Le Minh Sang Tran
Curriculum Vitae
DISI, University of Trento
Via Sommarive 5
38123 Trento, Italy
H (+39) 3297652842
B [email protected]
Í www.disi.unitn.it/∼tran
Personal Information
First name
Last name
Gender
Date of birth
Place of birth
Nationality
Marital status
Le Minh Sang
Tran
Female
April 19th, 1983
Nha Trang City, Khanh Hoa, Viet Nam
Vietnamese
Single
Education
2009–2014 Ph.D. in Computer Science, Department of Information Engineering and Computer Science (DISI), University of Trento, Trento.
Italy
Thesis title Managing the Uncertainty of Evolution in Requirements Models
Supervisor Professor Fabio Massacci
Description The dissertation proposes a framework for modeling and reasoning on requirements
evolution to support the selection of an evolution-resilient system design. The
framework provides evolution rules as a means to capture requirements evolution,
and a set of evolution metrics to quantify system designs. The framework is leveraged
with a game-theoretic semantic accounting for evolution uncertainty, and a series
of automatic and incremental reasoning algorithms. The framework is validated
by a series of empirical studies using industrial application scenarios in Air Traffic
Management domain.
2007–2009 Master of Computer Science (Double-degree), RWTH Aachen University &
University of Trento, Germany and Italy, GPA – 1.8.
Erasmus Mundus scholarship
Thesis title A Simulation Framework for Self-Reconfigurable Socio-Technical Systems
Supervisors Professor Gerhard Lakemeyer & Associate Professor Paolo Giorgini
1/6
Description The framework takes a goal-based organization model to generate different system
configurations using AI planning techniques. Then it simulates these configurations with a definable set of events to quantitatively evaluate their adaptability to
environment changes.
2001–2006 Bachelor of Computer Science, The Ho Chi Minh City University of Technology,
Ho Chi Minh City, GPA – 8.42.
Silver Medal Honor (1st runner up)
Thesis title Automated information extraction: an HMM-based approach
Supervisor Dr. Ho Van Quan
Description This thesis proposed an approach based on Hidden Markov Model for information
extraction. The approach was exemplified to extract the product prices from various
retailer websites on the Internet.
Employment
2014–present Post Doctoral Research Fellow, University of Trento, Trento, Italy.
Feb–Jul 2012 Visiting Scholar, SINTEF ICT, Oslo, Norway.
2009–2014 Research Assistant, University of Trento, Trento, Italy.
Teaching Experience
2012 Teaching Assistant, Security Engineering, winter semester, EIT ICT Lab Master
in Security and Privacy.
University of Trento
2011 Teaching Assistant, Security Engineering, winter semester, EIT ICT Lab Master
in Security and Privacy.
University of Trento
Work Experience
2012–present Network of Excellence on Engineering Secure Future Internet Software Services and Systems (NESSoS), FP7 European Project.
http://www.nessos-project.eu/
NESSoS is a 42-month research project funded by the European Union FP7. Fund:
5.24MEuro. NESSoS aims at constituting and integrating a long lasting research
community on engineering secure software-based services and systems.
Description of work: involve in the following work packages:
{ WP6: Security requirements for services (WP Leader since Sep 2013).
{ WP10: Risk and cost aware SDLC.
{ WP13: Education and Training (WP Leader since Sep 2013).
Detailed contributions:
{ Deliverable 6.4, “Security requirement patterns for Future Internet applications,
and improved modelling of the scenarios", 2013.
2/6
{ Deliverable 6.5, “Final version of the whole security requirements framework",
2014.
{ Deliverable 10.3,“Prototypal tools to support risk and cost analysis", 2012.
{ Deliverable 10.4, “Enhanced methods for risk and cost aware SDLC", 2013.
{ Deliverable 10.5, “Improved tools to support risk and cost analysis", 2014.
{ Deliverable 13.4, “Third report describing the third annual summer school and
the annual open competitions", 2014.
{ Deliverable 13.5, “Virtual Education Centre report describing the features available", 2014.
