hh.sePublications
Change search
Link to record
Permanent link

Direct link
Publications (10 of 105) Show all publications
Munir, S., Taha, W. & Iqbal Baig, M. S. (2024). Static Detection of Missing Validations in Solidity Smart Contracts. In: Proceedings of the 2024 IEEE International Conference on Cyber Security and Resilience, CSR 2024: . Paper presented at 2024 IEEE International Conference on Cyber Security and Resilience, CSR 2024, Hybrid, London, UK, 2-4 September, 2024 (pp. 413-420). Piscataway: IEEE, Article ID 202876.
Open this publication in new window or tab >>Static Detection of Missing Validations in Solidity Smart Contracts
2024 (English)In: Proceedings of the 2024 IEEE International Conference on Cyber Security and Resilience, CSR 2024, Piscataway: IEEE, 2024, p. 413-420, article id 202876Conference paper, Published paper (Refereed)
Abstract [en]

The Solidity smart contract language is deterministic by design. Nevertheless, some instances of nondeterminism (ND) in smart contracts stem from unpredictable inputs received during execution, such as inputs from asynchronous callbacks of Oracles or externally called contracts that halt unexpectedly. Such values must be validated to meet prespecified criteria before they reach critical program parts; otherwise, they can lead to nondeterministic state outcomes in smart contracts, which we refer to as ND-issues. To detect ND-issues, we propose an information flow-based analysis that tracks the unpredictable inputs and return values that are not validated before reaching critical program parts. We have implemented our proposal in FONOVA and evaluated it using 326 frequently used Ethereum smart contracts. The evaluation shows that FONOVA detects five times more exploitable instances of ND-issues with 12 times shorter analysis time than leading tools like Ethainter, Securify, and Mythril. © 2024 IEEE.

Place, publisher, year, edition, pages
Piscataway: IEEE, 2024
Keywords
Ethereum, Nondeterminism, Smart Contracts, Static Analysis, Vulnerability Detection
National Category
Computer Sciences
Identifiers
urn:nbn:se:hh:diva-54779 (URN)10.1109/CSR61664.2024.10679381 (DOI)001327167900062 ()2-s2.0-85206163683 (Scopus ID)
Conference
2024 IEEE International Conference on Cyber Security and Resilience, CSR 2024, Hybrid, London, UK, 2-4 September, 2024
Available from: 2024-10-22 Created: 2024-10-22 Last updated: 2024-11-20Bibliographically approved
Munir, S. & Taha, W. (2024). Statically Checking Transaction Ordering Dependency in Ethereum Smart Contracts. In: BSCI '24: Proceedings of the 6th ACM International Symposium on Blockchain and Secure Critical Infrastructure. Paper presented at The 6th ACM International Symposium on Blockchain and Secure Critical Infrastructure, Singapore, Singapore, 1st - 5th July, 2024. New York, NY: Association for Computing Machinery (ACM)
Open this publication in new window or tab >>Statically Checking Transaction Ordering Dependency in Ethereum Smart Contracts
2024 (English)In: BSCI '24: Proceedings of the 6th ACM International Symposium on Blockchain and Secure Critical Infrastructure, New York, NY: Association for Computing Machinery (ACM), 2024Conference paper, Published paper (Refereed)
Abstract [en]

Smart contracts are programs with mutable state. Transactions submitted to these contracts trigger functions that often modify state. Nodes of the Ethereum blockchain schedule such transactions in a nondeterministic order, potentially leading to races between transactions and concurrency issues. When the outcome of a smart contract varies depending on the order in which transactions are processed, we have a Transaction Ordering Dependency (TOD). TOD enables malicious actors to profit from a smart contract, similar to the well-known frontrunning vulnerability. Existing approaches for detecting TOD in Ethereum smart contracts yield a high rate of false positives and false negatives. To help contract developers and testers detect TOD vulnerabilities with enhanced precision, we propose and evaluate an analysis based on information flow in our tool TODChecker1 . We evaluate our approach using a benchmark comprising 513 vulnerable transactions involving 235 real-world Ethereum smart contracts susceptible to frontrunning attacks. Our evaluation finds that our approach outperforms existing approaches, including Oyente, Securify, SAILFISH, TODler, and Nyx, in precision, runtime, and in identifying novel TOD vulnerabilities. © 2024 Copyright held by the owner/author(s)

