Profile pic

I'm a Doctor in Web Security & Privacy, graduated at University of Lille, in the Spirals team. My subjects cover browser fingerprinting, web authentication, web privacy and security. I work mainly in JavaScript and Python, but I also program sometimes in Rust, Go, and Java. In the same time, I look forward to find job opportunities in stimulating environments with challenging scientific aspects, in both private and public sectors.



Experience

Ph.D in Web Privacy & Security @ University of Lille/Inria - France 2018 - 2022

I worked on strengthening the security of web authentication systems. I leveraged the uniqueness and stability properties of browser fingerprinting to build a Risk-Based Authentication (RBA) system using browser fingerprints as a feature. I developed a demo to present this work and highlight its benefits.

Other subjects of my research covered several aspects of fingerprinting, such as linking, defenses, detection & classification or its usage to strengthen bot detection. I was a co-maintainer of the AmIUnique.org website.
Finally, I also worked on several aspects of privacy on the web and on mobile applications.

JavaScript, Python, Java, WebAssembly

Thesis manuscript Defense presentation Defense slide


Ph.D representative @ University of Lille - France 2019 - 2022

I was elected representative of the PhD students at the Cristal lab from 2019 to 2022 and at the SPI doctoral school (newly named MADIS doctoral school) from 2020 to 2021. These responsabilities include taking part into professors and researchers recruitment, foundings decision, administrative and human resources management.

I am also president of the Association des Doctorants en Sciences de Lille (Ph.D Students in Sciences of Lille Association) from 2019 to 2022. The association aims at enlivening the Ph.D. students life through social activities, such as bar or bowling.


Teaching Assistant @ University of Lille - France 2019 - 2021

I teached in the first year of the Bachelor degree. I supervised Practical Work in Algorithmic and Spreadsheet. I also managed student projects in Master degree on Software Engineering, Web development and Web security.


Software Engineer @ Vade Secure - Paris/France 2017 - 2018

The original product of the company was a filter working with a Saas model. It has a lot of constraints for the company (infrastructures, maintenance) as well as the customers (redirecting the MX records).

The project I worked on was an Office 365 plugin integrating the company's filter. Lighter, faster and completely transparent for the user, the product gets information from the filter and applies the configured behavior, such as deleting the email, moving it to a different folder, or adding a banner to warn for a phishing or spear-phishing threat. The project also includes designing and developing functionalities such as logs and statistical reports, to help the domain administrator to make decisions and adapt the behavior desired.

On another part, I worked on the anti-phishing solution. URLs in emails are checked during the email filtering, but what they are pointing to can be changed after the emails are sent. The solution I helped to design and develop was a rewriting of the URLs in emails to be redirected to a dynamic URL checker.

Go, JavaScript


Intern - R&D Software Developer @ Dassault Systèmes - Paris area/France 2017

The pharmaceutical industry is always trying to develop new medicines. To do so, they need to easily make links between biological elements that could interact together to propose the desired effect. The project I worked on wanted to fill that need. The goal was to develop a piece of software that could easily suggest links and interaction between proteins, chemical elements such as enzymes to help with the visualization of the impacts of such combinations.

In this project, the data sources were multiple: proteins (from UniProt), molecules, compounds (from ChEMBL), interactions, and so on. The data was stored with the RDF framework and were huge: some dataset had several dozens of billions of entries. My work included the study of data sources and the creation of indexing pipelines. To index the data, we tested several tools, some were public - such as Virtuoso - and some were developed internally.

Java, RDF

PDF


Intern - Developer @ Inria - Lille/France 2016

I checked the abstract syntax semantic of the ShEx language and implemented two validation algorithms on ShEx graphs.

Java, RDF


Intern - Developer @ Bikay - Phnom Penh/Cambodia 2015

I worked on a hotel room and accommodation managing web app.

HTML/CSS, PHP/Laravel

PDF


Intern - Developer @ Høgskolen i Sør-Trøndelag - Trondheim/Norway 2014

In a research laboratory, I helped create a piece of software to detect visualize 3D coordinates in real-time.

C/C++, Qt

PDF



Scientific publications

The Price to Play: a Privacy Analysis of Free and Paid Games in the Android Ecosystem
Pierre Laperdrix, Naif Mehanna, Antonin Durey, Walter Rudametkin
Proceedings of The Web Conference (WWW 2022) - April 2022, Lyon, France
PDF: Soon to come! Artifact
DRAWN APART: A Device Identification Technique based on Remote GPU Fingerprinting
Tomer Laor, Naif Mehanna, Antonin Durey, Vitaly Dyadyuk, Pierre Laperdrix, Clémentine Maurice, Yossi Oren, Romain Rouvoy, Walter Rudametkin, Yuval Yarom
Proceedings of the Network and Distributed System Security Symposium (NDSS 2022) - April 2022, San Diego, United States
Awarded by the Mozilla Firefox Bug Bounty Program - 2nd quarter 2021
FP-Redemption: Studying Browser Fingerprinting Adoption for the Sake of Web Security
Antonin Durey, Pierre Laperdrix, Walter Rudametkin, Romain Rouvoy
Proceedings of the 18th Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2021) - July 2021, Virtual Event


Education

PhD in Web Security & Privacy - University of Lille 2022
 Web security, Authentication, Browser fingerprinting

Master in Software Engineering - University of Lille 2017
 Continuous Integration, Web Frameworks, Software tools

Bachelor in Computer Science - University of Lille 2015
 Programming, Systems, Networks