BREJON Jean-Baptiste
责任导师 : Karine HEYDEMANN, Emmanuelle ENCRENAZ
助理责任导师 : MEUNIER Quentin
Quantification de la sécurité des applications en présence d'attaques physiques et détection de chemins d'attaques
Fault attacks are a serious threat to the security of embedded systems. To address this threat, the code can be hardened by inserting software protections aiming to detect or tolerate the faults. The resulting robustness of the code must be assessed. In this thesis, we present an approach combining static and dynamic code analysis with formal verification as well as a set of metrics to assess the robustness of binaries under faults attacks. Our approach models the vulnerabilities search by equivalence-checking problems solved through SMT solving. The proposed approach has been implemented into a tool, RobustB, which analyse the robustness of the code and, thanks to the metrics, which allows the compare the robustness of codes exposing different protections and/or compiled with different compilers and/or at different optimisation levels.
答辩 : 2020-6-26
评委会 :
M. Jean-Max Dutertre, Professeur, Ecole Nationale Supérieure des Mines de Saint-Étienne, LIMOS [Rapporteur]
Mme. Marie-Laure Potet, Professeur, Ensimag - Grenoble INP, Verimag [Rapporteur]
M. Robin David, Ingénieur expert sécurité, Quarkslab
Mme. Emmanuelle Encrenaz, Maître de conférence HDR, Sorbonne Université, LIP6
Mme. Karine Heydemann, Maître de conférence HDR, Sorbonne Université, LIP6
M. Quentin Meunier, Maître de conférence, Sorbonne Université, LIP6
M. Antoine Miné, Professeur, Sorbonne Université, LIP6
Mme. Patricia Mouy, Ingénieur expert sécurité, ANSSI
2015-2020 刊物
-
2020
- J.‑B. Brejon : “Quantification de la sécurité des applications en présence d’attaques physiques et détection de chemins d’attaques”, 博士论文, 答辩 2020-6-26, 责任导师 Heydemann, Karine Encrenaz, Emmanuelle, 助理责任导师 : Meunier, Quentin (2020)
-
2019
- J.‑B. Bréjon, K. Heydemann, E. Encrenaz, Quentin L. Meunier, S. Vu : “Fault attack vulnerability assessment of binary code”, Cryptography and Security in Computing Systems (CS2’19), Valencia, Spain, pp. 13-18, (ACM) (2019)
-
2016
- A. Drebes, J.‑B. Bréjon, A. Pop, K. Heydemann, A. Cohen : “Language-Centric Performance Analysis of OpenMP Programs with Aftermath”, IWOMP 2016 - 12th International Workshop on OpenMP, vol. 9903, Lecture Notes in Computer Science, Nara, Japan, pp. 237-250, (Springer) (2016)
- C. Dévigne, J.‑B. Bréjon, Quentin L. Meunier, F. Wajsbürt : “Executing Secured Virtual Machines within a Manycore Architecture”, Microprocessors and Microsystems: Embedded Hardware Design, (Elsevier) (2016)
-
2015
- C. Dévigne, J.‑B. Bréjon, Quentin L. Meunier, F. Wajsbürt : “Executing secured virtual machines within a manycore architecture”, Proceedings of the IEEE Nordic Circuits and Systems Conference (NORCAS), Oslo, Norway (2015)