Place, publisher, year, edition, pages
New York, NY: Association for Computing Machinery (ACM), 2024
Keywords
Vulnerability detection, static analysis, Ethereum, smart contracts
National Category
Computer Sciences
Identifiers
urn:nbn:se:hh:diva-54931 (URN)10.1145/3659463.3660013 (DOI)2-s2.0-85219214794 (Scopus ID)9798400706387 (ISBN)
Conference
The 6th ACM International Symposium on Blockchain and Secure Critical Infrastructure, Singapore, Singapore, 1st - 5th July, 2024
Available from: 2024-11-20 Created: 2024-11-20 Last updated: 2025-03-18Bibliographically approved
Taha, W., Taha, A.-E. M. & Thunberg, J. (2021). Cyber-Physical Systems: A Model-Based Approach (1ed.). Springer
Open this publication in new window or tab >>Cyber-Physical Systems: A Model-Based Approach
2021 (English)Book (Refereed)
Abstract [en]

In this concise yet comprehensive Open Access textbook, future inventors are introduced to the key concepts of Cyber-Physical Systems (CPS). Using modeling as a way to develop deeper understanding of the computational and physical components of these systems, one can express new designs in a way that facilitates their simulation, visualization, and analysis. Concepts are introduced in a cross-disciplinary way. Leveraging hybrid (continuous/discrete) systems as a unifying framework and Acumen as a modeling environment, the book bridges the conceptual gap in modeling skills needed for physical systems on the one hand and computational systems on the other. In doing so, the book gives the reader the modeling and design skills they need to build smart, IT-enabled products. Starting with a look at various examples and characteristics of Cyber-Physical Systems, the book progresses to explain how the area brings together several previously distinct ones such as Embedded Systems, Control Theory, and Mechatronics. Featuring a simulation-based project that focuses on a robotics problem (how to design a robot that can play ping-pong) as a useful example of a CPS domain, Cyber-Physical Systems: A Model-Based Approach demonstrates the intimate coupling between cyber and physical components, and how designing robots reveals several non-trivial control problems, significant embedded and real-time computation requirements, and a need to consider issues of communication and preconceptions. © The Editor(s) (if applicable) and The Author(s) 2021

Place, publisher, year, edition, pages
Springer, 2021. p. XXIII, 187 Edition: 1
Keywords
CPS, Embedded System, model-based engineering, hybrid systems, Acumen, coordinate transformations, modeling computational systems, modeling physical systems, control, sensing and actuation, game theory, Open Access
National Category
Control Engineering
Identifiers
urn:nbn:se:hh:diva-55891 (URN)10.1007/978-3-030-36071-9 (DOI)978-3-030-36070-2 (ISBN)978-3-030-36073-3 (ISBN)978-3-030-36071-9 (ISBN)
Available from: 2025-04-17 Created: 2025-04-17 Last updated: 2025-04-17Bibliographically approved
Tzamaras, S., Adam, S. & Taha, W. (2021). Intelligent Techniques and Hybrid Systems Experiments Using the Acumen Modeling and Simulation Environment. In: Maglogiannis I.; Macintyre J.; Iliadis L. (Ed.), IFIP Advances in Information and Communication Technology: . Paper presented at 17th IFIP WG 12.5 International Conference on Artificial Intelligence Applications and Innovations, AIAI 2021, Virtual, Online, 25-27/06, 2021 (pp. 531-542). Cham: Springer, 627
Open this publication in new window or tab >>Intelligent Techniques and Hybrid Systems Experiments Using the Acumen Modeling and Simulation Environment
2021 (English)In: IFIP Advances in Information and Communication Technology / [ed] Maglogiannis I.; Macintyre J.; Iliadis L., Cham: Springer, 2021, Vol. 627, p. 531-542Conference paper, Published paper (Refereed)
Abstract [en]

