Catalogue of Technologies 2020 contents 5 Victor Ivannikov 80th anniversary (1940–2016) 7 ISP RAS 2020: Major Events 8 ISP RAS 2020: Technologies Update TECHNOLOGIES 13 Asperitas and cloud solutions family 16 AstraVer: verification toolset 18 BinSide: binary code static analysis tool 20 Casr: crash analysis and severity reporter tool 22 Constructivity 4D: technology of indexing, searching and analysis of large spatial-temporal data 24 ISP Crusher: a dynamic analysis toolset 27 Dedoc: a document structure retrieval system 29 DigiTEF: digital twin platform 31 Klever: the technology for C programs model checking 33 Lingvodoc: virtual laboratory for documenting endangered languages of Technologies Catalogue 35 Masiw: support for designing highly reliable software systems 37 MicroTESK: test program generator 39 ISP Obfuscator 41 Protosphere a network traffic analyzer 43 ISP RAS software analysis platform based on QEMU 46 Retrascope: static analysis of HDL descriptions 48 SciNoon: exploratory search system for scientific groups 50 Svace static analyzer 53 Talisman: a data processing framework 56 Texterra: semantic analyzer 58 Trawl: binary code analysis platform 60 ISP RAS: an innovation ecosystem Victor Ivannikov 80th anniversary (1940-2016) In 2020 we commemorate 80 years since Victor Petrovich Ivannikov’s birthday. Academician Ivannikov was the ISP RAS founder and first director, and now the institute is named after him. His contribution to ISP RAS development is very hard to describe shortly. It includes a scientific school, a way of work famously known as Phystech triangle: research, education, and innovations. But the most important thing about him was his attitude towards his work and people around him. Victor Ivannikov entered Phystech (MIPT) soon after it was Arutyun founded. Its students used to start working on the projects Avetisyan of Academy institutes and design bureaus since their 3rd year, developing new technologies and not breaking up with Doctor of Physics education. Ivannikov’s teacher was Lev Korolev from the chair and Mathematics, of Sergey Lebedev, a Soviet computer pioneer. Victor Petrovich academician worked with and befriended first Soviet programmers. After of the RAS, graduating from Phystech, while being at the Institute of Preci- of Technologies Catalogue ISP RAS Director. sion Mechanics and Computer Engineering (IPMCE), he joined the project of creating an operating system for BESM-6, a famous Soviet mainframe computer. Then he took part in developing AS-6, a multiprocessor real-time computing com- plex used in mission control centers, and led its operating sys- tem development. Later in the 80s he worked in the Institute of Cybernetics of the Academy of Sciences, where he managed developing and deploying CAD systems and supercomputer software. Victor Ivannikov knew that system programming is an innova- tion area of knowledge requiring constant development and state-of-the-art research and deployment. And this task can only be handled by appropriate organizations, e.g. Academy of Sciences institutes. He created such an institute in 1994 and gave it the best of his experience and achievements: his scientific school born out of Lebedev’s school in an open and creative atmosphere of IPMCE. ISP RAS first years were hard due to Russian economic environment of the time. Then first joint projects with foreign partners were launched, more students joined the institute. Victor Petrovich was saying that ISP RAS became a meeting place of two counter flows, a high-quality money flow based 5 on the contracts for advanced research and development and a flow of talented young engineers. The institute started to stabilize in the 2000s. Intel, HP and Dell became its part- ners. New research directions appeared, such as program analysis for vulnerability detection, binary code analysis, natural language processing. Samsung, the new ISP RAS long-term partner, opened a joint lab with the institute in 2009. We have started working with Russian companies and grew by a lot. Leading the institute took a lot of time and attention, but Victor Petrovich caught up with everything. He advised stu- dents and postgraduates and continued to teach. He was of the opinion that teaching should be done by engineers with real work experience, and he provided his experience freely to MSU and Phystech students. He always said that people are most important. And now his students are giving lectures and advising young students in the institute. Time shows that everything taught and said by Victor Petrovich is working. We have created an ecosystem that constantly generates high-skilled specialists and innovations in the area of system programming. We are growing and improving. We make new technologies. Within the last five years