Clémentine Maurice
Présentation
Je suis chargée de recherche CNRS au laboratoire CRIStAL (Lille) dans le groupe Spirals. Ma recherche porte sur sur la sécurité et la protection de la vie privée, du point de vue des systèmes d’information, et plus précisément dans l’interaction entre le logiciel et le matériel. Mes travaux de recherche s’attachent à analyser les fuites d’informations sensibles dues à la micro-architecture des processeurs et les attaques par fautes ne requérant aucun accès matériel.
Publications
Publications
|
|
PhaseSCA: Exploiting Phase-Modulated Emanations in Side ChannelsIACR Transactions on Cryptographic Hardware and Embedded Systems, In press |
|
|
Stop treating code like an afterthought: record, share and value itNature, 2025, 646 (8084), pp.284-286. ⟨10.1038/d41586-025-03196-0⟩ |
Les arcanes des processeurs mis à l'épreuveLa Recherche, 2024, 578 |
|
|
|
Branch Prediction Attack on Blinded Scalar MultiplicationIEEE Transactions on Computers, 2020, 69 (5), pp.633-648. ⟨10.1109/TC.2019.2958611⟩ |
|
|
Malware Guard Extension: abusing Intel SGX to conceal cache attacksCybersecurity, 2020, 3 (1), ⟨10.1186/s42400-019-0042-y⟩ |
|
|
WIP: A Second Look at Port Assignment on Intel CPUsuASC 2026 - 2nd Microarchitecture Security Conference, Feb 2026, Leuven, Belgium |
|
|
BlueScream: Screaming Channels on Bluetooth Low Energy40th Annual Computer Security Applications Conference (ACSAC '24), Dec 2024, Waikiki, Honolulu, Hawaii, United States |
|
|
Semi-Automated and Easily Interpretable Side-Channel Analysis for Modern JavaScriptCANS 2024 - 23rd International Conference on Cryptology And Network Security, Sep 2024, Cambridge, United Kingdom. pp.1-22 |
|
|
A Systematic Evaluation of Automated Tools for Side-Channel Vulnerabilities Detection in Cryptographic LibrariesCCS 2023 - ACM SIGSAC Conference on Computer and Communications Security, Nov 2023, Copenhagen, Denmark. pp.1690-1704, ⟨10.1145/3576915.3623112⟩ |
|
|
The Finger in the Power: How to Fingerprint PCs by Monitoring their Power ConsumptionDIMVA 2023 - 20th Conference on Detection of Intrusions and Malware & Vulnerability Assessment, Jul 2023, Hamburg, Germany |
|
|
DRAWNAPART: A Device Identification Technique based on Remote GPU FingerprintingNetwork and Distributed System Security Symposium, Feb 2022, San Diego, United States. ⟨10.14722/ndss.2022.24093⟩ |
|
|
DITTANY: Strength-Based Dynamic Information Flow Analysis Tool for x86 BinariesBAR 2022 - Workshop on Binary Analysis Research, Apr 2022, San Diego, United States |
|
|
Port Contention Goes Portable: Port Contention Side Channels in Web BrowsersASIA CCS '22 - ACM Asia Conference on Computer and Communications Security, May 2022, Nagasaki / Virtual, Japan. pp.1182-1194, ⟨10.1145/3488932.3517411⟩ |
|
|
Characterizing Prefetchers using CacheObserverIEEE 34th International Symposium on Computer Architecture and High Performance Computing, Nov 2022, Bordeaux, France |
|
|
CPU Port Contention Without SMT27th European Symposium on Research in Computer Security (ESORICS 2022), Sep 2022, Copenhagen, Denmark. pp.209-228, ⟨10.1007/978-3-031-17143-7_11⟩ |
|
|
SoK: In Search of Lost Time: A Review of JavaScript Timers in Browsers6th IEEE European Symposium on Security and Privacy (EuroS&P'21), Sep 2021, Vienna, Austria |
|
|
Reproducing Spectre Attack with gem5: How To Do It Right?14th European Workshop on Systems Security (EuroSec'21), Apr 2021, Edinburgh, United Kingdom. ⟨10.1145/3447852.3458715⟩ |
|
|
Virtual Platform to Analyze the Security of a System on Chip at Microarchitectural LevelEuroS&PW 2021 - IEEE European Symposium on Security and Privacy Workshops, Sep 2021, Vienne, Austria. pp.96-102, ⟨10.1109/EuroSPW54576.2021.00017⟩ |
|
|
Calibration Done Right: Noiseless Flush+Flush AttacksDIMVA 2021 - The 18th Conference on Detection of Intrusions and Malware & Vulnerability Assessment, Jul 2021, Lisboa / Virtual, Portugal |
|
|
Take A Way: Exploring the Security Implications of AMD’s Cache Way Predictors15th ACM Asia Conference on Computer and Communications Security, Oct 2020, Taipei, Taiwan. ⟨10.1145/3320269.3384746⟩ |
|
|
Nethammer: Inducing Rowhammer Faults through Network RequestsEuroS&P Workshops 2020, Sep 2020, Genova, Italy |
|
|
Automated Detection, Exploitation, and Elimination of Double-Fetch Bugs using Modern CPU FeaturesAsia Conference on Computer and Communications Security, AsiaCCS 2018, Jun 2018, Incheon, South Korea. ⟨10.1145/3196494.3196508⟩ |
|
|
KeyDrown: Eliminating Software-Based Keystroke Timing Side-Channel AttacksNetwork and Distributed System Security Symposium, Feb 2018, San Diego, France. ⟨10.14722/ndss.2018.23027⟩ |
|
|
Hello from the Other Side: SSH over Robust Cache Covert Channels in the CloudNetwork and Distributed System Security Symposium, Feb 2017, San Diego, United States. ⟨10.14722/ndss.2017.23294⟩ |
|
|
KASLR is Dead: Long Live KASLR9th International Symposium on Engineering Secure Software and Systems, Jul 2017, Bonn, Germany. pp.161-176, ⟨10.1007/978-3-319-62105-0_11⟩ |
|
|
Detection of Intrusions and Malware, and Vulnerability Assessment - 17th International Conference, DIMVA 2020, Lisbon, Portugal, June 24-26, 2020, ProceedingsSpringer, 12223, 2020, Lecture Notes in Computer Science, 978-3-030-52682-5. ⟨10.1007/978-3-030-52683-2⟩ |
13th USENIX Workshop on Offensive Technologies, WOOT 2019USENIX Association, 2019 |
|
|
|
Detection of Intrusions and Malware, and Vulnerability AssessmentSpringer, 11543, 2019, Lecture Notes in Computer Science, ⟨10.1007/978-3-030-22038-9⟩ |
|
|
CODE beyond FAIR: a roadmap for reusable research software2025 |
|
|
Information leakage on shared hardware : evolutions in recent hardware and applications to virtualizationCryptography and Security [cs.CR]. Télécom ParisTech, 2015. English. ⟨NNT : 2015ENST0070⟩ |
|
|
Micro-architectural side channels: Studying the attack surface from hardware to browsersCryptography and Security [cs.CR]. Université de Lille, 2023 |
|
|
Improvement of 802.11 fingerprint diversityCryptography and Security [cs.CR]. 2012 |