Hybrid systems are dynamical systems of both continuous and discrete nature and constitute an important field of control systems theory and engineering. On the other hand, intelligent data processing has become one of the most critical devices of modern computer based systems as these systems operate in environments featuring increasing uncertainty and unpredictability. While these two approaches set completely different objectives, modern cyber-physical systems, taken as variants of hybrid systems, seem to constitute a field of increasing interest for applying intelligent techniques. Moreover, the examples of, not so recent, intelligent control systems are suggestive for considering a study on getting intelligent techniques close to hybrid systems. In this paper we present the experimental investigation we undertook in this direction. More specifically, we present and discuss the experiments carried out using Acumen a hybrid systems modeling and simulation environment. Without urging towards setting and solving questions of conceptual order we tried to figure out whether it is possible to represent intelligent behavior using a tool for modeling dynamical systems focusing on the study of its ability to permit the representation of both continuous and discrete intelligent techniques, namely, Reinforcement Learning and Hopfield neural networks. The results obtained are indicative of the problems related to the specific computational context and are useful in deriving conclusions concerning the functionality that needs to be provided by such modeling and simulation environments, in order to allow for the coexistence of hybrid systems and intelligent techniques. © 2021, IFIP International Federation for Information Processing

Place, publisher, year, edition, pages
Cham: Springer, 2021
Series
IFIP Advances in Information and Communication Technology (IFIPAICT), ISSN 1868-4238, E-ISSN 1868-422X ; 627
National Category
Control Engineering
Identifiers
urn:nbn:se:hh:diva-46087 (URN)10.1007/978-3-030-79150-6_42 (DOI)2-s2.0-85111887917 (Scopus ID)978-3-030-79149-0 (ISBN)978-3-030-79150-6 (ISBN)
Conference
17th IFIP WG 12.5 International Conference on Artificial Intelligence Applications and Innovations, AIAI 2021, Virtual, Online, 25-27/06, 2021
Available from: 2021-12-10 Created: 2021-12-10 Last updated: 2021-12-10Bibliographically approved
Buffoni, L., Ochel, L., Pop, A., Sjölund, M., Fritzson, P., Fors, N., . . . Taha, W. (2021). Open source languages and methods for cyber-physical system development: Overview and case studies. Electronics, 10(8), Article ID 902.
Open this publication in new window or tab >>Open source languages and methods for cyber-physical system development: Overview and case studies
Show others...
2021 (English)In: Electronics, E-ISSN 2079-9292, Vol. 10, no 8, article id 902Article in journal (Refereed) Published
Abstract [en]

Industrial cyber-physical system products interleave hardware, software, and communication components. System complexity is increasing simultaneously with increased demands on quality and shortened time-to-market. To effectively support the development of such systems, we present languages and tools for comprehensive integrated model-based development that cover major phases such as requirement analysis, design, implementation, and maintenance. The model-based approach raises the level of abstraction and allows to perform virtual prototyping by simulating and optimizing system models before building physical products. Moreover, open standards and open source implementations enable model portability, tool reuse and a broader deployment. In this paper we present a general overview of the available solutions with focus on Modelica/OpenModelica, Bloqqi, and Acumen. The paper presents contributions to these languages and environments, including symbolic-numeric modeling, requirement verification, code generation, model debugging, design optimization, graphical modeling, and variant handling with traceability, as well a general discussion and conclusions. © 2021 by the authors. Licensee MDPI, Basel, Switzerland

