Search

760 results

• • Seminar

  • SoSysec

  When Good Components Go Bad: Formally Secure CompilationDespite Dynamic Compromise

  • February 05, 2018

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Catalin Hritcu (Inria Paris)

  We propose a new formal criterion for secure compilation, providing strong end-to-end security guarantees for components written in unsafe, low-level languages with C-style undefined behavior. Our criterion is the first to model dynamic compromise in a system of mutually distrustful components running with least privilege. Each component is protected from all the others until it becomes[…]

• • Seminar

  • SoSysec

  A Formal Analysis of 5G Authentication

  • June 03, 2019

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Sasa Radomirovic (University of Dundee)

  Mobile communication networks connect much of the world’s population. The security of users’ calls, text messages, and mobile data depends on the guarantees provided by the Authenticated Key Exchange protocols used. For the next-generation network (5G), the 3GPP group has standardized the 5G AKA protocol for this purpose.In this talk, I will report on our formalization of the 5G standard’s AKA[…]

• • Seminar

  • SoSysec

  Machine Learning for Computer Security Detection Systems: Practical Feedback and Solutions

  • November 30, 2018

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Anaël Beaugnon (ANSSI)

  Machine learning based detection models can strengthen detection, but there remain some significant barriers to the widespread deployment of such techniques in operational detection systems. In this presentation, we identify the main challenges to overcome and we provide both methodological guidance and practical solutions to address them. The solutions we present are completely generic to be[…]

• • Seminar

  • SoSysec

  The Internet of Backdoors

  • March 07, 2018

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : par Sam L. Thomas (University of Birmingham, UK)

  Complex embedded devices are becoming ever prevalent in our everyday lives, yet only a tiny amount of people consider the potential security and privacy implications of attaching such devices to our home, business and government networks. As demonstrated through recent publications from academia and blog posts from numerous industry figures, these devices are plagued by poor design choices[…]

• • Seminar

  • SoSysec

  Subject Access Request and Proof of Ownership

  • October 25, 2019

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Cédric Lauradoux (INRIA Rhône-Alpes)

  The GDPR (General Data Protection Regulation) provides rights on our data: access, rectification, objection, etc. However, this regulation is not binding on how we can exercise these rights. Data controllers have therefore deployed various methods to authenticate subject requests. We have analyzed how this authentication process can fail and examined its consequences. Our study shows that a key[…]

• • Seminar

  • SoSysec

  A Fundamental Approach to Cyber Risk Analysis

  • September 16, 2022

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Speaker : Rainer Böhme (Universität Innsbruck)

  This paper provides a framework actuaries can use to think about cyber risk. We propose a differentiated view of cyber versus conventional risk by separating the nature of risk arrival from the target exposed to risk. Our review synthesizes the liter- ature on cyber risk analysis from various disciplines, including computer and network engineering, economics, and actuarial sciences. As a result,[…]