Benjamin Chetioui

Benjamin Chetioui

Ph.D. started in: 2017
Expected year of graduation: 2022
COINS consortium member: University of Bergen
Supervised by: Jaakko Järvi, Magne Haveraaen
Links:
Research area: Secure Software
Project title: Building High-Integrity Software using Property-Based Testing
Project description: As part of the Bergen Language Design Laboratory (“BLDL”, part of the Programming Theory group at the University of Bergen), my particular project is at the crossroads of Language Design, Generic Programming, and Information Security.

We believe that programming languages today do not provide developers with sufficient support in structuring and organizing abstract data types and algorithms, and more generally properly specifying their Application Programming Interfaces (APIs). These underspecified software elements often lead to undefined behaviour and largely discourage code reuse. Undefined behaviour leads to critical security flaws, which can be exploited by third parties with potentially fatal consequences. The difficulty of code reuse leads to more of the former, as well as to further financials costs since development time is increased.

The goal of my doctoral project is to provide developers with the keys to producing high-integrity software, i.e., software that is:
– secure (data can’t be compromised);
– safe (guaranteed not to cause harm);
– robust (can withstand attacks);
– reliable (actually performs as intended).

I focus on generic programming as the foundational programming methodology for such software, using the fully generic language Magnolia designed and developed at BLDL.

Publications:

Benjamin Chtioui Richard Chetioui, Mikhail Barash, Magne Haveraaen (2021). An Ecosystem Architecture for the Magnolia Programming Language

Benjamin Chetioui, Ole Jørgen Abusdal, Magne Haveraaen, Jaakko Järvi, Lenore Mullin (2021). Padding in the Mathematics of Arrays

Mathilde Boltenhagen, Benjamin Chetioui, Laurine Huber (2020). An Alignment Cost-Based Classification of Log Traces Using Machine-Learning

Alessandro Budroni, Benjamin Chetioui, Ermes Franch (2020). Attacks on Integer-RLWE

Benjamin Chetioui (2019). Bitshift Writeup (Sogeti Cyber E-Scape 2019 Qualifier)

Benjamin Chetioui (2019). CVE-2019-6453: RCE on mIRC <7.55 using argument injection through custom URI protocol handlers

Benjamin Chetioui (2019). Drinks Writeup (Insomnihack Teaser 2019)

Benjamin Chetioui (2019). RCE through URI protocol handlers on mIRC <7.55 (CVE-2019-6453)

Benjamin Chetioui, Lenore Mullin, Ole Jørgen Abusdal, Magne Haveraaen, Jaakko Timo Henrik Järvi, Sandra Macià (2019). Finite difference methods fengshui: alignment through a mathematics of arrays

Benjamin Chetioui (2018). BearShare 1 & 2 Writeup (AceBear Security Contest 2018)

Benjamin Chetioui (2018). Doors of Durin Writeup (Nuit Du Hack 2018)

Benjamin Chetioui (2018). Fleet Writeup (Nuit Du Hack 2018)

Benjamin Chetioui (2018). Hello fibonacci? Writeup (AceBear Security Contest 2018)

Benjamin Chetioui (2018). Nice Code Writeup (ASIS CTF Quals 2018)

Benjamin Chetioui (2018). On a pas les bases Writeup (Nuit Du Hack 2018)

Benjamin Chetioui (2018). Paddinganography: hiding data in baseN-encoded strings

Benjamin Chetioui (2018). Pixelly Writeup (EasyCTF IV)

Benjamin Chetioui (2018). Production debugging note (SigSegv1 CTF)

Benjamin Chetioui (2018). Souper Strong Primes, Hidden Key and Soupstitution Writeups (EasyCTF IV)

Benjamin Chetioui (2018). Tree of life Writeup (Nuit Du Hack 2018)

Benjamin Chetioui (2018). Very personal portefolio Writeup (Nuit Du Hack 2018)