About

I am currently a PhD student at the Loria / CNRS in Nancy, France.

My research is devoted to computer viruses and more generally to computer-related threats. My main line of research is about the formalization and protection against viral mutation techniques, using behavior analysis.

Tools

• 

  APIN

  A Pin tool for malware analysis. Apin instruments executable files and dynamic libraries and constructs a detailed trace of the system calls with the following features:

  • Typed specification of the Windows API (system calls and common structures);
  • Exploration and serialization of parameters;
  • Typed data-flow;
  • A core library, independent from Pin and extensible, to manipulate the Windows API.

  Links and documentation will follow soon.

• Miscellaneous

  These tools are currently unpublished. They deal with:

  • Hook instrumentation;
  • Dynamic construction and visualization of the Control flow graph and Data dependency graph.

Icons courtesy of http://turbomilk.com

Publications

Talks