Identifying the root cause and impact of a system intrusion remains a foundational challenge
in computer security. Digital provenance provides a detailed history of the flow of information …

In order to supervise the security of a large infrastructure, the administrator deploys multiple
sensors and intrusion detection systems on several critical places in the system. It is easier …

DIFT (Dynamic Information Flow Tracking) has been a hot topic for more than a decade.
Unfortunately, existing hardware DIFT approaches have not been widely used neither by …

Information flow control (also known as Dynamic Information Flow Tracking, DIFT), allows a
user to detect several types of software attacks such as buffer overflow or SQL injections. In …

Enforcement of information flow control (IFC) policies for OS to realize a sufficiently secure
OS has been a challenging area of research. In this paper, our primary objective has been to …

This document gives a synthetic overview of my research activities in the CIDRE team of the
IRISA laboratory since October 2010. After completing my Ph. D. in 2008 on policy-based …

Les systèmes embarqués se répandent massivement dans les infrastructures critiques
(industrie 4.0, ville intelligente, transports...) participant à l'augmentation de la surface …

Les systèmes embarqués étant de plus en plus présents dans nos vies, il est nécessaire de
protéger les données personnelles qui y sont stockées. En effet, les concepteurs …

We present CMCAP (context-mapped capabilities), a decentralized mechanism for
specifying and enforcing adaptive access control policies for resource-centric security …

Embedded security is more and more crucial with the huge increase in the number of mobile
equipment dealing with sensible data (smartphones, tablets, etc.). Runtime efficient …