Place, publisher, year, edition, pages
Basel: , 2021
Keywords
Cyber-physical systems, Equation-based, Modeling languages, Open source, Simulation
National Category
Computer Sciences
Identifiers
urn:nbn:se:hh:diva-45952 (URN)10.3390/electronics10080902 (DOI)000644022500001 ()2-s2.0-85103821011 (Scopus ID)
Funder
VinnovaSwedish Foundation for Strategic Research
Available from: 2021-11-29 Created: 2021-11-29 Last updated: 2021-11-29Bibliographically approved
Moggi, E., Taha, W. & Thunberg, J. (2020). Sound over-approximation of probabilities. Acta Cybernetica, 24(3), 269-285
Open this publication in new window or tab >>Sound over-approximation of probabilities
2020 (English)In: Acta Cybernetica, ISSN 0324-721X, Vol. 24, no 3, p. 269-285Article in journal (Refereed) Published
Abstract [en]

Safety analysis of high confidence systems requires guaranteed bounds on the probabilities of events of interest. Establishing the correctness of algorithms that aim to compute such bounds is challenging. We address this problem in three steps. First, we use monadic transition systems (MTS) in the category of sets as a framework for modeling discrete time systems. MTS can capture different types of system behaviors, but we focus on a combination of non-deterministic and probabilistic behaviors that often arises when modeling complex systems. Second, we use the category of posets and monotonic maps as a setting to define and compare approximations. In particular, for the MTS of interest, we consider approximations of their configurations based on complete lattices. Third, by restricting to finite lattices, we obtain algorithms that compute over-approximations, i.e., bounds from above within some partial order of approximants, of the system configuration after n steps. Interestingly, finite lattices of “interval probabilities” may fail to accurately approximate configurations that are both non-deterministic and probabilistic, even for deterministic (and continuous) system dynamics. However, better choices of finite lattices are available. © 2020 University of Szeged, Institute of Informatics. All rights reserved.

Place, publisher, year, edition, pages
Szeged: University of Szeged, Institute of Informatics, 2020
Keywords
Digital control systems, Discrete time control systems, Probability, Complete lattices, Discrete - time systems, Guaranteed bounds, Interval probability, Probabilistic behavior, System behaviors, System configurations, Transition system, Approximation algorithms
National Category
Control Engineering
Identifiers
urn:nbn:se:hh:diva-43653 (URN)10.14232/ACTACYB.24.3.2020.2 (DOI)000526957200002 ()2-s2.0-85085269748 (Scopus ID)
Funder
Knowledge FoundationELLIIT - The Linköping‐Lund Initiative on IT and Mobile Communications
Note

Additional funder: NSF CPS project. Grant number: 1136099

Available from: 2020-12-07 Created: 2020-12-07 Last updated: 2020-12-08Bibliographically approved
Chamberlain, R., Taha, W. & Törngren, M. (Eds.). (2019). Cyber Physical Systems. Model-Based Design: 8th International Workshop, CyPhy 2018, and 14th International Workshop, WESE 2018, Turin, Italy, October 4–5, 2018, Revised Selected Papers (1ed.). Cham: Springer
Open this publication in new window or tab >>Cyber Physical Systems. Model-Based Design: 8th International Workshop, CyPhy 2018, and 14th International Workshop, WESE 2018, Turin, Italy, October 4–5, 2018, Revised Selected Papers
2019 (English)Conference proceedings (editor) (Refereed)
Abstract [en]

This book constitutes the proceedings of the 8th International Workshop on Design, Modeling, and Evaluation of Cyber Physical Systems, CyPhy 2018 and 14th International Workshop on Embedded and Cyber-Physical Systems Education, WESE 2018, held in conjunction with ESWeek 2018, in Torino, Italy, in October 2018. The 13 full papers presented together  with 1 short paper in this volume were carefully reviewed and selected from 18 submissions. The conference presents a wide range of domains including Modeling, simulation, verification, design, cyber-physical systems, embedded systems, real-time systems, safety, and reliability. © 2019 Springer Nature Switzerland AG. Part of Springer Nature.

