Associate Professor · Graduate School of Informatics, Nagoya University
Research project
Across all three pillars, we develop techniques for checking whether a system actually deserves trust and for explaining why — fuzzing for concurrent software, formal verification, security analysis, and assurance cases.
Detail
Embedded software keeps growing in size, and more and more of it runs many tasks concurrently. In such software, bugs that depend on timing appear only rarely and are hard to reproduce, which makes them difficult to find with conventional testing.
Detail
Safety and security cannot be explained just by saying that testing found no problems. We need systematic ways to show on what grounds a system deserves to be trusted.
In short, there are two problems: how to find, efficiently, the bugs that appear only rarely — and how to justify, with evidence, the claim that what remains can be trusted.
Detail
We apply fuzzing — feeding programs many automatically generated inputs to uncover bugs — to concurrent programs and middleware. By also exploring the order in which threads run, our fuzzers can efficiently find concurrency bugs that rarely show up in normal testing.
Together with programming-language researchers, we also study formal methods: translating concurrent programs that use semaphores into logically constrained term rewrite systems, a mathematical model on which their properties can be verified rigorously.
Detail
We study systematic ways to find weaknesses in systems, such as intrusion detection for in-vehicle networks (CAN) and security analysis based on HAZOP.
We also work on assurance cases — structured arguments that show why a system is safe or secure — and on combining them with quantitative evaluation.
Detail
In fuzzing, applying coverage-based greybox fuzzing to middleware (IPSJ Journal, 2021) was selected as a specially selected paper and received the Zengo Award. The line has since evolved into Schfuzz, which explores thread schedules with feedback guidance (ENASE 2023), and race-directed fuzzing for more effective concurrency testing (WSSE 2024).
In formal methods, together with programming-language researchers we established a transformation from concurrent programs with semaphores into logically constrained term rewrite systems (Journal of Logical and Algebraic Methods in Programming, 2025).
In automotive security, results range from defenses such as the ID-hopping CAN mechanism IDH-CAN (IEEE Access, 2018) and the centralized authentication scheme CaCAN (2014) to graph-based intrusion detection for CAN networks (CCNC 2026). TZmCFI, an RTOS-aware control-flow integrity mechanism using TrustZone (International Journal of Parallel Programming, 2020), HAZOP-based security analysis (Springer, 2016), and a quantitative security assurance case for in-vehicle systems (2021) cover the range from analysis to assurance.
Detail
This theme runs across all three research pillars: embedded systems, IoT, and Systems of Systems. Whatever the scale of the target, the same question remains: how do we confirm, and explain, that what we built deserves trust?
Detail
Better verification means bugs that manual testing could not find are caught before shipping, reducing accidents and recalls.
Assurance cases then let developers explain, with evidence, why a system deserves to be trusted. Rather than relying on a developer's confidence alone, this gives users and society a common ground for trusting the systems around them.
Detail
We want verification and assurance to stop being tools for a small circle of specialists and become part of everyday development, running as routinely as builds and tests.
Fuzzers and formal methods that run continuously, with their results accumulating into assurance cases that serve as a common language between developers, clients, and users — building the theory and the tools for that world is where this theme is heading.
Detail
The targets of verification are expanding from concurrent programs to distributed systems and systems that include machine learning. Students' thesis topics are usually chosen from within these directions, through discussion.
Getting started
These overview articles, written in Japanese, are an easier entry point than the research papers below.
Yutaka Matsubara, Ryo Kurachi, Hiroaki Takada, IPSJ Magazine, Apr. 2020.
Related links
Open-source software and tools
Projects and related sites
Related publications
2026
Outlier-Ratio Feature Augmentation for Graph-based Intrusion Detection in CAN NetworksAkari Sasaki, Ryo Kurachi, Yutaka Matsubara, Hiroaki Takada
IEEE Consumer Communications & Networking Conference (CCNC 2026), Las Vegas, Jan. 2026
This paper improves graph-based intrusion detection for the CAN in-vehicle network by adding outlier-ratio features that highlight abnormal message patterns. Messages are modeled as a graph, and the ratio of outlier messages is added as a feature to help separate attacks from normal traffic. Better detection matters because CAN itself has no built-in security.
