PhD student in cybersecurity. Also on mastodon: @plumtrie@mastodon.social
Joined April 2023
- Tweets31
- Following59
- Followers47
- Likes129
Dimitri Kokkonis retweeted
🔎 Can CI stop a backdoor before it lands?
💡 Our #ASE26 paper introduces Lily! It uses fuzzing to detect backdoor injections across commits/releases and pinpoint suspect code.
Preprint + artifact now available ↓
📄 binsec.github.io/assets/publ…
🧪 zenodo.org/records/21390730
Dimitri Kokkonis retweeted
Finding backdoors in software is like hunting for a needle that’s actively trying to hide. 🪡🕵️
Check out our @fosdem talk with @plumtrie on using fuzzing to automate the search!
📺 Watch: mirrors.dotsrc.org/fosdem/20…
📜 ICSE Paper: binsec.github.io/assets/publ…
Dimitri Kokkonis retweeted
Proud that our latest work on black-box deobfuscation has just been accepted to @acm_ccs 2025!
Title: "Augmenting Search-based Program Synthesis with Local Inference Rules to Improve Black-box Deobfuscation".
Joint work with @grmenguy Vidal_Attias Nicolas_Bellec and @Jean_YvesMarion
Stay tuned for the camera ready version!
Dimitri Kokkonis retweeted
Back from @PLDI 2025, where Frédéric Recoules and I had the pleasure to give a tutorial on BINSEC and binary-level symbolic execution. Here it is, playable in your browser: binsec.github.io/tutorial-pl…
Dimitri Kokkonis retweeted
On my way to @PLDI 2025. Want to learn more about @BinsecTool, discuss PhD or postdoc positions in the team or simply chat? Feel free to say hello!
Going to @PLDI 2025? Consider attending the @BinsecTool tutorial on binary-level symbolic execution for security analysis. We are waiting for you!
Dimitri Kokkonis retweeted
Happy to have presented our SECUBIC project to the French research community in system security (RESSI'25)!
🏠 secubic-ptcc.github.io
🧑🔬 @Seb_Bardin @Jean_YvesMarion Stefano Zacchiroli
Thanks to the RESSI organizers who had even provided a pool to finish my #OOPSLA reviews! 😇
Dimitri Kokkonis retweeted
Going to @PLDI 2025? Consider attending the @BinsecTool tutorial on binary-level symbolic execution for security analysis. We are waiting for you!
Dimitri Kokkonis retweeted
Check out our ROSARUM benchmark, part of our #icse2025 paper on backdoors and fuzzing:
▶️ It is a fuzzing benchmark (can fuzzers trigger backdoors reliably and fast?)
▶️ It is a backdoor detection benchmark (can code analyses find backdoors reliably?)
⬇️ github.com/binsec/rosarum
Dimitri Kokkonis retweeted
How to detect backdoors efficiently?
🗣️ The slides of our #icse2025 presentation on "Finding Backdoors with Fuzzing" are now available at
⬇️ binsec.github.io/assets/publ…
Dimitri Kokkonis retweeted
11am today at #ICSE2025: Rust provides memory safety to low-level code, but in practice Rust libraries link to unsafe C. @icmccorm, @joshsunshine, and I used dynamic analysis to find 46 cases where the C code broke Rust's memory rules, causing undefined behavior.
Very honored to receive the Best Artifact award at #icse2025 🥳
Congrats and thank you to my coauthors! @michaelmarcozzi, Emilien Decoux, Stefano Zacchiroli
Dimitri Kokkonis retweeted
Too many bugs in the queue, not enough time to fix them all? Happy to share that our work on automated bug priorization has been accepted at @USENIXSecurity 2025 -- joint work with Guilhem Lacombe binsec.github.io/nutshells/u…
On my way to Ottawa and @ICSEconf 🍁
Presenting on Friday (May 2nd) at 16:00 local time in room 210, come say hi ☺️
How to detect backdoors efficiently?
▶️ Backdoors were found in firmware & open-source code
▶️ Detection requires much manual reverse-engineering
▶️ Fuzzers cannot see backdoors
Our @ICSEconf preprint on finding backdoors with fuzzing is at binsec.github.io/nutshells/i…
A thread ⬇️
Dimitri Kokkonis retweeted
git commit -m "attempt to fix CI"
...
git commit -m "attempt to fix CI"
...
git commit -m "attempt to fix CI"
...
git commit -m "attempt to fix CI"
...
git commit -m "attempt to fix CI"
Dimitri Kokkonis retweeted
📢 I am looking for a postdoc on fuzzing, to prevent backdoors and supply-chain attacks!
Come and join the team here in Paris (or spread the word)! 🙂
Details and application: secubic-ptcc.github.io/jobs/…
Dimitri Kokkonis retweeted
ALT regalk: why you should run your own matrix server Chloe: 10 Reasons Why You Should Run Your Own Matrix Server: 1. Unable to decrypt message 2. Unable to decrypt message 3. Unable to decrypt message 4. Unable to decrypt message 5. Unable to decrypt message 6. Unable to decrypt message 7. Unable to decrypt message 8. Unable to decrypt message 9. Unable to decrypt message 10. Unable to decrypt message
Dimitri Kokkonis retweeted
🏆 Our ROSA tool for backdoor detection has won a best artifact award at @ICSEconf!
Try it out: github.com/binsec/rosa
Huge thanks and congrats to my student @plumtrie for his huge and great work! 👏👏👏
We (myself, @michaelmarcozzi, Stefano Zacchiroli, Emilien Decoux) release the ROSA toolchain, enabling fuzzing-based backdoor detection 🎉
Tool: github.com/binsec/rosa
Benchmark: github.com/binsec/rosarum
This work received both Available & Reusable badges at @ICSEconf 🥳
How to detect backdoors efficiently?
▶️ Backdoors were found in firmware & open-source code
▶️ Detection requires much manual reverse-engineering
▶️ Fuzzers cannot see backdoors
Our @ICSEconf preprint on finding backdoors with fuzzing is at binsec.github.io/nutshells/i…
A thread ⬇️
Dimitri Kokkonis retweeted
Happy to read such enthusiastic reactions to our @ICSEconf paper! ☺️
"ROSA Sets a New Standard for Backdoor Detection."
"If you work in cybersecurity, penetration testing, or software auditing, ROSA is a must-try in the fight against hidden threats."
medium.com/@itsissachar/rosa…