Gwendal Patat

Security Researcher, PhD in Cybersecurity, Fraunhofer SIT.

prof_pic.jpg

Office B5.10

Fraunhofer SIT

Darmstadt, Germany

I am a Research Associate at Fraunhofer SIT in the SSE department, focusing on program analysis of binaries.

Before that, I have been a PhD student from October 2020 to December 2023 under the supervision of Pierre-Alain FOUQUE and Mohamed SABT in the SPICY team (former EMSEC) at IRISA in Rennes, France. The topic of my research was the security of cryptographic implementations within Trusted Execution Environment (TEE) especially ARM TrustZone-based ones in mobile devices. By using multiple reverse engineering techniques, my aim is to find cryptographic vulnerabilities to provide Proof-of-Concept exploits in order to make sure that they will be fixed in future implementations, especially, focusing on Digital Right Management (DRM) systems.

Before starting my PhD, I graduated from the University of Rennes 1’s Cybersecurity Master in 2019-2020.

Putting aside computers, I am training my lockpicking skills by creating my own tools and trying to open all the locks/padlocks that I can find (don’t worry I purchase them first).

news

Dec 15, 2023 I have defended my PhD! You can found my manuscript here.
Mar 1, 2023 Rewarded by Mozilla Bug Bounty program.
Apr 2, 2021 Rewarded by Netflix Bug Bounty program and Google BugHunter program.. Related CVE and Android Security Bulletin have been published.

awards

Apr 7, 2023 Enter the Mozilla Security Bug Bounty Program Hall of Fame.
Jul 21, 2021 Enter the Google Hall of Fame.
Apr 2, 2021 Netflix, Inc., BugHunter Hall of Fame.