Valérie Viet Triem Tong
Présentation
Publications
Publications
|
|
OATs’inside : Retrieving Object Behaviors From Native-based Obfuscated Android ApplicationsDigital Threats: Research and Practice, 2023, 4 (2), pp.1-27. ⟨10.1145/3584975⟩ |
|
|
PWNJUTSU: A Dataset and a Semantics-Driven Approach to Retrace Attack CampaignsIEEE Transactions on Network and Service Management, 2022, Special Issue on Recent Advances in Network Security Management, 19 (4), pp.5252-5264. ⟨10.1109/TNSM.2022.3183476⟩ |
|
|
Debiasing Android Malware Datasets: How Can I Trust Your Results If Your Dataset Is Biased?IEEE Transactions on Information Forensics and Security, 2022, 17, pp.2182-2197. ⟨10.1109/tifs.2022.3180184⟩ |
|
|
From TTP to IoC: Advanced Persistent Graphs for Threat HuntingIEEE Transactions on Network and Service Management, 2021, Special Issue on Latest Developments for Security Management of Networks and Services, 18 (2), pp.1321 - 1333. ⟨10.1109/TNSM.2021.3056999⟩ |
|
|
Challenges in Android Malware AnalysisERCIM News, 2016, Special Theme: Cybersecurity, 106, pp.42-43 |
|
|
Lutter contre les codes malveillantsInterstices, 2016 |
Information Flow Policies vs Malware -- Final BattleJournal of Information Assurance and Security, 2014, 9 (2), pp.72-82 |
|
Spécification et mécanisme de détection de flots d'information illégauxRevue des Sciences et Technologies de l'Information - Série TSI : Technique et Science Informatiques, 2012, 31 (6), pp.713-742. ⟨10.3166/tsi.31.713-742⟩ |
|
User Data on Androïd Smartphone Must be ProtectedERCIM News, 2012, 90, pp.Page 18 |
|
User Data Confidentiality in an Orchestration of Web ServicesJournal of Information Assurance and Security, 2012, 7 (1), pp.32-40 |
|
Liability issues in software engineering: the use of formal methods to reduce legal uncertaintiesCommunications of the ACM, 2011, 54 (4), pp.99-106. ⟨10.1145/1924421.1924444⟩ |
|
Specifying and enforcing a fine-grained information flow policy : model and experimentsJournal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications, 2010, 1 (1), pp.56-71 |
|
Policy-based intrusion detection in web applications by monitoring Java information flowsInternational Journal of Information and Computer Security, 2009, Vol.3 (N°3/4), 15 p |
|
|
Towards Automated Botnet Threat Intelligence with Knowledge-Guided Large Language ModelsFPS 2025 - 18th International Symposium on Foundations & Practice of Security, Nov 2025, Brest, France |
|
|
CasinoLimit: An Offensive Dataset Labeled with MITRE ATT&CK TechniquesRAID 2025 - 28th International Symposium on Research in Attacks, Intrusions and Defenses, Oct 2025, Gold Coast, Australia |
|
|
URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range ArchitecturesFPS 2023 - 16th International Symposium on Foundations & Practice of Security, Dec 2023, Bordeaux, France. pp.123-138, ⟨10.1007/978-3-031-57537-2_8⟩ |
|
|
SCWAD: Automated Pentesting of Web ApplicationsSECRYPT 2024 - 21st International Conference on Security and Cryptography, Jul 2024, Dijon, France. pp.424 - 433, ⟨10.5220/0012721000003767⟩ |
|
|
CERBERE: Cybersecurity Exercise for Red and Blue team Entertainment, REproducibilityCyberHunt 2023 - 6th Annual Workshop on Cyber Threat Intelligence and Hunting, Dec 2023, Sorrento, Italy. pp.2980-2988, ⟨10.1109/BigData59044.2023.10386953⟩ |
|
|
CVE representation to build attack positions graphsCyberHunt 2023 - 6th Annual Workshop on Cyber Threat Intelligence and Hunting, IEEE BigData, Dec 2023, Sorrento, Italy. pp.1-5 |
