Monitoring software in the wild.

Software systems are now widely distributed by design, being natively deployed in the very-large scale across several countries and continents. This infrastructure scale and geographical coverage call for the development of novel software monitoring techniques and algorithms that can follow key performance indictors (KPI) and report on critical situations where optimizations would be required. Given this context, collecting and processing such data flows to build a holistic view of the distributed system is a key challenge to deliver timely and targeted adaptations. Beyond the middleware challenge of distributed monitoring in the wild, we can also observe the rise of novel KPI aiming to balance performance and environmental metrics to better control the consumption of limited resources for the purpose of a given business. This evolution demonstrates that software developers and operators miss more global indicators of the impact of their software on their environment at large to take more optimal decisions.

Collaborative decision-making approaches.

To support the above decisions, we believe that very-large-scale distributed systems require to adopt decentralized and collaborative decision-making strategies to implement from local and quick reactions to more global and long-term planning. With this objective in mind, the combination of multiple decision-making techniques, such as control theory, reinforcement learning, constraint solvers, or rule-based approaches, will offer more flexibility to deal with domain-specific adaptations to be performed. Furthermore, our experience on software product lines (SPL) will also bring interesting venues to structure and control the control plane of such distributed systems, hence offering some layer of reflexivity for self-adaptive software systems.

Web and mobile applications.

We work on two topics: improving privacy on the web, and protecting users from software vulnerabilities. On the first topic on privacy, we will work on identifying harmful content related to privacy leakage, and on generating automatic shims to replace this harmful content with benign one. The ultimate goal is to have a browser, or an operating system, that does not send identifying information online, can decide which elements in a page are harmful to block, and can repair/augment webpages to assure their proper functioning. The second topic is on debloating which is related to the fact that modern web and mobile applications rely on an impressive list of dependent libraries. While using external libraries eases the development, this is known to be a major source of problems as a package can present a vulnerability or be downright malicious, affecting the integrity of the whole program. The goal here is to design methods and develop tools to have programs that can still benefit from the wealth of existing dependencies that exist in ecosystems, like NPM or Gradle, without the security problems that come with it.

Browsers and hardware.

We investigate hardware and software fingerprinting and their associated defenses. While so far we mostly look at fingerprinting the browser, it remains to be seen how much can be fingerprinted on both the software and hardware side. With the arrivals of new APIs like WebGPU, WebUSB or WebXR that rely much more on the hardware, there is a need to understand the privacy problems that can be caused by these APIs to protect users online. The goal is also to infer hardware characteristics through auxiliary time-related channels and micro-benchmarks instead of relying on attributes sent by the browser.

Hardware and micro-architectural components.

We work on analyzing attack surface and on improving the reproducibility of micro-architectural attacks. For that, given the lack of documentation of hardware components by the manufacturers, we will work on the reverse-engineering of micro-architectural components. Recent work by Vila et al.  84 shows that it is possible to use automata learning and program synthesis techniques to reverse engineer cache replacement policies from measurements made with performance counters. This approach could be extended to model hardware prefetchers, and perhaps to refine the models proposed on branch prediction units. Concerning reproducibility, it is not uncommon for code that works on one machine to give other results on another machine – and identifying the root cause can be quite complex. We propose the use of the gem5 simulator to overcome some of these problems, and in particular improving visualization techniques, creating a reference benchmark of attacks available to the community, and study countermeasures.

Structure.

Software systems are commonly assembled from numerous components, each narrowly focused on its provided functionality. Among others, this allows structural variability—often offering a myriad of configuration options—which is crucial for these systems and must be handled from design- to run-time. Two fundamental aspects to be addressed here are the specification, analysis and implementation (1) of the interaction among the components and (2) of the (re-)configuration of component assemblies. W.r.t. configuration specifications, we particularly focus on approaches where these features are described in a so-called feature model  62. We will continue exploring theoretical and implementation aspects of the underlying interaction and reconfiguration mechanisms to provide developers with appropriate modelling abstractions. Since it is not always possible to entirely explore the whole configuration space relating each configuration to the proper non-functional and functional requirements, we will apply machine learning techniques to predict the properties of configurations, identify influential options, ensure non-regression and select the “best” configuration. Furthermore, since the configuration space of the system is likely to evolve over time and due to external factors, the model will have to be learned again anyway to stay consistent with the system and its functional and performance properties. The learning process can therefore be considered itself as a configurable system, which can thus be fine-tuned with respect to what can be learned, how it can be learned and when it can be learned. We will thus investigate solutions for the self-adaptative learning of configuration spaces.