2009–2012 Security Engineering for lifelong Evolvable Systems (SecureChange), FP7
European Project.
http://www.securechange.eu/
SecureChange is a 36-month research project funded by the European Union FP7.
Fund: 5.1MEuro. The objective is to develop techniques and tools that ensure
“lifelong" compliance to evolving security, privacy and dependability requirements
for a long-running evolving software system.
Description of work: Research Assistant, involve in the following work package:
{ WP3: Evolving requirements.
Research Interests
{
{
{
{
Software Engineering, Requirements Evolution
Empirical Software Engineering
Security Engineering, Risk Analysis and Threat Modeling
Conceptual Modeling, Model Driven Development
Publications
Book Chapter
1. Riccardo Scandariato, Federica Paci, Le Minh Sang Tran, Katsiaryna Labunets,
Koen Yskout, Fabio Massacci, Wouter Joosen. “Empirical Assessment of Security
Requirements and Architecture: Lessons Learned". In: Advances in Engineering
Secure Future Internet Services and Systems, volume 8431 of LNCS. Springer, 2014.
To appear.
Journals
1. Michael Felderer, Basel Katt, Philipp Kalb, Jan Jürjens, Martín Ochoa, Federica
Paci, Le Minh Sang Tran, Thein Than Tun, Koen Yskout, Riccardo Scandariato,
Frank Piessens, Dries Vanoverberghe, Elizabeta Fourneret, Matthias Gander, Bjørnar
Solhaug, and Ruth Breu. “Evolution of Security Engineering Artifacts: A State of
the Art Survey". In: International Journal of Secure Software Engineering . 2014.
To appear.
3/6
2. Fabio Massacci, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi.
“Assessing a Requirements Evolution Approach: Empirical Studies in the Air Traffic
Management Domain". In: Journal of Systems and Software. 2013. ScienceDirect.
International Conferences/Symposiums
1. Katsiaryna Labunets, Fabio Massacci, Federica Paci, Le Minh Sang Tran.“An
Experimental Comparison of Two Risk-Based Security Methods". In: Proceedings of
the 7th ACM / IEEE International Symposium on Empirical Software Engineering
and Measurement (ESEM), MD, USA, 2013.
2. Le Minh Sang Tran, Bjørnar Solhaug, and Ketil Stølen. “An Approach to
Select Cost-Effective Risk Countermeasures". In: Proceedings of the 27th Annual
IFIP WG 11.3 Working Conference on Data and Applications Security and Privacy
(DBSec), NJ, USA, 2013.
3. Le Minh Sang Tran and Fabio Massacci. “UNICORN: A Tool for Modeling
and Reasoning on the Uncertainty of Requirements Evolutions". In: CAiSE Forum,
Valencia, Spain, 2013.
4. Le Minh Sang Tran and Fabio Massacci. “Dealing with Known Unknowns:
Towards a Game-Theoretic Foundation for Software Requirement Evolution". In:
Proceedings of the 23rd International Conference on Advanced Information Systems Engineering (CAiSE) London, UK, 2011. (Acceptance rate: 13.1%, 320
submissions).
5. Le Minh Sang Tran. “Requirements Evolution: Towards a Methodology and
Framework". In: CAiSE (Doctoral Consortium). London, UK, 2011.
International Workshops
1. Le Minh Sang Tran. “Early Dealing with Evolving Risks in Software Systems".
In: The 3rd International Workshop on Information Systems Security Engineering
(WISSE), co-located with CAiSE, Valencia, Spain, 2013.
2. Fabio Massacci, Deepa Nagaraj, Federica Paci, Le Minh Sang Tran and
Alessandra Tedeschi. “Assessing a Requirements Evolution Approach: Empirical
Studies in the Air Traffic Management Domain". In: International Workshop on
Empirical Requirements Engineering (EmpiRE), co-located with RE 2012, Chicago,
Illinois, USA, 2012.
