A Design Methodology for Computer Security Testing

The field of "computer security" is often considered something in between Art and Science. This is partly due to the lack of widely agreed and standardized methodologies to evaluate the degree of the security of a system. This dissertation intends to contribute to this area by investigating the most common security testing strategies applied nowadays and by proposing an enhanced methodology that may be effectively applied to different threat scenarios with the same degree of effectiveness. Security testing methodologies are the first step towards standardized security evaluation processes and understanding of how the security threats evolve over time. This dissertation analyzes some of the most used identifying differences and commonalities, useful to compare them and assess their quality. The dissertation then proposes a new enhanced methodology built by keeping the best of every analyzed methodology. The designed methodology is tested over different systems with very effective results, which is the main evidence that it could really be applied in practical cases. Most of the dissertation discusses and proves how the presented testing methodology could be applied to such different systems and even to evade security measures by inverting goals and scopes. Real cases are often hard to find in methodology' documents, in contrary this dissertation wants to show real and practical cases offering technical details about how to apply it. Electronic voting systems are the first field test considered, and Pvote and Scantegrity are the two tested electronic voting systems. The usability and effectiveness of the designed methodology for electronic voting systems is proved thanks to this field cases analysis. Furthermore reputation and anti virus engines have also be analyzed with similar results. The dissertation concludes by presenting some general guidelines to build a coordination-based approach of electronic voting systems to improve the security without decreasing the system modularity.

Il sarto tra Medioevo e prima Età moderna a Bologna e in altre città dell’Emilia Romagna

Il lavoro di Elisa Tosi Brandi riguarda il mestiere del sarto nel basso Medioevo e si sviluppa utilizzando due prospettive differenti. Da un lato, infatti, si è deciso di seguire una tradizione di studi oramai consolidata, che privilegia l’indagine degli aspetti economici e politici, dall’altro si è scelto di non trascurare la storia dei prodotti degli artigiani. L’approccio utilizzato in questa tesi tiene insieme entrambe le prospettive di ricerca, tentando dunque di indagare i produttori e i prodotti così come le fasi e i metodi di lavoro. Ciò senza ignorare, da un lato, indagini di tipo politico, economico e sociale, poiché tali oggetti sono lo specchio della società che li ha ideati e creati e da cui non si può prescindere e, dall’altro, indagini di tipo tecnico, poiché gli oggetti sono rivelatori del complesso patrimonio di conoscenze artigianali. Partendo dal caso di studio della Società dei sarti della città di Bologna, la tesi di Elisa Tosi Brandi ricostruisce questo mestiere confrontando tra loro fonti inedite (statuti corporativi, matricole, estimi) e studi effettuati su altre aree italiane. La ricca documentazione conservata ha consentito di mettere in luce l’organizzazione di questo lavoro, di collocare abitazioni e botteghe nell’area del mercato e nel più ampio tessuto cittadino, di individuare i percorsi commerciali e di approvvigionamento. L’ultima parte della tesi offre l’analisi di alcune fonti materiali al fine di ricostruire le tecniche sartoriali medievali intrecciando tutte le fonti consultate: dai documenti scritti si passa pertanto agli abiti che offrono informazioni dirette sulle tecniche di taglio ed assemblaggio.

L'evoluzione poetica delle Grazie di Ugo Foscolo. Un'ipotesi di commento.

Il presente progetto di ricerca propone l’esegesi di alcune sezioni delle Grazie di Ugo Foscolo, secondo l’Edizione Nazionale (1985), a cura di Pagliai-Scotti. È stato fornito il commento delle seguenti sezioni: Prima redazione dell’Inno, Seconda redazione dell’Inno e Appendice alla Seconda redazione dell’Inno, Versi del Rito, Quadernone, Stesure milanesi: Viaggio delle api e frammenti sparsi. Tutte le stesure della Prima redazione dell’Inno e alcuni frammenti delle Stesure milanesi non erano mai stati commentati fino ad ora. Il commento offre una ricostruzione dell’intertesto delle Grazie – le fonti letterarie, erudite e figurative –, e punta alla storicizzazione e alla contestualizzazione della poesia di Foscolo. Attraverso lo studio dei frammenti nella loro evoluzione è possibile intendere come i tre inni, diventati uno soltanto nella redazione del Quadernone, rappresentino la sintesi di tutto il sapere e gli interessi foscoliani (eruditi, scientifici, filosofico-estetici e letterari), e come essi, sin dai primi esiti poetici, siano specchio delle esperienze biografiche dell’autore. Il commento proposto nella tesi ribadisce la complessità della poesia delle Grazie, nelle sue componenti civili e didattiche. Esso avanza nuovi e importanti spunti di indagine, ponendosi come viatico indispensabile per un futuro commento integrale.

