In this paper, we describe the characteristics of the Lean Enterprise and make the case for model... more In this paper, we describe the characteristics of the Lean Enterprise and make the case for modelling it in order to reproduce its successful practices more easily. The literature contains many good descriptions of the Toyota Production System and Lean in general, but no formal model that we can build upon. We then make the hypothesis that Lean is a Complex System, which can be modelled formally. We propose to follow the KREM model which comprises four components. The K (Knowledge) component includes domain knowledge about Lean in the form of several ontologies, the R (Rules) component is expressed by probabilistic rules, the E (Experience) component describes the practices (Kata) and the M (Meta-data) component describes the context of the application of Lean (different types of companies or cultural environments, for example). A practical example modelling the Hoshin Kanri process for setting objectives at the enterprise level demonstrates how to put this approach into practice.
... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À souten... more ... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À soutenir le 9 Décembre 2008 Devant le jury composé de Président : Prenom Nom, Titre, QQpart Directeurs : Stéphane Ubéda, Professeur, INSA de Lyon ...
The OSGi Platform finds a growing interest in two different applications domains: embedded system... more The OSGi Platform finds a growing interest in two different applications domains: embedded systems, and applications servers. However, the security properties of this platform are hardly studied, which is likely to hinder its use in production systems. This is all the more important that the dynamic aspect of OSGi-based applications, that can be extended at runtime, make them vulnerable to malicious code injection. We therefore perform a systematic audit of the OSGi platform so as to build a vulnerability catalog that intends to reference OSGi Vulnerabilities originating in the Core Specification, and in behaviors related to the use of the Java language. Standard Services are not considered. To support this audit, a Semi-formal Vulnerability Pattern is defined, that enables to uniquely characterize fundamental properties for each vulnerability, to include verbose description in the pattern, to reference known security protections, and to track the implementation status of the proof-of-concept OSGi Bundles that exploit the vulnerability. Based on the analysis of the catalog, a robust OSGi Platform is built, and recommendations are made to enhance the OSGi Specifications.
When providing services to home users, management is a key activity. In-home devices, and especia... more When providing services to home users, management is a key activity. In-home devices, and especially the Residential Gateway, can use multiple management technologies for multiple management activities: read/write parameters, but also deploy, update, start and stop software components. This paper defines management realms around the Residential Gateway, where different actors perform different management activities, using different technologies. We propose techniques that integrate these technologies (TR-069, UPnP, NetConf and JMX). We also address transient issues related to security.
Extensible Component Platforms can discover and install code during runtime. Although this featur... more Extensible Component Platforms can discover and install code during runtime. Although this feature introduces flexibility, it also brings new security threats: malicious components can quite easily be installed and exploit the rich programming environment and interactions with other components to perform attacks against the system. One example of such environments is the Java/OSGi Platform, which widespreads in the industrial world. Attacks from one component against another can not be prevented through conventional security mechanisms, since they exploit the lack of proper isolation between them: components often share classes and objects. This reports intends to list the vulnerabilities that a component can contain, both from the literature and from our own experience. The Vulnerable Bundle catalog gathers this knowledge. It provides informations related to the characteristics of the vulnerabilities, their consequence, the security mechanisms that would help prevent their exploita...
Agility for IT project management, especially the SCRUM framework, lays on a systemic approach to... more Agility for IT project management, especially the SCRUM framework, lays on a systemic approach to management. We strongly believe that a thorough understanding of complex system concepts behind SCRUM will highlight success factors, thereby empowering practitioners with a comprehensive framework for leading their projects to full achievement. We depict how SCRUM embodies a cognitive loop typical of complex systems, and how the framework complies with the properties of complex systems: nonreversibility; the 3 rules of preservation, evolution, control; multiscale. Two empirical experiments underline the correlation between these properties and the actual efficiency of project management. One bases on a series of software development projects, which are analyzed a posteriori; the second one bases on a controlled experiment implying 8 parallel student groups working on the same development project.
