Benjamin Chetioui

1

Benjamin Chetioui

Ph.D. started in: 2017
Expected year of graduation: 2022
COINS consortium member: University of Bergen
Supervised by: Jaakko Järvi, Magne Haveraaen
Links: Cristin
Research area: Secure Software
Project title: Building High-Integrity Software using Property-Based Testing
Project description: As part of the Bergen Language Design Laboratory (“BLDL”, part of the Programming Theory group at the University of Bergen), my particular project is at the crossroads of Language Design, Generic Programming, and Information Security.

We believe that programming languages today do not provide developers with sufficient support in structuring and organizing abstract data types and algorithms, and more generally properly specifying their Application Programming Interfaces (APIs). These underspecified software elements often lead to undefined behaviour and largely discourage code reuse. Undefined behaviour leads to critical security flaws, which can be exploited by third parties with potentially fatal consequences. The difficulty of code reuse leads to more of the former, as well as to further financials costs since development time is increased.

The goal of my doctoral project is to provide developers with the keys to producing high-integrity software, i.e., software that is:
– secure (data can’t be compromised);
– safe (guaranteed not to cause harm);
– robust (can withstand attacks);
– reliable (actually performs as intended).

I focus on generic programming as the foundational programming methodology for such software, using the fully generic language Magnolia designed and developed at BLDL.

Publications:

  1. Benjamin Chetioui (2019). Bitshift Writeup (Sogeti Cyber E-Scape 2019 Qualifier)
  2. Benjamin Chetioui (2019). CVE-2019-6453: RCE on mIRC <7.55 using argument injection through custom URI protocol handlers
  3. Benjamin Chetioui (2019). Drinks Writeup (Insomnihack Teaser 2019)
  4. Benjamin Chetioui (2019). RCE through URI protocol handlers on mIRC <7.55 (CVE-2019-6453)
  5. Benjamin Chetioui, Lenore Mullin, Ole Jørgen Abusdal, Magne Haveraaen, Jaakko Timo Henrik Järvi, Sandra Macià (2019). Finite difference methods fengshui: alignment through a mathematics of arrays
  6. Benjamin Chetioui (2018). BearShare 1 & 2 Writeup (AceBear Security Contest 2018)
  7. Benjamin Chetioui (2018). Doors of Durin Writeup (Nuit Du Hack 2018)
  8. Benjamin Chetioui (2018). Fleet Writeup (Nuit Du Hack 2018)
  9. Benjamin Chetioui (2018). Hello fibonacci? Writeup (AceBear Security Contest 2018)
  10. Benjamin Chetioui (2018). Nice Code Writeup (ASIS CTF Quals 2018)
  11. Benjamin Chetioui (2018). On a pas les bases Writeup (Nuit Du Hack 2018)
  12. Benjamin Chetioui (2018). Paddinganography: hiding data in baseN-encoded strings
  13. Benjamin Chetioui (2018). Pixelly Writeup (EasyCTF IV)
  14. Benjamin Chetioui (2018). Production debugging note (SigSegv1 CTF)
  15. Benjamin Chetioui (2018). Souper Strong Primes, Hidden Key and Soupstitution Writeups (EasyCTF IV)
  16. Benjamin Chetioui (2018). Tree of life Writeup (Nuit Du Hack 2018)
  17. Benjamin Chetioui (2018). Very personal portefolio Writeup (Nuit Du Hack 2018)
  18. Benjamin Chetioui (2018). VulnShop Writeup (Insomnihack Teaser 2018)
  19. Benjamin Chetioui (2018). Wawacoin Writeup (Nuit du Hack Quals 2018)
  20. Benjamin Chetioui (2018). gmx Writeup (Ångstrom CTF 2018)
  21. Benjamin Chetioui (2018). icmp Writeup (Nuit Du Hack 2018)
  22. Benjamin Chetioui (2018). ndash Writeup (Nuit Du Hack 2018)
  23. Benjamin Chetioui (2017). Pizzagate Writeup (34C3 CTF)
  24. Benjamin Chetioui (2017). SqlSRF Writeup (SECCON CTF 2017)
  25. Benjamin Chetioui (2017). Ssi Writeup (WhiteHat Grand Prix CTF 2017)
This entry was posted in Students and tagged . Bookmark the permalink.