Papers

2024

1. Complex Networks

   

   Identifying Obfuscated Code Through Graph-Based Semantic Analysis of Binary Code

   Roxane Cohen, Robin David, Florian Yger, and Fabrice Rossi

   In Complex Networks & Their Applications XIII , Apr 2024

   DOI Bib PDF Slides

   @inproceedings{complex-networks-24,
     title = {Identifying Obfuscated Code Through Graph-Based Semantic Analysis of Binary Code},
     author = {Cohen, Roxane and David, Robin and Yger, Florian and Rossi, Fabrice},
     booktitle = {Complex Networks & Their Applications XIII},
     year = {2024},
     month = apr,
     pages = {135-148},
     isbn = {978-3-031-82426-5},
     doi = {10.1007/978-3-031-82427-2_12},
     dimensions = {true},
   }

2. CAID

   

   Improving binary diffing through similarity and matching intricacies

   Roxane Cohen, Robin David, Riccardo Mori, Florian Yger, and 1 more author

   In 7th Conference on Artificial Intelligence for Defense , Nov 2024

   Bib PDF Slides

   @inproceedings{caid-24,
     title = {Improving binary diffing through similarity and matching intricacies},
     author = {Cohen, Roxane and David, Robin and Mori, Riccardo and Yger, Florian and Rossi, Fabrice},
     booktitle = {7th Conference on Artificial Intelligence for Defense},
     eventdate = {2021-11-19/2021-11-20},
     series = {CEUR Workshop Proceedings},
     venue = {Rennes, France},
     year = {2024},
     month = nov,
     dimensions = {true},
   }

2023

1. SBFT

   

   PASTIS: A Collaborative Approach to Combine Heterogeneous Software Testing Techniques

   Robin David, Richard Abou Chaaya, and Christian Heitman

   In IEEE/ACM International Workshop on Search-Based and Fuzz Testing, SBFT@ICSE 2023, Melbourne, Australia, May 14, 2023 , May 2023

   DOI Bib PDF Slides

   @inproceedings{sbft-2023,
     author = {David, Robin and Chaaya, Richard Abou and Heitman, Christian},
     title = {{PASTIS:} {A} Collaborative Approach to Combine Heterogeneous Software
                       Testing Techniques},
     booktitle = {{IEEE/ACM} International Workshop on Search-Based and Fuzz Testing,
                       SBFT@ICSE 2023, Melbourne, Australia, May 14, 2023},
     pages = {17--24},
     publisher = {{IEEE}},
     year = {2023},
     month = may,
     url = {https://doi.org/10.1109/SBFT59156.2023.00014},
     doi = {10.1109/SBFT59156.2023.00014},
     timestamp = {Wed, 02 Aug 2023 11:15:08 +0200},
     dimensions = {true},
   }

2022

1. CODASPY

   

   Building a Commit-level Dataset of Real-world Vulnerabilities

   Alexis Challande, Robin David, and Guénaël Renault

   In CODASPY ’22: Twelveth ACM Conference on Data and Application Security and Privacy, Baltimore, MD, USA, April 24 - 27, 2022 , Apr 2022

   DOI Bib PDF Slides

   @inproceedings{codaspy-2022,
     author = {Challande, Alexis and David, Robin and Renault, Gu{\'{e}}na{\"{e}}l},
     editor = {Joshi, Anupam and Fern{\'{a}}ndez, Maribel and Verma, Rakesh M.},
     title = {Building a Commit-level Dataset of Real-world Vulnerabilities},
     booktitle = {{CODASPY} '22: Twelveth {ACM} Conference on Data and Application Security
                       and Privacy, Baltimore, MD, USA, April 24 - 27, 2022},
     pages = {101--106},
     publisher = {{ACM}},
     year = {2022},
     month = apr,
     url = {https://doi.org/10.1145/3508398.3511495},
     doi = {10.1145/3508398.3511495},
     timestamp = {Sun, 19 Jan 2025 13:31:18 +0100},
     dimensions = {true},
   }

2021

1. C&ESAR

   

   From Source Code to Crash Test-Case through Software Testing Automation

   Robin David, Jonathan Salwan, and Justin Bourroux

   In 28th Computer & Electronics Security Application Rendezvous (C&ESAR) , Nov 2021

