Oulu University Secure Programming Group: Difference between revisions

Revision as of 20:57, 12 September 2013

Latest revision as of 06:02, 17 August 2023

(5 intermediate revisions by 5 users not shown)

Line 1:

The '''Oulu University Secure Programming Group''' ('''OUSPG''') is a research group at the [[University of Oulu]] that studies, evaluates and develops methods of implementing and testing [[Application software|application]] and [[System software|system software]] in order to prevent, discover and eliminate implementation level security [[Vulnerability (computing)|vulnerabilities]] in a pro-active fashion. The focus is on implementation level security issues and software [[security testing]].

==History==

OUSPG has been active as an independent academic research group in the Computer Engineering Laboratory in the Department of Electrical and Information Engineering in the University of Oulu since summer 1996.

OUSPG is most known for its participation in protocol implementation security testing, which they called [[robustness testing]], using the PROTOS mini-simulation method.<ref name="kaksonen_2001">{{Cite thesis |type= Licentiate thesis |chapter= |title= A Functional Method for Assessing Protocol Implementation Security |url= |last= Kaksonen |first= Rauli |year= 2001 |place=Espoo |publisher= Technical Research Centre of Finland |series= VTT Publications 448 |accessdate= |docket= |oclc= | url = http://www.vtt.fi/inf/pdf/publications/2001/P448.pdf |accessdateaccess-date=12 September 2013 |format=PDF |isbn= 951-38-5874-X | pages = 128&nbsp;p. + app. 15&nbsp;p.| noppno-pp=y}}</ref>

The PROTOS was co-operated project with VTT and number of industrial partners. The project developed different approaches of testing implementations of protocols using [[Black-box testing|black-box]] (i.e. functional) testing methods. The goal was to support pro-active elimination of faults with information security implications, promote awareness in these issues and develop methods to support customer driven evaluation and acceptance testing of implementations. Improving the security robustness of products was attempted through supporting the development process.

Line 21:

{{Dual|source=University of Oulu|sourcepath=http://www.ee.oulu.fi/research/ouspg/|sourcearticle=Oulu University Secure Programming Group|date=12:21, 30 July 2009 (UTC)}}

* {{Cite thesis |type= Licentiate thesis |chapter= |title= A Functional Method for Assessing Protocol Implementation Security |url= |last= Kaksonen |first= Rauli |year= 2001 |place=Espoo |publisher= Technical Research Centre of Finland |series= VTT Publications 448 |accessdate= |docket= |oclc= | url = http://www.vtt.fi/inf/pdf/publications/2001/P448.pdf |accessdateaccess-date=12 September 2013 |format=PDF |isbn= 951-38-5874-X | pages = 128&nbsp;p. + app. 15&nbsp;p.| noppno-pp=y}}

* {{cite web|title=Oulu University Secure Programming Group|url=https://www.ee.oulu.fi/research/ouspg/|publisher=University of Oulu|___location=Oulu|accessdateaccess-date=12 September 2013|archive-date=2 November 2013|archive-url=https://web.archive.org/web/20131102233407/https://www.ee.oulu.fi/research/ouspg/|url-status=dead}}

==External links==

* {{cite web|last=Poulsen|first=Kevin|title=Feds, Industry, Battle the Biggest Bug|url=http://www.securityfocus.com/news/474|work=SecurityFocus|accessdateaccess-date=12 September 2013 |date=12 June 2002}}

* {{cite web|title=CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats|url=https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html|work=CERT-FI|publisher=Finnish Communications Regulatory Authority|accessdateaccess-date=12 September 2013|___location=Helsinki|date=6 August 2009}}

[[Category:Computer network security organizations]]

[[Category:Software testing]]

[[Category:University of Oulu|Secure Programming Group]]