
Guillaume Hiet
- Sécurité à l’interface logiciel/matériel (SUSHI)
Présentation
I am currently a Full Professor at CentraleSupélec and the team leader of the Inria SUSHI research group of the IRISA/ laboratory in Rennes Britanny, France. Prior to that, I was a computer security expert at AMOSSYS SAS, a French security consulting company, from 2008 to 2010. I was in charge of the R&D team, and I carried out studies for different clients, including ANSSI (the national cybersecurity agency of France) and DGA (the French government defense procurement and technology agency). I also led and performed security audits, vulnerability assessments, and penetration testings.
I hold a HDR (Accreditation to Supervise Research) and a Ph.D. from University of Rennes 1, a Diplôme d'Ingénieur (M.Eng.) and a Master Recherche (M.Sc.) from Supélec as well as a Diplôme d'Ingénieur from ENSAM. I did my Ph.D. at Supélec in the former SSIR research team on policy-based intrusion detection and Information Flow Control.
My main research interests are computer and network security, particularly Host-based Intrusion Detection Systems. In the last few years, I became increasingly interested in the security of software close to the hardware, such as operating systems or UEFI (Unified Extensible Firmware Interface) firmware, and I proposed detection approaches specifically targeting these systems. This evolution led me to explore the security of interfaces between software and hardware more generally.
Domaines de recherche
Publications
Publications
|
Formal Hardware/Software Models for Cache Locking Enabling Fast and Secure CodeESORICS 2024 - 29th European Symposium on Research in Computer Security, Tomasz Marciniak; Michał Choraś; Sokratis Katsikas; Joaquin Garcia-Alfaro; Rafał Kozik, Sep 2024, Bydgoszcz, Poland. pp.153-173, ⟨10.1007/978-3-031-70896-1_8⟩
Communication dans un congrès
hal-04804914
v1
|
|
A generic framework to develop and verify security mechanisms at the microarchitectural level: application to control-flow integrityCSF 2023 - 36th IEEE Computer Security Foundations Symposium, Jul 2023, Dubrovnik, France. pp.1-16
Communication dans un congrès
hal-04118645
v1
|
|
RT-DFI: Optimizing Data-Flow Integrity for Real-Time SystemsECRTS 2022 - 34th Euromicro Conference on Real-Time Systems, Jul 2022, Modène, Italy. pp.1-24, ⟨10.4230/LIPIcs.ECRTS.2022.18⟩
Communication dans un congrès
hal-03641576
v1
|
|
DAMAS: Control-Data Isolation at Runtime through Dynamic Binary ModificationSILM 2021 - Workshop on the Security of Software / Hardware Interfaces, Sep 2021, digital event, Austria. pp.86-95, ⟨10.1109/EuroSPW54576.2021.00016⟩
Communication dans un congrès
hal-03340008
v1
|
|
Plateforme de protection de binaires configurable et dynamiquement adaptativeRESSI 2019 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2019, Erquy, France. pp.1-3
Communication dans un congrès
hal-02385216
v1
|
|
Survivor: A Fine-Grained Intrusion Response and Recovery Approach for Commodity Operating SystemsACSAC 2019 - 35th Annual Computer Security Applications Conference, Dec 2019, San Juan, Puerto Rico. ⟨10.1145/3359789.3359792⟩
Communication dans un congrès
hal-02289315
v2
|
|
Teaching Android Mobile SecuritySIGCSE '19 - 50th ACM Technical Symposium on Computer Science Education, Feb 2019, Minneapolis, United States. pp.232-238, ⟨10.1145/3287324.3287406⟩
Communication dans un congrès
hal-01940652
v1
|
|
A small and adaptive coprocessor for information flow tracking in ARM SoCsReConFig 2018 - International Conference on Reconfigurable Computing and FPGAs, Dec 2018, Cancun, Mexico. pp.1-17, ⟨10.1109/reconfig.2018.8641695⟩