Meta-models, environment and layers: agent-oriented engineering of complex systems

Traditional software engineering approaches and metaphors fall short when applied to areas of growing relevance such as electronic commerce, enterprise resource planning, and mobile computing: such areas, in fact, generally call for open architectures that may evolve dynamically over time so as to accommodate new components and meet new requirements. This is probably one of the main reasons that the agent metaphor and the agent-oriented paradigm are gaining momentum in these areas. This thesis deals with the engineering of complex software systems in terms of the agent paradigm. This paradigm is based on the notions of agent and systems of interacting agents as fundamental abstractions for designing, developing and managing at runtime typically distributed software systems. However, today the engineer often works with technologies that do not support the abstractions used in the design of the systems. For this reason the research on methodologies becomes the basic point in the scientific activity. Currently most agent-oriented methodologies are supported by small teams of academic researchers, and as a result, most of them are in an early stage and still in the first context of mostly \academic" approaches for agent-oriented systems development. Moreover, such methodologies are not well documented and very often defined and presented only by focusing on specific aspects of the methodology. The role played by meta- models becomes fundamental for comparing and evaluating the methodologies. In fact a meta-model specifies the concepts, rules and relationships used to define methodologies. Although it is possible to describe a methodology without an explicit meta-model, formalising the underpinning ideas of the methodology in question is valuable when checking its consistency or planning extensions or modifications. A good meta-model must address all the different aspects of a methodology, i.e. the process to be followed, the work products to be generated and those responsible for making all this happen. In turn, specifying the work products that must be developed implies dening the basic modelling building blocks from which they are built. As a building block, the agent abstraction alone is not enough to fully model all the aspects related to multi-agent systems in a natural way. In particular, different perspectives exist on the role that environment plays within agent systems: however, it is clear at least that all non-agent elements of a multi-agent system are typically considered to be part of the multi-agent system environment. The key role of environment as a first-class abstraction in the engineering of multi-agent system is today generally acknowledged in the multi-agent system community, so environment should be explicitly accounted for in the engineering of multi-agent system, working as a new design dimension for agent-oriented methodologies. At least two main ingredients shape the environment: environment abstractions - entities of the environment encapsulating some functions -, and topology abstractions - entities of environment that represent the (either logical or physical) spatial structure. In addition, the engineering of non-trivial multi-agent systems requires principles and mechanisms for supporting the management of the system representation complexity. These principles lead to the adoption of a multi-layered description, which could be used by designers to provide different levels of abstraction over multi-agent systems. The research in these fields has lead to the formulation of a new version of the SODA methodology where environment abstractions and layering principles are exploited for en- gineering multi-agent systems.

Parallel Architectures for Many-Core Systems-On-Chip in Deep Sub-Micron Technology

Despite the several issues faced in the past, the evolutionary trend of silicon has kept its constant pace. Today an ever increasing number of cores is integrated onto the same die. Unfortunately, the extraordinary performance achievable by the many-core paradigm is limited by several factors. Memory bandwidth limitation, combined with inefficient synchronization mechanisms, can severely overcome the potential computation capabilities. Moreover, the huge HW/SW design space requires accurate and flexible tools to perform architectural explorations and validation of design choices. In this thesis we focus on the aforementioned aspects: a flexible and accurate Virtual Platform has been developed, targeting a reference many-core architecture. Such tool has been used to perform architectural explorations, focusing on instruction caching architecture and hybrid HW/SW synchronization mechanism. Beside architectural implications, another issue of embedded systems is considered: energy efficiency. Near Threshold Computing is a key research area in the Ultra-Low-Power domain, as it promises a tenfold improvement in energy efficiency compared to super-threshold operation and it mitigates thermal bottlenecks. The physical implications of modern deep sub-micron technology are severely limiting performance and reliability of modern designs. Reliability becomes a major obstacle when operating in NTC, especially memory operation becomes unreliable and can compromise system correctness. In the present work a novel hybrid memory architecture is devised to overcome reliability issues and at the same time improve energy efficiency by means of aggressive voltage scaling when allowed by workload requirements. Variability is another great drawback of near-threshold operation. The greatly increased sensitivity to threshold voltage variations in today a major concern for electronic devices. We introduce a variation-tolerant extension of the baseline many-core architecture. By means of micro-architectural knobs and a lightweight runtime control unit, the baseline architecture becomes dynamically tolerant to variations.