Aurore Fass

Aurore Fass

Tenured Researcher at Inria

Dr.-Ing. Aurore Fass

📣 I am currently looking for a PhD student (start date: anytime in 2027) and a Postdoctoral researcher (start date: anytime in 2027 or 2028). More information about the PhD position and application form are available on the Inria portal (no application over email). Please read the guidelines provided here before contacting me about any open positions (PhD, postdoc, or internship). I consistently ignore and do not respond to unspecific emails and emails that appear to have been generated primarily using an LLM.

đŸŽ„ If you would like to learn more about our research on browser extension security, you can watch this presentation.

I am a Tenured Researcher at the Inria Centre at Universite Cote d’Azur (France), since December 2025. My research broadly focuses on Web security and privacy, Web measurements, and machine learning. Specifically, I design practical approaches to protect the security and privacy of Web users. I build systems to proactively detect malicious JavaScript code and suspicious browser extensions. I analyze data to understand how people spend time on the Web, and I want to use the resulting perspective to prioritize defense strategies.

Before that, I was a Tenure-Track Faculty (W2) at CISPA Helmholtz Center for Information Security (Germany, 2023–2025), where I was leading my research group. Prior to that, I was a Visiting Assistant Professor of Computer Science at Stanford University (U.S., 2021–2023), in the Empirical Security Research Group, led by Zakir Durumeric. Before that, I was a PhD student at Saarland University & CISPA (2018-2021), in the Secure Web Applications Group, jointly supervised by Ben Stock and Michael Backes. My PhD thesis revolves around studying JavaScript security through static analysis. Prior to that, I was a master student at the French Grande Ecole TELECOM Nancy, where I had the honor to give the valedictorian speech (2017). In particular, I wrote my master thesis at the German Federal Office for Information Security (BSI) under the supervision of Isabelle Chrisment and Robert Krawczyk.

I frequently deliver invited talks and keynotes both at academic and non-academic venues, see “Talks”. I am also an active contributor to the research community, holding chairing and editorial roles for top-tier security and privacy venues (I am currently a Vice Chair at USENIX Security 2027); I regularly serve on the program committees of those conferences, where I have received multiple Distinguished Reviewer Awards and Recognitions, see “Community Services”.

What’s New?