Last updated March 8th 2006

Fredrik Vraalsen's CV

personalia - competencies - education - work experience - projects - publications - computer experience - other - geek code

Fall 1999 - Summer 2001

M.Sc., Computer Science, University of Illinois at Urbana-Champaign, Department of Computer Science.

My thesis topic was prediction and monitoring of application behavior and performance in a computational grid environment, using a Fuzzy Logic control system to detect performance violations. This involved programming in C++ and C, interfacing with Fortran code, development of Fuzzy Logic rulebases and ulitization of various parallel/distributed computing tools and technologies such as MPI, Globus and NWS.

In addition to the thesis and research work, I also took courses in such fields as operating systems, distributed systems, parallel computing, programming language design, algorithms and formal languages.

Fall 1995 - Spring 1999

Cand.mag., University of Oslo, Department of Informatics. Major in Informatics (Computer Science), minor in Mathematics.

I took several courses beyond the basic requirements, including networking, programming languages, compiler design and formal program specification and verification.

September 2006 - present

Senior consultant, Know IT Objectnet.
System architecture, software development (J2SE/EE, XML, etc.).

October 2001 - August 2006

Research scientist, Cooperative and Trusted Systems group, SINTEF Information and Communication Technology.
Security risk analysis, mobile systems, system architecture and modelling, software development (J2SE/EE/ME, XML, etc.).

August 1999 - July 2001

Research assistant, Pablo research group, University of Illinois at Urbana-Champaign.
Programming, mainly in C++. Interfacing of real-time performance monitoring code written in C and C++ with parallel, distributed numerical applications written in Fortran. Development of Fuzzy Logic rulebases for application performance monitoring.

July 1999 - August 1999

Software developer, Linpro AS.
Programming in Java and Perl, developing a GUI configuration tool.

September 1997 - June 1999

Software developer, CandleWeb AS.
Programming in Java, SQL and Perl. Worked on several projects, both external and internal, involving among other things GUI editors and database frontends. Main developer of ClickWalk for 1 1/2 years.

• S3MS (2006-08): Security of Software and Services for Mobile Systems. Contract/policy based security languages and mechanisms.
• ENFORCE (2005-07): Tool Supported Methodology for the Formalization, Analysis and Enforcement of Policies within Trust Managment.
• TrustCoM (2004-07): Developing methodology and tools for Legal Risk Analysis, combining CORAS security risk analysis methodology with techniques from conventional legal analysis and formal analysis.
• UMBRA (2004-05): Development of Mobile User Interfaces.
• FAMOUS (2003-06): Framwork for Adaptive Mobile and Ubiquitous Services.
• SECURIS (2003-06): Continuing development of the open source CORAS Tool for security risk analysis, participating in security risk analysis field trials.
• AmbiLab (2002-04): Mobile systems (Familiar Linux, PersonalJava/J2ME, JNI, PocketPC), wireless networking (Bluetooth, WLAN, GPRS), framework for sensor integration (TSpaces, SensorML, etc.).
• CORAS (2002-03): Modelling (UML) and development of the open source CORAS Tool for security risk analysis.
• Mobilisma (2001-02): Development of a stand-alone Java application on a PocketPC platform, integration with sensors and native functionality (JNI and C/C++).
• Dossier ProFile Integration (2001-02): Application integration, standards for data formats/exchange, Single Sign-On.
• Eye-2-Eye (2001-02): Development of a Java controller application on a PocketPC platform, communicating with a PC via the serial port (JNI and C).
• GrADS (1999-2001): Performance contracts (M.Sc. thesis topic), Grid computing (Globus, MPI).
• Clickwalk (1998-99): Development of 3-tier web-application (Java Servlets, JDBC, PostgreSQL, Apache, HTML) and content management interface (Java GUI, Swing).

