Romain Laborde
- Service IntEgration and netwoRk Administration (IRIT-SIERA)
Domaines de recherche
Compétences
Publications
Publications
|
|
No Root, No Problem: Automating Linux Least Privilege and Securing Ansible Deployments30th European Symposium on Research in Computer Security (ESORICS 2025), Sep 2025, Toulouse, France |
|
|
Game of Zones: An Automated Intent-Based Network Micro-segmentation Methodology38th IEEE/IFIP Network Operations and Management Symposium (NOMS 2025), May 2025, Honolulu, HI, United States |
GReAT-BeD: Graph Rewriting for Activity Tracking and (Malicious) Behaviour Detection29th International Conference on Knowledge-Based and Intelligent Information & Engineering Systems (KES 2025), Sep 2025, Osaka, Japan |
|
|
|
Towards Green Security in IoT: A Taxonomy of Energy Measurement Techniques for IoT Security MechanismsSTGC 2025 : The International Symposium on Sustainable Systems Technologies and Green Computing (STGC), Oct 2025, Dubrovnik, Croatia |
XCId : An SSI-Based Cross-Cloud Identity WalletIEEE Conference on Communications and Network Security (IEEE CNS 2025), Sep 2025, Avignon, France |
|
|
|
Identity management in cross-cloud environments: Towards self-sovereign identities using current solutionsProceedings of CRISIS 2024 - The 19th International Conference on Risks and Security of Internet and Systems, Nov 2024, Aix-en-Provence, France |
|
|
A Model For Assessing The Adherence of E-Identity Solutions To Self-Sovereign Identity12nd World Conference on Information Systems and Technologies (WorldCist 2024), Lodz University of Technology, Mar 2024, Lodz, Poland. à paraître |
|
|
DID U Misbehave? A New Dataset for In-Depth Understanding of Inconspicuous Software2024 8th Cyber Security in Networking Conference (CSNet), Dec 2024, Paris, France. pp.205-212, ⟨10.1109/CSNet64211.2024.10851723⟩ |
|
|
Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for LinuxWorkshop on Advances in Secure Software Deployments (ASOD 2024) at the19th International Conference on Availability, Reliability and Security, Jul 2024, Vienne, Austria. pp.56, ⟨10.1145/3664476.3670929⟩ |
|
|
Enhancing the ACME Protocol to Automate the Management of All X.509 Web Certificates38th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2023, Poznan, Poland. pp.265-278, ⟨10.1007/978-3-031-56326-3_19⟩ |
|
|
Aligning eIDAS and Trust Over IP: A Mapping Approach21st International Conference on Trust, Privacy & Security in Digital Business (Trustbus 2024) @ ARES 2024 : 19th International Conference on Availability, Reliability and Secu, Jul 2024, Vienna, Austria. pp.1--9, ⟨10.1145/3664476.3670919⟩ |
Article 45 of the eIDAS Directive Unveils the need to implement the X.509 4-cornered trust model for the WebPKITrustBus@ARES 2024, Jul 2024, Vienna Austria, France. pp.1-11, ⟨10.1145/3664476.3670900⟩ |
|
ACME Protocol to Automate the Management of All X.509 Web Certificates38th International Conference on Information Security and Privacy Protection (IFIP SEC 2023), International Federation for Information Processing (IFIP); Poznan Supercomputing and Networking Center (PSNC), Jun 2023, Poznan, Poland |
|
|
|
Implementing the Principle of Least Privilege Using Linux Capabilities: Challenges and Perspectives7th Cyber Security in Networking Conference (CSNet 2023), IEEE Communications Society, Oct 2023, Montréal, Canada. pp.130--136, ⟨10.1109/CSNet59123.2023.10339753⟩ |
|
|
Towards Reliable Collaborative Data Processing Ecosystems: Survey on Data Quality Criteria26th IEEE International Conference on Computational Science and Engineering (CSE 2023), IEEE, Nov 2023, Exeter, United Kingdom. à paraître |