Communication dans un congrès
hal-01911619
v1
|
|
Intrusion Survivability for Commodity Operating Systems and Services: A Work in ProgressRESSI 2018 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2018, Nancy / La Bresse, France
Communication dans un congrès
hal-02280376
v1
|
|
Efficient Mining of Temporal Safety Properties for Intrusion Detection in Industrial Control SystemsSAFEPROCESS 2018 - 10th IFAC Symposium on Fault Detection, Supervision and Safety for Technical Processes, Aug 2018, Varsovie, Poland. pp.1-8
Communication dans un congrès
hal-01877109
v1
|
|
A novel lightweight hardware-assisted static instrumentation approach for ARM SoC using debug componentsAsianHOST 2018 - Asian Hardware Oriented Security and Trust Symposium, Dec 2018, Hong Kong, China. pp.1-13, ⟨10.1109/asianhost.2018.8607177⟩
Communication dans un congrès
hal-01911621
v1
|
|
Modular Verification of Programs with Effects and Effect Handlers in CoqFM 2018 - 22nd International Symposium on Formal Methods, Jul 2018, Oxford, United Kingdom. pp.338-354, ⟨10.1007/978-3-319-95582-7_20⟩
Communication dans un congrès
hal-01799712
v1
|
|
ARMHEx: A hardware extension for DIFT on ARM-based SoCs2017 27th International Conference on Field Programmable Logic and Applications (FPL), Sep 2017, Ghent, Belgium. ⟨10.23919/fpl.2017.8056767⟩
Communication dans un congrès
hal-01558473
v1
|
|
Co-processor-based Behavior Monitoring: Application to the Detection of Attacks Against the System Management ModeACSAC 2017 - 33rd Annual Computer Security Applications Conference, Dec 2017, Orlando, United States. pp.399-411, ⟨10.1145/3134600.3134622⟩
Communication dans un congrès
hal-01634566
v1
|
|
ARMHEx: embedded security through hardware-enhanced information flow trackingRESSI 2017 : Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2017, Grenoble (Autrans), France
Communication dans un congrès
hal-01558155
v1
|
|
Towards a hardware-assisted information flow tracking ecosystem for ARM processors26th International Conference on Field-Programmable Logic and Applications (FPL 2016), Aug 2016, Lausanne, Switzerland. ⟨10.1109/fpl.2016.7577396⟩
Communication dans un congrès
hal-01337579
v1
|
Classification des approches de détection d'intrusions dans les systèmes de contrôle industriels et axes d'améliorationRendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information (RESSI 2016), May 2016, Toulouse, France
Communication dans un congrès
hal-01587915
v1
|
|
|
A portable approach for SoC-based Dynamic Information Flow Tracking implementations11ème Colloque du GDR SoC/SiP, Jun 2016, Nantes, France
Communication dans un congrès
hal-01311045
v1
|
Preventive Information Flow Control through a Mechanism of Split Addresses9th International Conference on Security of Information and Networks (SIN 2016), Jul 2016, Newark, United States. p.1-8, ⟨10.1145/2947626.2947645⟩
Communication dans un congrès
hal-01344565
v1
|
|
|
A self-correcting information flow control model for the web-browserFPS 2016 - The 9th International Symposium on Foundations & Practice of Security, Oct 2016, Québec City, Canada. pp.285-301, ⟨10.1007/978-3-319-51966-1_19⟩
Communication dans un congrès
hal-01398192
v1
|
Detecting Process-Aware Attacks in Sequential Control SystemsNordSec 2016 - 21st Nordic Conference on Secure IT Systems (NordSec 2016), Nov 2016, Oulu, Finland. p.20-36, ⟨10.1007/978-3-319-47560-8_2⟩
Communication dans un congrès
hal-01361081
v1
|
|
|
SpecCert: Specifying and Verifying Hardware-based Software Enforcement21st International Symposium on Formal Methods (FM 2016), Nov 2016, Limassol, Cyprus. ⟨10.1007/978-3-319-48989-6_30⟩