Behaviour.

The ability to provide satisfaction guarantees of behavioural properties, such as deadlock-freedom, safety, some aspects of security and privacy, is rapidly becoming crucial for modern software systems due to increasing societal awareness, as attested by the growing use of formal methods by software giants such as Amazon  71 and Facebook  52 and to legislative evolution, e.g., GDPR. This requires precise and formal behavioural models allowing reasoning for proof and analysis of such properties. In particular, the Rigorous System Design (RSD) approach  80 strives for correctness by construction through enforcing multiple levels of separation of concerns. We plan to work on (1) transforming high-level models commonly defined by a “user”, such as feature models mentioned above (in relation with the structural modelling) or requirements into (Java)BIP  46, 50 behavioural models, (2) learning behavioural models of existing software by static (source code) or dynamic (execution traces) analysis, (3) maintaining coherency between models and code in presence of evolutions and adaptations, and (4) formalisation of domain-specific knowledge to generate efficient distributed code while respecting the behavioural semantics of the system and taking into account its structural constraints.

Data.

The self-adaptation mechanisms that are studied in the team are always triggered by data: either data gathered online in distributed systems, or data mined offline from repositories of metadata associated with software systems. In this context, being able to reason, query, and manage data and metadata associated with software systems is a central, yet complex and difficult task that raises many challenges. In relation with our expertise in database theory, we want to focus on two main challenges: (1) how data management and knowledge representation techniques can be used for improving the self-adaptation of software systems, and (2) how to take into account the data management concern along the development of self-adaptive software systems.

7.1.1 amiunique

• Name:
  amiunique
• Keywords:
  Privacy, Browser fingerprinting
• Scientific Description:

  The amiunique web site has been deployed in 2014 in the context of the DiverSE team research activities on browser fingerprinting to understand how software diversity can be leveraged to mitigate the impact of fingerprinting on the privacy of users. In 2018, it was migrated to the Spirals team where the research on browser fingerprinting still continues to this day.

  The web site has yielded multiple datasets of genuine fingerprints to understand the multiple facets of browser fingerprinting and how they can be used on the web to reinforce security. The web site presents regular updates to include the latest development in web technology and understand their impact of users' privacy.

  The whole source code of amiunique is open source and is distributed under the terms of the MIT license.

  Main innovative features:

  • canvas fingerprinting
  • WebGL fingerprinting
  • advanced JS features (platform, DNT, etc.)

  Impact: The website has been visited by more than 3,000,000 unique visitors since its creation and it has been showcased in several professional forums and tutorial sessions over the years. It produced multiple datasets over the years that were used in articles published in top-tier conferences. Amiunique has received in 2018 the prize “Protection de la vie privée” granted by Inria and the CNIL. The research around fingerprints in amiunique has also been a source of influence for the Brave web browser.

• Functional Description:
  This web site aims at informing visitors about browser fingerprinting and possible tools to mitigate its effect, as well as at collecting data about the fingerprints that can be found on the web. It collects browser fingerprints with the explicit agreement of the users (they have to click on a button on the home page). Fingerprints are composed of 17 attributes, which include regular HTTP headers as well as the most recent state of the art techniques (canvas fingerprinting, WebGL information).
• URL:
  https://­amiunique.­org/
• Authors:
  Pierre Laperdrix, Antonin Durey, Walter Rudametkin Ivey
• Contact:
  Benoit Baudry
• Partners:
  INSA Rennes, Université de Lille

7.1.2 APISENSE

• Keywords:
  Mobile sensing, Crowd-sensing, Mobile application, Crowd-sourcing, Android
• Functional Description:
  APISENSE platform is a software solution to collect various contextual information from Android devices (client application) and automatically upload collected data to a server (deployed as a SaaS). APISENSE is based on a Cloud computing infrastructure to facilitate datasets collection from significant populations of mobile users for research purposes.
• URL:
  https://­github.­com/­APISENSE
• Authors:
  Antoine Veuiller, Christophe Ribeiro, Julien Duribreux, Romain Rouvoy, Nicolas Haderer, Romain Sommerard, Lakhdar Meftah
• Contact:
  Romain Rouvoy
• Partner:
  Université de Lille

7.1.3 cloudnet

• Name:
  Cloudnet
• Keywords:
  Cloud configuration, Tosca, Docker Compose, Heat Orchestration Template, Alloy
• Scientific Description:

  The multiplication of models, languages, APIs and tools for cloud and network configuration management raises heterogeneity issues that can be tackled by introducing a reference model. A reference model provides a common basis for interpretation for various models and languages, and for bridging different APIs and tools. The Cloudnet Computational Model formally specifies, in the Alloy specification language, a reference model for cloud configuration management. The Cloudnet software formally interprets several configuration languages in it, including the TOSCA configuration language, the OpenStack Heat Orchestration Template and the Docker Compose configuration language.