|
|
Est-il difficile de respecter le principe de moindre privilège sur Linux ?Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2023, Neuvy-sur-Barangeon, France |
|
|
A SLAHP in the face of DLL Search Order Hijacking3rd International Conference on Ubiquitous Security (UbiSec 2023), Nov 2023, Exeter, United Kingdom. pp.177--190, ⟨10.1007/978-981-97-1274-8_12⟩ |
AutoRoC-DBSCAN: Automatic Tuning of DBSCAN to Detect Malicious DNS Tunnels3rd International Symposium on Emerging Information Security and Applications (EISA 2022), Oct 2022, Wuhan, China. pp.126-144, ⟨10.1007/978-3-031-23098-1_8⟩ |
|
|
|
The Interplay Between Policy and Technology in Metaverses: Towards Seamless Avatar Interoperability Using Self-Sovereign IdentityIEEE International Conference on Metaverse Computing, Networking and Applications (MetaCom 2023), IEEE, Jun 2023, Kyoto, Japan. pp.418-422, ⟨10.1109/MetaCom57706.2023.00080⟩ |
|
|
RootAsRole: Towards a Secure Alternative to sudo/su Commands for Home Users and SME Administrators36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC 2021), IFIP : International Federation for Information Processing, Jun 2021, Oslo, Norway. pp.196-209, ⟨10.1007/978-3-030-78120-0_13⟩ |
|
|
Dynamic security management driven by situations: An Exploratory analysis of logs for the identification of security situations3rd Cyber Security in Networking Conference (CSNet 2019), Oct 2019, Quito, Ecuador. pp.66, ⟨10.1109/CSNet47905.2019.9108976⟩ |
|
|
A User-Centric Identity Management Framework based on the W3C Verifiable Credentials and the FIDO Universal Authentication Framework17th IEEE Consumer Communications and Networking Conference (CCNC 2020), Jan 2020, Las Vegas, United States. pp.1-8, ⟨10.1109/CCNC46108.2020.9045440⟩ |
|
|
Towards Situation-based IT Management During Natural Disaster CrisisFourteenth International Conference on Emerging Security Information, Systems and Technologie (SECUREWARE 2020), Nov 2020, Valencia, Spain |
|
|
Detecting abnormal DNS traffic using unsupervised machine learning4th Cyber Security in Networking Conference: Cyber Security in Networking (CSNet 2020), IEEE Communications Society, Oct 2020, Lausanne, Switzerland. pp.1-8, ⟨10.1109/CSNet50428.2020.9265466⟩ |
|
|
Know Your Customer: Opening a New Bank Account Online Using UAAF17th IEEE Consumer Communications and Networking Conference (CCNC 2020), Jan 2020, Las Vegas, United States. pp.1-2, ⟨10.1109/CCNC46108.2020.9045148⟩ |
|
|
Logic-based Methodology to Help Security Architects in Eliciting High-Level Network Security Requirements34th ACM/SIGAPP Symposium on Applied Computing (SAC 2019), Apr 2019, Limassol, Cyprus. pp.1610-1619 |
|
|
Describing Advanced Persistent Threats Using a Multi-agent System ApproachCyber Security in Networking Conference (CSNet), Oct 2017, Rio de Janeiro, Brazil. pp.0, ⟨10.1109/CSNET.2017.8241997⟩ |
|
|
Applying a requirement engineering based approach to evaluate the security requirements engineering methodologiesSAC 2018: The 33th ACM/SIGAPP Symposium on Applied Computing, Apr 2018, Pau, France. pp.1316-1318 |
|
|
Which Security Requirements Engineering Methodology Should I Choose?: Towards a Requirements Engineering-based Evaluation Approach12th International Conference on Availability, Reliability and Security (ARES 2017), Aug 2017, Reggio Calabria, Italy. pp.1-6 |
|
|
