Homepage of Yutaka Oiwa @ AIST

Announcement

I've updated my OpenPGP key on 1 July 2009. Please fetch the newer key from my PGPKeys page.

Affiliation

Leader, Research Group for Software Reliability, Research Institute for Secure Systems (RISEC), National Institute of Advanced Industrial Science and Technology (AIST) (from April 2005)

Specialty

Programming Language (Theory, Design and Implementation), Computer Security, Network Protocol

Publications

• List of Publications

Research Topics

(1) Safe Execution of Computer Programs

These days, security holes caused by program bugs introduces critical situations such as information leakage (e.g. credit card numbers) or service interruptions. I am currently working on safe execution methods of programs.

Especially, I am constructing a Fail-Safe ANSI C Compiler, which prevents all kinds of memory-corruption attacks (such as buffer overrun exploits) for full ANSI C language.

Starting 20 October 2007, I distribute the current implementation of the Fail-safe C Compiler system for interested researchers. For details, please refer to the Fail-Safe C Project homepage.

• Fail-Safe C Project homepage
  • A new release-candidate on 6 Jun 2010!
• Research Topics: Fail-Safe C (RCIS)

(2) Safety of Web application and network protocols

Software used on the Internet uses several "protocols" in the various level. TCP, TLS, HTTP are the examples for the transport and protocol layer. In addition to those, several web applications implements its own session management systems. Further more, some of the application logics can also be thought as private protocols.

Those protocols, implementations of the protocols, or the implementation of the application itself are tends to contain many bugs or defects, which sometimes cause security vulnerabilities. I analyze such vulnerabilities, report those to the developers, and tries to summarize the fundamental and effective approaches to prevent such vulnerabilities.

• HTTP Mutual Authentication Protocol
• Results on software/protocol vulnerabilities (RCIS Homepage)

Research History

• Mar 1999: B.S. from University of Tokyo (Dept. of Information Science, Faculty of Science)
• Mar 2001: M.S. from University of Tokyo (Dept. of Information Science, Grad. School of Science)
• Mar 2005: Ph.D.(Computer Science) from University of Tokyo (Dept. of Computer Science, Grad. School of Information Science and Technology)
• Apr 2005: Research Team for Software Security, Research Center for Information Security, AIST
• Apr 2012: Leader, Software Reliability Research Group, Research Institute for Secure Systems (RISEC), AIST

Awards

• June 2002: Takahashi Encouraging Award from Japan Society for Software Science and Technology (JSSST)

Links

• Research Institute for Secure Systems (RISEC)
  • (old) Research Center for Information Security (RCIS)
• National Institute of Advanced Industrial Science and Technology

• Personal Homepage
• Twitter Japanese/English
• LinkedIn