3. Viet Hung Nguyen and Le Minh Sang Tran. “Predicting Vulnerable Software
Components using Dependency Graphs". In: International Workshop on Security
Measurement and Metrics (MetriSec), co-located with ESEM 2010, Bolzano-Bozen,
Italy, 2010.
4/6
Talks
Conference/Symposium Talks Given
1. Le Minh Sang Tran. “An Approach to Select Cost-Effective Risk Countermeasures". In: The 27th Annual IFIP WG 11.3 Working Conference on Data and
Applications Security and Privacy (DBSec), NJ, USA, July 2013.
2. Le Minh Sang Tran. “Dealing with Known Unknowns: Towards a GameTheoretic Foundation for Software Requirement Evolution". In: The 23rd International Conference on Advanced Information Systems Engineering (CAiSE) London,
UK, June 2011.
3. Le Minh Sang Tran. “Requirements Evolution: Towards a Methodology and
Framework". In: CAiSE (Doctoral Consortium). London, UK, June, 2011.
Workshop Talk Given
1. Le Minh Sang Tran. “Early Dealing with Evolving Risks in Software Systems".
In: The 3rd International Workshop on Information Systems Security Engineering
(WISSE), co-located with CAiSE, Valencia, Spain, June 2013.
Miscellaneous
1. Le Minh Sang Tran (as method instructor). “Model-Driven Risk Analysis: The
CORAS Approach". In: engineering RIsk s and SEcurity Requirements (eRISE)
Challenge 2013, Trento, Italy, May 2013.
2. Le Minh Sang Tran (as method instructor). “Model-Driven Risk Analysis:
The CORAS Approach". In: engineering RIsks and SEcurity Requirements (eRISE)
Challenge 2012, Trento, Italy, May 2012.
Review Activities
Reviewer for:
{ Elsevier Journal of Information and Software Technology (IST).
{ International Conference on Advanced Computing and Applications (ACOMP).
{ IEEE International Symposium on Policies for Distributed Systems and Networks
(POLICY).
Scholarships and Awards
2007 Erasmus Mundus scholarship
2006 Honda YES Award for Viet Nam outstanding Young Engineers and Scientists
2006 Certificate of Merit and Silver Medal (1st runner up) for top graduate students
2006 Vietnam Ministry of Post and Telecom (MPT) and Motorola Corporation scholarship
for outstanding students
2005 American Chamber of Commerce (AmCham) scholarship for outstanding students
2005 Vietnam Electricity Corporation (EVN) scholarship for excellent students
5/6
2005 JV Scholarship of A-ICS Corporation, Japan, for excellent students
2004 JV Scholarship of A-ICS Corporation, Japan, for excellent students
2002 DONG-A scholarship of Korean Embassy for excellent students
Computer skills and Competences
{ Solid background and independent research ability in Requirements Engineering,
Software Engineering, Empirical Software Engineering, Conceptual Modeling,
Security Engineering, and Risk Analysis
{ Broad exposure to key fields in Computer Science, including Software Verification,
Software Product Line, Model Driven Development, Networking, etc.
{ Keen programmer, with understanding of software development cycle, and team
dynamics
{ Technologies: Eclipse, EMF/GMF , .NET Framework
{ Programming Languages: Java, C#, Pascal, C, C++, VB6, Prolog
{ Operating Systems: Windows (2000/XP/2003/Vista/7), Linux (Suse/Ubuntu)
{ Databases: SQL Server 2000/2005
{ Word Editors: advanced in Microsoft Word and LATEX
Languages
Vietnamese
English
Italian
German
Mothertongue
Advanced (C1 level)
Basic
Basic
Proficient user
Basic words and phrases only
Basic words and phrases only
References
{ Fabio Massacci, Professor. University of Trento, Italy.
{ John Mylopoulos, Professor. University of Trento, Italy.
{ Ketil Stølen, Professor & Chief Scientist. University of Oslo & SINTEF ICT,
Norway.
{ Tran Khanh Dang, Associate Professor. Ho Chi Minh City University of Technology,
Viet Nam.
(more details upon request)
6/6