  The use of the software shoes, for examples, how the Alloy formalization allowed us to discover several classes of errors in the OpenStack HOT specification.

• Functional Description:

  Application of the Cloudnet model developed by Inria to software network deployment and reconfiguration description languages.

  The Cloudnet model allows syntax and type checking for cloud configuration templates as well as their visualization (network diagram, UML deployment diagram). Three languages are addressed for the moment with the modules:

  * Cloudnet TOSCA toolbox for TOSCA inncluding NFV description * cloudnet-hot for HOT (Heat Orchestration Template) from OpenStack * cloudnet-compose for Docker Compose

  We can use directly the software from an Orange web portal: https://toscatoolbox.orange.com

• URL:
  https://­github.­com/­Orange-OpenSource/­Cloudnet-TOSCA-toolbox
• Publication:
  hal-02940938v1
• Contact:
  Philippe Merle
• Participants:
  Philippe Merle, Jean-Bernard Stefani, Roger Pissard-Gibollet, Souha Ben Rayana, Karine Guillouard, Meryem Ouzzif, Frédéric Klamm, Jean-Luc Coulin
• Partner:
  Orange Labs

7.1.4 PowerAPI

• Keywords:
  Energy efficiency, Energy management
• Functional Description:

  PowerAPI is a library for monitoring the energy consumption of software systems.

  PowerAPI differs from existing energy process-level monitoring tools in its software orientation, with a fully customizable and modular solution that lets the user precisely define what he/she wants to monitor. PowerAPI is based on a modular and asynchronous event-driven architecture using the Akka library. PowerAPI offers an API which can be used to define requests about energy spent by a process, following its hardware resource utilization (in term of CPU, memory, disk, network, etc.).

• URL:
  http://­powerapi.­org
• Contact:
  Romain Rouvoy
• Participants:
  Adel Noureddine, Loïc Huertas, Maxime Colmant, Romain Rouvoy, Mohammed Chakib Belgaid, Arthur D'azemar

10.1.1 Associate Teams in the framework of an Inria International Lab or in the framework of an Inria International Program

10.1.2 Participation in other International Programs

10.1.3 Visits of international scientists

Amir Taherkordi associate professor at the University of Oslo visited the team for 3 weeks in July. He works with Romain Rouvoy and others in the team on green computing, especially in the context of the PACE partnership mentioned previously.

10.1.4 Visits to international teams

Maryam Rahmani spent 1 month in November at the University of Oslo in the context of the PACE partnership.

Jiali Xu spent 1 month in December at the University of Stavanger, Norway, in the context of the PACE partnership.

10.2.1 Other european programs/initiatives

10.3.1 ANR

ASCOT

Participants: Imane Fouad, Pierre Laperdrix [contact person].

ASCOT is a 36-month (2020–23) project funded in the context of the STaRS program of Hauts-de-France region. The goal of the project is to improve web security and privacy and put back control into users hands by blocking unwanted trackers. The project will combine information flow analysis, machine learning and deobfuscation to detect a wide range of trackers. The project will also identify page breakage when blocking online trackers. All in all, this project aims to advance the actual techniques that protect users online while maintaining a high level of usability that is key to offer a comfortable browsing experience. First results have been published in 75.

BRiCoS

Participants: Simon Bliudze [contact person], Larisa Safina.

BRiCoS is 24-month (2021–22) project funded by the I-Site ULNE Foundation in the framework of its “Support for young researchers 2020” programme. The project addresses two fundamental challenges for the implementation of the Rigorous System Design approach to general-purpose software: 1) obtaining behavioural models of the coordinated software entities and 2) detecting the deviations between these models and the corresponding executable code in the face of software evolution.

Inria Défi Federated Machine Learning over the Internet

Participants: Adrien Luxey, Rémy Raes, Romain Rouvoy [contact person], Lionel Seinturier.

Federated Machine Learning over the Internet (Fed-Malin) is a 48-month Défi (2021–25) funded by Inria. The goal of the project is to push federated learning research and to address a number of challenges that arise when it is deployed over the Internet, including privacy & fairness, energy consumption, personalization, and location/time dependencies. 10 Inria project-teams participate to this Défi with the support of the Groupe La Poste.

