Je recherche

762 résultats

• • Séminaire

  • SoSysec

  Thwarting covert adversaries in FHE pipelines

  • 09 décembre 2022

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Sylvain Chatel (EPFL)

  Fully Homomorphic Encryption (FHE) enables computations to be executed directly on encrypted data without decryption, thus it is becoming an auspicious solution to protect the confidentiality of sensitive data without impeding its usability for the purpose of analytics. While many practical systems rely on FHE to achieve strong privacy guarantees, their constructions only consider an honest-but[…]

• • Séminaire

  • SoSysec

  Towards Security-Oriented Program analysis

  • 29 octobre 2021

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Sébastien Bardin (CEA LIST)

  While digital security concerns increase, we face both a urging demand for more and more code-level security analysis and a shortage of security experts. Hence the need for techniques and tools able to automate part of these code-level security analyses. As source-level program analysis and formal methods for safety-critical applications have made tremendous progress in the past decades, it is[…]

• • Séminaire

  • SoSysec

  L’empoisonnement de données semble-t-il un risque réaliste ?

  • 23 septembre 2022

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Adrien Chan-Hon-Tong (ONERA)

  Les attaques adversaires ont rencontré un fort écho dans la communauté de vision par ordinateur. Pour autant, via ce type d’attaque, un hacker ne peut modifier le comportement de l’algorithme ciblé que localement. Inversement, l’empoisonnement de données est en mesure de modifier globalement le comportement de l’algorithme visé, et, il n’est pas forcément détectable par un opérateur notamment si[…]

• • Séminaire

  • SoSysec

  A formal study of injection-based attacks and some tools it will enable

  • 19 février 2021

  • Inria Center of the University of Rennes - - See the page of each talk for the room.

  Orateur : Pierre-François Gimenez (Inria Rennes, CentraleSupélec)

  Many systems work by receiving instructions and processing them: e.g., a browser receives and then displays an HTML page and executes Javascript scripts, a database receives a query and then applies it to its data, an embedded system controlled through a protocol receives and then processes a message. When such instructions depend on user input, one generally constructs them with concatenation or[…]

• • Séminaire

  • SemSecuElec

  Improved Blind Side-Channel Analysis by Exploitation of Joint Distributions of Leakages

  • 05 avril 2019

  • Faculté des sciences de Limoges - Salles Pétri/Turing

  Orateur : Léo Reynaud

  Les attaques side channel classiques nécessitent généralement la connaissance du clair (ou du chiffré) afin de calculer des données internes qui seront comparées à des fuites. Des attaques permettent cependant de s’affranchir de ces connaissances, les attaques par distributions jointes. Ces attaques supposent un attaquant capable d’inverser le modèle de consommation, mais aucune connaissance sur[…]

• • Séminaire

  • SemSecuElec

  When Electromagnetic Signals Reveal Obfuscated Malware: Deep and Machine Learning Use cases

  • 22 octobre 2021

  • Univ Rennes, CNRS, Inria, IRISA Rennes - Salle Petri/Turing

  Orateur : Duy-Phuc Pham et Damien Marion

  The Internet of Things (IoT) is constituted of devices that are expo-nentially growing in number and in complexity. They use plentiful customized firmware and hardware, ignoring potential security issues, which make them a perfect victim for cybercriminals, especially malware authors.We will describe a new usage of side channel information to identify threats that are targeting the device. Using[…]