2026
Impact Evaluation of Window Parameters in Graph-Based Intrusion Detection Systems for CANAkari Sasaki, Ryo Kurachi, Yutaka Matsubara, Hiroaki Takada
IPSJ CSEC, Jan. 2026
2025
Transforming Concurrent Programs with Semaphores into Logically Constrained Term Rewrite SystemsMisaki Kojima, Naoki Nishida, Yutaka Matsubara
Journal of Logical and Algebraic Methods in Programming, Vol.143, pp.1-23
This paper shows how to translate concurrent programs that use semaphores into logically constrained term rewrite systems, a formal model that enables mathematical verification. Once a program is expressed as a rewrite system, existing analysis techniques can rigorously reason about its concurrent behavior. This is the extended journal version of the authors' earlier workshop work.
2025
Issue Analysis and Feature Augmentation for Graph-Based Intrusion Detection Systems for CANAkari Sasaki, Ryo Kurachi, Yutaka Matsubara, Hiroaki Takada
IPSJ CSEC, Oct. 2025
2024
Multilingual Investigation of Cross-Project Code Clones in Open-Source Software for Internet of Things SystemsWenqing Zhu, Norihiro Yoshida, Yutaka Matsubara, Hiroaki Takada
IEEE Access, Vol.12, pp.179104-179118
This paper investigates code clones (copied code fragments) across open-source IoT projects in multiple programming languages, which matters for propagating bug fixes. When the same code exists in many projects, a bug fixed in one place may remain in others, so knowing where clones are helps maintainers propagate fixes. Covering clones across different languages, which are usually harder to track, is a key feature of the study.
2024
Detecting Concurrency Bugs with Feedback-guided FuzzingHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
IPSJ Journal, Vol.65, No.5, pp.927-941
This paper presents a fuzzing technique guided by feedback about thread interleavings to find concurrency bugs, which are hard to reproduce with ordinary testing. The tool observes which thread execution orders have been explored and steers testing toward unexplored, suspicious ones. This is the extended journal version of the Schfuzz work presented at ENASE 2023.
2024
Race Directed Fuzzing for More Effective Concurrency TestingHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
The 6th International Workshop on Software Science and Engineering (WSSE 2024), Kyoto, Aug 2024
This paper proposes race directed fuzzing, which steers automated testing toward suspicious thread interleavings to find concurrency bugs more effectively. Instead of exploring interleavings blindly, the method prioritizes ones where data races are likely, spending testing effort where bugs hide. Concurrency bugs are among the hardest to reproduce, which makes such targeting valuable.
2024
Performance Evaluation of a CAN Intrusion Detection AlgorithmAkari Sasaki, Ryo Kurachi, Yutaka Matsubara, Hiroaki Takada
DICOMO 2024, pp.205-214
2024
Adversarial Attacks by Shadow Insertion on Road Traffic SignsKohei Tomoto, Ryo Kurachi, Yutaka Matsubara, Hiroaki Takada
SCIS 2024
2024
Signal-Based CAN IDS Using Hamming Distance and Evaluation on a DatasetAkari Sasaki, Ryo Kurachi, Yutaka Matsubara, Hiroaki Takada
CSS 2024, Kobe
2023
Schfuzz: Detecting Concurrency Bugs with Feedback-Guided FuzzingHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
18th International Conference on Evaluation of Novel Approaches to Software Engineering (ENASE 2023), Prague, pp.273-282, Apr 2023
This paper presents Schfuzz, a tool that finds concurrency bugs by fuzzing thread schedules with feedback guidance. Rather than fuzzing input data, Schfuzz fuzzes the order in which threads run, using feedback from past executions to guide exploration. This work formed the basis of the later journal version.