• Tobias Mahler, Fredrik Vraalsen. Legal Risk Management for a B2B Web Services Collaboration. To appear in Proceedings of The First International Conference on Legal, Security and Privacy Issues in IT (LSPI), April 2006, Hamburg, Germany.
• Tobias Mahler, Fredrik Vraalsen. Legal Risk Analysis with Respect to IPR in a Collaborative Engineering Virtual Organization. In Proceedings of The 6th IFIP Working Conference on Virtual Enterprises (PRO-VE'05), Collaborative Networks and their Breeding Environments, volume 186, pages 513-520, Springer, September 2005, Valencia, Spain. Also published in Yulex 2005, Georg Philip Krogh, Anne Gunn B. Bekken (Eds.), Unipub, December 2005, Oslo, Norway.
• Fredrik Vraalsen, Mass Soldal Lund, Tobias Mahler, Xavier Parent, Ketil Stølen. Specifying legal risk scenarios using the CORAS threat modelling language. In Proceedings of The Third International Conference on Trust Management ((iTrust'05), number 3477 in Lecture Notes in Computer Science, pages 45-60, Springer-Verlag, May 2005, Paris, France.
• Folker den Braber, Arne-Bjørn Mildal, Jone Nes, Ketil Stølen, Fredrik Vraalsen. Experiences from Using the CORAS Methodology to Analyze a Web Application. In Journal of Cases on Information Technology, volume 7, 110-130, 2005.
• Folker den Braber, Mass Soldal Lund, Ketil Stølen, Fredrik Vraalsen. Integrating security in the development process with UML. In Encyclopedia of Information Science and Technology. Mehdi Khosrow-Pour (ed), pages 1560-1566, Idea Group, 2005.
• Fredrik Vraalsen, Trym Holter, Ingrid Storruste Svagård, Øyvind Kvennås, A multimodal context aware mobile maintenance terminal for noisy environments. In Proceedings of IFIP TC8 Working Conference on Mobile Information Systems (MOBIS 2004), pages 79-92, Springer Verlag, September 2004, Oslo, Norway.
• Fredrik Vraalsen. Performance Contracts: Predicting and Monitoring Grid Application Behavior. Student paper (based on M.Sc. Thesis), In Proceedings of Norsk Informatikkonferanse (NIK 2002), pages 63-74, Tapir, November 2002, Kongsberg, Norway.
• Fredrik Vraalsen, Ruth A. Aydt, Celso L. Mendes, and Daniel A. Reed. Performance Contracts: Predicting and Monitoring Grid Application Behavior. In Proceedings of the 2nd International Workshop on Grid Computing/LNCS (GRID 2001). Springer-Verlag Lecture Notes in Computer Science, November 12, 2001, Denver, CO.
• Fredrik Vraalsen. Performance Contracts: Predicting and Monitoring Grid Application Behavior. M.Sc. Thesis, UIUC, August 2001, Urbana-Champaign, IL.

Technical reports

• Fredrik Vraalsen, Tobias Mahler (Eds.). D17 Legal Risk Management for Virtual Organisations. TrustCoM public deliverable. January 2006.
• Tobias Mahler, Fredrik Vraalsen (Eds.). D15 Report on Legal Issues. TrustCoM public deliverable. July 2005.
• Mass Soldal Lund, Folker den Braber, Ketil Stølen, Fredrik Vraalsen. A UML profile for the identification and analysis of security risks during structured brainstorming. Technical report STF40 A03067, SINTEF ICT, May 2004.
• Fredrik Vraalsen, Folker den Braber, Ida Hogganvik, Mass Soldal Lund, Ketil Stølen. The CORAS tool-supported methodology for UML-based security analysis. Technical report STF90 A04015, SINTEF, 2004.
• Folker den Braber, Chingwoei Gan, Mass Soldal Lund, Fredrik Seehusen, Ketil Stølen, Fredrik Vraalsen. An experience repository supporting security risk analysis. Technical report STF40 A03062, SINTEF Telecom and Informatics, November 2003.
• Mass S. Lund, Folker den Braber, and Fredrik Vraalsen. COBRA - Component-Based Security Assessment. SINTEF Telecom and Informatics, July 2003, Oslo, Norway.
• Fredrik Vraalsen. Assessment of risk analysis methodology and tools used during the first SECURIS trial. SINTEF Telecom and Informatics, July 2003, Oslo, Norway.
• Ruth A. Aydt, Celso L. Mendes, Daniel A. Reed, and Fredrik Vraalsen. Specifying and Monitoring GrADS Contracts. UIUC, 2001, Urbana-Champaign, IL.