Inria Défi Towards a More Frugal Cloud

Participants: Romain Rouvoy [contact person], Lionel Seinturier.

Towards a More Frugal Cloud is a 48-month (2021–25) Défi funded by Inria. The goal is to investigate new solutions for designing cloud-based digital services that can be more frugal in terms of energy consumption and that can reduce the environment impact of these environments. 5 Inria project-teams participe to this Défi along with the OVHcloud company.

Inria Défi Pushing carbon-neutral services towards the edge

Participants: Sophie Cerf, Romain Rouvoy [contact person], Lionel Seinturier.

Pushing carbon-neutral services towards the edge (PULSE) is a 48-month (2021–25) Défi funded by Inria. The goal is to develop and promote best practices in geo-repaired hardware and software infrastructures for more environmentally friendly intensive computing. 6 Inria project-teams participe to this Défi along with the Qarnot Computing company. This Défi is led by Romain Rouvoy for Inria and Rémi Bouzel for Qarnot Computing.

11.1.1 Scientific events: organisation

Laurence Duchien: co-organiser of the "Journées Sciences du Logiciel : de l'idée au binaire", CNRS INS2I, 19-20 September.

11.1.2 Scientific events: selection

11.1.3 Journal

11.1.4 Invited talks

Clémentine Maurice: Invited keynote at EuroSec 2022 "Reproductible Research: from Paper to Artifact Evaluation", Invited keynote at the 25th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2022) "Micro-architectural attacks: from CPU to browser", Invited lecture at the Cyber in Nancy Summer School, Invited lecture at the Summer School on real-world crypto and privacy, Šibenik, Croatia.

Pierre Laperdrix: Invited talk at FIC 2022 "Traçage par empreintes de navigateur : passé, présent et évolutions", Invited talk at Journées nationales du GDR Sécurité Informatique 2022 "Browser fingerprinting: current research and the years ahead".

11.1.5 Leadership within the scientific community

Simon Bliudze

• Co-head of the YODA (trustworthY and Optimal Dynamic Adaptation) working group of the GDR GPL
• Member of the Formal Methods Europe (FMEurope) Book Review Committee (the aim of the committee is to provide the formal methods community, and the scientific community in general, with high-quality reviews of books on topics of interest to the community)

Laurence Duchien

• President of the scientific council of IRT SystemX
• Scientific advisor at INS2I (until June)

Romain Rouvoy

• Elected member of CoNRS section 6 (since September)
• Elected member of the "bureau" of the French chapter of the ACM Special Interest Group in Operating Systems (SIGOPS / ASF)
• Elected member of the administrative council of Specif Campus
• Co-head of the "Génie Logiciel pour les Systèmes Cyberphysiques" working group of the GDR GPL

11.1.6 Scientific expertise

Laurence Duchien

• Member of the scientific advisory board of Labex CIMI-Toulouse
• Member of the scientific advisory board of IMT Atlantique
• Member of the recruitment committee for a professor position, INP Bordeaux
• Member of the recruitment committee for a "Chargé de recherche" position, Inria Lyon
• Member of the recruitment committee for a "Chargé de recherche (concours Handicap)" position, Inria

Pierre Laperdrix

• Member of the recruitment committee for a "Maître de conférences" position, Université de Rennes

Clémentine Maurice

• Member of the recruitment committee for a "Maître de conférences" position, Université de Rennes
• Reviewer of a research proposal for the Israel Science Foundation (ISF)

Philippe Merle

• Member of the recruitment committee for two "Maître de conférences" positions, Université de Rennes I

Lionel Seinturier

• Member of the jury for senior chairs at Institut Universitaire de France (IUF)
• President of the recruitment committee for a professor position, Université de Grenoble-Alpes
• President of the recruitment committee for two R&D engineer positions at Inria Lille

11.1.7 Research administration

Simon Bliudze

• Elected member of the Centre Committee of the Inria Lille – Nord Europe research center
• Member of the Gender Parity committee of the CRIStAL laboratory

Laurence Duchien

• In charge of the Career development & Intersectoral secondments in the PEARL Project ("Programme for EArly-stage Researchers in Lille") at I-SIte Université Lille Nord Europe
• Elected member of the council of the Faculty of science and technology of the University of Lille (until June)
• Dean of the Faculty of science and technology at the University of Lille (since July)