2023
Fuzzing with an Embedded System SimulatorMasaya Motoda, Hiromasa Ito, Yutaka Matsubara, Hiroaki Takada
ETNET 2023, Tokunoshima
2022
Design and Implementation of RTOS-Aware Control-Flow Integrity Mechanism for Microcontroller-Based SystemsTomoaki Kawada, Shinya Honda, Yutaka Matsubara, Hiroaki Takada
Computer Software, Vol.39, No.2
This paper designs a control-flow integrity mechanism, a defense that stops attackers from hijacking program execution, tailored to RTOS-based microcontroller systems. The mechanism is designed to keep protecting the system even when the RTOS switches tasks and handles interrupts, situations that ordinary CFI designs do not consider. This strengthens small embedded devices that are hard to patch after deployment.
2022
Zengo Award for Coverage-based Greybox Fuzzing Applied to MiddlewareHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
ASTER
2021
How to Test Middleware with Coverage-based Greybox FuzzingHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
IPSJ Journal, Vol.62, pp.877-890
This paper shows how to apply coverage-based greybox fuzzing, an automated bug-finding technique, to middleware, which is harder to test than standalone programs. The approach prepares harnesses that drive the middleware and uses coverage feedback to steer generated inputs toward unexplored code. This brings a proven bug-finding technique to software it did not directly fit.
2021
Quantitative Security Assurance Case for In-vehicle Embedded SystemsZhengshu Zhou, Yutaka Matsubara, Hiroaki Takada
CyberSciTech/PICom/DASC/CDBCom 2021, pp.43-50, Oct 2021
This paper proposes building quantitative security assurance cases, structured arguments with numeric evidence, for in-vehicle embedded systems. Adding numeric evidence to the structured argument makes it easier to judge whether security measures are sufficient and to compare alternatives. This helps explain the validity of security decisions to third parties.
2020
Tsunagaru! Kiso Gijutsu IoT Nyumon (Chapter 2: Security)Harumi Watanabe, Makoto Imamura, Kenji Hisazumi (eds.)
Corona Publishing
An introductory textbook chapter on security for IoT systems, explaining basic threats and countermeasures for connected devices. It walks through how attackers can reach devices over the network and what basic defenses such as encryption and authentication do. The chapter is written for students taking their first steps into IoT.
Yutaka Matsubara authored Chapter 2.
2020
CASE Revolution and Cybersecurity in the Automotive DomainYutaka Matsubara, Ryo Kurachi, Hiroaki Takada
IPSJ Magazine, Vol.61, No.4, pp.338-343
A review article on how the CASE trend (Connected, Autonomous, Shared, Electric) changes cybersecurity requirements for vehicles. As cars connect to networks and receive software updates remotely, attackers gain new entry points, so defenses must span the whole lifecycle from development to operation. The article summarizes these shifts for readers outside the automotive field.
2020
TZmCFI: RTOS-Aware Control-Flow Integrity Using TrustZone for Armv8-MTomoaki Kawada, Shinya Honda, Yutaka Matsubara, Hiroaki Takada
International Journal of Parallel Programming, Vol.49, pp.136-150
This paper presents TZmCFI, a control-flow integrity mechanism for small Arm microcontrollers that uses the TrustZone security feature and works correctly with an RTOS. TrustZone provides an isolated area that attackers cannot tamper with, and the mechanism keeps its protection consistent across task switches and interrupts. This defends small devices that lack the hardware protections of larger computers.
2020
Agile Software Design Verification and Validation (V&V) for Automated DrivingYixiao Li, Yutaka Matsubara, Daniel Olbrys, Kazuhiro Kajio, Hiroaki Takada
Proceedings of FISITA 2020, Oct 2020
This paper discusses an agile approach to verification and validation of automated driving software, enabling frequent checks during iterative development. Automating checks and integrating them into each development iteration keeps quality visible as the software evolves rapidly. This aims to reconcile development speed with safety assurance.