eGovernment Security Requirements: Managing Obligations and Authorizations Inconsistencies with XACMLv3International Conference on Security and Management (SAM 2016), Jul 2016, Las Vegas, United States. pp.89-95 |
|
|
Towards the weaving of the characteristics of good security requirementsInternational Conference on Risks and Security of Internet and Systems (CRISIS 2016), Sep 2016, Roscoff, France. pp. 60-74 |
|
|
TLS Connection Validation by Web Browsers: Why do Web Browsers still not agree?41st IEEE Annual Computer Software and Applications Conference (COMPSAC 2017), Jul 2017, Turin, Italy. pp. 665-674 |
|
|
A recommender-based system for assisting non technical users in managing Android permissions11th International Conference on Availability, Reliability and Security (ARES 2016), Aug 2016, Salzburg, Austria. pp. 1-9 |
|
|
Le projet ANR INCOME, processus et outils logiciels pour des gestionnaires de contexte au dessus de l'Internet des objetsUBIMOB 2016 : 11èmes journées francophones Mobilité et Ubiquité, Jul 2016, Lorient, France. pp.1 - 7 |
|
|
How Can I Trust an X.509 Certificate? an Analysis of the Existing Trust Approaches41st IEEE Conference on Local Computer Networks (LCN 2016), Nov 2016, Dubai, United Arab Emirates. pp. 531-534 |
|
|
Difficulties to enforce your privacy preferences on Android? Kapuer will help you13th IEEE Consumer Communications and Networking Conference (CCNC 2016), Jan 2016, Las Vegas, United States. pp. 315-316 |
|
|
Demonstration of KAPUER: A privacy policy manager on AndroidIEEE Consumer Communications and Networking Conference (CCNC 2016), Jan 2016, Las Vegas, United States. pp. 282-283 |
|
|
Specification and Enforcement of Dynamic Authorization Policies oriented by Situations6th IFIP International Conference on New Technologies, Mobility and Security (NTMS 2014), IFIP: International Federation for Information Processing, Mar 2014, Dubaï, United Arab Emirates. pp.1--6, ⟨10.1109/NTMS.2014.6814050⟩ |
|
|
Projet INCOME : INfrastructure de gestion de COntexte Multi-Echelle pour l'Internet des ObjetsConférence Francophone sur les Architectures Logicielles (CAL), Jun 2014, Paris, France. pp. 1-2 |
Système d'aide à la décision pour la protection des données de vie privée de l'utilisateurROADEF - 15ème congrès annuel de la Société française de recherche opérationnelle et d'aide à la décision, Société française de recherche opérationnelle et d'aide à la décision, Feb 2014, Bordeaux, France |
|
An adaptive XACMLv3 policy enforcement pointIEEE 38th International Workshop on Adaptive Systems for Communication Networks 2014, Jul 2014, Västerås, Sweden. pp.620--625, ⟨10.1109/COMPSACW.2014.104⟩ |
|
|
|
Etude du concept de confiance pour les infrastructures à clés publiques10ème Colloque francophone Gestion de REseaux et de Services (GRES 2014), Dec 2014, Paris, France. pp.1-6 |
|
|
Managing Break-The-Glass using Situation-oriented authorizations9ème Conférence sur la Sécurité des Architectures Réseaux et Systèmes d'Information - SAR-SSI 2014, May 2014, Saint-Germain-Au-Mont-d'Or (Lyon), France, France. pp.0 |
|
|
KAPUER: A Decision Support System for Protecting PrivacyInternational Conference Group Decision and Negotiation (GDN 2014), Jun 2014, Toulouse, France. pp.100-107, ⟨10.1007/978-3-319-07179-4_11⟩ |
|
|
Gestion de contexte multi-échelle pour l'Internet des objets10èmes Journées francophones Mobilité et Ubiquité (UBIMOB 2014), Jun 2014, Sophia Antipolis, France. pp.1-8 |
|
|
Toward Authorization as a Service: A Study of the XACML Standard16th Communications and Networking Symposium (CNS 2013) @ 2013 Spring Simulation Multi-Conference, ACM Special Interest Group on Simulation and Modeling, Apr 2013, San Diego, CA, United States. pp.55-61 |