ISP RAS grew twofold and our budget increased threefold. And the ba- sis of all our achievements is the attitude taught to us by Victor Petrovich — we live the work. 6 ISP RAS 2020: Major Events — Expanding the decade-long collaboration with Samsung Elec- tronics. The joint lab financing increased by 20% compared to 2019. We have started developing AI technologies for software engineering and program analysis. — Expanding the collaboration with Huawei. The project on analyzing best practices for OS verification and testing and applying those to Huawei-developed HarmonyOS systems has started. — Starting a full scale deployment of secure development lifecy- cle technologies within Russian companies such as Security Code, RusBITech, Kaspersky Lab., Postgres Professional, Swemel, and others. — Winning a Ministry of Science and Higher Education call for tender (jointly with Steklov Mathematical Institute of RAS). The ISP RAS-Steklov Institute joint project was in the top ten projects getting the score of 95.5 out of 100. Its goal is devel- oping new methods for ensuring federal data centers security supporting also quantum communication means. of Technologies Catalogue — Winning a call for tender for organizing world-class scientific centers (jointly with Sechenov University and other institu- tions). The institute’s key task is creating a digital platform for retrieving, storing, and analyzing medical big data. The platform will be based on the existing ISP RAS technologies such as Asperitas cloud solutions. — Launching a scholarship program in MSU, MIPT and HSE. The goal is involving talented students and postgraduates in our frontline industrial research and development. Scholar- ship monthly payments can be up to 200.000 rubles. — Staff and students growth is about 30% compared to 2019. — Opening the fourth external system programming lab man- aged by ISP RAS, now in Orel State University. — Holding online three out of five conferences online. Because of the coronavirus pandemic three ISP RAS public events were held online for the first time, namely SYRCoSE Software Engineering Colloquium, OS Day conference, and ISP RAS Open conference. 7 ISP RAS 2020: Technologies Update 2020 has seen a number of important scientific results that served as a basis for new technologies or were the outcome of advancing existing ones. The results were recognized by the scientific community. Most notably, Trawl binary code analysis platform was included in the list of Academy of Sciences’ best results. Alexander Sergeev, President of RAS, said that Trawl plays an important role in ensuring cybersecurity. Most important achievements of 2020 include: — The Svace static analyzer now supports Kotlin and Go. Ana- lyzing large projects takes up to 35% less time. Taint analysis quality has been improved. Various C/C++ compilers support has been improved as well, in particular support for Microsoft Visual C++. Analyzing programs built for RISC-V and Power- PC64 architectures is now supported, and the analyzer itself can work on ARM64 servers. — The Talisman social network analysis framework has been transformed to a full-scale data processing framework. It pro- vides a fast development of specialized multi-user analytical systems, which can merge and work uniformly with the data from private databases and Internet sources. — Dynamic analysis technologies have been improved and uni- fied in a single toolset called ISP Crusher. The toolset includes ISP Fuzzer, a fuzzing tool, and SyDr, an automatic test genera- tion tool for complex programs. — The Asperitas platform for data storage and complex re- source-intensive on demand calculations has been com- plemented with new tools. They include Michman, a PaaS services orchestrator for a cloud environment doing big data analysis and storage, machine learning, and running distribut- ed programs. The other new tool is Clouni, a tool for translat- ing TOSCA Simple Profile YAML patterns to IaaS deployment scenarios based on Ansible. — The newly developed Dedoc tool is a universal open system for extracting document structure and converting documents to a unified format. — The new Casr tool creates automatic reports for crashes hap- pened during program testing or deployment. 8 — The Trawl binary code analysis platform has been improved. An important new feature is support for in-memory sensitive data leaks detection based on a dynamic taint analysis over execution traces. — Updates of the BinSide static binary analysis tool include better detection quality and Ghidra disassembler integration. — Lingvodoc, a system for collaborative multi-user documenta- tion of endangered languages, is now more widely used by lin- guists in 29 universities and scientific centers of 16 cities. These and other ISP RAS