<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-GB">Dear all,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-GB" style="font-size:14.0pt;color:#8DAE10">the Faculty of Computer Science cordially invites you to Prof. Dr. Catalin Hritcu’s inaugural lecture “My Group's Journey in Secure Compilation”</span></b><b><span lang="EN-GB" style="font-size:16.0pt;color:#8DAE10"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-GB">When?</span></b><span lang="EN-GB"> April 30, 4-5 pm lecture, afterwards get together with pizza and drinks<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-GB">Where? </span></b><span lang="EN-GB">Building MC, Open Space<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-GB">Registration: <a href="https://terminplaner6.dfn.de/de/b/2168e90c4da44102ad0b2c9ede6a1f4f-1168574">
https://terminplaner6.dfn.de/de/b/2168e90c4da44102ad0b2c9ede6a1f4f-1168574</a><o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span lang="EN-GB"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-GB">Abstract:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Good programming languages provide helpful abstractions for writing more secure code: from structured control flow, procedures, and modules, to types, interfaces, and specifications. However, such abstractions are not
enforced when compiling a program and linking it with low-level code (such as a library or a legacy application), which can be buggy, vulnerable, compromised, or even malicious, and which can void all security guarantees of the compiled code. To make things
worse, most realistic programming languages have unsafe features that can lead to "undefined behavior", which causes compilers to produce code that can behave completely arbitrarily. Such undefined behavior is endemic in languages like C, where buffer overflows,
use after frees, double frees, invalid type casts, various concurrency bugs, etc., lead to devastating security vulnerabilities that are often remotely exploitable.<br>
We study how compartmentalization can mitigate these two secure compilation problems: (1) by protecting secure source programs from linked adversarial low-level code and (2) for vulnerable source programs by restricting the scope of undefined behavior both
spatially to just the compartments that encounter undefined behavior, and temporally by still providing protection to each compartment up to the point in time when it encounters undefined behavior.<br>
In particular, this talk will report on our journey that recently resulted in SECOMP, a compiler for compartmentalized C code that comes with machine-checked secure compilation proofs restricting the scope of undefined behavior. It will focus on the main challenges
our research has overcome: (A) defining formally what it means for a compilation chain to be secure in the two settings above, which led to the discovery of a wide range of secure compilation criteria that provide good alternatives to full abstraction; (B)
enforcing water-tight protection using low-level compartmentalization mechanisms such as software fault isolation, programmable tagged architectures, and capability machines; and (C) devising scalable proof techniques and using them to provide the first machine-checked
secure compilation guarantees similar to full abstraction for a realistic programming language.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">We are looking forward to welcoming many of you!
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Best wishes <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Charlotte <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;color:#003560;mso-fareast-language:DE">Charlotte Schab, M.Sc.<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#003560;mso-fareast-language:DE">RUHR-UNIVERSITÄT BOCHUM<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#8DAE10;mso-fareast-language:DE">FAKULTÄT FÜR INFORMATIK<o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">Marketing und PR | Marketing and PR<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:9.0pt;color:#003560;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">Phone: +49-(0)234 / 32-19251<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">Pers. Email:
</span><span style="font-size:12.0pt;mso-fareast-language:DE"><a href="mailto:charlotte.schab@rub.de"><span lang="EN-US" style="font-size:9.0pt;color:#003560">charlotte.schab@rub.de</span></a></span><span style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">
</span><span lang="EN-US" style="font-size:9.0pt;color:#003560;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">Internet:
</span><span style="font-size:12.0pt;mso-fareast-language:DE"><a href="http://www.informatik.rub.de/"><span style="font-size:9.0pt;color:#0563C1">www.informatik.rub.de</span></a></span><span style="font-size:9.0pt;color:#003560;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#003560;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">Universitätsstraße 150, D-44801 Bochum<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:#003560;mso-fareast-language:DE">MC, 1<sup>st</sup> floor, room 62<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>