Guillaume Hiet
- Sécurité à l’interface logiciel/matériel (SUSHI)
Présentation
I am currently a Full Professor at CentraleSupélec and the team leader of the Inria SUSHI research group of the IRISA/ laboratory in Rennes Britanny, France. Prior to that, I was a computer security expert at AMOSSYS SAS, a French security consulting company, from 2008 to 2010. I was in charge of the R&D team, and I carried out studies for different clients, including ANSSI (the national cybersecurity agency of France) and DGA (the French government defense procurement and technology agency). I also led and performed security audits, vulnerability assessments, and penetration testings. I hold a HDR (Accreditation to Supervise Research) and a Ph.D. from University of Rennes 1, a Diplôme d'Ingénieur (M.Eng.) and a Master Recherche (M.Sc.) from Supélec as well as a Diplôme d'Ingénieur from ENSAM. I did my Ph.D. at Supélec in the former SSIR research team on policy-based intrusion detection and Information Flow Control. My main research interests are computer and network security, particularly Host-based Intrusion Detection Systems. In the last few years, I became increasingly interested in the security of software close to the hardware, such as operating systems or UEFI (Unified Extensible Firmware Interface) firmware, and I proposed detection approaches specifically targeting these systems. This evolution led me to explore the security of interfaces between software and hardware more generally.
Domaines de recherche
Publications
Publications
|
|
HYPERSEC: An Extensible Hypervisor-Assisted Framework for Kernel Rootkit DetectionISC 2025 - 28th Information Security Conference, Oct 2025, Seoul, South Korea. pp.431-451, ⟨10.1007/978-3-032-08124-7_25⟩ |
|
|
Formal Hardware/Software Models for Cache Locking Enabling Fast and Secure CodeESORICS 2024 - 29th European Symposium on Research in Computer Security, Tomasz Marciniak; Michał Choraś; Sokratis Katsikas; Joaquin Garcia-Alfaro; Rafał Kozik, Sep 2024, Bydgoszcz, Poland. pp.153-173, ⟨10.1007/978-3-031-70896-1_8⟩ |
|
|
A generic framework to develop and verify security mechanisms at the microarchitectural level: application to control-flow integrityCSF 2023 - 36th IEEE Computer Security Foundations Symposium, Jul 2023, Dubrovnik, France. pp.1-16 |
|
|
RT-DFI: Optimizing Data-Flow Integrity for Real-Time SystemsECRTS 2022 - 34th Euromicro Conference on Real-Time Systems, Jul 2022, Modène, Italy. pp.1-24, ⟨10.4230/LIPIcs.ECRTS.2022.18⟩ |
|
|
DAMAS: Control-Data Isolation at Runtime through Dynamic Binary ModificationSILM 2021 - Workshop on the Security of Software / Hardware Interfaces, Sep 2021, digital event, Austria. pp.86-95, ⟨10.1109/EuroSPW54576.2021.00016⟩ |
|
|
Plateforme de protection de binaires configurable et dynamiquement adaptativeRESSI 2019 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2019, Erquy, France. pp.1-3 |
|
|
Survivor: A Fine-Grained Intrusion Response and Recovery Approach for Commodity Operating SystemsACSAC 2019 - 35th Annual Computer Security Applications Conference, Dec 2019, San Juan, Puerto Rico. ⟨10.1145/3359789.3359792⟩ |
|
|
Teaching Android Mobile SecuritySIGCSE '19 - 50th ACM Technical Symposium on Computer Science Education, Feb 2019, Minneapolis, United States. pp.232-238, ⟨10.1145/3287324.3287406⟩ |
|
|
Efficient Mining of Temporal Safety Properties for Intrusion Detection in Industrial Control SystemsSAFEPROCESS 2018 - 10th IFAC Symposium on Fault Detection, Supervision and Safety for Technical Processes, Aug 2018, Varsovie, Poland. pp.1-8 |
|
|
Intrusion Survivability for Commodity Operating Systems and Services: A Work in ProgressRESSI 2018 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2018, Nancy / La Bresse, France |
|
|
A novel lightweight hardware-assisted static instrumentation approach for ARM SoC using debug componentsAsianHOST 2018 - Asian Hardware Oriented Security and Trust Symposium, Dec 2018, Hong Kong, China. pp.1-13, ⟨10.1109/asianhost.2018.8607177⟩ |
|
|
Modular Verification of Programs with Effects and Effect Handlers in CoqFM 2018 - 22nd International Symposium on Formal Methods, Jul 2018, Oxford, United Kingdom. pp.338-354, ⟨10.1007/978-3-319-95582-7_20⟩ |
|
|
A small and adaptive coprocessor for information flow tracking in ARM SoCsReConFig 2018 - International Conference on Reconfigurable Computing and FPGAs, Dec 2018, Cancun, Mexico. pp.1-17, ⟨10.1109/reconfig.2018.8641695⟩ |
|
|
Co-processor-based Behavior Monitoring: Application to the Detection of Attacks Against the System Management ModeACSAC 2017 - 33rd Annual Computer Security Applications Conference, Dec 2017, Orlando, United States. pp.399-411, ⟨10.1145/3134600.3134622⟩ |
|
|
