{"id":186,"date":"2011-03-24T23:12:04","date_gmt":"2011-03-24T22:12:04","guid":{"rendered":"https:\/\/samovar2022.int-evry.fr\/index.php\/2011\/03\/24\/soutenance-these-de-aroua-biri\/"},"modified":"2020-09-04T18:47:16","modified_gmt":"2020-09-04T16:47:16","slug":"soutenance-these-de-aroua-biri","status":"publish","type":"post","link":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/2011\/03\/24\/soutenance-these-de-aroua-biri\/","title":{"rendered":"SOUTENANCE : Th\u00e8se de Aroua Biri"},"content":{"rendered":"<p>Vendredi 25 F\u00e9vrier 2011 <strong>\u00abProposition de nouveaux m\u00e9canismes de protection contre l&rsquo;usurpation d&rsquo;identit\u00e9 pour les fournisseurs de services Internet.\u00bb<\/strong><\/p>\n<p>La th\u00e8se sera soutenue par Aroua Biri, doctorant du d\u00e9partement RS2M<\/p>\n<p>Vendredi 25 F\u00e9vrier 2011 \u00e0 14h30<\/p>\n<p>Sur le campus de T\u00e9l\u00e9com SudParis, 9 rue Charles Fourier \u00e0 Evry, en salle C06.<\/p>\n<p><strong>Jury<\/strong><\/p>\n<p>    * Pr. Bernard Cousin, professeur \u00e0 l&rsquo;IFSIC (Rapporteur)<br \/>\n    * Dr. Hasnaa Moustafa, ing\u00e9nieur de recherche senior, Orange labs (Rapporteur)<br \/>\n    * Pr. Guy Pujolle, professeur \u00e0 Paris VI (Examinateur)<br \/>\n    * M. Olivier Mary, associ\u00e9 de la soci\u00e9t\u00e9 OPPIDA (Examinateur)<br \/>\n    * Pr. Hossam Afifi, professeur \u00e0 T\u00e9l\u00e9com SudParis (Directeur de th\u00e8se)<\/p>\n<p><strong>R\u00e9sum\u00e9<\/strong><\/p>\n<p>\u00ab\u00a0Dans cette th\u00e8se, nous proposons des m\u00e9canismes de protection contre l&rsquo;usurpation d&rsquo;identit\u00e9 lors de la connexion aux fournisseurs de service Internet (FSIs) depuis les r\u00e9seaux personnels ainsi que des m\u00e9canismes de protection contre l&rsquo;usurpation d&rsquo;identit\u00e9 pour les r\u00e9seaux de c\u0153ur.<\/p>\n<p>Les m\u00e9canismes de protection contre les attaques d&rsquo;usurpation d&rsquo;identit\u00e9 dans un contexte priv\u00e9 ainsi que dans un contexte public sont cruciaux pour l&rsquo;adoption par les clients des nouvelles applications offertes par les FSIs. <\/p>\n<p>Nous proposons ainsi un premier m\u00e9canisme d\u00e9di\u00e9 \u00e0 la phase de formation et d&rsquo;usage des r\u00e9seaux personnels et un second d\u00e9di\u00e9 au cas particulier des r\u00e9seaux m\u00e9dicaux personnels. Dans le contexte d&rsquo;acc\u00e8s d&rsquo;un \u00e9quipement personnel au r\u00e9seau d&rsquo;un FSI depuis un lieu public, nous proposons un protocole inter-couche bas\u00e9 sur les principes de la th\u00e9orie de l&rsquo;information.<\/p>\n<p>Par ailleurs, les FSI comptent sur les protocoles de routage qu&rsquo;ils d\u00e9roulent pour participer au bon acheminement des donn\u00e9es de leurs clients. Cependant, le protocole intra-domaine OSPF et le protocole inter-domaine BGP sont vuln\u00e9rables aux attaques utilisant la technique de l&rsquo;usurpation d&rsquo;identit\u00e9 qui peuvent conduire \u00e0 l&rsquo;acheminement des paquets vers des destinataires non l\u00e9gitimes ou au d\u00e9ni de service. <\/p>\n<p>D&rsquo;une part, afin de prot\u00e9ger les routeurs OSPF contre les attaques utilisant la technique d&rsquo;usurpation d&rsquo;identit\u00e9, nous avons pr\u00e9conis\u00e9 le stockage de l&rsquo;identit\u00e9 et du mat\u00e9riel cryptographique dans un coffre-fort \u00e9lectronique que sont les cartes \u00e0 puce. Les cartes d\u00e9roulent ensuite un algorithme de d\u00e9rivation de cl\u00e9s avec les cartes des routeurs voisins ainsi qu&rsquo;avec celle du routeur d\u00e9sign\u00e9. <\/p>\n<p>Les cl\u00e9s d\u00e9riv\u00e9es entre les cartes \u00e0 puce servent \u00e0 signer les messages OSPF et \u00e0 authentifier le niveau MAC. Nous avons d\u00e9crit par la suite la plateforme du d\u00e9monstrateur et les sc\u00e9narios de tests adopt\u00e9s pour \u00e9valuer les performances de notre prototype. <\/p>\n<p>D&rsquo;autre part, afin de prot\u00e9ger les routeurs BGP contre les attaques utilisant la technique d&rsquo;usurpation d&rsquo;identit\u00e9, nous avons pr\u00e9conis\u00e9 la \u00ab clust\u00e9risation \u00bb des domaines Internet et la s\u00e9curisation des liens entre les clusters ainsi qu&rsquo;au sein de chacun d&rsquo;eux gr\u00e2ce aux paradigmes de \u00ab web of trust \u00bb et de la cryptographie sans certificats. <\/p>\n<p>En plus de se prot\u00e9ger contre les attaques au niveau des protocoles de routage, les fournisseurs de services Internet se doivent d&rsquo;octroyer \u00e0 leurs clients des adresses IP dont l&rsquo;usurpation peut \u00eatre d\u00e9tect\u00e9e, neutralis\u00e9e et trac\u00e9e. <\/p>\n<p>L&rsquo;attribution des adresses IP se fait lors de la connexion du client au fournisseur de services Internet. Nous avons donc repens\u00e9 le m\u00e9canisme d&rsquo;octroi des adresses IP et nous avons \u00e9galement propos\u00e9 une nouvelle extension pour DNSSEC pour assurer la correspondance entre l&rsquo;adresse IP du client et sa cl\u00e9 publique.\u00a0\u00bb<\/p>\n<hr \/>\n","protected":false},"excerpt":{"rendered":"<p>Vendredi 25 F\u00e9vrier 2011 \u00abProposition de nouveaux m\u00e9canismes de protection contre l&rsquo;usurpation d&rsquo;identit\u00e9 pour les fournisseurs de services Internet.\u00bb La th\u00e8se sera soutenue par Aroua Biri, doctorant du d\u00e9partement RS2M Vendredi 25 F\u00e9vrier 2011 \u00e0 14h30 Sur le campus de T\u00e9l\u00e9com SudParis, 9 rue Charles Fourier \u00e0 Evry, en salle C06. Jury * Pr. Bernard [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[7],"tags":[],"class_list":["post-186","post","type-post","status-publish","format-standard","hentry","category-uncategorized-fr","entry"],"_links":{"self":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/comments?post=186"}],"version-history":[{"count":1,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/186\/revisions"}],"predecessor-version":[{"id":2034,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/186\/revisions\/2034"}],"wp:attachment":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/media?parent=186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/categories?post=186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/tags?post=186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}