Homepage of Matúš Harvan

Contact Information | Publications | Research | Teaching | Bike

Research

My current research interest include:

computational security and (partially) homomorphic encryption
big data processing
runtime monitoring, LTL
building scalable, reliable, and secure systems

Research projects I have participated in:

Data Usage Monitoring and Enforcement

with Google Switzerland

Usage Control in Ubiquitos Communication

with Nokia Research Center Lausanne

Distributed Usage Control Enforcement

with DoCoMo Euro-Labs

Managing Assurance, Security and Trust for Services (MASTER)

EU FP7 Integrated Project

Wireless Sensor Networks - a 6lowpan implementation for TinyOS 2.0

The topic of my MSc Thesis was a 6lowpan implementation for TinyOS 2.0. 6lowpan is an adaptation layer for transferring IPv6 packets over 802.15.4 links. The TelosB and MicaZ motes have been used. The thesis was supervised by Jürgen Schönwälder.

MSc Thesis
MSc Thesis proposal
Source code has been contributed to the TinyOS distribution, which seems to be hosted on google code. Check out the code from SVN and start by reading the file tos/lib/net/6lowpan/README.
talk at Uni Bremen, 25 May 2007
Some practical insights into setting up TinyOS and programming the motes can be found on the wiki.

Magic Tunnel Daemon (mtund)

I have been accepted to Google Summer of Code 2007 and worked on the Super Tunnel Daemon for FreeBSD. The project was be mentored by Max Laier and Brooks Davis. A code snapshot is available. More information and status updates can be found on the project wiki page.

EuroBsdCon 2007 poster for Magic Tunnel Daemon (mtund)

Policy Conflict Detection for Cfengine

As a semester project for the Computational Semantics of Natural Language Processing course I have looked into policy conflict detection for cfengine. The general idea is:

translate cfengine configuration files into a standard logic language TPTP
some logic predicates describing conflicting cfengine actions have been defined and written in the TPTP language
use one of the standard automated theorem provers, in particular Bliksem, to search for contradictions

More details are in the project report and an implementation is also available.

Analysis and Anonymization of SNMP traces

More on analysis of SNMP traffic traces can be found in following documents

draft-irtf-nmrg-snmp-measure-00
A. Pras, J. Schönwälder, M. Harvan, J. Schippers, R. van de Meent SNMP Traffic Analysis: Approaches, Tools, and First Results Proc. 10th IFIP/IEEE Symposium on Integrated Management (IM 2007), Munich, May 2007. (to appear)
Networks and Distributed Systems Seminar 2006 report

The implementation is available as the snmpdump software package, mostly as perl scripts in the scripts directory.

Prefix- and lexicographical-order-preserving IP address anonymization

To facilitate anonymization of SNMP traces, a prefix- and lexicographical-order-preserving IP address anonymization scheme has been devepoled as my BSc Thesis (called Guided Research at IUB). More information can be found in the NOMS 2006 paper and slides. The BSc Thesis (Guided Research report) can be of interest as well. The anonymization scheme has been implemented as a C-libraby libanon. Anonymization functions for other data types have been added and the library has been integrated into the snmpdump program. You can find it in the libanon subdirectory of snmpdump sources. Note that the anonymization of SNMP traces in snmpdump is only very basic at the moment.