Un s\u00e9minaire sera donn\u00e9 par Olivier Levillain, nouveau membre int\u00e9gr\u00e9 dans l’\u00e9quipe R3S du laboratoire Samovar<\/p>\n
Quand : <\/strong> le mercredi 13 mai 2020, \u00e0 11h00 Titre :<\/strong> \u00ab Projet ANR GASP : vers une approche g\u00e9n\u00e9rique pour s\u00e9curiser les protocoles r\u00e9seau \u00bb<\/p>\n Slides de la pr\u00e9sentation<\/a><\/strong> et vid\u00e9o du s\u00e9minaire<\/strong><\/a><\/p>\n === Les failles de s\u00e9curit\u00e9 sont en effet omnipr\u00e9sentes dans nos protocoles r\u00e9seau, que ce soit au niveau de la sp\u00e9cification ou \u00e0 cause d’erreurs d’impl\u00e9mentation : sp\u00e9cifications incompl\u00e8tes, probl\u00e8mes de corruption m\u00e9moire, erreurs logiques, raccourcis dans les machines \u00e0 \u00e9tat, attaques cryptographiques, etc.<\/p>\n Le projet GASP, financ\u00e9 par l’ANR dans le cadre de l’appel \u00e0 projet g\u00e9n\u00e9rique 2019, propose un cadre g\u00e9n\u00e9rique pour d\u00e9crire les protocoles et en d\u00e9river des outils automatiquement. Pour cela, nous nous int\u00e9resserons \u00e0 la conception de langages pour d\u00e9crire les messages, mais aussi les machines \u00e0 \u00e9tats. Ainsi, nous pourrons d\u00e9river des impl\u00e9mentations de r\u00e9f\u00e9rence. Nous comptons aussi d\u00e9velopper des scanners r\u00e9seau des fuzzers pour tester les piles existantes.<\/p>\n L’impact recherch\u00e9 \u00e0 court terme sera de mieux conna\u00eetre les protocoles, leurs impl\u00e9mentations et leurs d\u00e9ploiements. \u00c0 long terme, les langages produits pourront aider \u00e0 produire de meilleures sp\u00e9cifications et acc\u00e9l\u00e9rer le d\u00e9veloppement de piles logicielles.<\/p>\n ==== Un s\u00e9minaire sera donn\u00e9 par Olivier Levillain, nouveau membre int\u00e9gr\u00e9 dans l’\u00e9quipe R3S du laboratoire Samovar Quand : le mercredi 13 mai 2020, \u00e0 11h00 Moyen : Webconf : https:\/\/webconf.imtbs-tsp.eu\/frontend\/mar-7hd-7hk Titre : \u00ab Projet ANR GASP : vers une approche g\u00e9n\u00e9rique pour s\u00e9curiser les protocoles r\u00e9seau \u00bb Slides de la pr\u00e9sentation et vid\u00e9o du s\u00e9minaire […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[284],"tags":[],"class_list":["post-1274","post","type-post","status-publish","format-standard","hentry","category-seminaires-r3s-fr","entry"],"_links":{"self":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/1274","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/comments?post=1274"}],"version-history":[{"count":1,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/1274\/revisions"}],"predecessor-version":[{"id":1416,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/1274\/revisions\/1416"}],"wp:attachment":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/media?parent=1274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/categories?post=1274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/tags?post=1274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nMoyen :<\/strong> Webconf : https:\/\/webconf.imtbs-tsp.eu\/frontend\/mar-7hd-7hk<\/p>\n
\nR\u00e9sum\u00e9 : <\/strong>
\n===
\nDans notre monde toujours plus connect\u00e9, nous reposons fortement sur les protocoles r\u00e9seau pour communiquer les uns avec les autres. Pour assurer la confidentialit\u00e9 et l’int\u00e9grit\u00e9 des donn\u00e9es \u00e9chang\u00e9es, il est donc n\u00e9cessaire d’\u00e9valuer et d’am\u00e9liorer la s\u00e9curit\u00e9 de ces protocoles et de leur impl\u00e9mentation. Cette observation concerne \u00e9videmment les protocoles dits de s\u00e9curit\u00e9 tels que TLS ou SSH, mais il est \u00e9galement important de s’int\u00e9resser aux protocoles applicatifs complexes de plus haut niveau, comme HTTP\/2, et aux protocoles de plus bas niveau comme DNS ou BGP.<\/p>\n
\nBiographie :<\/strong>
\n====
\nOlivier Levillain est ma\u00eetre de conf\u00e9rences en s\u00e9curit\u00e9 des syst\u00e8mes d’information \u00e0 T\u00e9l\u00e9com SudParis. Auparavant, il a \u00e9t\u00e9 responsable du centre de formation \u00e0 la SSI au sein de l’agence nationale de la s\u00e9curit\u00e9 des syst\u00e8mes d’information (ANSSI). Il a \u00e9galement travaill\u00e9 dans les laboratoires de la sous-direction expertise de l’ANSSI, sur des sujets vari\u00e9s allant des attaques sur les m\u00e9canismes bas-niveau des architectures mat\u00e9rielles aux infrastructures de gestion de cl\u00e9s. Plus r\u00e9cemment ses travaux ont port\u00e9 sur les protocoles r\u00e9seau s\u00e9curis\u00e9s (et plus particuli\u00e8rement SSL\/TLS), les langages de programmation (\u00e9tudes JavaSec et LaFoSec, pr\u00e9sentation Mind Your Languages).<\/p>\n","protected":false},"excerpt":{"rendered":"