2020
Transforming Concurrent Programs with Semaphores into Logically Constrained Term Rewrite SystemsMisaki Kojima, Naoki Nishida, Yutaka Matsubara
Informal Proceedings of WPTE 2020, Jun 2020
This workshop paper presents a translation from concurrent programs using semaphores into logically constrained term rewrite systems for formal analysis. Expressing programs as rewrite systems opens the door to mathematically rigorous verification of concurrent behavior. This work later grew into the extended journal version.
2020
Transformation from Programs with Mutual Exclusion into Logically Constrained Term Rewriting SystemsMisaki Kojima, Naoki Nishida, Yutaka Matsubara, Masahiko Sakai
IEICE Technical Report SS2019-46, Vol.119, No.451, pp.31-36, Naha
2020
Coverage-based Greybox Fuzzing for MiddlewareHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
SCIS 2020, Kochi
2020
Performance Evaluation of QUIC for Lightweight Secure Communication on IoT DevicesTaiga Komatsu, Yutaka Matsubara, Hiroaki Takada
SCIS 2020, Kochi
2020
Safety Design Concepts for Statistical Machine Learning Components toward Accordance with Functional Safety StandardsAkihisa Morikawa, Yutaka Matsubara
SEAMS Project
2020
Selected Paper Award for Coverage-based Greybox Fuzzing Applied to MiddlewareHiromasa Ito, Yutaka Matsubara, Hiroaki Takada
IPSJ Journal, Vol.62, No.3
2019
Shadow Exception Stacks: Control-Flow Integrity for Asynchronous Exceptions Using TrustZone for Armv8-MTomoaki Kawada, Shinya Honda, Yutaka Matsubara, Hiroaki Takada
IESS 2019, LNCS Vol.11937, pp.56-71, Friedrichshafen, Nov 2019
This paper proposes shadow exception stacks, which extend control-flow integrity protection to interrupt handling on Arm microcontrollers using TrustZone. Interrupts complicate control-flow protection because they can occur at any moment, and the shadow stacks record return paths safely inside TrustZone. This addresses a gap left by CFI schemes that ignore asynchronous exceptions.
2019
Shadow Exception Stacks: TrustZone-M Based CFI for Asynchronous ExceptionsTomoaki Kawada, Shinya Honda, Yutaka Matsubara, Hiroaki Takada
SCIS 2019, Otsu
2018
Trends and Prospects in Safety and Security for Connected Cars and SocietyYutaka Matsubara, Ryo Kurachi, Hiroaki Takada
Jidosha Gijutsu, Vol.72, No.5, pp.87-93
A review article surveying safety and security trends for connected cars and the surrounding connected society. It explains why safety, which protects people from failures, and security, which protects systems from attacks, must be considered together once vehicles are networked. Related standards and research directions are also introduced.
2018
IDH-CAN: A Hardware-Based ID Hopping CAN Mechanism With Enhanced Security for Automotive Real-Time ApplicationsWufei Wu, Ryo Kurachi, Gang Zeng, Yutaka Matsubara, Hiroaki Takada, Renfa Li, Keqin Li
IEEE Access, Vol.6, pp.54607-54623
This paper proposes IDH-CAN, a hardware mechanism that periodically changes CAN message IDs to make attacks on in-vehicle networks harder while preserving real-time behavior. Because CAN messages are normally identified by fixed IDs, hopping them deprives attackers of an easy target. Implementing the hopping in hardware keeps message timing predictable, which is essential for control systems.
2018
Safety Analysis Examples in Compliance with ISO 26262 for TOPPERS/ATK2 Conforming to the AUTOSAR OS SpecificationMorio Mori, Hideaki Sato, Akira Yamashita, Yutaka Matsubara, Hiroaki Takada
IPSJ Journal, Vol.59, No.2, pp.785-794
This paper reports safety analysis examples for the TOPPERS/ATK2 automotive OS, conducted to comply with the ISO 26262 functional safety standard. The examples show concretely how to apply safety analysis techniques to an RTOS, a component that many automotive products share. Published examples like these help practitioners facing the same certification work.
