pr\u00e9sentent<\/p>\n\n\n\n
Autoris\u00e9 \u00e0 pr\u00e9senter ses travaux en vue de l\u2019obtention du Doctorat de l’Institut Polytechnique de Paris, pr\u00e9par\u00e9 \u00e0 T\u00e9l\u00e9com SudParis en :<\/p>\n\n\n\n
le JEUDI 27 NOVEMBRE 2025 \u00e0 14h00<\/p>\n\n\n\n
\u00e0<\/p>\n\n\n\n
Amphith\u00e9\u00e2tre 2
19 place Marguerite Perey 91120 Palaiseau<\/p>\n\n\n\n
Membres du jury :<\/strong><\/p>\n\n\n\n M. Pascal LAFOURCADE<\/strong>, Professeur, Univesit\u00e9 Clermont-Auvergne, LIMOS, FRANCE – Rapporteur M. Eric TOTEL<\/strong>, Professeur, T\u00e9l\u00e9com SudParis, FRANCE – Directeur de these<\/p>\n\n\n\n M. Olivier LEVILLAIN<\/strong>, Ma\u00eetre de conf\u00e9rences, T\u00e9l\u00e9com SudParis, FRANCE – Encadrant de these<\/p>\n\n\n\n R\u00e9sum\u00e9 :<\/strong><\/p>\n\n\n\n Les communications sur Internet sont expos\u00e9es \u00e0 des interceptions lorsqu’elles sont transmises en clair. Pour y rem\u00e9dier, le chiffrement est devenu le mode de communication dominant. Bien qu\u2019il renforce la s\u00e9curit\u00e9 et la confidentialit\u00e9, il pose \u00e9galement des d\u00e9fis aux administrateurs r\u00e9seau, dont les outils de supervision perdent la visibilit\u00e9 sur le trafic utilisateur. Les proxies HTTPS sont donc souvent utilis\u00e9s pour appliquer des r\u00e8gles de contr\u00f4le d’acc\u00e8s ou de filtrage de contenu, mais ces pratiques exposent les communications sensibles \u00e0 des tiers, r\u00e9v\u00e9lant la tension persistante entre supervision et protection de la vie priv\u00e9e. Cette th\u00e8se s’attaque \u00e0 cette probl\u00e9matique en exploitant des techniques cryptographiques avanc\u00e9es, telles que le chiffrement searchable et le chiffrement bas\u00e9 sur les attributs, permettant l’analyse de donn\u00e9es chiffr\u00e9es tout en pr\u00e9servant leur confidentialit\u00e9 et en appliquant un contr\u00f4le d’acc\u00e8s. ous nous concentrons sur deux cas d\u2019usage repr\u00e9sentatifs. Premi\u00e8rement, nous proposons un cadre pour analyser des journaux de services Internet chiffr\u00e9s gr\u00e2ce \u00e0 des recherches par mots-cl\u00e9s contextualis\u00e9es, d\u00e9l\u00e9gu\u00e9es et contr\u00f4l\u00e9es, offrant une solution pratique pour l’analyse forensique dans des environnements externalis\u00e9s. Deuxi\u00e8mement, nous d\u00e9veloppons un syst\u00e8me de filtrage de contenu sur trafic chiffr\u00e9 qui assure une application fine des r\u00e8gles au niveau des URL tout en pr\u00e9servant la vie priv\u00e9e des utilisateurs. Au-del\u00e0 de l’analyse forensique et du filtrage de contenu, cette th\u00e8se \u00e9tudie \u00e9galement la conception d’un protocole multicloud s\u00e9curis\u00e9 et pratique, permettant la r\u00e9cup\u00e9ration et le partage efficace de fichiers entre fournisseurs non fiables tout en garantissant confidentialit\u00e9, recherche et int\u00e9grit\u00e9. Les utilisateurs restent sans gestion directe de cl\u00e9s, s’appuyant sur un proxy qui orchestre le stockage et la recherche sans acc\u00e9der aux donn\u00e9es en clair. Toutes les solutions propos\u00e9es ont \u00e9t\u00e9 impl\u00e9ment\u00e9es et \u00e9valu\u00e9es \u00e0 l’aide de sc\u00e9narios r\u00e9alistes, montrant leur efficacit\u00e9 et leur facilit\u00e9 de mise en \u0153uvre en production.