Ville Leppänen
Vice dean (education), Faculty of Technology
ville.leppanen@utu.fi +358 29 450 2461 +358 40 739 3060 Vesilinnantie 5 Turku Työhuone: 455D ORCID-tunniste: https://orcid.org/0000-0001-5296-677X |
software engineering; software development; agile methods; technical debt; programming; software security; privacy; GDPR; privacy design; software resilience; intrusion detection; HIDS; introspection; execution monitoring; software diversification; honeypots; virtual execution environments; vulnerability discrovery management; web dependecy issues; software supplychain issues; trusted computing; IoT security; autonomous system security; parallel execution architectures
Software engineering, software security and privacy
Prof. Ville Leppänen (male) is a full professor in software engineering and software security (since 2012). At the moment, he is also vice dean of Faculty of Technology. He received his PhD in 1996 (Computer Science) and has now over 230 international conference and journal publications. His research interests are related broadly to software engineering and security, ranging from software engineering methodologies, practices, and tools to security and quality issues, as well as to programming languages, parallelism, and architectural design topics. His security related research has focused on IoT and cloud security, resiliency tools for software based diversification, vulnerability analyses, machine learning based profiling for host intrusion detection systems, introspection mechanisms, and fake service generation. Leppänen is a member in several boards and working groups in University of Turku and outside the university.
Research interests are related broadly to software engineering, privacy issues and security, ranging from software engineering methodologies, practices, and tools to security and quality issues, as well as to programming languages, parallelism, and architectural design topics. Security related research has focused on IoT and cloud security, resiliency tools for software based diversification, vulnerability analyses, machine learning based profiling for host intrusion detection systems, introspection mechanisms, and fake service generation. Privacy related research is recently focused on software engineer's activities in creating privacy-respecting applications and services, the visible problems in the landscape of such software artefacts.
Currently the main teaching responsibilities are related to instructing MSc/BSc theses, giving Master's Thesis in Technology Seminar, and lecture course 'Privacy and Security for Software Systems'.
In the past, since 1997 I have taught over 50 courses instances at the University of Turku. Among those are e.g.
- MSc in technology thesis seminar (more than 10 times),
- Privacy and Security for Software Systems,
- System and application security (partly, several times),
- User interface techniques (10 times),
- Techniques for distributed applications (9 times),
- Client-server applications and user interfaces (3 times),
- Seminar on software engineering (3 times),
- Distributed systems (4 times),
- Software agent technology,
- Programming mobile devices (3 times),
- Software architectures,
- Web programming,
- Programming II (Java),
- Programming I (Java; 3 times),
- Advanced course on programming (Eiffel; twice),
- Science of Programming,
- Parallel Algorithms, and
- Computer network security.
Many of the courses have been very big (e.g. 436; Programming I). Giving such large courses required good management of a team of course assistants. Most of the courses in the above list are created by me and held for the first time in our university.
- Security Assurance in Agile Software Development Methods: An Analysis of Scrum, XP and Kanban (2019) Exploring Security in Software Architecture and Design Kalle Rindell, Sami Hyrynsalmi, Ville Leppänen
(A3 Vertaisarvioitu kirjan tai muun kokoomateoksen osa) - The General Data Protection Regulation: Requirements, Architectures, and Constraints (2019)
- International Requirements Engineering Conference. Proceedings
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - A Case-Control Study on the Server-Side Bandages Against XSS (2018)
- CEUR Workshop Proceedings
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - A case study on software vulnerability coordination (2018)
- Information and Software Technology
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - A honeypot proxy framework for deceiving attackers with fabricated content (2018) Cyber Threat Intelligence Book Jarko Papalitsas, Sampsa Rauti, Jani Tammi, Ville Leppänen
(A3 Vertaisarvioitu kirjan tai muun kokoomateoksen osa) - Aligning Security Objectives With Agile Software Development (2018) Proceedings of the 19th International Conference on Agile Software Development: Companion Kalle Rindell, Sami Hyrynsalmi, Ville Leppänen
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Crossing Cross-Domain Paths in the Current Web (2018) 2018 16th Annual Conference on Privacy, Security and Trust (PST) Jukka Ruohonen, Joonas Salovaara, Ville Leppänen
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Diversification and obfuscation techniques for software security: A systematic literature review (2018)
- Information and Software Technology
(A2 Vertaisarvioitu katsausartikkeli tieteellisessä lehdessä) - Fitting Security into Agile Software Development (2018)
- International Journal of Systems and Software Security and Protection
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Implementation of multioperations in thick control flow processors (2018) 2018 IEEE International Parallel and Distributed Processing Symposium Workshops (IPDPSW) Martti Forsell, Jussi Roivainen, Ville Leppänen, Jesper Larsson Träff
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Internal interface diversification as a security measure in sensor networks (2018)
- Journal of Sensor and Actuator Networks
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Investigating the effects of agile practices and processes on technical Debt - The viewpoint of the brazilian software industry (2018)
- International Conference on Software Engineering and Knowledge Engineering SEKE
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Investigating the possibility of data leakage in time of live VM migration (2018) Cyber Threat Intelligence Rehana Yasmin, Mohammad Reza Memarian, Shohreh Hosseinzadeh, Mauro Conti, Ville Leppänen
(A3 Vertaisarvioitu kirjan tai muun kokoomateoksen osa) - Invisible pixels are dead, long live invisible pixels! (2018) WPES'18 Proceedings of the 2018 Workshop on Privacy in the Electronic Society Ruohonen J., Leppänen V.
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Kyberturvallisuus ja tiedonsiirron turvaaminen autonomisten alusten kehittämisessä ja operoinnissa (2018) Ville Leppänen, Sampsa Rauti, Kalle Rindell, Johannes Holvitie
(D4 Julkaistu kehittämis- tai tutkimusraportti tai -selvitys ) - Mitigating Branch-Shadowing Attacks on Intel SGX Using Control Flow Randomization (2018) Proceedings of the 3rd Workshop on System Software for Trusted Execution Hosseinzadeh S, Liljestrand H, Leppänen V, Paverd A
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - On the Integrity of Cross-Origin JavaScripts (2018)
- IFIP Advances in Information and Communication Technology
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - Protocol for digital intervention for effective health promotion of small children—A cluster randomized trial (2018)
- Journal of Advanced Nursing
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä ) - Recognizing Dynamic Fields in Network Traffic with a Manually Assisted Solution (2018)
- Advances in Intelligent Systems and Computing
(A4 Vertaisarvioitu artikkeli konferenssijulkaisussa) - REPLICA MBTAC: multithreaded dual-mode processor (2018)
- Journal of Supercomputing
(A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä )