Research overview

My research interests are in the field of model-based software development as well as quality assurence by validation and verification. In particular, my research is focussed on the integration of formal foundations and proof techniques into the model-driven software engineering and model-based testing techniques. This comprises work on the semantic foundation of specification and programming languages, the development of calculi for refinement and test-generation as well as the construction of correct tools in order to support these activities during design, verification, systematic test and certification.

Particular application fields of these techniques have been models of security mechanisms and (more recently) operating systems.

A a mission, I believe in Unity within Computer Science - we should strive for a few principles and tools to solve the problems ahead instead diving into too many local techniques.

Ongoing research projects

Past research projects

  • The project PST Performances des Systemes de Transport at SystemX (June. 2016 - June. 2019). The new generations of transport system equipment must be able to integrate monitoring, communication and optimization functions (cyber security, data collection, energy saving etc.) while at the same time ensuring safe, high performance operation of the basic functions of control/command. In a sub-project called T4, an integrated formal development has been undertaken together with the development of a specific "continuous verification/continuous-build" tool-chain based on Isabelle/HOL. Managing an integrated document, it is designed to assure the global coherence from models, designs, code, tests and thorough documentation of the process targeting formal certification following CENELEC.
  • The EU-Project EUROMILS (Oct. 2012 - Sept. 2015 ). The projects cornerstone is MILS (Multiple Independent Levels of Security), a high-assurance security operating system that supports the coexistence of untrusted and trusted components, based on verifiable separation mechanisms and controlled information flow. For the first time in Europe, EURO-MILS does a complete Common Criteria security evaluation of a MILS system to its highest levels of assurance, including formal verification engineering. Hardware dependencies are addressed from the beginning by prototype development on two hardware platforms in automotive and avionics.
  • The ANR-project Paral-ITP (Nov. 2011 - Apr. 2015) with the Project Partners are INRIA Roquencourt (Hugo Herbelin), INRIA Saclay (Bruno Barras) and U-PSud/LRI (B.Wolff, Project Leader).
    The proposed project intends to overcome the sequential model both for Coq and Isabelle, to make the resources of multi-core hardware available for even larger proof developments. Beyond traditional processing of proof scripts as sequence of proof commands, and batch-loading of theory modules, there is a large space of possibilities and challenges for pervasive parallelism. This affects many layers of each prover system: basic computational structures, inference kernel, tactical programming, proof command language, and interactive front-ends.
  • The HOL-TestGen-XT project (2009-2012) was accepted as part of the "Chair d'excellence" program of the University Paris-Sud. The ultimate goal of this research proposal was to extend the realm of feasible state-spaces for HOL-TestGen system (see below) by several orders of magnitude - thus offering even more potential for industrial applications in realistic model-based test-scenarios.
  • I was initiator of the project MBT-SEC, funded by British-Telecom (2007-2010). The goal was to use Security policies as model-based specifications for system behaviour and to derive test-cases for them.
  • I was invited researcher in the FSE group (headed by Dr. Wolfram Schulte) at Microsoft Research, Redmond, USA. I investigated ways of an extension of the existing Boogie-Codeverification Tool for the programming language C with interactive proof techniques supported by Isabelle/HOL.

Tools

Currently, I am actively developping or maintaining the following tools stemming from former projects. Sources, examples, documentation and specialized publication lists can be received from the corresponding tool web-sites:

Collaborations

  1. Project "PST" with IRT SystemX (headed by Francoise Caron,Alstom; , Paul Labrogere SystemX). (Started 169).
  2. Project "FSF" with IRT SystemX (headed by Elie Soubiran,Alstom, Paul Labrogere SystemX) and Inria Saclay (headed by Bruno Barras). (2012-15).
  3. Project "Paral-ITP" with Inria Roquencourt (headed by Hugo Herbelin) and Inria Saclay (headed by Bruno Barras). (Started 2010). See above.
  4. Project "EURO-MILS" with SysGO (headed by Sergey Tverdyshev) and consortium of 10 other partners. (Started 2010). See above.
  5. Project "MBTSEC" with ETH Zürich (Computer Security headed by David Basin) and British Telecom (contact: Dr. Paul Kearney). Finished (2012).See above.
  6. Collaboration with the Verisoft-Project (Universität Saaarbrücken, Computer Architecture Group headed by Wolfgang Paul) on Verification and Test of Operating Systems. (Finished 2011).
  7. PIDE Task-Force with TU-München and University Tübingen, Germany, on future GUI designs for massive parallel formal development tools. (Finished 2010).

Phd Supervisions

  • Benjamin Puyobro (Uni Paris-Saclay, en cours.)
  • Benoît Ballenghien (Uni Paris-Saclay, finished Dec 2025)
  • Nicolas Meric (Uni Paris-Saclay, finished Dec 2024)
  • Hai Nguyen Van (Uni Paris-Sud, finished June 2018)
  • Frédéric Tuong (Uni Paris-Sud, finished March. 2017)
  • Romain Aissat (Uni Paris-Sud, finished Dec. 2016)
  • Yakoub Nemouchi (Uni Paris-Sud, finished Dec. 2015)
  • Matthias Krieger (Uni Paris-Sud, finished Dec. 2011) Test Generation and Animation Based on Object-Oriented Specifications.

    • Co-supervisions:

  • Lukas Brügger (ETH Zürich, started Sept. 2007, finished June 2012). A Framework for Modelling and Testing of Security Policies.
  • Achim Brucker (ETH Zürich, finished Feb. 2007): An Interactive Proof Environment for Object-Oriented Specifications.
  • Thomas Meyer (Universität Bremen, finished 2005): A Framework for Formal Representation and Transformational Optimization of Executable Specifications.
  • Haykal Tej (Universität Bremen, finished 2003): CSP in Isabelle/HOL.
  • Kolyang (Universität Bremen, finished 1997): An Integrated Formal Support Environment for Z in Isabelle/HOL.