Place, publisher, year, edition, pages
Cham: Springer, 2019. p. 231 Edition: 1
Series
Lecture Notes in Computer Science, ISSN 0302-9743, E-ISSN 1611-3349 ; 11615
Keywords
Modeling, Simulation, Cyber-Physical Systems
National Category
Computer Sciences
Identifiers
urn:nbn:se:hh:diva-41303 (URN)10.1007/978-3-030-23703-5 (DOI)978-3-030-23703-5 (ISBN)978-3-030-23702-8 (ISBN)
Funder
Knowledge Foundation
Available from: 2019-12-24 Created: 2019-12-24 Last updated: 2020-01-15Bibliographically approved
Marchand, J., Puissochet, G., Lithén, T. & Taha, W. (2019). MicroITS: A scaled-down ITS platform. In: Lecture Notes in Computer Science: . Paper presented at 8th International Workshop on Design, Modeling, and Evaluation of Cyber Physical Systems, CyPhy 2018 and 14th International Workshop on Embedded and Cyber-Physical Systems Education, WESE 2018, held in conjunction with ESWeek 2018; Turin; Italy; 4 October 2018 through 5 October 2018 (pp. 214-221). Springer
Open this publication in new window or tab >>MicroITS: A scaled-down ITS platform
2019 (English)In: Lecture Notes in Computer Science, Springer, 2019, p. 214-221Conference paper, Published paper (Refereed)
Abstract [en]

Intelligent Transportation Systems (ITS) are an excellent illustration of the types of challenges that future technologists must address. In previous work we presented a course designed to engage students with theoretical aspects of embedded and cyber-physical systems. In this paper we present MicroITS, a platform addressing applied aspects. We articulate the design goals that we believe are needed to achieve engagement in an educational setting, and describe the platform and its baseline functionality. We briefly describe example projects that can be realized using MicroITS. Our hope is that this report will encourage the development of a community of educators and students interested in the use and the continued development of the platform. © Springer Nature Switzerland AG 2019.

Place, publisher, year, edition, pages
Springer, 2019
Series
Lecture Notes in Computer Science, ISSN 0302-9743, E-ISSN 1611-3349 ; 11615
Keywords
Cyber Physical System, Education computing, Intelligent systems, Intelligent vehicle highway systems, Students, Design goal, Educational settings, Intelligent transportation systems, Theoretical aspects, Embedded systems
National Category
Other Computer and Information Science
Identifiers
urn:nbn:se:hh:diva-41548 (URN)10.1007/978-3-030-23703-5_13 (DOI)2-s2.0-85069196047 (Scopus ID)9783030237028 (ISBN)
Conference
8th International Workshop on Design, Modeling, and Evaluation of Cyber Physical Systems, CyPhy 2018 and 14th International Workshop on Embedded and Cyber-Physical Systems Education, WESE 2018, held in conjunction with ESWeek 2018; Turin; Italy; 4 October 2018 through 5 October 2018
Funder
Knowledge Foundation
Available from: 2020-02-03 Created: 2020-02-03 Last updated: 2022-01-10Bibliographically approved
Moggi, E., Farjudian, A. & Taha, W. (2019). System analysis and robustness. In: CEUR Workshop Proceedings: Volume 2504. Paper presented at 20th Italian Conference on Theoretical Computer Science (ICTCS 2019), September 9-11, 2019 (pp. 1-7). CEUR-WS
Open this publication in new window or tab >>System analysis and robustness
2019 (English)In: CEUR Workshop Proceedings: Volume 2504, CEUR-WS , 2019, p. 1-7Conference paper, Published paper (Refereed)
Abstract [en]