   Bib PDF Slides

   @inproceedings{cesar-21,
     title = {From Source Code to Crash Test-Case through Software Testing Automation},
     author = {David, Robin and Salwan, Jonathan and Bourroux, Justin},
     booktitle = {28th Computer \& Electronics Security Application Rendezvous (C\&ESAR)},
     editor = {Le Guernic, Gurvan},
     eventdate = {2021-11-16/2021-11-17},
     issn = {1613-0073},
     number = {3056},
     series = {CEUR Workshop Proceedings},
     venue = {Rennes, France},
     year = {2021},
     month = nov,
     pages = {27--37},
     url = {http://ceur-ws.org/Vol-3056/paper-02.pdf},
     dimensions = {true},
   }

2020

1. BAR

   

   QSynth - A Program Synthesis based Approach for Binary Code Deobfuscation

   Robin David, Luigi Coniglio, and Mariano Ceccato

   In Binary Analysis Workshop, BAR@NDSS 2020, San Diego, USA, Feb 23, 2020 , Feb 2020

   Bib PDF Slides

   @inproceedings{bar-2020,
     author = {David, Robin and Coniglio, Luigi and Ceccato, Mariano},
     title = {QSynth - A Program Synthesis based Approach for Binary Code Deobfuscation},
     booktitle = {Binary Analysis Workshop, BAR@NDSS 2020, San Diego, USA, Feb 23, 2020},
     year = {2020},
     month = feb,
     dimensions = {true},
   }

2018

1. LPAR

   

   Arrays Made Simpler: An Efficient, Scalable and Thorough Preprocessing

   Benjamin Farinier, Robin David, Sébastien Bardin, and Matthieu Lemerre

   In LPAR-22. 22nd International Conference on Logic for Programming, Artificial Intelligence and Reasoning, Awassa, Ethiopia, 16-21 November 2018 , Nov 2018

   DOI Bib PDF Slides

   @inproceedings{lpar-2018,
     author = {Farinier, Benjamin and David, Robin and Bardin, S{\'{e}}bastien and Lemerre, Matthieu},
     editor = {Barthe, Gilles and Sutcliffe, Geoff and Veanes, Margus},
     title = {Arrays Made Simpler: An Efficient, Scalable and Thorough Preprocessing},
     booktitle = {{LPAR-22.} 22nd International Conference on Logic for Programming,
                       Artificial Intelligence and Reasoning, Awassa, Ethiopia, 16-21 November
                       2018},
     series = {EPiC Series in Computing},
     volume = {57},
     pages = {363--380},
     publisher = {EasyChair},
     year = {2018},
     month = nov,
     url = {https://doi.org/10.29007/dc9b},
     doi = {10.29007/DC9B},
     timestamp = {Sun, 15 Aug 2021 00:16:53 +0200},
     dimensions = {true},
   }

2017

1. PhD Thesis

   

   Formal Approaches for Automatic Deobfuscation and Reverse-engineering of Protected Codes.

   Robin David

   University of Lorraine, Nancy, France , Nov 2017

   Bib HTML PDF Slides

   @phdthesis{robinphd,
     author = {David, Robin},
     title = {Formal Approaches for Automatic Deobfuscation and Reverse-engineering
                       of Protected Codes.},
     school = {University of Lorraine, Nancy, France},
     year = {2017},
     url = {https://tel.archives-ouvertes.fr/tel-01549003},
     timestamp = {Tue, 21 Jul 2020 00:40:56 +0200},
     biburl = {https://dblp.org/rec/phd/hal/David17.bib},
     bibsource = {dblp computer science bibliography, https://dblp.org},
     dimensions = {true},
   }

2. S&P

   

   Backward-Bounded DSE: Targeting Infeasibility Questions on Obfuscated Codes

   Sébastien Bardin, Robin David, and Jean-Yves Marion

   In 2017 IEEE Symposium on Security and Privacy (SP) , May 2017

   DOI Bib PDF

   @inproceedings{sp-2017-david,
     author = {Bardin, S{\'{e}}bastien and David, Robin and Marion, Jean{-}Yves},
     booktitle = {2017 IEEE Symposium on Security and Privacy (SP)},
     title = {Backward-Bounded DSE: Targeting Infeasibility Questions on Obfuscated Codes},
     year = {2017},
     volume = {},
     number = {},
     pages = {633-651},
     keywords = {invasive software;backward-bounded DSE;call stack tampering;dynamic disassembly;dynamic symbolic execution;malware analysis;obfuscated codes;opaque predicates;security analysis;software deobfuscation;static disassembly;Context;Malware;Robustness;Runtime;Standards;Syntactics;Tools;Code analysis;Deobfuscation;Malware;Reverse-Engineering;Symbolic Execution},
     doi = {10.1109/SP.2017.36},
     issn = {},
     month = may,
     dimensions = {true},
   }

