Curriculum Vitae: Tommaso Cucinotta
Personal dataBirth date and place: April 1974, Potenza (Italy) E-mail:
Phone: +39 50 883 093, Fax +39 050 883 452 Web page: http://feanor.sssup.it/~tommaso |
|
PhD in Computer Engineering at Sant'Anna University, Pisa (Italy). PhD research title: “Workflow and digital signature systems for Public Administration and enterprises”.
June 2004 – May 2005: Research assistant at Scuola Superiore Sant'Anna, Pisa, for research activities connected to the european project ARTIST
Computer Engineering Degree (“Laurea in Ingegneria Informatica”), got at the Pisa University (Italy) on 03/05/2000, with maximum marks (“110/110 summa cum laude”).
13th International School for Computer Science Researchers “Foundations of Wide Area Network Programming” held in Lipari (Messina), Italy (July 2001).
Course on “Technologies and Innovation for improving the Public Administration internal processes”, modules “Digital signature systems” and “Organizational models for the PA innovations”.
Course on “Management of internal innovation and external development processes” (with a module about “Team interaction and project management skills”), Sant'Anna University, Pisa, Italy (November 2002 – January 2003).
Currently cooperating with Scuola Superiore Sant'Anna in various research topics:
Smart-cards: interoperability, protocols and architectures
Digital signatures, biometrics identification, multicast security
Workflow and document management systems security
Quality of service control for soft real-time applications
Cucinotta T., Abeni L., Lipari G., Marzario L., Palopoli L., “QoS Management through adaptive reservations”, to appear in a special issue of the Real-Time Systems Journal in 2005
Cucinotta T., Di Natale M., Corcoran D., “An open middleware for smart-cards”, to appear in a special issue of the Computer Science Software Engineering (CSSE) Journal in 2005
Cucinotta T., Palopoli L., Marzario L., Mancina A., Valente P., “A unified framework for managing different resources with QoS guarantees”, to appear in Proceedings of the 1st International Workshop on Operating System Platforms for Embedded Real-Time Applications, Palma de Mallorca, Balearic Islands, Spain, July 2005.
Cucinotta T., Di Natale M., Corcoran D., “Breaking down architectural gaps in smart-card middleware design”, to appear in proceedings of the 1st International Conference on Trust and Privacy in Digital Business (TrustBus '04), Zaragoza (Spain), September 2004
Cucinotta T., Brigo R., Di Natale M., “Hybrid fingerprint matching on programmable smart cards”, to appear in proceedings of the 1st International Conference on Trust and Privacy in Digital Business (TrustBus '04), Zaragoza (Spain), September 2004
Cucinotta T., Corcoran D., Di Natale M., “A protocol for programmable smart cards”, Trust and Privacy in Digital Business Workshop, Prague, Czech Republic, September 2003. In proceedings of the 14th International Workshop on Database and Expert Systems Applications (DEXA 2003), IEEE Computer Society
Cucinotta T., Di Natale M., Kolachalam S., “A Modular Open Source Architecture for ICT Services in the Public Administration”, in proceedings of the 2nd EGOV Conference, Prague, Czech Republic, September 2003, Lecture Notes in Computer Science Serires, Vol. 2739
Cucinotta T., Cecchetti G., Ferraro G., “Adopting redundancy techniques for multicast stream authentication”, in proceedings of the 9th IEEE Workshop on Future Trends of Distributed Computing Systems (FTDCS 2003), Puerto Rico, May 2003, IEEE Computer Society
Cucinotta T., Palopoli L., Marzario L., Lipari G., Abeni L., “Adaptive reservations in a Linux environment”, to appear in proceedings of the 10th IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS 2004), Toronto, Canada.
Cucinotta T., Palopoli L., Marzario L., “Stochastic feedback-based control of QoS in soft real-time systems”, submitted to 2004 IEEE Conference on Decision and Control
Palopoli L., Cucinotta T., Bicchi A., “Quality of service control for soft real-time applications“, Proceedings of the 42nd IEEE Conference on Decision and Control (CDC 2003), Hawaii, USA, December 2003
Cucinotta T., “Firma digitale e lavoro cooperativo: aspetti tecnologici”, published on I nuovi scenari del marketing assicurativo, IRSA, 2004
Cucinotta T., “Firma digitale e assicurazioni: aspetti tecnologici”, published on L'economia digitale e il settore assicurativo, DEA Quaderni di Impresa Assicurativa, Giuffrè Editore, 2003
Di Natale M., Cucinotta T., Ancilotti P., “Lo sviluppo di una architettura modulare open-source per i servizi della PA: considerazioni tecniche e organizzative”, in proceedings of “SALPA: Sapere Aperto e Libero nella Pubblica Amministrazione”, Marzo 2004, Pisa
August – October 2001: Internship in Schlumberger Smart Cards, Austin (TX): Design and implementation of a modular, highly portable middleware for smart cards. Interoperable among various card devices. Includes a protocol for programmable card devices (MuscleCard protocol), with a JavaCard-2.x card-side implementation and a C host-side implementation, a generic host-side smartcard API (MuscleCard API) with a pluggable implementation, a PKCS#11 module, an ssh client and a command-line PKCS#7 oriented signing utility. Middleware available at http://www.musclecard.com. Applications available at http://smartsign.sourceforge.net.
Thesis project: “Design and realization of a system for smartcard-based digital signature and authentication security services”. Includes a PKCS#11 module, a certificate-based Pluggable Authentication Module (PAM), a command-line PKCS#7 oriented signing utility, and a command-line smart card shell for the Schlumberger Cyberflex Acces 16K smart card. Available at http://smartsign.sourceforge.net.
