Slides of some of my talks

• Twenty Years of Secure Software Development, INTERSECT workshop, Tilburg University, Sept 2024

• Banking security, Halmstadt University, Sweden, Feb 2024

• INTERSECT IoT Cyber Security Round table discussion, TUE, Eindhoven, Oct 2023

• Twenty years of secure software development, IPA Fall Days, Zeewolde, Sept 2023

• Security Testing of Stateful Systems, GDR Sécurité Journées Nationales, Paris, Jun 2023

• Fuzzing Stateful systems, AFFECT.NL, Nijmegen, May 2023

• Secure input handling: insights from the past decade, keynote at SECITC 2022, Bucharest

• Security by Construction thanks to LangSec, invited talk for WSF 2021, Catania, Dec 2021

• Mobile Banking Security, invited talk for ICT4DA in Bahir Dar, Ethiopia Nov 2021

• Software Security 101, talk for Tweede Golf, Nijmegen, Nov 2021

• Fuzzing 101, talk for Riscure, Oct 2021

• Cyber Security 101 - Hacking, Security, and Privacy, Radboud iHUB, Sept 2021

• Wat is hacken?, Radboud Pre-University College, June 2021

• The end of smartcards: mobile online authentication, Digital Security lunch talk, June 2021

• Mobile security with TEEs, Security Champions Event at ABN-AMRO, Feb 2021

• INTERSECT KickOff, Oct 2020

• Formal Methods for Security Functionality and for Secure Functionality, keynote at ETAPS/FM'19, Porto, Oct 2019

• Digitaal betalen & internet bankieren, I&I conferentie 2019, Utrecht, November 2019
  Also available as ppt

• Hacking, Orientation day for new 1st year students, August 2019

• Improving Software Security by Improving Input Handling, CS colloquium at Stellenbosch University, April 2018

• Cyber bank robbery guest lecture at Stellenbosch University, April 2018

• (Some) Security by Construction, keynote at ISoLa 2018

• LangSec revisited: input security flaws of the second kind, LangSec 2018, May 2018

• Software security for no one?, FMT Symposium Twente University, Jan 2018

• Cyber bank robbery, dcypher symposium, Oct 2017

• LangSec meets State Machines, IT day at SWIFT, Belgium, June 2017

• The security challenge of EV charging, NLK/ElaadNL symposium, May 2017

• (Nog steeds geen?) Secure Software Development, presentation for 'Grip op SSD' meeting of CIP (Centrum Informatiebeveiliging en Privacybescherming), March 2017

• Security in the Software Development Lifecycle, presentation for Ngi at SIG, January 2017

• Hacking & digital forensics, Centrum voor Postacademisch Juridisch Onderwijs, Sept 2016

• Security of Electronic Payment Systems National Cyber Security Summer School, August 2016

• LangSec meets State Machines, OWASP Benelux Days, Luxemburg, March 2016

• Hi-tech bank robbery, Cashflow symposium, Enschede, Feb 2016

• Embedded Software Security, ISSIPS summer school, Rio de Janeiro, July 2015

• Protocol state machines and session languages, LangSec @ SPW, San José, May 2015

• Security of smart grid communication protocols, workshop WS2: "Managing Heterogeneous and Secure Communication Networks for Smart Grids" @ SmartGridComm, Venice, 2014

• Security of electronic payments TNO, Groningen, 2013

• Formal models of bank card for free , COST meeting Symposium, Darmstadt, 2012

• Smartcards hacking , Devnology meeting, Nijmegen, 2012

• De evolutie van OS beveiliging, Thalia Symposium, Nijmegen, 2012

• Formal Methods for Security, invited talk at FMATS, Cambridge, Dec 2011

• EMV, talk at IRISA, Dec 2010

• JML presentation for CHARTER meeting , Dec 2009

• Specification, Verification, and Proofs for Java, presented at FOSAD ( International School on Foundations of Security Analysis and Design), Bertinoro, Italy, Sept. 2009

• Slides of presentations at Makerere University, Uganda, Dec. 2008

• Malicious Code on Java Card smartcards: Attacks and Countermeasures, INRIA Saclay, June 2008

• Fingerprinting e-Passports, NLUUG spring conference on security, May 2008

• Problems developing secure applications, meeting of OWASP Netherlands , December 2007

• Verifying an implementation of SSH, VVSS'2007

• Tutorial about JML and ESC/Java2 (given at ETAPS'2005, FM'2005, ECOOP'2005)
  [1 Intro] [2 ESC/Java2 tool] [3 ESC/Java2 warnings] [4 Specification tips and pitfalls] [5 More JML] The same but 4-up: [1 Intro] [2 ESC/Java2 tool] [3 ESC/Java2 warnings] [4 Specification tips and pitfalls] [5 More JML]

  Below some ESC/Java2 exercises to try out. The first two, Bag.java and Amount.java, are pretty basic and should doable after succesfully installing ESC/Java2 and reading the "1 Intro" slides above.

  1. Bag.java
  2. Amount.java
  3. README Person.java BankAccount.java DebitException.java
     
  For people not so familiar with programming or Java, here is another excercise using ESC/Java which requires minimal programming skills; it was developed for information science students in Nijmegen, to show them how formal methods can help in requirement engineering, esp. by exposing missing (implicit) assumptions.

• Smartcards lecture slides [pdf]

• Immutable objects in Java, KeY workshop, June 2005 [pdf]

• Introduction to JML, LaQuSo, Jan 2005 [pdf]

• Introduction to JML and ESC/Java2, Amagasaki, Japan, Nov 2004
  [basic (pdf)] [advanced (pdf)] [JavaCard APDU example pdf] [Runtime assertion checking (pdf)] [Example jml-unit test (.tar.gz)]

• Software Security - specification and verification
  LaQuSo Symposium "Verification and Validation of Software Systems", Eindhoven, Nov 2004 [pdf]

• The type system of Axiom
  Brouwer colloquium, Nijmegen, Oct 2004 [pdf]

• JML: some experiences and directions for future work
  Modocop Workshop, Grenoble, Dec 2003 [pdf]

• Testen van Java code met JML (in Dutch)
  Nederlandse Testdag Nov 2003: [pdf]

• Java lecture notes: threads [pdf]; JML [pdf]; JavaCard [pdf]

• An overview of JML tools and applications
  FMICS'03, Roros, Norway, June 2003 [ppt]

• Opportunities and challenges for formal specification of Java programs
  Trusted Compontents workshop, Trento, Italy, Jan 2003 [pdf]

• Securing Java applets
  Cryptographic Security Aspects of Smart Cards & the Internet, Amsterdam & UT, May 2003 [ppt]

• A Java Reference Model of Transacted Memory for Smart Cards
  Cardis'2002, San Jose, Nov 2002 [pdf]

• Specification of a transacted memory for smart cards in Java and JML
  IFIP WG2.2, Oldenburg, Sept 2002 [pdf]

• JavaCard Program Verification
  ZIC colloquium, TUE, 23/10 2001 [pdf]

• Security of Java Card smartcard applets
  IPA spring days on Security, April 2001 [pdf]

• From Algebras and Coalgebras to Dialgebras
  CMCS'2001, April 2001 [ps.gz]

• A Logic for the Java Modeling Language JML
  FASE'2001, April 2001 [ps.gz]

• Protocol Specification: specifying the JavaCard APDU protocol in JML
  ITT colloquium, Nijmegen, Oct 2000 [ps.gz]

• Specification of the JavaCard API in JML
  CARDIS'2000, September 2000 [ps.gz]

• A Coalgebraic Semantics of Subtyping
  CMCS'2000, Berlin, Mar 2000 [ps.gz]