|
|
BAGUETTE: Hunting for Evidence of Malicious Behavior in Dynamic Analysis ReportsSECRYPT 2023 - 20th International conference on security and cryptography, Jul 2023, Rome, Italy. pp.1-8 |
|
|
DaViz: Visualization for Android Malware DatasetsRESSI 2022 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2022, Chambon-sur-Lac, France. pp.1-3 |
|
|
Towards a Representation of Malware Execution Traces for Experts and Machine LearningRESSI 2022 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2022, Chambon-sur-Lac, France. pp.1-3 |
Accurate measurement of the energy consumption of security functions18th International Conference on Security and Cryptography (SECRYPT 2021),, Jul 2021, online streaming, France |
|
|
|
Preventing Serialization Vulnerabilities through Transient Field DetectionSAC 2021 - 36th ACM/SIGAPP Symposium On Applied Computing, Mar 2021, Gwangju / Virtual, South Korea. pp.1-9 |
|
|
GUI-Mimic, a cross-platform recorder and fuzzer of Graphical User InterfaceGreHack 2021 - 9th International Symposium on Research in Grey-Hat Hacking, Nov 2021, Grenoble, France. pp.1-7 |
|
|
GroDDViewer: Dynamic Dual View of Android MalwareGraMSec 2020 - 7th Seventh International Workshop on Graphical Models for Security, Jun 2020, Virtual Conference, France. pp.127-139, ⟨10.1007/978-3-030-62230-5_7⟩ |
|
|
Abusing Android Runtime for Application ObfuscationSAD 2020 - Workshop on Software Attacks and Defenses, Sep 2020, Genova, Italy. pp.616-624, ⟨10.1109/EuroSPW51379.2020.00089⟩ |
|
|
Isolating malicious code in Android malware in the wildMALCON 2019 - 14th International Conference on Malicious and Unwanted Software, Oct 2019, Nantucket, United States |
|
|
Obfuscated Android Application DevelopmentCECC 2019 - Central European Cybersecurity Conference, Nov 2019, Munich, Germany. pp.1-6, ⟨10.1145/3360664.3361144⟩ |
|
|
Teaching Android Mobile SecuritySIGCSE '19 - 50th ACM Technical Symposium on Computer Science Education, Feb 2019, Minneapolis, United States. pp.232-238, ⟨10.1145/3287324.3287406⟩ |
|
|
Modeling the Operational Phases of APT CampaignsCSCI 2019 - 6th Annual Conf. on Computational Science & Computational Intelligence, Dec 2019, Las Vegas, United States. pp.1-6, ⟨10.1109/CSCI49370.2019.00023⟩ |
|
|
Challenges for Reliable and Large Scale Evaluation of Android Malware AnalysisSHPCS 2018 - International Workshop on Security and High Performance Computing Systems, Jul 2018, Orléans, France. pp.1068-1070, ⟨10.1109/HPCS.2018.00173⟩ |
|
|
Etat de l'Art des Techniques d'Unpacking pour les Applications AndroidRESSI 2018 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2018, Nancy / La Bresse, France. pp.1-3 |
|
|
Le projet CominLabs Kharon: aidons les malwares à s'exécuterRESSI 2018 - Rendez-Vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2018, Nancy / La Bresse, France. pp.1 |
|
|
Verifying the Reliability of Operating System-Level Information Flow Control Systems in Linux5th International FME Workshop on Formal Methods in Software Engineering, May 2017, Buenos Aires, Argentina. pp.10-16, ⟨10.1109/FormaliSE.2017.1⟩ |
|
|
Sharing and replaying attack scenarios with MoiraiRESSI 2017: Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2017, Autrans, France |
|
|