2018
FRAM/STPA: Hazard Analysis Method for FRAM ModelYoshinari Toda, Yutaka Matsubara, Hiroaki Takada
FRAMily 2018, pp.1-17, Cardiff, Jun 2018
This paper proposes FRAM/STPA, a hazard analysis method that applies STPA-style control analysis to FRAM models of everyday performance variability. FRAM shows how variability spreads among functions, while STPA asks which control actions become unsafe, and combining them finds hazards that either method alone may miss. This suits complex systems where people and technology interact.
2018
Multitask CFI Using Arm TrustZone for Armv8-MTomoaki Kawada, Shinya Honda, Yutaka Matsubara, Hiroaki Takada
ESS 2018 Proceedings, Gero, pp.71-74
2018
Performance Evaluation of TLS 1.3 for IoT DevicesTaiga Komatsu, Yutaka Matsubara, Hiroaki Takada
Computer Security Symposium 2018, Nagano, pp.569-576
2018
Symbolic Execution Environment for Finding Bugs in the lwIP Embedded Network StackKatsunori Aoki, Yutaka Matsubara, Hiroaki Takada
SCIS 2018, Niigata
2018
Multi-task CFI Using Arm TrustZone for Armv8-MTomoaki Kawada, Shinya Honda, Yutaka Matsubara, Hiroaki Takada
SWEST20, Gero
2017
Trends and Prospects in Automotive Safety and Security Toward Autonomous DrivingYutaka Matsubara, Ryo Kurachi, Hiroaki Takada
IPSJ Magazine, Vol.58, No.11
A review article surveying automotive safety and security technologies needed to realize autonomous driving. It explains how safety design against failures and defenses against cyber attacks influence each other, and why both are prerequisites for self-driving cars. The article suits readers who want an overview before studying individual technologies.
2017
Automotive Security and IoTYutaka Matsubara
Kinou Zairyo, Jun. 2017 serial article
A review article introducing the current state of automotive security in the context of the IoT era. It describes how connecting cars to networks and smartphones creates new attack paths, and outlines the countermeasures the industry is adopting. The article is written to be accessible to readers outside the software field.
2017
IDHCC: A Security-Enhanced ID Hopping CAN Controller Design to Guarantee Real-TimeWufei Wu, Ryo Kurachi, Gang Zeng, Yutaka Matsubara, Hiroaki Takada, Renfa Li
CERTS 2017, pp.14-21, Jun 2017
This paper designs IDHCC, a CAN controller that hops message IDs for security while guaranteeing real-time message delivery. The controller changes IDs in a way both sender and receiver can follow, so protection is added without breaking communication. This design study preceded the extended IDH-CAN journal version.
2017
Portable DoS Test Tool for Embedded SystemsKeigo Nagara, Katsunori Aoki, Yutaka Matsubara, Hiroaki Takada
ESS 2017 WiP, Gero
2017
Attack Performance Evaluation of Mirai Malware on Embedded SystemsKeigo Nagara, Yutaka Matsubara, Katsunori Aoki, Hiroaki Takada
IPSJ Research Report 2017-EMB-44 No.41, Okinawa, pp.1-6
2017
Open-source Software-based Portable DoS Test Tool for IoT DevicesKeigo Nagara, Katsunori Aoki, Yutaka Matsubara, Hiroaki Takada
Workshop on Internet of Things Security and Privacy with ACM CCS, Dallas
2016
HAZOP-Based Security Analysis for Embedded Systems: Case Study of Open Source Immobilizer Protocol StackJingxuan Wei, Yutaka Matsubara, Hiroaki Takada
Recent Advances in Systems Safety and Security, Springer, pp.79-96
A book chapter that applies HAZOP, a systematic hazard analysis technique, to find security weaknesses in an open-source car immobilizer protocol stack. Guide words describing deviations from intended behavior are reinterpreted from a security viewpoint, turning a safety method into a way to find attack-relevant flaws. The chapter is an expanded version of the authors' earlier workshop study.
