Reseach

Over the last 30 years, I worked on improving the management and automation of computer networks.  My research aims at making networks and services open, dynamic, autonomous, safe and secure through new communication paradigms such as P2P networks as well as through extended programmability enabled by virtualization, chaining and orchestration. 

Since 2003, we have been working on securing the management plane of the Internet. Our recent work integrates high softwarization and programmability (including low level data plane programmability) to foster both in network processing and dynamic network and services security. 

A strong focus on programmability for both QoS and security was addressed in the Ph.D. of Paul Chaignon  entitled "Software Datapaths for Multi-Tenant Packet Processing" (co supervised with Jérôme François and Kahina Lazri), the Ph.D. of  Matthews Jose  entitled "In-network real-value computation on programmable switches" (co supervised with Jérôme François and Kahina Lazri) and recently the Ph.D. of Philippe Graff on the efficient use of multi-level network softwarization for efficient processing of cloud gaming traffic in managed networks (co-supervised with Thibault Cholez). The defense of the thesis of Philippe Graff took place on december 12th 2023 and the manuscript is not yet public. Two new projects are launched. 

A second "main" line of research addresses the security of virtualized cloud-based services (which can be programmed protocol entities as addressed in the previous section).  We are particularly focusing security and service configuration issues. We design novel approaches to automate the configuration of sercurity services in the context of service migration. The most recent contributions are detailed in the Ph.D. thesis of Mohamed Oulaaffart co-supervised with Rémi Badonnel, which was successfully defended in november last year (2023).

The list of publications that emerged from our research performed with my colleagues and students can be found in the links below.