Search

733 results

• • Seminar

  • SoSysec

  Breaking and fixing HB+DB: A Short Tale of Provable vs Experimental Security and Lightweight Designs

  • February 02, 2018

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Ioana Boureanu (University of Surrey)

  HB+ is a well-know authentication scheme purposely designed to be lightweight. However, HB+ is vulnerable to a key-recovery, man-in-the-middle (MiM) attack dubbed GRS. To this end, at WiSec2015, the HB+DB protocol added a distance-bounding dimension to HB+, which was experimentally shown to counteract the GRS attack.In this talk, we will exhibit however a number of security flaws in the HB+DB[…]

• • Seminar

  • SoSysec

  Voting : You Can’t Have Privacy without Individual Verifiability

  • March 01, 2019

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Joseph Lallemand (Loria)

  Electronic voting typically aims at two main security goals: vote privacy and verifiability. These two goals are often seen as antagonistic and some national agencies even impose a hierarchy between them: first privacy, and then verifiability as an additional feature. Verifiability typically includes individual verifiability (a voter can check that her ballot is counted); universal verifiability […]

• • Seminar

  • SoSysec

  On MILP modelisations

  • April 29, 2022

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Christina Boura (UVSQ, CNRS, LMV)

  Modelizing a problem using linear constraints and solving it by some Mixed Integer Linear Programming (MILP) solver is a popular approach in many domains of computer science. In this talk we present and compare different new techniques to modelize any subset of {0,1}^n for MILP. We then discuss the efficiency of our models by applying them to the search of differential paths, a classical problem[…]

• • Seminar

  • SoSysec

  An evaluation of Symbolic Execution Systems and the benefits of compilation with SymCC

  • September 25, 2020

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Aurélien Francillon (Eurecom)

  In this talk I will discuss our recent work, together with Sebastian Poeplau, on Symbolic execution. Symbolic execution has become a popular technique for software testing and vulnerability detection, in particular, because it allows to generate test cases for difficult to reach program paths. However, a major impediment to practical symbolic execution is speed, especially when compared to near[…]

• • Seminar

  • SoSysec

  DroidGuard: A Deep Dive into SafetyNet

  • January 06, 2023

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Romain Thomas (Quarkslab)

  SafetyNet is the Android component developed by Google to verify the devices’ integrity. These checks are used by the developers to prevent running applications on devices that would not meet security requirements but it is also used by Google to prevent bots, fraud and abuse.In 2017, Collin Mulliner & John Kozyrakis made one of the first public presentations about SafetyNet and a glimpse into the[…]

• • Seminar

  • SoSysec

  Browser fingerprinting: past, present and possible future

  • January 21, 2022

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Pierre Laperdrix (CRIStAL)

  Browser fingerprinting has grown a lot since its debut in 2010. By collecting specific information in the browser, one can learn a lot about a device and its configuration. It has been shown in previous studies that it can even be used to track users online, bypassing current tracking methods like cookies. In this presentation, we will look at how this technique works and present an overview of[…]