Hugo Kermabon-Bobinnec

Biography

I am a Ph.D. student in Information and Systems Engineering at the NSERC/Ericsson Industrial Research Chair in SDN/NFV Security, Concordia University, Montreal, where I am supervised by Dr. Lingyu Wang and Dr. Suryadipta Majumdar. I obtained my M.A.Sc in Information Systems Security from Concordia University, Montreal. Previously, I studied embedded systems, hardware acceleration and electronics at IMT Atlantique, France. I am also interested in ML and neural networks. Currently, my research interests include containers security, 5G security, cloud-computing, network function virtualization (NFV) and OS security.

Publications

[IEEE TIFS] "ACE-WARP: A Cost-Effective Approach to Proactive and Non-disruptive Attack Mitigation in Kubernetes Clusters"
Sima Bagheri, Hugo Kermabon-Bobinnec, Mohammad Ekramul Kabir, Suryadipta Majumdar, Lingyu Wang, Yosr Jarraya, Boubakr Nour, Makan Pouzandi.
IEEE Transactions on Information Forensics and Security (Impact Factor 6.3)

[IEEE TDSC] "PerfSPEC: Performance Profiling-based Proactive Security Policy Enforcement for Containers"
Hugo Kermabon-Bobinnec, Sima Bagheri, Mahmood GholipourChoubeh, Suryadipta Majumdar, Yosr Jarraya, Lingyu Wang, Makan Pourzandi.
IEEE Transactions on Dependable and Secure Computing (Impact Factor 7.3)

[CODASPY 2024] "CCSM: Building Cross-Cluster Security Models for Edge-Core Environments Involving Multiple Kubernetes Clusters"
Mahmood GholipourChoubeh, Hugo Kermabon-Bobinnec, Suryadipta Majumdar, Yosr Jarraya, Lingyu Wang, Boubakr Nour, Makan Pourzandi.
Proc. the 14th ACM Conference on Data and Application Security and Privacy (CODASPY 2024), Porto, Portugal, June 19 - 21, 2024. (Acceptance ratio 34/160≈21.25%)

[US PATENT] "Dynamic System Calls-level Security Defense System for Containerized Applications"
Hugo Kermabon-Bobinnec, Makan Pourzandi, Lingyu Wang, Suryadipta Majumdar, Yosr Jarraya.
US Patent Application, Filed with Ericsson, February 22, 2024.

[NDSS 2024] "Phoenix: Surviving Unpatched Vulnerabilities via Accurate and Efficient Filtering of Syscall Sequences"
Hugo Kermabon-Bobinnec, Yosr Jarraya, Lingyu Wang, Suryadipta Majumdar, Makan Pourzandi.
Proc. the Network and Distributed System Security Symposium (NDSS 2024), San Diego, USA, February 26 - March 1, 2024. (Acceptance ratio 140/694≈20.2%)

[IEEE ICC 2023] "Warping the Defence Timeline: Non-disruptive Proactive Attack Mitigation for Kubernetes Clusters"
Sima Bagheri, Hugo Kermabon-Bobinnec, Suryadipta Majumdar, Yosr Jarraya, Lingyu Wang, Makan Pourzandi.
Proc. the IEEE International Conference on Communications (ICC 2023), Rome, Italy, 28 May - 01 June, 2023. (Acceptance ratio 1,098/2,778≈39.5%)

[Master's thesis] "Proactive Security Policy Enforcement for Containers"
Hugo Kermabon-Bobinnec
Master of Applied Science - Thesis - Concordia University.

[CODASPY 2022] "ProSPEC: Proactive Security Policy Enforcement for Containers"
Hugo Kermabon-Bobinnec, Mahmood GholipourChoubeh, Sima Bagheri, Suryadipta Majumdar, Yosr Jarraya, Makan Pourzandi, Lingyu Wang.
Proc. the 12th ACM Conference on Data and Application Security and Privacy (CODASPY 2022), Baltimore-Washington DC Area, USA, April 24 - 26, 2022. (Acceptance ratio 30/111≈27.0%)

Education

(current) PhD - Information and Systems Engineering, Concordia University, Montreal, Canada.