2016
Security and Safety of In-Vehicle DevicesRyo Kurachi, Yutaka Matsubara, Hiroaki Takada
IPSJ Magazine, Vol.57, No.7
A review article explaining the relationship between security and functional safety for in-vehicle devices. It shows that a cyber attack can break the assumptions behind safety design, so security measures must be planned as part of functional safety. Basic attack examples and defense concepts are introduced for non-specialists.
2016
CaCAN: Centralized Authentication System in CANRyo Kurachi, Yutaka Matsubara, Hiroaki Takada, Hiroshi Ueda, Satoshi Horihata
IEICE Transactions, Vol.J99-A No.2, pp.118-130
This paper proposes CaCAN, a system in which a central monitor node authenticates messages on the CAN in-vehicle network and removes unauthorized ones. The monitor node checks message authentication codes and neutralizes unauthorized frames before they take effect. Requiring only one added node makes the scheme easy to introduce, and this is the extended journal version of the escar 2014 paper.
2016
An Aiding Tool for HAZOP-based Analysis for Embedded SystemsJingxuan Wei, Yutaka Matsubara, Hiroaki Takada
WOCS2 2016, Tokyo
2016
Safety Analysis Method for AUTOSAR OS Toward Functional SafetyMorio Mori, Hideaki Sato, Hirotaka Hirabayashi, Akira Yamashita, Yutaka Matsubara, Hiroaki Takada
ESS 2016, Tokyo
2016
HAZOP-based Security Analysis for Embedded SystemsJingxuan Wei, Yutaka Matsubara, Hiroaki Takada
WOCS2 2016, Tokyo
2015
HAZOP-based Security Analysis for Embedded Systems: Case Study of Open Source Immobilizer Protocol StackJingxuan Wei, Yutaka Matsubara, Hiroaki Takada
Proceedings of the 3rd International Workshop on Systems Safety & Security (IWSSS2015), Bucharest, Jun 2015
This paper applies HAZOP, a systematic deviation analysis technique, to security analysis of an open-source car immobilizer protocol stack. Guide words describing deviations from intended behavior are reinterpreted for security, turning a safety technique into a way to find attack-relevant weaknesses. This study was later expanded into a book chapter.
2015
Verification Environment for a Data Stream Management SystemMasaki Nakai, Yutaka Matsubara, Hiroaki Takada, Akihiro Yamaguchi
IPSJ Research Report 2015-SLDM-170 No.14, Amami Oshima, pp.1-6
2014
CaCAN - Centralized Authentication System in CANRyo Kurachi, Yutaka Matsubara, Hiroaki Takada, Naoki Adachi, Yukihiro Miyashita, Satoshi Horihata
Proceedings of the escar 2014 Europe, pp. 1-9, Hamburg, Nov 2014
This paper presents CaCAN, a centralized message authentication system for the CAN in-vehicle network, at the automotive security conference escar. A monitor node authenticates messages on the bus and neutralizes unauthorized ones, requiring little change to existing vehicle networks. This work was later extended into the journal version.
2014
Research and Development of a Security-Oriented Software Platform for Next-Generation Vehicles and Service RobotsKoichi Goto, Hiroyuki Hattori, Ayumu Sugiyama, Hiroaki Hara, Hiroaki Takada, Yutaka Matsubara, Daichi Mizuguchi, Koichi Takahashi
WOCS2 2014, Tokyo
2013
Safety Measures for Software Faults in Embedded SystemsYutaka Matsubara, Hiroaki Takada
Computer Software, Vol.30, No.1, pp.119-129
This paper organizes and discusses safety measures against software faults in embedded systems, such as detecting failures and keeping the system in a safe state. Since testing cannot remove every fault, systems should detect anomalies at run time and move to a safe state before harm occurs. The paper organizes concrete techniques usable in resource-limited embedded systems.