Software is increasingly embedded in a variety of physical contexts. This imposes new requirements on tools that support the design and analysis of systems. For instance, modeling embedded and cyberphysical systems needs to blend discrete mathematics, which is suitable for modeling digital components, with continuous mathematics, used for modeling physical components. This blending of continuous and discrete creates challenges that are absent when the discrete or the continuous setting are considered in isolation. We consider robustness, that is, the ability of an analysis of a model to cope with small amounts of imprecision in the model. Formally, we identify analyses with monotonic maps between complete lattices (a mathematical framework used for abstract interpretation and static analysis) and define robustness for monotonic maps between complete lattices of closed subsets of a metric space. Copyright © 2019 for this paper by its authors.

Place, publisher, year, edition, pages
CEUR-WS, 2019
Series
CEUR Workshop Proceedings, ISSN 1613-0073 ; 2504
Keywords
Analyses, Domain theory, Robustness, Blending, Robustness (control systems), Static analysis, Abstract interpretations, Cyber physical systems (CPSs), Design and analysis, Discrete mathematics, Mathematical frameworks, Physical components, Embedded systems
National Category
Computer Systems
Identifiers
urn:nbn:se:hh:diva-41543 (URN)2-s2.0-85076003651 (Scopus ID)
Conference
20th Italian Conference on Theoretical Computer Science (ICTCS 2019), September 9-11, 2019
Available from: 2020-02-04 Created: 2020-02-04 Last updated: 2020-03-20Bibliographically approved
Moggi, E., Amin, F. & Taha, W. (2019). System Analysis and Robustness. In: Tiziana Margaria, Susanne Graf & Kim G. Larsen (Ed.), Tiziana Margaria, Susanne Graf & Kim G. Larsen (Ed.), Models, Mindsets, Meta: The What, the How, and the Why Not?: Essays Dedicated to Bernhard Steffen on the Occasion of His 60th Birthday (pp. 36-44). Cham: Springer
Open this publication in new window or tab >>System Analysis and Robustness
2019 (English)In: Models, Mindsets, Meta: The What, the How, and the Why Not?: Essays Dedicated to Bernhard Steffen on the Occasion of His 60th Birthday / [ed] Tiziana Margaria, Susanne Graf & Kim G. Larsen, Cham: Springer, 2019, p. 36-44Conference paper, Published paper (Refereed)
Abstract [en]

Software is increasingly embedded in a variety of physical contexts. This imposes new requirements on tools that support the design and analysis of systems. For instance, modeling embedded and cyber-physical systems needs to blend discrete mathematics, which is suitable for modeling digital components, with continuous mathematics, used for modeling physical components. This blending of continuous and discrete creates challenges that are absent when the discrete or the continuous setting are considered in isolation. We consider robustness, that is, the ability of an analysis of a model to cope with small amounts of imprecision in the model. Formally, we identify analyses with monotonic maps between complete lattices (a mathematical framework used for abstract interpretation and static analysis) and define robustness for monotonic maps between complete lattices of closed subsets of a metric space. © Springer Nature Switzerland AG 2019

Place, publisher, year, edition, pages
Cham: Springer, 2019
Series
Lecture Notes in Computer Science, ISSN 0302-9743, E-ISSN 1611-3349 ; 11200
Keywords
Modeling, Simulation, Hybrid Systems, Cyber-Physical Systems
National Category
Computer Sciences
Identifiers
urn:nbn:se:hh:diva-41304 (URN)10.1007/978-3-030-22348-9_4 (DOI)2-s2.0-85067949429 (Scopus ID)978-3-030-22347-2 (ISBN)978-3-030-22348-9 (ISBN)
Note

Also part of the Theoretical Computer Science and General Issues book sub series (LNTCS, volume 11200)

Available from: 2019-12-24 Created: 2019-12-24 Last updated: 2020-03-25Bibliographically approved
Organisations
Identifiers
ORCID iD: ORCID iD iconorcid.org/0000-0003-3160-9188

Search in DiVA

Show all publications