ARMHEx: A hardware extension for DIFT on ARM-based SoCs2017 27th International Conference on Field Programmable Logic and Applications (FPL), Sep 2017, Ghent, Belgium. ⟨10.23919/fpl.2017.8056767⟩ |
|
|
ARMHEx: embedded security through hardware-enhanced information flow trackingRESSI 2017 : Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2017, Grenoble (Autrans), France |
Preventive Information Flow Control through a Mechanism of Split Addresses9th International Conference on Security of Information and Networks (SIN 2016), Jul 2016, Newark, United States. p.1-8, ⟨10.1145/2947626.2947645⟩ |
|
|
|
A portable approach for SoC-based Dynamic Information Flow Tracking implementations11ème Colloque du GDR SoC/SiP, Jun 2016, Nantes, France |
|
|
Detecting Process-Aware Attacks in Sequential Control SystemsNordSec 2016 - 21st Nordic Conference on Secure IT Systems, Nov 2016, Oulu, Finland. p.20-36, ⟨10.1007/978-3-319-47560-8_2⟩ |
Classification des approches de détection d'intrusions dans les systèmes de contrôle industriels et axes d'améliorationRendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information (RESSI 2016), May 2016, Toulouse, France |
|
|
|
SpecCert: Specifying and Verifying Hardware-based Software Enforcement21st International Symposium on Formal Methods (FM 2016), Nov 2016, Limassol, Cyprus. ⟨10.1007/978-3-319-48989-6_30⟩ |
|
|
A self-correcting information flow control model for the web-browserFPS 2016 - The 9th International Symposium on Foundations & Practice of Security, Oct 2016, Québec City, Canada. pp.285-301, ⟨10.1007/978-3-319-51966-1_19⟩ |
|
|
Towards a hardware-assisted information flow tracking ecosystem for ARM processors26th International Conference on Field-Programmable Logic and Applications (FPL 2016), Aug 2016, Lausanne, Switzerland. ⟨10.1109/fpl.2016.7577396⟩ |
Etude comparative des formats d’alertesC&ESAR (Computer & Electronics Security Applications Rendez-vous) 2015, Nov 2015, Rennes, France. pp.125-148 |
|
Towards Automated Protocol Reverse Engineering Using Semantic InformationASIA CCS '14, Jun 2014, Kyoto, Japan. pp.51-62, ⟨10.1145/2590296.2590346⟩ |
|
Preventive Information Flow Control through a Mechanism of Split Addresses9ème Conférence sur la Sécurité des Architectures Réseaux et des Systèmes d'Information, May 2014, Saint-Germain-Au-Mont-d'Or, France |
|
Netzob : un outil pour la rétro-conception de protocoles de communicationSSTIC 2012, Jun 2012, Rennes, France. pp.43 |
|
From SSIR to CIDre: a New Security Research Group in Rennes1st SysSec Workshop, Jul 2011, Amsterdam, Netherlands |
|
Modelling to Simulate Botnet Command and Control Protocols for the Evaluation of Network Intrusion Detection SystemsSAR-SSI 2011, May 2011, La Rochelle, France. pp.1-8, ⟨10.1109/SAR-SSI.2011.5931397⟩ |
|
|
|
Sécurité de la plate-forme d'exécution Java : limites et propositions d'améliorationsSymposium sur la sécurité des technologies de l'information et des communications (SSTIC), 2010, Rennes, France |
Policy-Based Intrusion Detection in Web Applications by Monitoring Java Information FlowsCRiSIS 2008, Oct 2008, Tozeur, Tunisia. 8 p |
|
Détection fiable et pertinente de flux d'information illégauxSixth Conference on Security and Network Architectures (SARSSI), Jun 2007, France |
|
Monitoring both OS and program level information flows to detect intrusions against network serversIEEE Workshop on Monitoring, Attack Detection and Mitigation, Nov 2007, Toulouse, France |
|
|
ARMHEx: a framework for efficient DIFT in real-world SoCsField Programmable Logic (FPL), Sep 2017, Ghent, Belgium. , 2017 |
|
|
HardBlare: a Hardware-Assisted Approach for Dynamic Information Flow TrackingSéminaire des doctorantes et doctorants en informatique de la Société Informatique de France, Apr 2016, Paris, France. 2016 |
HardBlare: an efficient hardware-assisted DIFC for non-modified embedded processorsHiPEAC, Jan 2016, Prague, Czech Republic. 2016 |
|
|
|
HardBlare: an efficient hardware-assisted DIFC for non-modified embedded processorsCHES 2015 - Workshop on Cryptographic Hardware and Embedded Systems, Sep 2015, Saint-Malo, France. 2015 |
|
|
Modular and automatic formal verification of a RISC-V processor with security mechanisms2026 |
|
|
An XVisor extension using a Domain Specific Language to detect Rootkits in Virtual Machines2025 |
|
|
WIP: InSight -A CoreSight Trace Interpreter for Dynamic Information Flow TrackingCentraleSupélec. 2025 |
|
|
Semestre SILM : livre blancCentraleSupélec; Inria. 2020 |
|
|
SpecCert: Specifying and Verifying Hardware-based Security Enforcement[Technical Report] CentraleSupélec; Agence Nationale de Sécurité des Systèmes d’Information. 2016, pp.20 |
|
|
Security at the Hardware/Software InterfaceCryptography and Security [cs.CR]. Université de Rennes 1, 2021 |