Progress Report Meeting - December 2014
Progress Report Meetings
Meeting rooms at École Polytechnique de montréal
- Wednesday December 10: L-3816
- Thursday December 11: L-2712
Participation is by invitation. The target audience is the project participants and guests of the project sponsors. These meetings on related topics were grouped to allow the participants to conveniently attend more than one meeting.
Optional: LTTng-Trace Compass-hack day, December 12
Wednesday, December 10 2014
Online surveillance of critical computer systems through advanced host-based detection (project "ahls")
Start time | End time | Presenter | Subject | Description |
9:00 | 9:15 | Breakfast and welcome | ||
9:15 | 9:30 | Mario Couture, Michel Dagenais | Introduction to AHLS | Brief description of the project's objectives, its organization and the participants and overview of progress made in the last months. |
9:30 | 10:00 | Naser Ezzati/ Pr. Michel Dagenais | Improvement in data-driven analysis |
|
10:00 | 10:30 | Jean-Christian Kouamé / Pr. Michel Dagenais | Enhanced filtering of data using data-driven analysis |
|
10:30 | 11:00 | Simon Delisle/ Pr. Michel Dagenais | Visually representing data-driven analysis using state diagrams | |
11:00 | 11:15 | Break | ||
11:15 | 11:45 | Fabien Reumont-Locke/ Pr. Michel Dagenais | Parallellisation of analysis with Babeltrace | |
11:45 | 12:15 | François Doray/ Pr. Michel Dagenais | Comparision of 2 program executions from their traces | |
12:15 | 12:45 | Peter Goodman / Pr. Ashvin Goel | Address watchpoints: interpose on data, not code | |
12:45 | 14:00 | Lunch | ||
14:00 | 15:00 | Wahab Hamou-Lhadj & students | Online surveillance of critical computer systems through advanced host-based detection |
In this presentation, we will discuss our progress in developing techniques for host-based anomaly detection. We will show our approach for combining system call models and other system events namely file operations for better accuracy. We will also discuss how the learning and building time of reference models can be significantly reduced using varying length n-grams. This is contrasted with fixed n-gram techniques used in the literature. We will discuss questions of model generalization and the reduction of false-positive rates. Another aspect of this presentation will focus on the detection of rootkits using techniques inspired by reverse engineering research, hence putting engineering into rootkit detection research. Preliminary results will be shown followed with future steps. |
15:00 | 15:30 | Maroua Ben Attia / Pr. Chamseddine Talhi | On device anomaly detection for resource-limited systems | |
15:30 | 16:00 | Manel Abdellatif / Pr. Chamseddine Talhi | Parallel programming for accelerating anomaly detection | |
16:00 | 16:15 | Break | ||
16:15 | 16:45 | Efficios | LTTng Update | |
16:45 | 17:15 | Ericsson | Trace Compass Update (Upload a presentation) | |
18:00 |
Dinner at restaurant Le Petit Italien (1265 Avenue Bernard, métro Outremont) |
Thursday, December 11, 2014
Integrated tracing, profiling and debugging for tuning large heterogeneous clusters (project "ctpd")
9:00 | 9:15 | Breakfast and welcome | ||
9:15 | 9:30 | Dominique Toupin, Pr. Michel Dagenais | Introduction to CTPD | Update on the project |
9:30 | 10:00 | David Couturier/ Pr. Michel Dagenais | Tracing GPUs | |
10:00 | 10:30 | Suchakra Sharma /Pr. Michel Dagenais | Towards faster trace filters using eBPF and JIT | |
10:30 | 11:00 | Francis Giraldeau /Pr. Michel Dagenais | Distributed traces modelling and critical path analysis | The dependencies between the different events causing state changes in processes are automatically analyzed in order to compute the critical path between a start and end event (e.g. query and response). This analysis takes into account several effects including parallel computations happening asynchronously and many different models of distributed computations. This is extremely helpful in identifying where the total time is spent to serve a request. |
11:00 | 11:15 | Break | ||
11:15 | 11:45 | Julien Desfossez /Pr. Michel Dagenais | Large-scale performance monitoring framework | State-of-the-art of large-scale monitoring especially in cloud computing environment and focus on the research to achieve a large-scale fined-grained performance monitoring framework. |
11:45 | 12:15 | Mohamed Badr Sbai/Pr. Mohamed Cheriet | Performance analysis of intra data center network (Upload a presentation) | |
12:15 | 12:45 | Hicham Abdelfattah/Pr. Mohamed Cheriet | OpenStack Assessment : Profiling & Tracing | |
12:45 | 14:00 | Lunch |
Thursday, December 11, 2014 (pm)
Diagnostics for Real Time Distributed Multi-core Architecture in Avionics (project "rtt")
Start time | End time | Presenter | Subject | Description |
14:00 | 14:15 | Pr. Michel Dagenais | Introduction | Brief description of the project goals, the participants and the current status. |
14:15 | 14:30 | Raphaël Beamonte/ Pr. Michel Dagenais | Tracing and Sampling for Real-Time partially simulated Avionics Systems | |
14:30 | 15:00 | Mathieu Côté/ Pr. Michel Dagenais | Analysis of Real-Time Avionics Systems from Tracing and Sampling data | |
15:00 | 15:30 | Hossein Salman/ Pr. Abdelwahab Hamou-Lhadj | Debugging Aircraft Simulation Systems at CAE | We will briefly review the literature on trace abstraction and feature location techniques. We will then discuss the application of these techniques to CAE systems with a particular focus on how these techniques can be used to help CAE software engineers debug execution scenarios used in the design of flight simulation systems. We will show the detailed steps of our approach followed by preliminary results. Finally, we will present the roadmap for future steps. |
15:30 | 16:00 | Wahab Hamou-Lhadj and Alf Larsson | D2K Project (from Data to Knowledge for Better System Maintenance) (presentation available soon) | In this project, we will present the D2K project with Ericsson. We will discuss the challenges the project aims to target. We will also show the roadmap for the project. |
16:00 | 17:00 | Break and end of the student conferences. Prepare for the hack-a-thon. |
LTTng-Tmf-hack Day, December 12 from 9h30
Meeting room: L-4812 Bring your laptop or your whole desktop!
Informal hacking/tutorial on LTTng and Trace Compass. Come with your questions and projects and we'll all work on it together, or in small groups. Depending on the demand, some more formal sessions may be scheduled for those interested. We have the room all day.