation of multiple database locations and conceptually expressed data transportation and data transformation operations, such as aggregate and line functions, which are standard for data analytics. The new ER+ concepts need a logical representation, which we will introduce in this talk. 

José Pereira – “On the Use of Deep Graph CNN to Detect Vulnerable C Functions and Function Prioritization Techniques” 
Bio

José D’Abruzzo Pereira is a Ph.D. student in Informatics Engineering at the University of Coimbra (UC) and a member of the Software and System Engineering (SSE) group at CISUC. His research interests include security and vulnerability detection, static code analysis, software project management, software quality, and self-adaptive systems. He received a MSc in Information Technology and Software Engineering from the University of Coimbra and Carnegie Mellon University and a BSc. in Computer Science from the State University of Campinas – Brazil (Unicamp). He is also acting as a professor in the Specialization in Software Engineering at the State University of Campinas – Brazil (Unicamp) and as an Invited Assistant Professor at the University of Coimbra.

Abstract
Software vulnerabilities are a problem in most software systems. If left unchecked, they can be exploited by malicious third parties to compromise the system, which can result in hazardous consequences. Over the years, several techniques have been proposed to tackle the problem of automatically detecting vulnerabilities. However, despite the efforts, they usually issue many false alarms, which create a large overhead for the development team to analyze them. In this work, we study the viability of using a static technique (developed initially to classify classes of malware) to detect vulnerable C functions. This technique uses the Control Flow Graph (CFG) of the functions, features related to the structure of the graph, and the code sequence. Different from the malware classification problem, we also extract memory management-related features. A Deep Graph Convolutional Neural Network (DGCNN) processes all of the features. To do that, we use vulnerable and non-vulnerable functions of the open-source Linux Kernel project. Results show that a high recall can be obtained using this approach at the cost of low precision. At this point, a new prioritization mechanism is under development, and it uses Quality Models (QMs) to rank the functions. In addition, a security expert classification will help validate the prioritization mechanism.

Scholarships

Details concerning scholarships, FCT, research, grades/degrees recognition (payments/reimbursement)

[Conference] – ISSRE 2020

The 31st International Symposium on Software Reliability Engineering (ISSRE) 2020 (https://2020.issre.net/), was organized by SSE members Marco Vieira and Henrique Madeira.

ISSRE has become over the years a forum to present the best world research in software reliability engineering, it boasts the largest industry participation among advanced technical conferences. Architects, QA leads, project managers and researchers can select from a large set of talks and never see each other at the conference! This is the perfect training opportunity for senior technical staff.