Antonin Durey

• Elected member of the CRIStAL laboratory council

Clémentine Maurice

• Member of the Gender Parity committee of the CRIStAL laboratory

Philippe Merle

• Elected member of the Inria scientific board (CS)
• Elected member of the Inria technical committee (CTI)
• Deputy secretary of the Inria national committee on "hygiène, de sécurité et des conditions de travail" (CNHSCT)
• Permanent secretary of the "Comité Local d’Hygiène, de Sécurité et de Conditions de Travail" (CLHSCT)
• Elected member of the centre committee for the Inria Center of University of Lille

Lionel Seinturier

• President of section 27 (Informatique) of Conseil national des universités (CNU)
• Member of the scientific council of University of Lille

Walter Rudametkin

• Member of the CDT (Comité de Développement Technologique) of the Inria Lille - Nord Europe research center
• Elected member of the CRIStAL laboratory council

11.2.1 Teaching

Simon Bliudze is, in addition to his tenure Junior Researcher position at Inria, part-time Assistant Professor at École Polytechnique, Palaiseau, France, in the Department of Computer Sciences (DIX).

• CSE 202: Design and Analysis of Algorithms, 28h, $2^{\mathrm{nd}}$ year of the Bachelor cycle

Pierre Bourhis is, in addition to his tenure Junior Researcher position at CNRS, part-time Associate Professor of Data Science at École Polytechnique, Palaiseau, France, in the Department of Computer Sciences (DIX).

• Info553: Bases de données, 18h, Cycle Polytechnique
• Modal Graphe Géant, 36h
• INF517: Projet de Recherche Data Science, 20h
• INF583: System for Big Data, 20h

Sophie Cerf teaches at Centrale Lille Institute.

• Système de Transport Autonome, 12h, $2^{\mathrm{nd}}$ year of the Engineering cycle, École Centrale Lille
• Commande des Systèmes, 24h, Level L2, ITEEM
• Projet d'intégration en Robotique, 10h, Level M1, ITEEM

Laurence Duchien teaches at the Université de Lille in the FST faculty. She is project leader for doctoral studies at Université de Lille.

• Software engineering project, 60h, Level M2, Master MIAGE FI
• Software engineering project, 50h, Level M2, Master MIAGE FC/FA
• Research initiation, 20h, Level M2, Master of Computer Science

Adrien Luxey-Bitri teaches at the Université de Lille in the FST faculty.

• Informatics, 36h, Level L3, Licence of Computer Science
• Computer networks, 20h, Level L3, Licence of Computer Science
• Software Engineering, 18h, Level L3, Licence of Computer Science
• Distributed systems, 48h, Level M1, Master of Computer Science
• Advanced distributed systems, 24h, Level M2, Master of Computer Science
• Suivi de stages, projets et mémoires, 30h, Licence and Master of Computer Science

Philippe Merle teaches at the Université de Lille in the FST faculty.

• Software Configuration, 12h, Level M2, Master of Computer Science

Clément Quinton teaches at the Université de Lille in the FST faculty.

• Object-oriented programming, 36h, Level L2, Licence of Computer Science
• Software project, 36h, Level L2, Licence of Computer Science
• Javascript, 18h, Level L2, Licence of Computer Science
• Object-oriented design, 31h, Level L3, Licence of Computer Science
• Distributed systems, 24h, Level M1, Master of Computer Science
• Software product lines, 24h, Level M2, Master of Computer Science
• Suivi de stages et de projets, 30h, Licence and Master of Computer Science

Romain Rouvoy teaches at the Université de Lille in the FST faculty.

• Design of distributed applications, 12h, Level M1, Master of Computer Science
• Object-oriented design, 4h, Level L3, Licence of Computer Science
• Suivi de projets, 20h, Level M2, Master of Computer Science

Walter Rudametkin teaches at the Polytech Lille engineering school.

• GIS4 Programmation par Objets, 32h
• GIS4 Architectures Logicielles, 26h
• GIS2A3 (apprentissage) Projet programmation par Objet, 24h
• IMA2A4 (apprentissage) Conception Modélisation Objet, 24h
• IMA3 Programmation Avancée, 62h
• GBIAAL4 Bases de données, 22h
• GIS5 Suivi de projets, 42h
• GIS2A (apprentissage) Suivi d'apprentis, 28h

Lionel Seinturier teaches at the Université de Lille in the FST faculty.