Information flows at OS level unmask sophisticated Android malware14th International Conference on Security and Cryptography, Jul 2017, Madrid, Spain. pp.578-585, ⟨10.5220/0006476705780585⟩ |
|
|
DroneJack: Kiss your drones goodbye!SSTIC 2017 - Symposium sur la sécurité des technologies de l'information et des communications, Jun 2017, Rennes, France. pp.1-8 |
|
|
Information Flow Tracking for Linux Handling Concurrent System Calls and Shared Memory15th International Conference on Software Engineering and Formal Methods (SEFM 2017), Sep 2017, Trento, Italy. pp.1-16, ⟨10.1007/978-3-319-66197-1_1⟩ |
|
|
Suivi de flux d'information correct sous Linux16èmes journées AFADL (Approches formelles dans l'assistance au développement de logiciels), Jun 2017, Montpellier, France. pp.19-26 |
|
|
GPFinder: Tracking the Invisible in Android Malware12th International Conference on Malicious and Unwanted Software, Oct 2017, Fajardo, Puerto Rico. pp.39-46, ⟨10.1109/MALWARE.2017.8323955⟩ |
|
|
TerminAPTor: Highlighting Advanced Persistent Threats through Information Flow Tracking8th IFIP International Conference on New Technologies, Mobility and Security, Nov 2016, Larnaca, Cyprus. ⟨10.1109/ntms.2016.7792480⟩ |
|
|
Kharon dataset: Android malware under a microscopeThe Learning from Authoritative Security Experiment Results (LASER) workshop, May 2016, San Jose, United States. pp.1-12 |
|
|
Detection and Identification of Android Malware Based on Information Flow MonitoringThe 2nd IEEE International Conference on Cyber Security and Cloud Computing (CSCloud 2015), Nov 2015, New York, United States. ⟨10.1109/cscloud.2015.27⟩ |
|
|
Privacy-Preserving Reputation Mechanism: A Usable Solution Handling Negative Ratings9th IFIP WG 11.11 International Conference, IFIPTM 2015, May 2015, Hambourg, Germany. pp.92-108, ⟨10.1007/978-3-319-18491-3_7⟩ |
|
|
Kayrebt: An Activity Diagram Extraction and Visualization Toolset Designed for the Linux Codebase2015 IEEE 3rd Working Conference on Software Visualization (VISSOFT), IEEE, Sep 2015, Bremen, Germany. ⟨10.1109/vissoft.2015.7332431⟩ |
|
|
Kharon : Découvrir, comprendre et reconnaître des malware Android par suivi de flux d'informationRendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2015, Troyes, France |
|
|
Mécanisme de réputation distribué préservant la vie privée avec témoignages négatifsALGOTEL 2015 - 17èmes Rencontres Francophones sur les Aspects Algorithmiques des Télécommunications, Jun 2015, Beaune, France |
|
|
GroddDroid: a Gorilla for Triggering Malicious Behaviors10th International Conference on Malicious and Unwanted Software, Oct 2015, Fajardo, Puerto Rico. pp.119-127, ⟨10.1109/MALWARE.2015.7413692⟩ |
Towards a Formal Semantics for System Calls in terms of Information FlowTenth International Conference on Systems (ICONS 2015), Apr 2015, Barcelone, Spain. pp.1-4 |
|
|
|
Capturing Android Malware Behaviour using System Flow GraphNSS 2014 - The 8th International Conference on Network and System Security, Oct 2014, Xi'an, China. ⟨10.1007/978-3-319-11698-3_43⟩ |
Diagnosing intrusions in Android operating system using system flow graphWorkshop Interdisciplinaire sur la Sécurité Globale, Jan 2013, Troyes, France |
|
BSPL: A Language to Specify and Compose Fine-grained Information Flow PoliciesSECUREWARE - 7th International Conference on Emerging Security Information, Systems and Technologies - 2013, 2013, Barcelona, Spain |
|
