OWASP Day 2019 @ Udine

OWASP Italy Day is a one-day conference focused on web application and software security, application security testing tools and technologies and cloud security. This conference provides a unique opportunity to learn about application security topics and to network with application security professionals/managers, software engineers, software quality engineers/testers and computer science students. This year special topic of interest is the security of emerging technologies.

OWASP Day 2019 will be held at the Università degli Studi di Udine, Palazzo Antonini, Via Tarcisio Petracco, 8, 33100 Udine UD, Italy, on December 14, 2019, from 9:00 to 13:30.

This conference is organized by the OWASP foundation and OWASP Italy in collaboration with the University of Udine, Italy. We refer to the official web page for the program and more details.

New paper “A GSOS for Attribute-based Communication”

The short paper A GSOS for Attribute-based Communication by Matteo Paier and myself, has been accepted to EXPRESS/SOS, the Combined 26th International Workshop on Expressiveness in Concurrency and 16th Workshop on Structural Operational Semantics.

Abstract: We propose a new GSOS semantics fo AbC, a calculus for attribute-based communication. This semantics is simpler than the previous ones, but as much as expressive; in fact, we will show that there is a precise equivalence. The new semantics will be useful for simplifying bisimulation proofs, and it is preparatory to the definition of a bialgebraic semantics for AbC.

New paper “An abstract distributed middleware for transactions over heterogeneous stores”

The paper An abstract distributed middleware for transactions over heterogeneous stores by Luca Geatti, Federico Igne and myself, has been accepted to the 20th Italian Conference on Theoretical Computer Science.

Abstract: We present an abstract middleware, called Acidify, for the coordination of transactions between distributed processes accessing shared heterogeneous (possibly remote) storage services. Processes can specify transactions by means of a specific abstract language; each transaction is then executed atomically and in isolation, following an “optimistic” strategy. To ensure scalability and reliability, Acidify is peer-to-peer, without relying on any centralized service. Moreover, it is abstract, in the sense that the transaction language is independent from the underlying storage services, and it can be readily ported to any storage service.
We provide a formal model of Acidify as a set of interacting automata; this allows us to prove soundness and termination of the algorithms, and to estimate the overhead in terms of exchanged messages and delays. Finally, we provide an implementation of Acidify as an Erlang behaviour, together with the bindings for Riak KV and Amazon S3.

One year research position at the University of Udine (deadline: April 10, 2019)

One-year research position at the University of Udine about
Modelling and performance evaluation of train on-board networks
Funded by EU FSE program HEaD

Deadline for application: Aprile 10, 2019, 11:30.


Nowadays trains feature advanced on-board information networks which are used both for essential services and for additional (infotainment) services, and must guarantee an adequate level of service quality.
Designing, implementing and validating these networks, respecting precise qualitative and quantitative constraints (bandwidth, delay, fault tolerance, etc.) is complex and error-prone.
The objective of this project is to define practical methods and solutions for modelling train on-board networks, both in the topological and in the quantitative aspects, with the aim to simulate and predict their behavior in various traffic conditions before implementation and deployment. These solutions will use tools and technologies currently developed within the academic community, such as quantitative simulators and model checkers.


Candidates must have a Master degree in Computer Science or Computer Engineering (PhD is not required but appreciated), and possibly a background in network simulation, performance analysis and evaluation. Good programming skills will be appreciated.

Working conditions

The selected candidate will work mainly at the Department of Mathematics, Computer Science and Physics (DMIF), of the University of Udine (Italy), in strict cooperation with VDS Rail, a leading industry of the sector.

The total net salary is 20.382,00 euro.

For more information please contact Marino Miculan (marino.miculan@uniud.it)

More details about the applications are at the official call.