• Conception d'applications réparties, 48h, Level M1, Master MIAGE
• Systèmes répartis avancés 1, 52h, Level M2, Master of Computer Science

11.2.2 Supervision

• PhD defended: Antonin Durey, Leveraging Browser Fingerprinting to Strengthen Web Authentication, defended on 14 January 2022, supervised by Romain Rouvoy & Walter Rudametkin, 34.
• PhD defended: Thomas Rokicki, Detection and exploitation of side-channel vulnerabilities, defended on 29 November 2022, supervised by Clémentine Maurice.
• PhD defended: Sacha Brisset, Towards Understanding Web Applications: Automated Abstraction Inference and its Applications, defended on 5 December 2022, supervised by Lionel Seinturier & Romain Rouvoy & Renaud Pawlak, 33.
• PhD defended : Mohammed Chakib Belgaid, Green Coding: an Empirical Approach to Harness the Energy Consumption of Software Services, defended on 14 December 2022, supervised by Romain Rouvoy & Lionel Seinturier, 36.
• PhD defended: Guillaume Fieni, Towards Modeling the Power Usage Efficiency of Software-Defined Computing Infrastructures, defended on 15 December 2022, supervised by Romain Rouvoy & Lionel Seinturier, 35.
• PhD in progress: Pierre Ayoub, IoT devices security inside 5G networks through side-channel analysis, since October 2020, supervised by Clémentine Maurice.
• PhD in progress: Alexandre Bonvoisin, Reducing the Energy Consumption of Software Stacks, since October 2022, supervised by Romain Rouvoy & Clément Quinton.
• PhD in progress: Guillaume Didier, Studying hardware prefetchers using cache side channels, since October 2019, supervised by Clémentine Maurice.
• PhD in progress: Tristan Coignion, Environmental Impact of Development Assistants, since October 2022, supervised by Romain Rouvoy & Clément Quinton.
• PhD in progress: Salman Farhat, Safe Dynamic Reconfiguration of Cloud Applications, since October 2020, supervised by Laurence Duchien & Simon Bliudze.
• PhD in progress: Romain Fouquet, Improving Online Privacy through Content Blocking and Information Restriction, since October 2020, supervised by Romain Rouvoy & Pierre Laperdrix.
• PhD in progress: Omid Gheibi, Dependable Adaptive Software Systems for the Digital World, since October 2020, supervised by Laurence Duchien & Clément Quinton, co-supervision with Danny Weyns (KU Leuven).
• PhD in progress: Antoine Geimer, Détection et correction automatique de vulnérabilités par canaux auxiliaires dans les librairies cryptographiques, since October 2022, supervised by Sandrine Blazy & Clémentine Maurice.
• PhD in progress: Edouard Guegain, Configuration of Large Scale Fog Environments, since October 2020, supervised by Clément Quinton.
• PhD in progress: Jean Luc Intumwayase, Improving Online Privacy through Content Blocking and Information Restriction, since November 2020, supervised by Romain Rouvoy & Pierre Laperdrix.
• PhD in progress: Pierre Jacquet, Fostering the frugal design of cloud services, since October 2021, supervised by Romain Rouvoy in collaboration with Thomas Ledoux (Inria Stack).
• PhD in progress: Trình Lê Khánh, Design of Correct-by-Construction Self-Adaptive Cloud Applications using Formal Methods, since October 2019, supervised by Philippe Merle & Simon Bliudze.
• PhD in progress: Maxime Huyghe, Automated Software Testing to Improve the Privacy of Browsers, since October 2022, supervised by Lionel Seinturier & Clément Quinton & Walter Rudametkin.
• PhD in progress: Naif Mehanna, Hardening Web Authentication with Browser Fingerprinting, since October 2020, supervised by Walter Rudametkin.
• PhD in progress: Maryam Rahmani, Multi-scale processing of spatio-temporal data applied to air quality in urban areas, since October 2021, supervised by Romain Rouvoy
• PhD in progress: Thibault Simon, Sustainable software engineering, since November 2021, supervised by Romain Rouvoy
• PhD in progress: Yifan Wang, Autonomous Management of Database Systems, since October 2022, supervised by Romain Rouvoy & Pierre Bourhis.

11.2.3 Juries

Laurence Duchien

• HDR Arnaud Liefooghe (U Lille), president
• Pierrick Pochelu (U Lille), president
• Luisa Rincon (U. Paris 1), president

Clémentine Maurice

• Cesar Pereida García (Tampere University, Finland), dissertation pre-examiner
• Ben Gras (VU Amsterdam, The Netherlands), reviewer
• Hadrien Barral (ENS Paris), examiner
• Amine Jaamoum (Université Grenoble Alpes), examiner

