Guillaume VALADON

Senior Security Researcher & Manager

+33 6 65 72 93 66
21, rue Servan
75011 Paris France

Experienced team leader with extensive network security expertise. Currently leading a team of experts that audits, designs and develops networking security products and architectures. Strong motivation to develop technical solutions that solve hard and complex issues. Maintainer of Scapy, the standard of packets manipulation in Python used to ease network R&D and answer operational issues. Frequently teaching at universities and speaking at conferences about various security related topics.

Work Experience

ANSSI - Paris, France

Head of the network and protocol security laboratory

2009-10 - Present
  • Management of a ten-people team
  • Creation of the French Internet Resilience Observatory - http://www.ssi.gouv.fr/observatoire
  • Supervision of VPN-like hardware technical developments
  • Teaching activities: IPv6, TLS, DNS, system & network security, ...
  • Projects: DDoS protection consulting, network security audits, ...
  • Publication of technical guides: BGP, DDoS, & DNS
  • Large scale measurements & analysis: TLS, BGP hijacks, DNS, & anti-DDoS

UPMC - University Pierre and Marie Curie - Paris, France

Post-doctoral researcher

2008-07 - 2009-10
  • Research topics related to networks and graphs based analysis
  • Measurements of paedophile activities in eDonkey
  • Scapy native *BSD support

Tokyo University & UPMC - Tokyo, Japan

PhD Researcher

2004-10 - 2008-07
  • Mobile IPv6 optimizations based on anycast routing
  • Wi-Fi deployments measurements and analysis
  • Scapy IPv6 support

Projects

Scapy - Network packets manipulation

Co-maintainer of the project

MaBo - MRT and BGP in OCaml

Main developer

TaBi - Track BGP Hijacks

Main developer

r2m2 - A radare2 plugin that uses miasm2

Main developer

Unpublished PoC

BEAST, CRIME, AFL libbgpdump fuzzing, NSEC3 enumeration, HSRP MD5 reverse, ...

Current personal projects

  • Wi-Fi SD card reverse: development of dedicated tools
  • Rust: first steps with the language features to speedup tools
  • Learning and implementing 'Crypto Fails': WEP, RSA padding oracle, ...
  • Scapy hardening: capabilities, seccomp-bpf, ...

Skills

Network

  • IPv6
  • DNS/DNSSEC
  • DDoS
  • BGP
  • Measurements
  • Configuration

Security

  • TLS
  • IPsec
  • Practical crypto
  • PaX / grsecurity
  • Basic RE skills

System

  • Apache
  • Postfix
  • Bind
  • OpenVPN
  • iptables

Development

  • Python
  • Ocaml
  • C
  • Assembly

Automation

  • Ansible
  • LXC
  • Docker
  • KVM
  • Travis
  • AppVeyor

Talks

SSTIC

NSC

PacSec

REcon

RIPE

CoNEXT

...

Languages

French

Native

English

Fluent

Japanese

Basic skills

Interests

Climbing

Running

Scubadiving

Snowboarding

References

He's my guardian angel!
— The Internet