Selected projects

Linux antimalware detection via static and behavioral analysis

Micro-VM sandbox, eBPF monitoring and Bayesian scoring.

A Linux malware detection system combining static analysis and behavioral (dynamic) analysis, rather than relying on a single signature-based approach. A multi-layer architecture orchestrates several micro-VMs in parallel to observe how binaries actually execute.

90.7%

Detection rate

0%

False positives

10

Parallel VMs

ENSEEIHT capstone project — supervised by Romain Cayre

Web & infrastructure vulnerability scanner

Automated web and infrastructure vulnerability audit via OWASP ZAP and OpenVAS.

A Python tool that automates web and infrastructure vulnerability analysis, interfaced with OWASP ZAP and OpenVAS to enrich and classify findings.

Home intrusion detection system

Motion detection, video surveillance and Telegram alerts.

A home security system combining motion detection (PIR sensor), video surveillance (ESP32-CAM) and real-time notifications on mobile and Telegram, with automatic image capture on intrusion.

Application security audit (White Box)

Penetration testing, exploitation and remediation report.

A full audit of a web application combining code review and penetration testing, with proof of exploitation and remediation recommendations.

Secured infrastructure — SOC & intrusion detection

Monitoring, IDS/IPS and network segmentation in a virtualized lab.

Design of a complete defensive architecture in a lab: monitoring, intrusion detection and traffic analysis on a segmented network.

SECOS — Secure system micro-kernel

Kernel design in C / assembly on QEMU.

Building an educational micro-kernel with memory isolation and access control, to study exploitation vectors close to the hardware.