Ville Leppänen
Vice dean (education), Faculty of Technology
ville.leppanen@utu.fi +358 29 450 2461 +358 40 739 3060 Vesilinnantie 5 Turku Työhuone: 455D ORCID-tunniste: https://orcid.org/0000-0001-5296-677X |
software engineering; software development; agile methods; technical debt; programming; software security; privacy; GDPR; privacy design; software resilience; intrusion detection; HIDS; introspection; execution monitoring; software diversification; honeypots; virtual execution environments; vulnerability discrovery management; web dependecy issues; software supplychain issues; trusted computing; IoT security; autonomous system security; parallel execution architectures
Software engineering, software security and privacy
Prof. Ville Leppänen (male) is a full professor in software engineering and software security (since 2012). At the moment, he is also vice dean of Faculty of Technology. He received his PhD in 1996 (Computer Science) and has now over 230 international conference and journal publications. His research interests are related broadly to software engineering and security, ranging from software engineering methodologies, practices, and tools to security and quality issues, as well as to programming languages, parallelism, and architectural design topics. His security related research has focused on IoT and cloud security, resiliency tools for software based diversification, vulnerability analyses, machine learning based profiling for host intrusion detection systems, introspection mechanisms, and fake service generation. Leppänen is a member in several boards and working groups in University of Turku and outside the university.
Research interests are related broadly to software engineering, privacy issues and security, ranging from software engineering methodologies, practices, and tools to security and quality issues, as well as to programming languages, parallelism, and architectural design topics. Security related research has focused on IoT and cloud security, resiliency tools for software based diversification, vulnerability analyses, machine learning based profiling for host intrusion detection systems, introspection mechanisms, and fake service generation. Privacy related research is recently focused on software engineer's activities in creating privacy-respecting applications and services, the visible problems in the landscape of such software artefacts.
Currently the main teaching responsibilities are related to instructing MSc/BSc theses, giving Master's Thesis in Technology Seminar, and lecture course 'Privacy and Security for Software Systems'.
In the past, since 1997 I have taught over 50 courses instances at the University of Turku. Among those are e.g.
- MSc in technology thesis seminar (more than 10 times),
- Privacy and Security for Software Systems,
- System and application security (partly, several times),
- User interface techniques (10 times),
- Techniques for distributed applications (9 times),
- Client-server applications and user interfaces (3 times),
- Seminar on software engineering (3 times),
- Distributed systems (4 times),
- Software agent technology,
- Programming mobile devices (3 times),
- Software architectures,
- Web programming,
- Programming II (Java),
- Programming I (Java; 3 times),
- Advanced course on programming (Eiffel; twice),
- Science of Programming,
- Parallel Algorithms, and
- Computer network security.
Many of the courses have been very big (e.g. 436; Programming I). Giving such large courses required good management of a team of course assistants. Most of the courses in the above list are created by me and held for the first time in our university.
- Analyzing third-party data leaks on online pharmacy websites (2024)
- Health and technology
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Enhancing Pedagogy with Generative AI: Video Production from Course Descriptions (2024) CompSysTech '24: Proceedings of the International Conference on Computer Systems and Technologies 2024 Weerakoon, Oshani; Leppänen, Ville; Mäkilä, Tuomas
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Health data leaks to third parties in web-based health services (2024)
- CEUR Workshop Proceedings
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Inclusive innovation processes in Tanzania: From national policies to local practices in innovation hubs (2024)
- African Journal of Science, Technology, Innovation and Development
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Leaky Democracy : Third Parties in Voting Advice Applications (2024)
- Lecture notes in networks and systems
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Several Online Pharmacies Leak Sensitive Health Data to Third Parties (2024)
- Lecture notes in networks and systems
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Third-Party Data Leaks on Municipal Websites (2024)
- Lecture notes in networks and systems
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Tietoturva ohjelmoinnin ja ohjelmistotuotannon kursseilla Suomen yliopistoissa – nykytila ja opettajien näkemykset (2024) Majanoja, Anne-Maarit; Hakkala, Antti; Leppänen, Ville; Virtanen, Seppo
(D4 Julkaistu kehittämis- tai tutkimusraportti tai -selvitys ) - Extracting LPL privacy policy purposes from annotated web service source code (2023)
- Software and Systems Modeling
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Framework for the Evaluation of Cybersecurity Curriculum Educational Content (2023)
- Proceedings of the International CDIO Conference
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - From Whistle to Echo: Data Leaks in Web-Based Whistleblowing Channels (2023)
- Lecture Notes in Computer Science
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Henkilötietojen käsittelyn läpinäkyvyys ja joukkoliikenteen mobiilisovellukset (2023)
- Liikenne
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Motivation for continuous software engineering expertise development through lifelong learning (2023)
- Proceedings of the International CDIO Conference
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Preliminary Performance and Memory Access Scalability Study of Thick Control Flow Processors (2023) 2023 IEEE Nordic Circuits and Systems Conference (NORCAS) Forsell Martti, Roivainen Jussi, Leppänen Ville, Larsson Träff Jesper
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Privacy in Popular Children’s Mobile Applications: A Network Traffic Analysis (2023)
- International Convention on Information and Communication Technology, Electronics and Microelectronics
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Realizing multioperations and multiprefixes in Thick Control Flow processors (2023)
- Microprocessors and Microsystems
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Study of Third-Party Analytics Services on University Websites (2023)
- Lecture notes in networks and systems
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Third-party Services as a Privacy Threat on University Websites (2023) CompSysTech '23: Proceedings of the 24th International Conference on Computer Systems and Technologies Heino Timi, Rauti Sampsa, Carlsson Robin, Leppänen Ville
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Assessing discrepancies between network traffic and privacy policies of public sector web services (2022) ARES 2022: The 17th International Conference on Availability, Reliability and Security Heino Timi, Carlsson Robin, Rauti Sampsa, Leppänen Ville
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Performance and programmability comparison of the thick control flow architecture and current multicore processors (2022)
- Journal of Supercomputing
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä )