Students

This page summarizes works done with my supervised students.

PhD Students:

• 2023—         - Owen Le Gonidec, Securing RISC-V System-on-Chip against Energy-based Attacks. (co-supervised with Maria Méndez Real, IETR and Jean-Christophe Prévotet, INSA Rennes)
• 2021—         - Amélie Marotta, Electromagnetic injection fault models and countermeasures for RISC-V sw FPGA processors. (co-supervised with Ronan Lashermes, INRIA/LHS, Olivier Sentieys, INRIA/TARAN and Rachid Dafali, DGA-MI)
• 2020—         - Vincent Giraud, Exploration of code security and of operating system security. (co-supervised with David Naccache, ENS Paris)
• 2017—2021 - Thomas Trouchkine, SoC physical security evaluation. (co-led with Jessy Clédière, CEA/LETI)

PhD Juries

Jury Examiner

• 2023 - Soline Ducousso, Moving code analysis from safety to security: attacker model.
• 2022 - Vincent Werner, Optimizing identification and exploitation of fault injection vulnerabilities on microcontrollers.
• 2021 - Youssef Inedjaren, Contribution to the Intelligent Transportation System: Security of Communications in Vehicular Ad hoc Networks.
• 2019 - Sebanjila Kevin Bukasa, Vulnerability analysis of a Secure Enclave in Embedded Devices.
• 2018 - Damien Marion, Multidimensionality of the Models and the Data in the Side Channel Domain.
• 2018 - Abdelhak Mesbah, Reconstruction de traces d’exécution à partir de fragments par utilisation de solveurs de contraintes.
• 2016 - Tiana Razafindralambo, Security of micro-controllers : From smart cards to mobile devices.
• 2016 - Louis Dureuil, Code analysis and evaluation process for vulnerability detection against fault injection on secure hardware.

PhD student’s individual thesis monitoring committee

• Mathieu Escouteloup, Secure micro-architecture with Marie-Laure Potet (VERIMAG), 2019 & 2020
• Léopold Ouairy, Vulnerability analysis for embedded systems against fuzzing attacks,
  • 2019: with Pierre-Alain Fouque (IRISA)
  • 2018: with Valérie Viet Triem Tong (INRIA)

Master Students

• 2022 - Louisa Malki-Haegel: Fingerprinting of embedded software implementation.
• 2021 - Ever Atilano Rosales: Security of the secure boot against fault attacks co-supervised with Arnaud De Grandmaison (ARM) and Karine Heydemann (Sorbonne University, LIP6). The internship is located at ARM Paris.
• 2020 - Yanis Belkheyar: Authenticated Disk Encryption co-supervised with Louiza Kathi (ANSSI crypto team).
• 2019 - Vincent Giraud: Secure implementation of GlobalPlatform for Java Card platform.
• 2017 - Thomas Trouchkine, Hardware implementation of a Java Card Virtual Machine co-supervised with Patrick Haddad.
• 2016 - Léo Gaspard, Implementation of a Secure Operating System for Java Card smart card.
  • After his training period, Léo published the paper “Hardening a Java Card Virtual Machine Implementation with the MPU” at SSTIC 2018.

Apprenticeship

• 2017—2020 - Boris Simunovic, Security analysis of the ISO-7816 stack.
  • His report is available here : .
  • He also had developed:
    • GitHub/ANSSI-FR/Open-ISO7816-Stack: an open-source ISO7816 stack. This project aims to provide an open-source implementation of the ISO7816-3 communication protocol from the reader side. This protocol is ruling the interactions between a smartcard and a card-reader when using its contacts to communicate.
    • GitHub/ANSSI-FR/cardstalker: an open-source bridge to fuzz smartcard ISO7816 stack implementation. CardStalker provides a UART-driven smartcard reader at the T=1 (see ISO7816-3) level (link and physical layer), where most of the smartcard reader devices on the market are only providing an APDU interface (application layer).