Modeling Security Workshop

Invited Talk: Ketil Stølen, SINTEF

Abstract: The security analysis of critical infrastructures such as the electric power supply or telecommunications is complicated by the fact that such infrastructures are mutually dependent. We propose a reductionistic approach to the modelling and analysis of security risk scenarios with mutual dependencies. Our approach may be used to deduce the risk-level of an overall system from previous security risk analyses of its constituent systems. It may also be used to decompose the analysis of a complex system into separate parts that can be carried out independently.

Bio: Ketil Stølen is Chief Scientist and Group Leader at SINTEF. Since 1998 he is Professor in computer science at the University of Oslo. He has broad experience from basic research (4 years at Manchester University; 5 years at Munich University of Technology; 10 years at the University of Oslo) as well as applied research (1 year at the Norwegian Defence Research Establishment; 3 years at the OECD Halden Reactor Project; 8 years at SINTEF).

Stølen did his PhD "Development of Parallel Programs on Shared Data-structures" at Manchester University on a personal fellowship granted by the Norwegian Research Council for Science and the Humanities. At Munich University of Technology his research focused on the theory of refinement and rules for compositional and modular system development; in particular, together with Manfred Broy, he designed the Focus method as documented in the Focus book published in 2001. At the OECD Halden Reactor Project he was responsible for software development projects involving the use of state-of-the-art CASE-tool technology for object-oriented modelling. At SINTEF he has lead the development of the CORAS-method for security risk analysis and the STAIRS-method for rigorous system development with sequence diagrams. He has broad experience from research projects, nationally as well as internationally, and from the management of research projects. He is currently managing major Norwegian research projects focusing on issues related to modelling, security, privacy and trust.