Jordan Samhi
I am a Doctoral Researcher in Software Security and Software Engineering at the University of Luxembourg. I am part of the Interdisciplinary Centre for Security, Reliability and Trust (SnT) and member of TruX research group. Beforehand, I received my Master's degree in Computer and Information Systems Security from the University of Lorraine (France). My research interests are in the security aspects of software engineering, particularly in automatic malware and vulnerability detection using static code analysis. Currently, I am focusing on Android systems. My thesis is under the supervision of Prof. Jacques Klein and I am being advised by Prof. Tegawendé F. Bissyandé and Dr. Alexandre Bartel.
Education
University of Luxembourg
University of Lorraine
Summa cum laude · 1/35
University of Lorraine
Summa cum laude · 1/79
University of Lorraine
Summa cum laude · 1/88
Experience
Doctoral Researcher
Research in the security aspects of software engineering with a particular focus on malware and vulnerability detection. Analysis of Android applications by reverse engineering and developing static analysis programs.
Research Intern
Literature review on Static Analysis, Malware detection and Android Security. Reverse-engineering of Android applications. Study of anti-reverse-enrineering mecanisms. Open-source development of a solution based on pure static analysis to detect hidden malicious code.
Projects
SPARTA
SPARTA is supported by Europe’s H2020 program, with the objective to develop and implement top-tier research and to design and test an efficient mechanism at european level for research governance and coordination. Strongly guided by concrete challenges forming an ambitious Cybersecurity research & innovation roadmap, SPARTA will setup unique collaboration means, leading the way in building transformative capabilities and forming a world-leading “Competence Network” across the EU.
ONNIVA
ONNIVA is supported by Luxembourg's National Research Fund, with the objective to develop new approaches to detect Java vulnerabilities. This project focuses on deserialization vulnerabilities which occurs when a Java application accepts serialized files from untrusted sources. Approaches developed within the frame of this project focus on static analysis techniques.
Publications
2021
-
RAICC: Revealing Atypical Inter-Component Communication in Android Apps
Jordan Samhi, Alexandre Bartel, Tegawendé F. Bissyandé, Jacques Klein
43rd International Conference on Software Engineering (ICSE), IEEE/ACM, Madrid, Spain -
A First Look at Android Applications in Google Play related to Covid-19
Jordan Samhi, Kevin Allix, Tegawendé F. Bissyandé, Jacques Klein
Empirical Software Engineering, Springer (EMSE)
2020
-
Désamorcer des bombes logiques
Jordan Samhi, Alexandre Bartel
Multi-System & Internet Security Cookbook (MISC) - Four more papers under submission.
Service
Paper reviews
2021
2020
2019
Teaching
Introduction to Static Program Analysis
Introduction to the fundamental theoretical concepts and techniques of static analysis. Implementation of algorithms to solve concrete problems.
Introduction to Static Program Analysis
Introduction to the fundamental theoretical concepts and techniques of static analysis. Implementation of algorithms to solve concrete problems.
Supervisions
Mansaf Bourkaib
Extracting Android apps information and building efficient query interface for selecting apps matching specific characteristics.
Vanitha Varadharajan
Mining source code samples from Pastebin public data.
Sean Achtatou
Machine-learning based characterization of Android Malware.
