Invited Talks

On the Security and Privacy Risks of Browser Extensions

• Jul 2026: Dagstuhl Seminar 26291. Wadern, Germany.   Slides
• Jun 2026: Seminar@SystemX. Remote.   Slides (Recording to come…)
• Jun 2026: Plugin Seminar at the Inria Centre at Université Grenoble Alpes. Montbonnot-Saint-Martin, France.   Slides (Recording to come…)
• Jun 2026: Keynote at APVP. Trégastel, France.   Slides
• May 2026: Keynote at RESSI. Clervaux, Luxembourg.   Slides
• Mar 2026: PrivaSki Seminar. Correncon en Vercors, France (short version).   Slides
• Jan 2026: Keynote at the GDR RSD / ASF Winter School on Distributed Systems & Networks 2026. Pleynet, France.   Slides

Browser Extension (In)Security

• Jan 2025: Seminar at Inria Sophia Antipolis. Sophia Antipolis, France.
• Dec 2024: Spirals Seminar at Inria Lille. Lille, France.   Slides
• Jun 2024: GDR Information Security. Rennes, France.   Slides

Dos and Don’ts of Reviewing

• Nov 2024: Keynote at the Winter School, WinterHack 2024. Bochum, Germany.   Slides

DoubleX: Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale

• Nov 2023: Workshop at INRIA. Paris, France.   Slides
• Jul 2022: Berkeley Security Seminar. Berkeley, CA, U.S.
• May 2022: RuhrSec. Bochum, Germany.   Recording
• Apr 2022: Stanford Computer Forum – Security Workshop. Stanford, CA, U.S.   Recording   Slides
• Nov 2021: Stanford Security Lunch. Stanford, CA, U.S.

Studying JavaScript Security Through Static Analysis

• Apr 2024: PEPR Cyber – Project DefMal Webinar (France). Remote (extended version).
• Mar 2022: Palo Alto Networks (CA, U.S.). Remote (extended version).
• Jun 2021: Spirals Webinar at Inria Lille (France). Remote.
• May 2021: PhD Defense. Remote.

Statically Analyzing Malicious JavaScript in the Wild

• Mar 2021: Webinar at LORIA (France). Remote.
• Dec 2020: BINSEC Webinar at CEA (France). Remote.

HideNoSeek: Camouflaging Malicious JavaScript in Benign ASTs

• May 2020: RuhrSec. Remote.   Recording
• Mar 2019: Grande Region Security and Reliability Day (GRSRD). Nancy, France.
• Feb 2019: MADWeb. San Diego, CA, U.S.

JaSt: Fully Syntactic Detection of Malicious (Obfuscated) JavaScript

• Nov 2018: Blackhoodie. Berlin, Germany.   Slides
• Jun 2018: Malware Meeting at LORIA. Nancy, France.
• Mar 2018: Grande Region Security and Reliability Day (GRSRD). Saarbruecken, Germany.

Automated Clustering of File Samples for the Detection of Malware Contained in Obfuscated Script-Code

• Jan 2018: Lecture at Hochschule Bonn-Rhein-Sieg. Sankt Augustin, Germany.
• Sep 2017: Master Thesis Defense at TELECOM Nancy. Nancy, France.
• Sep 2017: Talk at the German Federal Office for Information Security (BSI). Bonn, Germany.
• Jul 2017: Talk at genua. Muenchen, Germany.
• Jul 2017: Talk at CISPA. Saarbruecken, Germany.

Non-Academic Talks

• Sep 2021: Inspiring career path speech (~400 people) at TELECOM Nancy 30th anniversary (France). Remote.
• Dec 2017: Valedictorian speech (~500 people) at TELECOM Nancy graduation ceremony. Nancy, France.