Sebastien Bardin
Sébastien Bardin is a senior researcher at CEA LIST (Saclay, Paris area, France), where he has initiated and now leads the binary-level security analysis group. His research interests lay at the crossroad of formal methods and program analysis, security and software engineering. Especially, Sébastien is interested in automating binary-level code security analysis, with applications to vulnerability analysis, software-hardware attacks, reverse, deobfuscation and code protection. He is the main designer of the (open-source) BINSEC platform for binary-level code analysis. Sébastien regularly publishes articles in top-ranked international academic conferences and he occasionally gives talks at industrial venues such as Black Hat or the Meta TAV Symposium. Sébastien has co-chaired for many years the French national working group on Formal Methods & Security, and he co-leads SECUREVAL, a major initiative for security-oriented program analysis. Sébastien is a CEA Fellow.
https://scholar.google.com/citations?user=5tee-l8AAAAJ
https://binsec.github.io/
Session
Program analysis techniques have made tremendous progress in the past decades, and while their initial application fields were mostly safety-critical systems, they are now routinely used in security-related evaluations. Yet, somehow, the typical design of program analyzers and their associated techniques did not change that much, and they are still rooted in safety. In this talk, I will argue that fully embracing a security-oriented view of program analysis opens new interesting (and fun!) challenges. I will especially focus on how to take the attacker into account in code-level security analysis, and describe several recent advances in this direction, with applications to hardware/software attacks and vulnerability priorization.