Supervisors: Dr. Lingyu Wang and Dr. Suryadipta Majumdar
Coursework: INSE6620, COMP6321, ENCS691K
Program CPGA: 4.1/4.3

Master of Applied Science - Information Systems Security, Concordia University, Montreal, Canada.

Thesis: Proactive Security Policy Enforcement for Containers
Supervisors: Dr. Lingyu Wang and Dr. Suryadipta Majumdar
Coursework: INSE6110, INSE6120, INSE6130, INSE6140
Program CPGA: 4.23/4.3

Master of Science - Electronics and Embedded Systems, IMT Atlantique (former Telecom Bretagne), France.

Teaching Experience

Guest Lecturer

INSE 6620: Cloud Security and Privacy - Container and Kubernetes Security (Summer 2024)
INSE 6130: Operating System Security - Container Security (Winter 2024)

Lab Preparator

INSE 6140: Malware Defenses and Application Security - ShellShock, Return-Oriented Program, Malware Analysis
INSE 6130: Operating System Security - Password Security, Container Security

Lab Demonstrator

INSE 6140: Malware Defenses and Application Security (Winter 2023, Winter 2024)
INSE 6130: Operating System Security (Winter 2021, Winter 2022, Winter 2023, Fall 2023, Winter 2023)

Marker

INSE 6140: Malware Defenses and Application Security (Winter 2023, Winter 2024)
INSE 6130: Operating System Security (Fall 2021)

Services

External Reviewer

NDSS 2025
eCrime 2024
CCS 2024
CODSAPY 2023
ESORICS 2022
ICC 2022
Springer International Journal of Information Security (Journal)
Elsevier Computers & Security (Journal)
Springer Peer-to-Peer Networking and Applications (Journal)
IEEE Transactions on Computers (Journal)

Conference Session Chair

CODSAPY 2024: "Measuring Privacy and Security Deployments"

Co-founder & Infrastructure Team Lead - @HackCTF

@Hack (pronounced at-hack) is the first Capture-the-Flag competition organized at Concordia University by Hexploit Alliance in collaboration with TechNation.
Its first edition was held in March 2024, in downtown Montreal, and encountered a large success with more than 500 in-person participants for a 24-hours long CTF. As the infrastructure team lead, I developped, deployed, and maintained the infrastructure to host more than 5000 containers remotely accessible to participants.

Achievements & Awards

Awards

Concordia University Conference and Exposition Allowance
Concordia University Doctoral Fellowship
Concordia University Merit Scholarship

Capture-The-Flag

14th place, NorthSec CTF, 2022
🥉3rd place, Concordia's ECSGA CTF, 2022
14th place, NorthSec CTF, 2021
🥈2nd place, Concordia's JMSB CyberRoyale CTF, 2020
8th place, European Cyber Week (ECW), 2020

CVE-2021-43979 (PoC)

Miscellaneous

Participation in the "AI Against Covid-19" competition organized by IEEE SIGHT Montreal, Darwin AI, and Microsoft, ending up 4th place. More details about our project: AI Against Covid-19

Biography

Publications

Education

(current) PhD - Information and Systems Engineering, Concordia University, Montreal, Canada.

Master of Applied Science - Information Systems Security, Concordia University, Montreal, Canada.

Master of Science - Electronics and Embedded Systems, IMT Atlantique (former Telecom Bretagne), France.

Teaching Experience

Guest Lecturer

Lab Preparator

Lab Demonstrator

Marker

Services

External Reviewer

Conference Session Chair

Co-founder & Infrastructure Team Lead - @HackCTF

Achievements & Awards

Awards

Capture-The-Flag

CVE

Miscellaneous