Mots clé Ingénierie inverse, ingénierie des traces, « logs », abduction, recherche de causes, app... more Mots clé Ingénierie inverse, ingénierie des traces, « logs », abduction, recherche de causes, approche systémique. I INTRODUCTION La sécurisation de grandes architectures de type Cloud montre une complexité immense qui mobilise d'ores et déjà une multiplicité de compétences. Il convient alors de compléter les enseignements classiques favorisant plutôt une compréhension par composant (pare-feu,..) par l'enseignement de l'architecture du SI dans sa globalité. II MOTIVATIONS Afin de comprendre la sécurité d'architectures complexes, la variété des méthodes d'apprentissage et de formation est un atout. Aujourd'hui, l'enseignement par des cours, TD ou TP, développe bien le fonctionnement d'un mécanisme spécifique et par thème (IP, VPN, VOIP....) mais ne permet pas de comprendre les interactions qu'entretiennent ces divers mécanismes lors de leurs fonctionnement. Afin d'accomplir l'enseignement de la vision globale, nous pensons que l'apprena...
de données associée. Il identifie les voies qui méritent d'être plus explorées comme les ontologi... more de données associée. Il identifie les voies qui méritent d'être plus explorées comme les ontologies et les treillis de connaissances afin d'abstraire les raisonnements afin de guider les experts dans leurs actions.
The OSGi Platform finds a growing interest in two different applications domains: embedded system... more The OSGi Platform finds a growing interest in two different applications domains: embedded systems, and applications servers. However, the security properties of this platform are hardly studied, which is likely to hinder its use in production systems. This is all the more important that the dynamic aspect of OSGi-based applications, that can be extended at runtime, make them vulnerable to
Le thème des réseaux de capteurs provoque un intérêt croissant depuis plu-sieurs années. Les prob... more Le thème des réseaux de capteurs provoque un intérêt croissant depuis plu-sieurs années. Les problématiques de localisation, en particulier, sont particuliè-rement importante, dans la mesure où ces capteurs sont dans un envirronement évolutif, et où ils peuvemt-être eux-...
AbstractSince the inception of the World Wide Web, two major shifts have occured that have deepl... more AbstractSince the inception of the World Wide Web, two major shifts have occured that have deeply impacted the way people use the Internet. The first shift is the development of virtual communities, which enable people to share data or communicate together according to ...
... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À souten... more ... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À soutenir le 9 Décembre 2008 Devant le jury composé de Président : Prenom Nom, Titre, QQpart Directeurs : Stéphane Ubéda, Professeur, INSA de Lyon ...
In the automotive domain, the X-by-wire systems are dedicated to critical and real-time applicati... more In the automotive domain, the X-by-wire systems are dedicated to critical and real-time applications. These systems have specific needs that must be fulfilled, in particular in the reliability domain. Fault-tolerant architectures have been designed to fit with these requirements : TTA, FlexRay or TTCAN. This paper presents a methodology of temporal validation, and illustrates it for the validation of TTA and TTCAN services. This validation provides some temporal bounds, that can be used for the comparison of these architectures.
When providing services to home users, management is a key activity. In-home devices, and especia... more When providing services to home users, management is a key activity. In-home devices, and especially the Residential Gateway, can use multiple management technologies for multiple management activities: read/write parameters, but also deploy, update, start and stop software components.
Projet ARES Rapport de recherche n°6649 -09 2008 -78 pages Abstract: Extensible Component Platfor... more Projet ARES Rapport de recherche n°6649 -09 2008 -78 pages Abstract: Extensible Component Platforms can discover and install code during runtime. Although this feature introduces flexibility, it also brings new security threats: malicious components can quite easily be installed and exploit the rich programming environment and interactions with other components to perform attacks against the system. One example of such environments is the Java/OSGi Platform, which widespreads in the industrial world. Attacks from one component against another can not be prevented through conventional security mechanisms, since they exploit the lack of proper isolation between them: components often share classes and objects. This reports intends to list the vulnerabilities that a component can contain, both from the literature and from our own experience. The Vulnerable Bundle catalog gathers this knowledge. It provides informations related to the characteristics of the vulnerabilities, their consequence, the security mechanisms that would help prevent their exploitation, as well as to the implementation state of the proof-of-concept bundles that are developed to prove that the vulnerability is actually exploitable.
IS S N 0 2 4 9 -6 3 9 9 ... IS R N IN R IA /R R --6 2 3 1 --F R + E N G ... INSTITUT NATIONAL DE ... more IS S N 0 2 4 9 -6 3 9 9 ... IS R N IN R IA /R R --6 2 3 1 --F R + E N G ... INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE ... Unitщ de recherche INRIA Rhєne-Alpes 655, avenue de l'Europe, 38334 Montbonnot Saint Ismier (France) ...
EUROCON 2005 - The International Conference on "Computer as a Tool", 2005
Abstract Model Driven Engineering (MDE) knows growing interest as much as a research domain as an... more Abstract Model Driven Engineering (MDE) knows growing interest as much as a research domain as an industry process for building software quickly and reliably. However, in the way to reuse and automation of design processes, it has limitation for this purpose, as it focuses on ...