Technological evaluation of an investiment proposal within the “Startech Sviluppo Italia” Program, on the issue of verifying printed digital signatures (October 2001).
Support for experimenting digital signatures within Sant'Anna University workflows (July – August 2002).
Realization of a software tool for digital signatures. Project developed with Sant'Anna University within the “Project for electronic document security and digital signatures” (July – December 2000).
July – September 2001: Design of a web-based Electronic Registry System compliant with the italian national laws and implementation within the Zope application server. Project committed to Sant'Anna University by the Authority for Information Technologies in Public Administrations (AIPA).
Semiformal design, using Unified Modeling Language (UML), of a system for event based emulation of generic digital circuits.
Design and realization, using C++, of a command line discrete event based emulator for the PIC16C84 microcontroller.
Design of an advanced document object model for a digital library and implementation within the Dienst software by means of the OLP Protocol. Project developed in collaboration with “Consorzio Nazionale delle Ricerche, Istituto di Elaborazione dell'Informazione / CNR-IEI” (January – June 2001).
Design and realization of a web-based content management framework for sharing digital documents (March – April 2001). Implemented within the Zope application server. Currently online at http://link.sssup.it.
Design and realization, using C, of a simplified transport level network protocol (OSI terminology).
Implementation, using Matlab, of the Simplex algorithm for the resolution of Linear Programming optimization problems.
Design and realization, using Visual C++, of a program for the automatic generation of a web page (HTML/Javscript) supporting students in the selection of the study plan.
October 2005: Specialization course “Codice dell'Amministrazione Digitale D. Lgs. n.82/2005” -- Lecture on “Digital Signature: a technological viewpoint”, LiderLab, SSSA
November 2003: International Master on Software Engineering, 2003 Edition – Module “System Security and Cryptography”. Course language: English.
April 2002: International Master on Software Engineering, 2002 Edition – Module “System Security and Cryptography”. Course language: English.
April 2004: “e-commerce: technological issues related to authentication, security and privacy” within the 2004 Edition of the Specialization Course “Marketing e Distribuzione di Prodotti Assicurativi”, Scuola Superiore Sant'Anna.
February – May 2004: Professor assistant for a course on Java at Pisa University, Faculty of Engineering.
April - May 2001: Specialization course “The Electronic Registry: specialistic knowledge for experts”.
May 2001: Seminar “Technologies for innovating the Public Administration – Technologies and tools for ICT security”.
Protocols and architectures for smart-card interoperability
Access control models: Role Based Access Control (RBAC) and its variants, Multi Level Security (MLS)
Key management algorithms and protocols for secure data streaming
Formal methods: Burrows, Abadi, Needham (BAN) logic of authentication and its variants
Scheduling of soft real-time tasks for quality of service control
PKCS standards, ISO 7816 standards, PCSC Standards, X.509, S/MIME, XML-Signature
Secure Socket Layer (SSL) protocol, Secure SHell (SSH) protocol
Detailed knowledge of cryptosystems: RSA, DSA, DES, Rijaendel (AES), Elliptic Curve (EC)
Biometrics recognition techniques, BioAPI, Biometrika FX2000 and FX3 SDK
Microsoft CryptoAPI, Java Security Architecture (JSA) and API, JavaCard-2.x, Open Card Framework (OCF), OpenSSL, OpenSSH, Pretty Good Privacy (PGP), ModSSL for Apache
Schlumberger Cyberflex Access Toolkit, CompEd DigitalSign and DigitalSign API
Z-World: Rabbit Core Module 3000, Dynamic C
Texas Instruments: TMS320C6711, Code Composer Studio
Altera: Stratix EP1S40 FPGA, Nios II CPU Core, Quartus II, SOPC Builder, Nios II IDE, ModelSim
Verilog Hardware Description Language (Verilog HDL), VHDL
C/C++, Java 1.x and 5.0, Design Patterns
JavaScript, JScript, Perl, Php, Python, Visual Basic and VBA, VBScript, Pascal, Basic
Assembler Intel 80x86, Assembler Motorola 68000
Unix Bourn Again Shell (BASH) scripting, Matlab
XML, Dynamic HTML, Cascaded Style Sheets (CSS), LaTeX,Unified Modeling Language (UML) Notation
Structured Query Language (SQL), CORBA Interface Description Language (IDL)
Microsoft Visual C++ v5.0, Microsoft Visual Basic, Rational Rose ’98, Kdevelop, Eclipse
Microsoft Windows API, Microsoft Foundation Classes (MFC)
X Toolkit, Motif, Qt, KDE, WxWindows
Microsoft Windows 95/98/NT/ME/2000/XP, MS DOS
Experienced with Linux and Solaris; generic Unix
Microsoft Office (and MS Office Automation), Microsoft Front Page
Standard Template Library (STL), OpenGL, Regular Expressions
Z Object Publishing Environment (Zope)
Italian law on digital signatures: “Codice [...]” (D. Lgs. 82/2005), “Testo Unico [...]” (DPR 445/2000)
European Directive 1999/93/CE: “Community Framework for Electronic Signatures”
Excellent knowledge of both spoken and written English.
Basic knowledge of German.
July – October 2001: Internship in Schlumberger Smart Cards, Austin (Texas).
July 1991: Summer School in England.
Computer Security, Smart Cards, Biometrics Identification
Hardware architectures for cryptographic accelerators and 3D accelerators
3D graphics and rendering engines
Audio signal processing algorythms, audio signal and voice synthesis and recognition