Secure states versus Secure executions: From access control to flow controlICISS 2013 - 9th International Conference on Information Systems Security, Dec 2013, Calcutta, India. pp.148-162, ⟨10.1007/978-3-642-45204-8_11⟩ |
|
Information Flow Policies vs MalwareIAS - Information assurance and security - 2013, 2013, Yassmine Hammamet, Tunisia |
|
|
|
A Privacy Preserving Distributed Reputation MechanismInternational Conference on communications (ICC), Jun 2013, Budapest, France. 6 p |
User Defined Control Flow Policy for Web Service OrchestrationC&ESAR 2012, Nov 2012, Rennes, France. pp.NC |
|
Designing information flow policies for Android's operating systemIEEE ICC 2012, Jun 2012, Ottawa, Canada |
|
Mise en œuvre de politiques de protection des flux d'information dans l'environnement AndroidComputer & Electronics Security Applications Rendez-vous (C&ESAR 2011), Nov 2011, Rennes, France |
|
|
|
Information Flow Control for Intrusion Detection derived from MAC Policy2011 IEEE International Conference on Communications (ICC), Jun 2011, Kyoto, Japan. 6 p., ⟨10.1109/icc.2011.5962660⟩ |
From SSIR to CIDre: a New Security Research Group in Rennes1st SysSec Workshop, Jul 2011, Amsterdam, Netherlands |
|
|
|
Preventing data leakage in service orchestrationIAS 2011, Dec 2011, Malacca, Malaysia. 6 p., ⟨10.1109/ISIAS.2011.6122806⟩ |
Flow based interpretation of access control: Detection of illegal information flows7th International Conference on Information Systems Security (ICISS), Dec 2011, Kolkata, India. pp.72-86, ⟨10.1007/978-3-642-25560-1_5⟩ |
|
|
|
Contrôle d'accès versus Contrôle de flots10emes Journées Francophones sur les Approches Formelles dans l'Assistance au développement des logiciels, AFADL 2010, Jun 2010, Poitiers, France. pp.27-41 |
Protection des données utilisateurs dans une orchestration de Web-ServicesSARSSI 2010, May 2010, Menton, France. pp.NC |
|
|
|
Liability in Software Engineering Overview of the LISE Approach and Illustration on a Case StudyACM/IEEE 32nd International Conf. on Software Engineering (ICSE 2010), ACM/IEEE, May 2010, Cape Town, South Africa. pp.135--144, ⟨10.1145/1806799.1806823⟩ |
An Efficient Distributed PKI for Structured P2P Networks9th IEEE International Conference on Peer-to-Peer Computing (P2P), Sep 2009, Seattle, United States. 10 p |
|
Specification of Anonymity as a Secrecy Property in the ADM Logic – Homomorphic-based Voting ProtocolsInternational Conference on Availability, Reliability and Security, Mar 2009, Fukuoka, Japan |
|
A Sybilproof Distributed Identity Management for P2P Networks13th IEEE Symposium on Computers and Communications (ISCC), Jul 2008, Marrakesch, Morocco |
|
Spécification Formelle des propriétés des Protocoles de Vote au moyen de la Logique ADMConférence sur la sécurité des Architectures Réseaux et des Systèmes d'Information, Oct 2008, Loctudy, France |
|
Policy-Based Intrusion Detection in Web Applications by Monitoring Java Information FlowsCRiSIS 2008, Oct 2008, Tozeur, Tunisia. 8 p |
|
A distributed certification system for structured P2P networks2nd International Conference on Autonomous Infrastructure, Management and Security (AIMS), Jul 2008, Bremen, Germany. pp.40-52 |
|
A Sybil-Resistant Admission Control Coupling SybilGuard with Distributed Certification4th International Workshop on Collaborative Peer-to-Peer Systems (COPS) 2008, Jun 2008, Rome, Italy |
|
Detecting and Excluding Misbehaving Nodes in a P2P Network8th International Conference on Innovative Internet Community Systems (I2CS), Jun 2008, Martinique |