In this paper, we describe the characteristics of the Lean Enterprise and make the case for model... more In this paper, we describe the characteristics of the Lean Enterprise and make the case for modelling it in order to reproduce its successful practices more easily. The literature contains many good descriptions of the Toyota Production System and Lean in general, but no formal model that we can build upon. We then make the hypothesis that Lean is a Complex System, which can be modelled formally. We propose to follow the KREM model which comprises four components. The K (Knowledge) component includes domain knowledge about Lean in the form of several ontologies, the R (Rules) component is expressed by probabilistic rules, the E (Experience) component describes the practices (Kata) and the M (Meta-data) component describes the context of the application of Lean (different types of companies or cultural environments, for example). A practical example modelling the Hoshin Kanri process for setting objectives at the enterprise level demonstrates how to put this approach into practice.
... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À souten... more ... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À soutenir le 9 Décembre 2008 Devant le jury composé de Président : Prenom Nom, Titre, QQpart Directeurs : Stéphane Ubéda, Professeur, INSA de Lyon ...
The OSGi Platform finds a growing interest in two different applications domains: embedded system... more The OSGi Platform finds a growing interest in two different applications domains: embedded systems, and applications servers. However, the security properties of this platform are hardly studied, which is likely to hinder its use in production systems. This is all the more important that the dynamic aspect of OSGi-based applications, that can be extended at runtime, make them vulnerable to malicious code injection. We therefore perform a systematic audit of the OSGi platform so as to build a vulnerability catalog that intends to reference OSGi Vulnerabilities originating in the Core Specification, and in behaviors related to the use of the Java language. Standard Services are not considered. To support this audit, a Semi-formal Vulnerability Pattern is defined, that enables to uniquely characterize fundamental properties for each vulnerability, to include verbose description in the pattern, to reference known security protections, and to track the implementation status of the proof-of-concept OSGi Bundles that exploit the vulnerability. Based on the analysis of the catalog, a robust OSGi Platform is built, and recommendations are made to enhance the OSGi Specifications.
When providing services to home users, management is a key activity. In-home devices, and especia... more When providing services to home users, management is a key activity. In-home devices, and especially the Residential Gateway, can use multiple management technologies for multiple management activities: read/write parameters, but also deploy, update, start and stop software components. This paper defines management realms around the Residential Gateway, where different actors perform different management activities, using different technologies. We propose techniques that integrate these technologies (TR-069, UPnP, NetConf and JMX). We also address transient issues related to security.
Extensible Component Platforms can discover and install code during runtime. Although this featur... more Extensible Component Platforms can discover and install code during runtime. Although this feature introduces flexibility, it also brings new security threats: malicious components can quite easily be installed and exploit the rich programming environment and interactions with other components to perform attacks against the system. One example of such environments is the Java/OSGi Platform, which widespreads in the industrial world. Attacks from one component against another can not be prevented through conventional security mechanisms, since they exploit the lack of proper isolation between them: components often share classes and objects. This reports intends to list the vulnerabilities that a component can contain, both from the literature and from our own experience. The Vulnerable Bundle catalog gathers this knowledge. It provides informations related to the characteristics of the vulnerabilities, their consequence, the security mechanisms that would help prevent their exploita...
Agility for IT project management, especially the SCRUM framework, lays on a systemic approach to... more Agility for IT project management, especially the SCRUM framework, lays on a systemic approach to management. We strongly believe that a thorough understanding of complex system concepts behind SCRUM will highlight success factors, thereby empowering practitioners with a comprehensive framework for leading their projects to full achievement. We depict how SCRUM embodies a cognitive loop typical of complex systems, and how the framework complies with the properties of complex systems: nonreversibility; the 3 rules of preservation, evolution, control; multiscale. Two empirical experiments underline the correlation between these properties and the actual efficiency of project management. One bases on a series of software development projects, which are analyzed a posteriori; the second one bases on a controlled experiment implying 8 parallel student groups working on the same development project.
Mots clé Ingénierie inverse, ingénierie des traces, « logs », abduction, recherche de causes, app... more Mots clé Ingénierie inverse, ingénierie des traces, « logs », abduction, recherche de causes, approche systémique. I INTRODUCTION La sécurisation de grandes architectures de type Cloud montre une complexité immense qui mobilise d'ores et déjà une multiplicité de compétences. Il convient alors de compléter les enseignements classiques favorisant plutôt une compréhension par composant (pare-feu,..) par l'enseignement de l'architecture du SI dans sa globalité. II MOTIVATIONS Afin de comprendre la sécurité d'architectures complexes, la variété des méthodes d'apprentissage et de formation est un atout. Aujourd'hui, l'enseignement par des cours, TD ou TP, développe bien le fonctionnement d'un mécanisme spécifique et par thème (IP, VPN, VOIP....) mais ne permet pas de comprendre les interactions qu'entretiennent ces divers mécanismes lors de leurs fonctionnement. Afin d'accomplir l'enseignement de la vision globale, nous pensons que l'apprena...
de données associée. Il identifie les voies qui méritent d'être plus explorées comme les ontologi... more de données associée. Il identifie les voies qui méritent d'être plus explorées comme les ontologies et les treillis de connaissances afin d'abstraire les raisonnements afin de guider les experts dans leurs actions.