Lionel Seinturier

• Yuwei Wang (Telecom SudParis), reviewer

International journals

• 11 articleM.Mehdi Ahmed-Nacer, S.Slim Kallel, F.Faiez Zalila, P.Philippe Merle and W.Walid Gaaloul. Model driven simulation of elastic OCCI cloud resources.The Computer Journal655May 2022, 1144–1166
  HALDOI
• 12 articleS.Sacha Brisset, R.Romain Rouvoy, L.Lionel Seinturier and R.Renaud Pawlak. ERRATUM: Leveraging Flexible Tree Matching to Repair Broken Locators in Web Automation Scripts.Information and Software Technology144April 2022
  HALDOIback to text
• 13 articleS.Sacha Brisset, R.Romain Rouvoy, L.Lionel Seinturier and R.Renaud Pawlak. SFTM: Fast Matching of Web Pages using Similarity-based Flexible Tree Matching.Information SystemsFebruary 2023
  HALDOIback to text
• 14 articleG.Ghina Dandachi, S.Sophie Cerf, Y.Yassine Hadjadj-Aoul, A.Abdelkader Outtagarts and E.Eric Rutten. A robust control-theory-based exploration strategy in deep reinforcement learning for virtual network embedding.Computer Networks218September 2022, 1-27
  HALDOI
• 15 articleR.Romain Fouquet, P.Pierre Laperdrix and R.Romain Rouvoy. Breaking Bad: Quantifying the Addiction of Web Elements to JavaScript.ACM Transactions on Internet Technology2023
  HALDOI
• 16 articleS.Saverio Giallorenzo, F.Fabrizio Montesi, L.Larisa Safina and S. P.Stefano Pio Zingaro. Ephemeral data handling in microservices with Tquery.PeerJ Computer Science82022, e1037
  HALDOI
• 17 articleJ.Julien Leveau, X.Xavier Blanc, L.Laurent Réveillère, J.-R.Jean-Rémy Falleri and R.Romain Rouvoy. Fostering the Diversity of Exploratory Testing in Web Applications.Journal of : Software Testing, Verification and Reliability2022
  HALDOI
• 18 articleF.Faiez Zalila, F.Fabian Korte, J.Johannes Erbel, S.Stéphanie Challita, J.Jens Grabowski and P.Philippe Merle. MoDMaCAO: a model-driven framework for the design, validation and configuration management of cloud applications based on OCCI.Software and Systems ModelingSeptember 2022, 1-17
  HAL

International peer-reviewed conferences

• 19 inproceedingsS.Simon Bliudze, P.Petra van den Bos, M.Marieke Huisman, R.Robert Rubbens and L.Larisa Safina. JavaBIP meets VerCors: Towards the Safety of Concurrent Software Systems in Java.26th International Conference on Fundamental Approaches to Software EngineeringParis, FranceApril 2023
  HAL
• 20 inproceedingsE.Emile Cadorel and R.Romain Rouvoy. Enabling Dynamic Virtual Frequency Scaling for Virtual Machines in the Cloud.Proceedings of the the IEEE Cluster ConferenceHeidelberg, GermanySeptember 2022
  HAL
• 21 inproceedingsR.Romain Fouquet, P.Pierre Laperdrix and R.Romain Rouvoy. JSRehab: Weaning Common Web Interface Components from JavaScript Addiction.WWW '22: Companion Proceedings of the Web Conference 2022Lyon, FranceMay 2022
  HALDOI
• 22 inproceedingsW. J.Walid J Ghandour and C.Clémentine Maurice. DITTANY: Strength-Based Dynamic Information Flow Analysis Tool for x86 Binaries.BAR 2022 - Workshop on Binary Analysis ResearchSan Diego, United StatesApril 2022
  HAL
• 23 inproceedingsI.Ismail Hawila, S.Sophie Cerf, R.Raphaël Bleuse, S.Swann Perarnau and E.Eric Rutten. Adaptive Power Control for Sober High-Performance Computing.CCTA 2022 - 6th IEEE Conference on Control Technology and ApplicationsTrieste, ItalyIEEEAugust 2022, 1-8
  HAL
• 24 inproceedingsT.Tomer Laor, N.Naif Mehanna, A.Antonin Durey, V.Vitaly Dyadyuk, P.Pierre Laperdrix, C.Clémentine Maurice, Y.Yossi Oren, R.Romain Rouvoy, W.Walter Rudametkin and Y.Yuval Yarom. DRAWNAPART: A Device Identification Technique based on Remote GPU Fingerprinting.Network and Distributed System Security SymposiumSan Diego, United StatesFebruary 2022
  HALDOIback to textback to textback to text
• 25 inproceedingsP.Pierre Laperdrix, N.Naif Mehanna, A.Antonin Durey and W.Walter Rudametkin. The Price to Play: a Privacy Analysis of Free and Paid Games in the Android Ecosystem.ACM Web Conference 2022Lyon, FranceApril 2022
  HALDOIback to text
• 26 inproceedingsT.Thomas Rokicki, C.Clémentine Maurice, M.Marina Botvinnik and Y.Yossi Oren. Port Contention Goes Portable: Port Contention Side Channels in Web Browsers.ASIA CCS '22 - ACM Asia Conference on Computer and Communications SecurityNagasaki / Virtual, JapanACMMay 2022, 1182-1194
  HALDOIback to textback to text
• 27 inproceedingsT.Thomas Rokicki, C.Clémentine Maurice and M.Michael Schwarz. CPU Port Contention Without SMT.27th European Symposium on Research in Computer Security (ESORICS 2022)13556Lecture Notes in Computer ScienceCopenhagen, DenmarkSpringer Nature SwitzerlandSeptember 2022, 209-228
  HALDOIback to textback to text