|
Specification of Electronic Voting Protocol Properties Using ADM Logic : FOO Case StudyICICS 08, Oct 2008, Birmingham, United Kingdom |
|
Contrôle d'accès distribué à un réseau pair-à-pairSixth Conference on Security and Network Architectures (SARSSI), Jun 2007, France |
|
Détection fiable et pertinente de flux d'information illégauxSixth Conference on Security and Network Architectures (SARSSI), Jun 2007, France |
|
|
|
FingerKey, un cryptosystème biométrique pour l'authentificationConférence sur la Sécurité et Architectures Réseaux, Jun 2007, annecy, France |
Gestion distribuée d'identités résistante à la Sybil attack pour un réseau pair-à-pairSixth Conference on Security and Network Architectures (SARSSI), Jun 2007, France |
|
Monitoring both OS and program level information flows to detect intrusions against network serversIEEE Workshop on Monitoring, Attack Detection and Mitigation, Nov 2007, Toulouse, France |
|
|
|
Biometric fuzzy extractors made practical: a proposal based on FingerCodesInternational conference on Biometrics, Aug 2007, Seoul, South Korea. pp.604-613, ⟨10.1007/978-3-540-74549-5⟩ |
|
|
Digital twin for security evaluation using an attack agentUSENIX 2024 - 33rd USENIX Security Symposium, Aug 2024, Philadelphia, United States. , pp.1-1, 2024 |
|
|
Using Implicit Calls to Improve Malware Dynamic Execution37th IEEE Symposium on Security and Privacy, May 2016, San Jose, United States |
|
|
Towards Automatic Triggering of Android Malware12th International Conference on Detection of Intrusions and Malware & Vulnerability Assessment, Jul 2015, Milano, Italy |
Highlighting Easily How Malicious Applications Corrupt Android DevicesResearch in Attacks, Intrusions, and Defenses, Sep 2014, Gothenburg, Sweden. Research in Attacks, Intrusions, and Defenses, 2014 |
|
|
Extending Signatures of ReputationHansen, M.; Hoepman, J.-H.; Leenes, R.; Whitehouse, D. Privacy and Identity Management for Emerging Services and Technologies : 8th IFIP WG 9.2, 9.5, 9.6/11.7, 11.4, 11.6 International Summer School, Nijmegen, The Netherlands, June 17-21, 2013, Revised Selected Papers, AICT-421, Springer, pp.165-176, 2014, IFIP Advances in Information and Communication Technology (TUTORIAL), 978-3-642-55136-9. ⟨10.1007/978-3-642-55137-6_13⟩ |
|
|
Se protéger d'une pandémie numérique2023 |
Blare Tools: A Policy-Based Intrusion Detection System Automatically Set by the Security Policy2009 |
|
|
Efficient Distributed Privacy-Preserving Reputation Mechanism Handling Non-Monotonic Ratings2015 |
|
|
Information Flow Policies vs Malware[Technical Report] 2013 |
Analyse de logs guidée par des vérifications de formules de responsabilité exprimées en CTL[Rapport de recherche] D4.1, Supélec. 2011 |
|
|
|
Liability in Software Engineering: Overview of the LISE Approach and Illustration on a Case Study[Research Report] RR-7148, INRIA. 2009, pp.23 |
|
|
Reachability Analysis over Term Rewriting Systems[Research Report] RR-4970, INRIA. 2003 |
|
|
Proving Negative Conjectures on Equational Theories using Induction and Abstract Interpretation[Research Report] RR-4576, INRIA. 2002 |
|
|
Reachability Analysis of Term Rewriting Systems with Timbuk[Research Report] RR-4266, INRIA. 2001 |
|
|
Apport du suivi de flux d'information pour la sécurité des systèmesCryptographie et sécurité [cs.CR]. Université Rennes 1, 2015 |