>_

Conducting research on providing industrial control systems (ICS) with security and safety guarantees under real-time constraints, working at the firmware and kernel levels

Presenting research results in front of the business unit, scientists, and engineers.

Reviewing content of the course material, including lecture slides and bootcamp project instructions

Helping students understand the course material

Guiding and supporting teams of 7 students developing a functional mobile application

Development of new features on an in-house tool

Backend services optimizations and complete frontend rewriting of said tool

Development of new features on the main product

Design of a novel security architecture that bridges attestation of real-time execution with guarantees of real-time availability, even in the presence of a fully compromised Normal world OS present from system startup

Prototype implementation on an Arm TrustZone-enabled development board to demonstrate feasibility of the design

Performance evaluation of the prototype showing the architecture supports high-frequency real-time execution (up to 110kHz, i.e., less than 10us period) with low scheduling latency (as low as 6us), while preserving confidentiality and integrity of IP code and data

Security evaluation showing mitigation of well-known attacks on industrial systems listed in MITRE ATT&CK Matrix for ICS

Design of an Arm CCA-based system providing Non-secure world enclaves with runtime isolation and peripheral interaction isolation

Implementation of a multi-GPT (Granule Protection Table) design for core-wise memory partitioning

Secure Monitor implementation in Trusted Firmware-A with support for RME (Realm Management Extensions)

Implementation and comparison of different in-process memory isolation techniques

Isolation of an untrusted library from the rest of the application at the process level

System programming/security -- C, Aarch64 assembly, Arm v8 and v9 internals (Trusted Firmware-A, OP-TEE, TrustZone, CCA)

Software development/security -- C, C#, Java, Scala, Reverse engineering (Ghidra)

Web development/security -- HTML, CSS, JS, PHP, .NET

Mobile development/security -- Java, Kotlin, Jetpack Compose

Compiler design

System security

Trusted Execution Environments (TEE)

Operating systems

Software security

Software engineering

Computer languages, compilers

French (Native)

English (Fluent)

German (Basic)