Dimitri Kokkonis

We (myself, @michaelmarcozzi, Stefano Zacchiroli, Emilien Decoux) release the ROSA toolchain, enabling fuzzing-based backdoor detection 🎉 Tool: github.com/binsec/rosa Benchmark: github.com/binsec/rosarum This work received both Available & Reusable badges at @ICSEconf 🥳

Finding backdoors in software is like hunting for a needle that’s actively trying to hide. 🪡🕵️ Check out our @fosdem talk with @plumtrie on using fuzzing to automate the search! 📺 Watch: mirrors.dotsrc.org/fosdem/2026/ub… 📜 ICSE Paper: binsec.github.io/assets/publica…

Proud that our latest work on black-box deobfuscation has just been accepted to @acm_ccs 2025! Title: "Augmenting Search-based Program Synthesis with Local Inference Rules to Improve Black-box Deobfuscation". Joint work with @grmenguy Vidal_Attias Nicolas_Bellec and @Jean_YvesMarion Stay tuned for the camera ready version!

Back from @PLDI 2025, where Frédéric Recoules and I had the pleasure to give a tutorial on BINSEC and binary-level symbolic execution. Here it is, playable in your browser: binsec.github.io/tutorial-pldi2…

On my way to @PLDI 2025. Want to learn more about @BinsecTool, discuss PhD or postdoc positions in the team or simply chat? Feel free to say hello!

Happy to have presented our SECUBIC project to the French research community in system security (RESSI'25)! 🏠 secubic-ptcc.github.io 🧑‍🔬 @Seb_Bardin @Jean_YvesMarion Stefano Zacchiroli Thanks to the RESSI organizers who had even provided a pool to finish my #OOPSLA reviews! 😇

Going to @PLDI 2025? Consider attending the @BinsecTool tutorial on binary-level symbolic execution for security analysis. We are waiting for you!

Check out our ROSARUM benchmark, part of our #icse2025 paper on backdoors and fuzzing: ▶️ It is a fuzzing benchmark (can fuzzers trigger backdoors reliably and fast?) ▶️ It is a backdoor detection benchmark (can code analyses find backdoors reliably?) ⬇️ github.com/binsec/rosarum

How to detect backdoors efficiently? 🗣️ The slides of our #icse2025 presentation on "Finding Backdoors with Fuzzing" are now available at ⬇️ binsec.github.io/assets/publica…

@JAldrichPL @icmccorm @joshsunshine Really neat presentation!

11am today at #ICSE2025: Rust provides memory safety to low-level code, but in practice Rust libraries link to unsafe C. @icmccorm, @joshsunshine, and I used dynamic analysis to find 46 cases where the C code broke Rust's memory rules, causing undefined behavior.

Very honored to receive the Best Artifact award at #icse2025 🥳 Congrats and thank you to my coauthors! @michaelmarcozzi, Emilien Decoux, Stefano Zacchiroli

Too many bugs in the queue, not enough time to fix them all? Happy to share that our work on automated bug priorization has been accepted at @USENIXSecurity 2025 -- joint work with Guilhem Lacombe binsec.github.io/nutshells/usen…

On my way to Ottawa and @ICSEconf 🍁 Presenting on Friday (May 2nd) at 16:00 local time in room 210, come say hi ☺️

git commit -m "attempt to fix CI" ... git commit -m "attempt to fix CI" ... git commit -m "attempt to fix CI" ... git commit -m "attempt to fix CI" ... git commit -m "attempt to fix CI"

📢 I am looking for a postdoc on fuzzing, to prevent backdoors and supply-chain attacks! Come and join the team here in Paris (or spread the word)! 🙂 Details and application: secubic-ptcc.github.io/jobs/open/2025…

🏆 Our ROSA tool for backdoor detection has won a best artifact award at @ICSEconf! Try it out: github.com/binsec/rosa Huge thanks and congrats to my student @plumtrie for his huge and great work! 👏👏👏

@mycoliza «υέφη» in the original texts, they say

it is very telling that “BIOS”, in addition to being an acronym, is also the Greek word for “life”. meanwhile, “UEFI” is, of course, ancient Greek for “unified extensible firmware interface”

Happy to read such enthusiastic reactions to our @ICSEconf paper! ☺️ "ROSA Sets a New Standard for Backdoor Detection." "If you work in cybersecurity, penetration testing, or software auditing, ROSA is a must-try in the fight against hidden threats." @itsissachar/rosa-a-breakthrough-in-backdoor-detection-with-fuzzing-1d441dc42fc0" target="_blank" rel="nofollow noopener">medium.com/@itsissachar/r…