Communication dans un congrès
hal-01361422
v1
|
Etude comparative des formats d’alertesC&ESAR (Computer & Electronics Security Applications Rendez-vous) 2015, Nov 2015, Rennes, France. pp.125-148
Communication dans un congrès
hal-01242786
v1
|
|
Towards Automated Protocol Reverse Engineering Using Semantic InformationASIA CCS '14, Jun 2014, Kyoto, Japan. pp.51-62, ⟨10.1145/2590296.2590346⟩
Communication dans un congrès
hal-01009283
v1
|
|
Preventive Information Flow Control through a Mechanism of Split Addresses9ème Conférence sur la Sécurité des Architectures Réseaux et des Systèmes d'Information, May 2014, Saint-Germain-Au-Mont-d'Or, France
Communication dans un congrès
hal-01344563
v1
|
|
Netzob : un outil pour la rétro-conception de protocoles de communicationSSTIC 2012, Jun 2012, Rennes, France. pp.43
Communication dans un congrès
hal-00763751
v1
|
|
From SSIR to CIDre: a New Security Research Group in Rennes1st SysSec Workshop, Jul 2011, Amsterdam, Netherlands
Communication dans un congrès
hal-00656940
v1
|
|
Modelling to Simulate Botnet Command and Control Protocols for the Evaluation of Network Intrusion Detection SystemsSAR-SSI 2011, May 2011, La Rochelle, France. pp.1-8, ⟨10.1109/SAR-SSI.2011.5931397⟩
Communication dans un congrès
hal-00658396
v1
|
|
|
Sécurité de la plate-forme d'exécution Java : limites et propositions d'améliorationsSymposium sur la sécurité des technologies de l'information et des communications (SSTIC), 2010, Rennes, France
Communication dans un congrès
inria-00537820
v1
|
Policy-Based Intrusion Detection in Web Applications by Monitoring Java Information FlowsCRiSIS 2008, Oct 2008, Tozeur, Tunisia. 8 p
Communication dans un congrès
hal-00353000
v1
|
|
Détection fiable et pertinente de flux d'information illégauxSixth Conference on Security and Network Architectures (SARSSI), Jun 2007, France
Communication dans un congrès
hal-00268422
v1
|
|
Monitoring both OS and program level information flows to detect intrusions against network serversIEEE Workshop on Monitoring, Attack Detection and Mitigation, Nov 2007, Toulouse, France
Communication dans un congrès
hal-00268408
v1
|
|
ARMHEx: a framework for efficient DIFT in real-world SoCsField Programmable Logic (FPL), Sep 2017, Ghent, Belgium. , 2017
Poster de conférence
hal-01558475
v1
|
|
HardBlare: a Hardware-Assisted Approach for Dynamic Information Flow TrackingSéminaire des doctorantes et doctorants en informatique de la Société Informatique de France, Apr 2016, Paris, France. 2016
Poster de conférence
hal-01311032
v1
|
HardBlare: an efficient hardware-assisted DIFC for non-modified embedded processorsHiPEAC, Jan 2016, Prague, Czech Republic. 2016
Poster de conférence
hal-01450844
v1
|
|
|
HardBlare: an efficient hardware-assisted DIFC for non-modified embedded processorsCHES 2015 - Workshop on Cryptographic Hardware and Embedded Systems, Sep 2015, Saint-Malo, France. 2015
Poster de conférence
hal-01252597
v1
|
|
An XVisor extension using a Domain Specific Language to detect Rootkits in Virtual Machines2025
Pré-publication, Document de travail
hal-04879065
v1
|
|
Semestre SILM : livre blancCentraleSupélec; Inria. 2020
Rapport
hal-04577909
v1
|
|
SpecCert: Specifying and Verifying Hardware-based Security Enforcement[Technical Report] CentraleSupélec; Agence Nationale de Sécurité des Systèmes d’Information. 2016, pp.20
Rapport
(rapport technique)
hal-01356690
v1
|
|
Security at the Hardware/Software InterfaceCryptography and Security [cs.CR]. Université de Rennes 1, 2021
HDR
tel-03511334
v1
|