2013
Safety Analysis Method Based on Hierarchical State Transition Diagram for Embedded SystemsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
IEICE Transactions, Vol.J96-A No.1, pp.34-48
This paper proposes a safety analysis method that uses hierarchical state transition diagrams to systematically find hazardous behaviors in embedded systems. Organizing states into a hierarchy keeps the analysis manageable even when the system has many states. This helps find dangerous behaviors at the design stage, before accidents can happen.
2012
Safety Analysis Method Focusing on State Transition DiagramsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
IEICE Transactions, Vol.J95-A No.2, pp.198-209
This paper proposes a safety analysis method that examines state transition diagrams to find conditions under which an embedded system can reach hazardous states. Because state transition diagrams are already common in embedded design, engineers can reuse familiar models for safety analysis instead of building new ones. This helps prevent accidents by catching dangerous conditions at the design stage.
2012
Safety Analysis Method Based on Parallel State Transition Diagram for Embedded SystemsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
SEA 2012, pp.417-425, Las Vegas, Nov 2012
This paper proposes a safety analysis method for embedded systems based on parallel state transition diagrams, handling components that operate concurrently. Unexpected combinations of concurrently operating components are a common source of hazards, and the parallel diagrams make such combinations explicit for analysis. This helps find dangerous behaviors systematically at the design stage.
2012
Safety Analysis Method Based on Parallel State Transition Diagrams in Embedded SystemsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
ESS 2012 Proceedings, Tokyo
2012
Safety Analysis Method Based on Parallel State Transition DiagramsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
WOCS2 2012, Yokohama
2012
Safety Analysis Method Based on Hierarchical State Transition DiagramsJoohae Kim, Yutaka Matsubara, Hiroaki Takada
ETNET 2012, Matsushima
2011
Safety Analysis Method Focusing on Hierarchical State Transition DiagramsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
WOCS2 2011, Yokohama
2011
Safety Requirements Analysis Method Focusing on State Transition DiagramsZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
WOCS 2011, Tokyo
2011
Safety Analysis Method Focusing on Hierarchical State Transition DiagramsJoohae Kim, Yutaka Matsubara, Hiroaki Takada
Nagoya University Science Forum for Young Women Researchers, Nagoya
2011
Safety Analysis Method Focusing on Hierarchical State Transition DiagramsJoohae Kim, Yutaka Matsubara, Hiroaki Takada
SWEST13 Proceedings, Gifu
2010
Hierarchical Scheduling Algorithm with Task Start Delay for Time ProtectionYutaka Matsubara, Shinya Honda, Hiroaki Takada
IPSJ Research Report 2010-EMB-19, Kumamoto
2010
Case Study of Safety Functions in Small Embedded System DesignJoohae Kim, Yutaka Matsubara, Hiroaki Takada
Safety Engineering Symposium 2010, Tokyo
2010
Time-Protection Scheduling Algorithm Using Only Task DeadlinesYutaka Matsubara, Shinya Honda, Hiroaki Takada
IPSJ Research Report 2010-EMB-15 No.8, Yokohama
2010
A Case Study of Safety Requirements Analysis in Small Embedded System DesignZoohaye Kim, Yutaka Matsubara, Hiroaki Takada
ISSC 2010, Minneapolis
2009
Case Study of Safety Requirements Analysis in Small Embedded System DesignJoohae Kim, Yutaka Matsubara, Hiroaki Takada
DSS 2009, Osaka
Related themes
Trust in a single computer
We study how to keep mixed-criticality systems fast, predictable, and safe even when many applications share CPUs, memory, storage, and networks.
Trust in connected devices
We combine Internet of Things (IoT) devices with blockchain and smart contracts so that device permissions, data sharing, and lifecycle management can be handled in a transparent way.
Trust in systems of systems
We study Systems of Systems (SoS — arrangements in which multiple independent systems cooperate to achieve an emergent purpose) as socio-technical systems in which autonomous actors interact, and we aim to establish engineering methods for designing their overall behavior.