The OSGi Platform finds a growing interest in two different applications domains: embedded system... more The OSGi Platform finds a growing interest in two different applications domains: embedded systems, and applications servers. However, the security properties of this platform are hardly studied, which is likely to hinder its use in production systems. This is all the more important that the dynamic aspect of OSGi-based applications, that can be extended at runtime, make them vulnerable to
Le thème des réseaux de capteurs provoque un intérêt croissant depuis plu-sieurs années. Les prob... more Le thème des réseaux de capteurs provoque un intérêt croissant depuis plu-sieurs années. Les problématiques de localisation, en particulier, sont particuliè-rement importante, dans la mesure où ces capteurs sont dans un envirronement évolutif, et où ils peuvemt-être eux-...
AbstractSince the inception of the World Wide Web, two major shifts have occured that have deepl... more AbstractSince the inception of the World Wide Web, two major shifts have occured that have deeply impacted the way people use the Internet. The first shift is the development of virtual communities, which enable people to share data or communicate together according to ...
... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À souten... more ... pour l'obtention du Grade de Docteur spécialité informatique par Pierre PARREND À soutenir le 9 Décembre 2008 Devant le jury composé de Président : Prenom Nom, Titre, QQpart Directeurs : Stéphane Ubéda, Professeur, INSA de Lyon ...
In the automotive domain, the X-by-wire systems are dedicated to critical and real-time applicati... more In the automotive domain, the X-by-wire systems are dedicated to critical and real-time applications. These systems have specific needs that must be fulfilled, in particular in the reliability domain. Fault-tolerant architectures have been designed to fit with these requirements : TTA, FlexRay or TTCAN. This paper presents a methodology of temporal validation, and illustrates it for the validation of TTA and TTCAN services. This validation provides some temporal bounds, that can be used for the comparison of these architectures.
When providing services to home users, management is a key activity. In-home devices, and especia... more When providing services to home users, management is a key activity. In-home devices, and especially the Residential Gateway, can use multiple management technologies for multiple management activities: read/write parameters, but also deploy, update, start and stop software components.
Projet ARES Rapport de recherche n°6649 -09 2008 -78 pages Abstract: Extensible Component Platfor... more Projet ARES Rapport de recherche n°6649 -09 2008 -78 pages Abstract: Extensible Component Platforms can discover and install code during runtime. Although this feature introduces flexibility, it also brings new security threats: malicious components can quite easily be installed and exploit the rich programming environment and interactions with other components to perform attacks against the system. One example of such environments is the Java/OSGi Platform, which widespreads in the industrial world. Attacks from one component against another can not be prevented through conventional security mechanisms, since they exploit the lack of proper isolation between them: components often share classes and objects. This reports intends to list the vulnerabilities that a component can contain, both from the literature and from our own experience. The Vulnerable Bundle catalog gathers this knowledge. It provides informations related to the characteristics of the vulnerabilities, their consequence, the security mechanisms that would help prevent their exploitation, as well as to the implementation state of the proof-of-concept bundles that are developed to prove that the vulnerability is actually exploitable.
IS S N 0 2 4 9 -6 3 9 9 ... IS R N IN R IA /R R --6 2 3 1 --F R + E N G ... INSTITUT NATIONAL DE ... more IS S N 0 2 4 9 -6 3 9 9 ... IS R N IN R IA /R R --6 2 3 1 --F R + E N G ... INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE ... Unitщ de recherche INRIA Rhєne-Alpes 655, avenue de l'Europe, 38334 Montbonnot Saint Ismier (France) ...
EUROCON 2005 - The International Conference on "Computer as a Tool", 2005
Abstract Model Driven Engineering (MDE) knows growing interest as much as a research domain as an... more Abstract Model Driven Engineering (MDE) knows growing interest as much as a research domain as an industry process for building software quickly and reliably. However, in the way to reuse and automation of design processes, it has limitation for this purpose, as it focuses on ...
Uploads
Papers by Pierre Parrend