Je recherche

762 résultats

• • Séminaire

  • SoSysec

  A formal study of injection-based attacks and some tools it will enable

  • 19 février 2021

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Pierre-François Gimenez (Inria Rennes, CentraleSupélec)

  Many systems work by receiving instructions and processing them: e.g., a browser receives and then displays an HTML page and executes Javascript scripts, a database receives a query and then applies it to its data, an embedded system controlled through a protocol receives and then processes a message. When such instructions depend on user input, one generally constructs them with concatenation or[…]

• • Séminaire

  • SoSysec

  Search-Based Local Black-Box Deobfuscation: Understand, Improve and Mitigate

  • 25 février 2022

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Grégoire Menguy (CEA LIST)

  Code obfuscation aims at protecting Intellectual Property and other secrets embedded into software from being retrieved. Recent works leverage advances in artificial intelligence (AI) with the hope of getting blackbox deobfuscators completely immune to standard (whitebox) protection mechanisms. While promising, this new field of AI-based, and more specifically search-based blackbox deobfuscation,[…]

• • Séminaire

  • SoSysec

  QUIC: que faut-il attendre de ce nouveau protocole de communication sécurisé ?

  • 29 mai 2020

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Olivier Levillain (Telecom Sudparis)

  Depuis plusieurs années, les grands acteurs du web travaillent à l’amélioration des communications entre leurs utilisateurs et leurs services. Ces améliorations peuvent porter sur la vitesse des connexions ou sur la sécurité des échanges. QUIC fait partie des efforts en cours. Il s’agit d’un protocole en cours de standardisation à l’IETF, qu’on peut résumer à un protocole sur UDP fournissant les[…]

• • Séminaire

  • SoSysec

  Formal security proofs in a post-quantum world

  • 19 novembre 2021

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Charlie Jacomme (CISPA)

  In the recent years, formals methods for security and their associated tools have been used successfully both to find novel and complex attacks on many protocols [A] and to help in their standardization process. They however face a new challenge with the increasing probability of quantum computers coming into the real-world: we need to be able to provide guarantees against quantum attackers.In[…]

• • Séminaire

  • SemSecuElec

  Schindler-Itoh/Wiemers revisited: recovering full RSA/ECC private key from noisy side-channel observations

  • 28 septembre 2018

  • NinjaLab - Salle Métivier

  Orateur : Victor Lomné et Thomas Roche

  Side-channel attacks on public-key cryptography (i.e. modular exponentiation for RSA or scalar multiplication for ECC) often boils down to distinguishing the 0s from the 1s in the binary representation of the secret exponent (resp. secret scalar).When state-of-the-art countermeasures are implemented, this detection must be errorless: thanks to masking techniques, erroneous masked exponents (resp.[…]

• • Séminaire

  • SemSecuElec

  Rank metric cryptography and its implementations

  • 08 octobre 2021

  • XLIM – Université de Limoges - Salle Pétri/Turing

  Orateur : Nicolas Aragon

  In 2017, the NIST (National Institute for Standards and Technology) started astandardization process in order to select post-quantum encryption and digital signature schemes. Among the proposed solutions, two rank-metric based encryption schemes were selected for the second round of the standardization process: ROLLOand RQC.This raised questions about both the performance and the security of the[…]