|
|
Authorization policies: Using Decision Support System for context-aware protection of user's private dataIEEE International Symposium on UbiSafe Computing - TrustCom 2013, Jul 2013, Melbourne, Australia. pp. 1639-1644 |
|
|
PKI Interoperability: Still an Issue? A Solution in the X.509 Realm8th World Conference on Information Security Education (WISE), Jul 2013, Auckland, New Zealand. pp.68-82, ⟨10.1007/978-3-642-39377-8_8⟩ |
|
|
Spécification Method for Analyzing Fine Grained Network Security Mechanism Configurations6th Symposium on Security Analytics and Automation 2013 (SafeConfig 2013), Oct 2013, Washington, D.C., United States. pp.483-487, ⟨10.1109/CNS.2013.6682764⟩ |
|
|
INCOME - Multi-scale context management for the internet of things3rd International Joint Conference on Ambient Intelligence (AML 2012), Nov 2012, Pise, Italy. pp.338-347, ⟨10.1007/978-3-642-34898-3_25⟩ |
Projet INCOME : INfrastructure de gestion de COntexte Multi-Échelle pour l'Internet des ObjetsUbimob 2012 : 8èmes journées francophones Mobilité et Ubiquité, Jun 2012, Anglet, France. pp.46-48 |
2020 4th Cyber Security in Networking Conference (CSNet)4th Cyber Security in Networking Conference: Cyber Security in Networking (CSNet 2020), IEEE: Institute of Electrical and Electronics Engineers, 2020, 978-0-7381-4292-0. ⟨10.1109/CSNet50428.2020⟩ |
|
|
Foundations and practice of securityLecture Notes in Computer Science, 12056, 408 p., 2020, Lecture Notes in Computer Science book series (LNCS), ⟨10.1007/978-3-030-45371-8⟩ |
L’identité numérique en construction. Quels enjeux et quels modèles ?Bruylant. Bruylant, 572 p., 2024, Rencontres européennes, 978-2802774044 |
IoT Security threats and risk analysisHandbook of Internet of Things, Springer, In press |
|
|
Proposition summary to X.509 committee: Adding the Role of technical and juridical expert to X.509 trust model2013 |
|
|
Towards an architecture for managing security under the EU Cyber Resilience Act2025 |
|
|
Artificial Intelligence Systems in the European Union: Guidelines and Architectures for Compliance-by-Design2024 |
|
|
Assessing e-identity solutions according to Self-Sovereign Identity: application to eIDAS2023 |
|
|
How to Design and Deliver Courses for Higher Education in the AI Era: Insights from Exam Data Analysis2023 |
|
|
CyberSec4Europe D3.21 - Framework to design and implement adaptive security systems[Research Report] D3.21, University college Dublin; KU Leuven; Consiglio Nazionale delle Ricerche; University of Maribor; University of Piraeus Research Centre; IRIT - Institut de Recherche en Informatique de Toulouse; ATOS. 2022 |
|
|
Méthodes et outils intergiciels de gestion de contexte multiéchelle pour l'Internet des objets : rapport de fin du projet ANR INCOME[Rapport de recherche] IRIT. 2016 |
Méthodes et outils intergiciels de gestion de contexte multi-échelle pour l'Internet des objets : programme scientifique du projet ANR INCOME[Rapport de recherche] RR–2014–11–FR, IRIT : Institut de recherche en Informatique de toulouse. 2014, pp.1-29 |
|
State of the art of network management and security. Contrat AIRSYS - IFAU (IP for Avionic Users)- Rapport de Lot 2.2.[Contrat] IRIT : Institut de Recherche en Informatique de Toulouse. 2006 |
|
|
Contributions à la gestion de la sécurité des infrastructures virtuellesCryptographie et sécurité [cs.CR]. Université Toulouse 3 Paul Sabatier, 2016 |