Dominique Bolignano, President and Founder of Prove & Run, ran a Seminar@SystemX on March 18 in SystemX’s premises on the following topic: “Proven Security for the Internet-of-Things”.
The large scale deployment of connected devices and of the Internet of Things (connected cars, smart homes and buildings, eHealthcare, wearables, smart grids, Industry 4.0, etc.) will not be possible without resolving the current major security issues and challenges.
This presentation will start with a review of the main components of the security chain and will demonstrate that the main sources of security issues can be attributed to faulty software where errors in the software architecture, design, implementation or configuration of an IoT system create vulnerabilities that can be exploited to mount a successful attack. The challenge is therefore to produce software that is as close as possible to “zero-bug”: the presentation will explain how this challenge can be met in a cost-effective way. As an example, the presentation will show how ProvenCore and ProvenVisor, two highly secure components of Prove & Run’s range of security bricks have been designed to reach the highest level of security. This will be illustrated using representative examples and in use cases drawn from various markets segments of the Internet of Things.
Dominique Bolignano led the Bull formal methods group until 1996, before taking charge of technology transfer initiatives in formal methods and security within Dyade GIE (a spin-off created by Inria and Bull). In 1999 he founded Trusted Logic, an Inria startup, which he led for 13 years. Trusted Logic grew to more than 100 experts, researchers and engineers in just a few years, becoming the world leader in secure operating systems and middleware for smart cards and mobile terminals. He oversaw the creation of two successful spin-off companies: Trusted Labs, a global expert in security services, and Trusted Logic Mobility (now merged with Trustonic), the leading provider of security solutions for mobile and connected devices. The Trusted Logic group of companies was sold to Gemalto in 2009. After initiating discussions on the new Joint Venture between ARM, Gemalto and G&D that led to the creation of Trustonic, he resigned his management positions within the Gemalto group over the summer of 2012 in order to focus on the development of Prove & Run, the company he had founded in 2009 to explore the practical application of innovative formal methods for systems with very high security needs.
In addition to his business activities, he has maintained strong links with the academic world. In particular he was Associate Professor at the Paris Dauphine University for nine years, and a member of the Scientific Council of CNRS in the field of engineering and computer science for four years, until September 2010.