<\/p>\n\n\n\n Abstract :<\/strong><\/p>\n\n\n\n Communications over the Internet are inherently exposed to interception when transmitted in cleartext. To mitigate this risk, encryption has become the dominant mode of communication. While encryption improves security and privacy, it also challenges network administrators, whose monitoring solutions lose visibility into user traffic. As a result, HTTPS interception proxies are often used to apply access control or content filtering, but these practices expose sensitive communications to third parties, highlighting the tension between security monitoring and privacy. This thesis addresses this tension using advanced cryptographic techniques such as searchable encryption and attribute-based encryption, enabling analysis of encrypted data while preserving confidentiality and enforcing access control. We focus on two representative use cases. First, we design a framework for analyzing encrypted internet service logs through contextualized, delegated, and controlled keyword searches, providing a practical solution for forensic analysis in outsourced settings. Second, we propose a system for content filtering over encrypted traffic that achieves fine-grained, URL-level policy enforcement while preserving user privacy. Beyond forensic analysis and content filtering, this thesis also investigates the design of a secure and practical multicloud storage protocol, enabling efficient file retrieval and sharing across untrusted providers while ensuring confidentiality, searchability, and integrity. Users remain keyless, relying on a proxy to orchestrate storage and search without accessing plaintexts. All proposed solutions have been implemented, evaluated on realistic workloads, and shown to be practical and effective.<\/p>\n","protected":false},"excerpt":{"rendered":" L’Ecole doctorale : Ecole Doctorale de l’Institut Polytechnique de Paris et le Laboratoire de recherche SAMOVAR – Services r\u00e9partis, Architectures, Mod\u00e9lisation, Validation, Administration des R\u00e9seaux pr\u00e9sentent l\u2019AVIS DE SOUTENANCE de Monsieur Adam Oumar ABDEL-RAHMAN Autoris\u00e9 \u00e0 pr\u00e9senter ses travaux en vue de l\u2019obtention du Doctorat de l’Institut Polytechnique de Paris, pr\u00e9par\u00e9 \u00e0 T\u00e9l\u00e9com SudParis en […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[286,603],"tags":[],"class_list":["post-6948","post","type-post","status-publish","format-standard","hentry","category-fractualites-ennews-fr","category-seminaire-scn","entry"],"_links":{"self":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/6948","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/comments?post=6948"}],"version-history":[{"count":1,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/6948\/revisions"}],"predecessor-version":[{"id":6949,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/posts\/6948\/revisions\/6949"}],"wp:attachment":[{"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/media?parent=6948"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/categories?post=6948"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/samovar.telecom-sudparis.eu\/index.php\/wp-json\/wp\/v2\/tags?post=6948"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
M. Gil UTARD<\/strong>, Professeur, Universit\u00e9 de Picardie Jules Verne, FRANCE – Rapporteur
Mme Caroline FONTAINE<\/strong>, Directrice de recherche, Universit\u00e9 Paris-Saclay, CNRS, ENS Paris-Saclay, FRANCE – Examinateur
M. S\u00e9bastien CANARD<\/strong>, Professeur, T\u00e9l\u00e9com Paris, FRANCE – Examinateur
M. Brice MINAUD<\/strong>, Charg\u00e9 de recherche, ENS Paris, INRIA CASCADE, FRANCE – Examinateur<\/p>\n\n\n\n\u00ab Conception, impl\u00e9mentation et \u00e9valuation de m\u00e9canismes de s\u00e9curit\u00e9 pr\u00e9servant la vie priv\u00e9e pour l’analyse de trafic r\u00e9seau et l’analyse forensique \u00bb<\/h2>\n\n\n\n
pr\u00e9sent\u00e9 par Monsieur Adam Oumar ABDEL-RAHMAN<\/h2>\n\n\n\n