Academic Papers

PhD Thesis

Detecting and Surviving Intrusions: Exploring New Host-Based Intrusion Detection, Recovery, and Response Approaches

@phdthesis{chevalier2019phdthesis,
  title     = {Detecting and Surviving Intrusions: Exploring New Host-Based Intrusion Detection, Recovery, and Response Approaches},
  author    = {Chevalier, Ronny},
  school    = {CentraleSup{\'e}lec},
  year      = {2019},
  month     = dec,
  url       = {https://hal.inria.fr/tel-02417644/file/detecting-and-surviving-intrusions-phd-thesis-chevalier-2019.pdf},
}

Journal Papers

Intrusion Survivability for Commodity Operating Systems

@article{chevalier2020survivability,
  author    = {Chevalier, Ronny and Plaquin, David and Dalton, Chris and Hiet, Guillaume},
  title     = {Intrusion Survivability for Commodity Operating Systems},
  year      = {2020},
  month     = dec,
  publisher = {Association for Computing Machinery},
  address   = {New York, NY, USA},
  volume    = {1},
  number    = {4},
  doi       = {10.1145/3419471},
  journal   = {Digital Threats},
  articleno = {21},
}

Conference Papers

Survivor: A Fine-Grained Intrusion Response and Recovery Approach for Commodity Operating Systems

@inproceedings{chevalier2019survivability,
  author    = {Chevalier, Ronny and Plaquin, David and Dalton, Chris and Hiet, Guillaume},
  publisher = {ACM},
  booktitle = {Proceedings of the 35th Annual Computer Security Applications Conference},
  year      = {2019},
  month     = dec,
  series    = {ACSAC'19},
  pages     = {762--775},
  title     = {Survivor: A Fine-Grained Intrusion Response and Recovery Approach for Commodity Operating Systems},
  doi       = {10.1145/3359789.3359792},
}

Intrusion Survivability for Commodity Operating Systems and Services: A Work in Progress

@inproceedings{chevalier2018survivabilityWIP,
  author    = {Chevalier, Ronny and Plaquin, David and Hiet, Guillaume},
  booktitle = {Rendez-vous de la Recherche et de l'Enseignement de la S{é}curit{é} des Syst{è}mes d'Information},
  year      = {2018},
  month     = may,
  series    = {RESSI'18},
  title     = {Intrusion Survivability for Commodity Operating Systems and Services: A Work in Progress},
}

Co-processor-based Behavior Monitoring: Application to the Detection of Attacks Against the System Management Mode

@inproceedings{chevalier2018survivabilityWIP,
@inproceedings{chevalier2017coproc,
  title     = {Co-processor-based Behavior Monitoring: Application to the Detection of Attacks Against the System Management Mode},
  author    = {Chevalier, Ronny and Villatel, Maugan and Plaquin, David and Hiet, Guillaume},
  booktitle = {Proceedings of the 33rd Annual Computer Security Applications Conference},
  series    = {ACSAC '17},
  year      = {2017},
  pages     = {399--411},
  numpages  = {13},
  doi       = {10.1145/3134600.3134622},
}

BootKeeper: Validating Software Integrity Properties on Boot Firmware Images

@inproceedings{chevalier2019bootkeeper,
  author    = {Ronny Chevalier and Stefano Cristalli and Christophe Hauser and Yan Shoshitaishvili and Ruoyu Wang and Christopher Kruegel and Giovanni Vigna and Danilo Bruschi and Andrea Lanzi},
  title     = {BootKeeper: Validating Software Integrity Properties on Boot Firmware Images},
  booktitle = {Proceedings of the 9th ACM Conference on Data and Application Security and Privacy},
  publisher = {{ACM}},
  series    = {CODASPY'19},
  month     = mar,
  pages     = {315--325},
  doi       = {10.1145/3292006.3300026},
  year      = {2019},
}