2016

1. SSPREW

   

   Finding the Needle in the Heap: Combining Static Analysis and Dynamic Symbolic Execution to Trigger Use-After-Free

   Josselin Feist, Laurent Mounier, Sébastien Bardin, Marie-Laure Potet, and 1 more author

   In 6th Software Security, Protection, and Reverse Engineering Workshop, SSPREW 2016, Los Angeles, CA, USA, December 5-6, 2016 , Dec 2016

   DOI Bib PDF

   @inproceedings{ssprew-2016-feist,
     author = {Feist, Josselin and Mounier, Laurent and Bardin, S{\'{e}}bastien and Potet, Marie{-}Laure and David, Robin},
     title = {Finding the Needle in the Heap: Combining Static Analysis and Dynamic Symbolic Execution to Trigger Use-After-Free},
     booktitle = {6th Software Security, Protection, and Reverse Engineering Workshop,
                   {SSPREW} 2016, Los Angeles, CA, USA, December 5-6, 2016},
     pages = {1--12},
     year = {2016},
     month = dec,
     doi = {10.1145/3015135.3015137},
     dimensions = {true},
   }

2. SANER

   

   BINSEC/SE: A Dynamic Symbolic Execution Toolkit for Binary-level Analysis

   Robin David, Sébastien Bardin, Thanh Dinh Ta, Josselin Feist, and 3 more authors

   In 23rd IEEE International Conference on Software Analysis, Evolution, and Reengineering, SANER 2016, Osaka, Japan, March 14-18, 2016 , Dec 2016

   DOI Bib PDF Slides

   @inproceedings{saner-2016-david,
     author = {David, Robin and Bardin, S{\'{e}}bastien and Ta, Thanh Dinh and Feist, Josselin and Mounier, Laurent and Potet, Marie-Laure and Marion, Jean{-}Yves},
     title = {BINSEC/SE: A Dynamic Symbolic Execution Toolkit for Binary-level Analysis},
     booktitle = {23rd {IEEE} International Conference on Software Analysis, Evolution, and Reengineering,
                   {SANER} 2016, Osaka, Japan, March 14-18, 2016},
     pages = {1--6},
     year = {2016},
     crossref = {DBLP:conf/saner/2016},
     doi = {10.1109/SANER.2016.43},
     dimensions = {true},
   }

3. ISSTA

   

   Specification of Concretization and Symbolization Policies in Symbolic Execution

   Robin David, Sébastien Bardin, Josselin Feist, Laurent Mounier, and 3 more authors

   In Proceedings of the 2016 International Symposium on Software Testing and Analysis, Saarbrücken, Germany , Dec 2016

   DOI Bib PDF Slides

   @inproceedings{issta-2016-david,
     author = {David, Robin and Bardin, S{\'{e}}bastien and Feist, Josselin and Mounier, Laurent and Potet, Marie-Laure and Ta, Thanh Dinh and Marion, Jean{-}Yves},
     title = {Specification of Concretization and Symbolization Policies in Symbolic Execution},
     booktitle = {Proceedings of the 2016 International Symposium on Software Testing and Analysis},
     series = {ISSTA 2016},
     location = {Saarbrücken, Germany},
     numpages = {11},
     year = {2016},
     publisher = {ACM},
     doi = {10.1145/2931037.2931048},
     dimensions = {true},
   }

2015

1. ICST

   

   Sound and Quasi-Complete Detection of Infeasible Test Requirements

   Sébastien Bardin, Mickaël Delahaye, Robin David, Nikolai Kosmatov, and 3 more authors

   In 8th IEEE International Conference on Software Testing, Verification and Validation, ICST 2015, Graz, Austria, April 13-17, 2015 , Dec 2015

   DOI Bib PDF Slides

   @inproceedings{icst-2015-bardin,
     author = {Bardin, S{\'{e}}bastien and Delahaye, Micka{\"{e}}l and David, Robin and Kosmatov, Nikolai and Papadakis, Mike and Traon, Yves Le and Marion, Jean{-}Yves},
     title = {Sound and Quasi-Complete Detection of Infeasible Test Requirements},
     booktitle = {8th {IEEE} International Conference on Software Testing, Verification
                    and Validation, {ICST} 2015, Graz, Austria, April 13-17, 2015},
     pages = {1--10},
     year = {2015},
     url = {http://dx.doi.org/10.1109/ICST.2015.7102607},
     doi = {10.1109/ICST.2015.7102607},
     timestamp = {Tue, 12 May 2015 09:17:34 +0200},
     dimensions = {true},
   }