Conferences without proceedings

• 28 inproceedingsR.Raphaël Bleuse, S.Sophie Cerf and É.Éric Rutten. Playing with power at runtime: Slightly slowed applications, major energy savings.JCAD 2022 - Journées calcul et donnéesDijon, FranceOctober 2022, 1-27
  HAL
• 29 inproceedingsJ.Javier Cabrera-Arteaga, P.Pierre Laperdrix, M.Martin Monperrus and B.Benoit Baudry. Multi-variant Execution at the Edge.MTD 2022 - 9th ACM Workshop on Moving Target DefenseLos Angeles, United StatesNovember 2022
  HALDOI
• 30 inproceedingsE.Emile Cadorel, H.Hélène Coullon and J.-M.Jean-Marc Menaud. Handling heterogeneous workflows in the Cloud while enhancing optimizations and performance.CLOUD 2022 - IEEE 15th International Conference on Cloud ComputingBarcelona, SpainIEEEJuly 2022, 49-58
  HALDOI
• 31 inproceedingsG.Guillaume Didier, C.Clémentine Maurice, A.Antoine Geimer and W. J.Walid J Ghandour. Characterizing Prefetchers using CacheObserver.IEEE 34th International Symposium on Computer Architecture and High Performance ComputingBordeaux, FranceNovember 2022
  HALback to text

Scientific books

• 32 bookS.Simon Bliudze and L.Laura Bocchi. Selected Papers of the 22nd International Conference on Coordination Models and Languages (COORDINATION 2020).June 2022
  HAL

Doctoral dissertations and habilitation theses

• 33 thesisS.Sacha Brisset. Towards Understanding Web Applications: Automated Abstraction Inference and its Applications.Université de lille; inria lilleDecember 2022
  HALback to textback to textback to text
• 34 thesisA.Antonin Durey. Leveraging browser fingerprinting to strengthen web authentication.Université de LilleJanuary 2022
  HALback to textback to text
• 35 thesisG.Guillaume Fieni. Towards Modeling the Power Usage Efficiency of Software-Defined Computing Infrastructures.Université de LilleDecember 2022
  HALback to textback to textback to text
• 36 thesisM. c.Mohammed chakib belgaid. Green Coding : an Empirical Approach to Harness the Energy Consumption of Software Services.Lille University; Inria Lille - Nord Europe, CRIStAL - Centre de Recherche en Informatique, Signal et Automatique de Lille - UMR 9189; SPIRALS - Self-adaptation for distributed services and large software systemsDecember 2022
  HALback to textback to textback to textback to text

Reports & preprints

• 37 miscE.Edouard Guégain and C.Clément Quinton. The ICO Tool Suite: Optimizing Highly Configurable Systems.November 2022
  HAL
• 38 reportR.Rayane Hamani. Agrégation de canaux pour la communication directe sur mobile: Rapport de Projet de Fin d’Études.Université de Lille, Faculté de Sciences et Technologies; Laboratoire CRIStALApril 2022, 24
  HAL
• 39 miscL.Larisa Safina and S.Simon Bliudze. SAT-Based Extraction of Behavioural Models for Java Libraries with Collections.July 2022
  HAL

Other scientific publications

• 40 inproceedingsS.Salman Farhat, S.Simon Bliudze and L.Laurence Duchien. Safe Dynamic Reconfiguration of Concurrent Component-based Applications.ICSA 2022 - 19th IEEE International Conference on Software ArchitectureHonolulu, United StatesMarch 2022
  HAL