Tutorials

• Fredrik Vraalsen. Model-based risk analysis of trust, security & legal issues using CORAS. Tutorial to be held at The 18th Conference on Advanced Information Systems Engineering (CAISE'06), June 2006, Luxembourg.
• Fredrik Vraalsen, Mass Soldal Lund. Model-based analysis of security and trust using CORAS. Tutorial held at The 24th International Conference on Computer Safety, Reliability And Security (SAFECOMP 2005), September 2005, Fredrikstad, Norway.
• Mass Soldal Lund, Fredrik Vraalsen. Analysing trust, security & legal issues using CORAS. Tutorial held at The Third International Conference on Trust Management (iTrust'2005), May 2005, Paris, France.

Posters and Demonstrations

• Fredrik Vraalsen, Folker den Braber, Mass Soldal Lund, Ketil Stølen. The CORAS tool for security risk analysis. Demonstration at Third Intenational Conference on Trust Management (iTrust'05), Paris, France, May 24, 2005. Published in Proceedings of iTrust'05, number 3477 in Lecture Notes in Computer Science, pages 402-405, Springer-Verlag, 2005.
• Fredrik Vraalsen. The CORAS tool for model-based security risk analysis. Poster and demo, Second International Conference on Trust Management (iTrust'04), Oxford, March 29-April 1, 2004.

Presentations

• Fredrik Vraalsen. Sikkerhetsanalyse ved hjelp av CORAS. Presentation at seminar "Ingen sikkerhet uten risikoanalyse", organised by Abelia Innovasjon and SINTEF ICT, Oslo, Norway, November 24, 2005.
• Folker den Braber, Mass Soldal Lund, Ketil Stølen, Fredrik Vraalsen. Reuse of security assessment results under design and maintenance of IT systems. Invited presentation at "recent Object Oriented trends (rOOts 2004)", Bergen, Norway, April 28-30, 2004. Published in the electronic proceedings of rOOts 2004: http://roots.dnd.no/downloads/2004/downloads.html.
• Fredrik Vraalsen. CORAS-verktøy for modellbasert sikkerhetsanalyse. Presentation at seminar on "Modellbasert sikkerhetsanalyse" organised by Faggruppe Informasjonssikkerhet Abelia Innovasjon, NST, IFE, Telenor and SINTEF, March 4, 2004.
• Fredrik Vraalsen. Survey on the CORAS Project. Presented at Third Internal iTrust Workshop on Trust Management in Dynamic Open Systems, University of Dortmund, Germany, October 7, 2004.
• Fredik Vraalsen. Hvordan teste og analysere sikkerhet? Presentation at Seminar on "Brukervennlig Websikkerhet" organised by Faggruppe Informassjonssikkerhet Abelia Innovasjon and SINTEF Telecom and Informatics, September 11, 2003.
• Fredrik Vraalsen. CORAS-metodikken og -verktøy for sikkerhetsanalyse. Presentation at "Abelia Innovasjons Fagkonferanse", Klækken, November 27, 2003.

August 1998 - June 1999

Executive board, Department of Informatics, University of Oslo. Elected student representative for 2 semesters.

January 1998 - June 1999

Fagutvalget ("student government"), Department of Informatics, University of Oslo. Elected student representative for 3 semesters. Leader of Fagutvalget from August 1998 to January 1999.

January 1998 - June 1998

Realistforeningen. Volunteer work in the student cafe.

January 1997 - December 1998

Blindern filmklubb (Blindern movie society). Volunteer work.

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d-(--) s:- a- C++(+++) UL++ US++ P+ L+++ E+ W++ N++ o- K- w-- O-
M- V- PS+(++) PE- Y+ PGP t(-) 5+ X(+) R !tv b+>+++ DI+ D++(---) G
e+++ h*(-) r++ y+
------END GEEK CODE BLOCK------

Last updated March 8th 2006