[Last update: 04 November 2022]

Who Am I?

I am currently Postdoc in the Capsule team, inside the IRISA laboratory. I am supervised by Annelie Heuser.

I am involved in two ANR:

• AHMA: Automated Hardware Malware Analysis,
• IDROMEL: Improving the Design of secure systems by a Reduction Of Micro-architectural Effects on side-channeL Attacks Images (IRISA, LAAS-CNRS, LIP6, CEA-list, ARM, DGA)

I was previously:

• Postdoc in the MAIS team, inside TU-Darmstadt. I was supervised by Heiko Mantel, involved in the DFG collaborative research center CROSSING and created the side-channel lab.

I completed my PhD at Secure-IC and COMELEC supervised by Sylvain Guilley:

Multidimensionality of the models and the data in the side-channel domain. (Multidimensionnalité des modèles et des données dans le domaine des canaux auxiliaires)

Damien Marion - PhD thesis - Télécom Paris, France (2018)

Last publications

1. ULTRA: Ultimate Rootkit Detection over the Air

   Duy-Phuc Pham, Damien Marion, and Annelie Heuser - 25th International Symposium on Research in Attacks, Intrusions and Defenses, RAID 2022, Limassol, Cyprus, October 26-28, 2022 (2022)

2. Obfuscation Revealed: Leveraging Electromagnetic Signals for Obfuscated Malware Classification

   Duy-Phuc Pham, Damien Marion, Matthieu Mastio, and Annelie Heuser - ACSAC ’21: Annual Computer Security Applications Conference, Virtual Event, USA, December 6 - 10, 2021 (2021)

3. Poster: Obfuscation Revealed - Using Electromagnetic Emanation to Identify and Classify Malware

   Duy-Phuc Pham, Damien Marion, and Annelie Heuser - IEEE European Symposium on Security and Privacy, EuroS&P 2021, Vienna, Austria, September 6-10, 2021 (2021)

Conferences and Workshops

1. Experiment on Side-Channel Key-Recovery using a Real LPWA End-device

   Kazuhide Fukushima, Damien Marion, Yuto Nakano, Adrien Facon, Shinsaku Kiyomoto, and Sylvain Guilley - Proceedings of the 5th International Conference on Information Systems Security and Privacy, ICISSP 2019, Prague, Czech Republic, February 23-25, 2019 (2019)

2. Binary Data Analysis for Source Code Leakage Assessment

   Adrien Facon, Sylvain Guilley, Matthieu Lec’Hvien, Damien Marion, and Thomas Perianin - Innovative Security Solutions for Information Technology and Communications - 11th International Conference, SecITC 2018, Bucharest, Romania, November 8-9, 2018, Revised Selected Papers (2018)

3. Give me your binary, I’ll tell you if it leaks

   Antoine Bouvet, Nicolas Bruneau, Adrien Facon, Sylvain Guilley, and Damien Marion - 13th International Conference on Design & Technology of Integrated Systems In Nanoscale Era, DTIS 2018, Taormina, Italy, April 9-12, 2018 (2018)

4. Less is More - Dimensionality Reduction from a Theoretical Perspective

   Nicolas Bruneau, Sylvain Guilley, Annelie Heuser, Damien Marion, and Olivier Rioul - Cryptographic Hardware and Embedded Systems - CHES 2015 - 17th International Workshop, Saint-Malo, France, September 13-16, 2015, Proceedings (2015)

5. Simple Power Analysis on AES Key Expansion Revisited

   Christophe Clavier, Damien Marion, and Antoine Wurcker - Cryptographic Hardware and Embedded Systems - CHES 2014 - 16th International Workshop, Busan, South Korea, September 23-26, 2014. Proceedings (2014)

6. Software Camouflage

   Sylvain Guilley, Damien Marion, Zakaria Najm, Youssef Souissi, and Antoine Wurcker - Foundations and Practice of Security - 6th International Symposium, FPS 2013, La Rochelle, France, October 21-22, 2013, Revised Selected Papers (2013)

Journal Articles

1. Optimal side-channel attacks for multivariate leakages and multiple models

   Nicolas Bruneau, Sylvain Guilley, Annelie Heuser, Damien Marion, and Olivier Rioul - J. Cryptogr. Eng. (2017)

2. Complete reverse-engineering of AES-like block ciphers by SCARE and FIRE attacks

   Christophe Clavier, Quentin Isorez, Damien Marion, and Antoine Wurcker - Cryptogr. Commun. (2015)

Talks

1. Side-channel (data) analysis for embedded security

   Intelligent Security: Is "AI for Cybersecurity" a Blessing or a Curse, Dagstuhl, Germany - October, 9 - 13 (2022)

2. Obfuscation Revealed: Leveraging Electromagnetic Emanations for IoT Malware Classification

   hardwear.io’22 USA [Santa Clara, CA - June, 9] (2022)

3. Monitoring and Analysis of Electromagnetic Emanation from Malware Execution

   PHISIC’22 (Gardanne, France - May, 18 - 20) (2022)

4. Malwares revealed through EM

   DUC (European Digital UniverCity) - Session III: AI & Security (Online - November, 24) (2021)

5. When Electromagnetic Signals Reveal Obfuscated Malware: Deep and Machine Learning Use cases (Feat. Duy-Phuc Pham)

   SemSecuElec (Rennes, France - October, 22) (2021)

6. Binary Data Analysis for Source Code Leakage Assessment

   CIDRE Research Team (Rennes, France - April, 27) (2021)

Media Coverage

Podcasts

• Leveraging electromagnetic emanations for IoT malware classification. electronicspecifier, Series 9 – Episode 4, September 16th, 2022.

Articles

• Detecting evasive malware on IOT devices using electromagnetic emanations. The Hacker News, January 3rd, 2022.
• Using EM Waves to Detect Malware. Schneier on Security, January 14, 2022.
• Raspberry Pi Can Detect Malware Using Electromagnetic Waves, Say Researchers. Indian Times, January 16th, 2022.
• On peut détecter des malwares avec précision grâce… aux ondes électromagnétiques . 01 net, January 16th, 2022 (in French).
• Identifying Malware By Sniffing Its EM Signature. harckday, January 20th, 2022.
• Detect malware with electromagnetic waves and Raspberry Pi. RasperryPi, February 1st, 2022.