Ludovic Barman
Hello, I'm Ludovic !
I'm a software engineer based in Zürich. I love building software, in particular when related to privacy, security, or cryptography. I currently work on the privacy of the Android operating system and app ecosystem at Google.
Before that, I did PhD at EPFL, under the guidance of professors Jean-Pierre Hubaux and Bryan Ford. I worked on the analysis and protection of communication metadata (such as traffic analysis and website fingerprinting) and the design of anonymous communication networks. Please see below for some of my publications.
In my free time, you'll find me hiking in the Alps or bouldering. I also like writing about random topics in my blog.
I'm always interested in hearing about new projects or opportunities ! firstname.lastname@protonmail.com
Skills
Core Expertise: Android Development (App & OS) in Kotlin, Java. Privacy & Security Engineering. Applied Cryptography.
Experience in: Rust, Typescript, Go, Python, C++. Front & Back-end Web dev (React/JS/HTML/CSS, Node/PHP/SQL), Docker.
Open-source contributions: PipelineDP, Android Open Source Project 🪦, grpcio
Blog posts
- Secure Santa ✨ New! 2025
Securing Secret Santa with random oracles and Lehmer codes - Padmé: Efficiently hiding file sizes 2020
An inexpensive padding function to protect file sizes - IoT Home Automation with 3D-Printing 2019
Keeping my fish and plants alive while I'm away - A TLS downgrade attack with NetFilter's Queues and Docker 2017
Try your very own MitM and downgrade attack now ! - A Journey into Stack Smashing 2017
A first attempt at crackme's
Older posts: Escaping a PyJail, Should I trust the GitHub activity summary ?
Past positions
- Privacy Engineer at Google, Zurich
2022 - current
I build privacy features and network security features for the Android ecosystem. I mentor colleagues writing Kotlin. - Research Intern at Cloudflare, London
2020
Website Fingerprinting and Defenses on QUIC. - Teaching Assistant at EPFL, Lausanne
2015 - 2021
Classes: Information Security and Privacy, Mobile Networks, System-oriented Programming. I supervised semester projects and master thesis. - Intern (Master Thesis) at NEC Laboratories Europe, Heidelberg
2015
Supervised by G. Karame (NEC Laboratories Europe) and P. Oechslin (LASEC, EPFL) - various Web Developer positions (Sunergic, CJ Online Works, JE EPFL, Intemporare) 2008 - 2019
Research
- Groove: Flexible Metadata-Private Messaging2022
L. Barman, M. Kol, D. Lazar, Y. Gilad, N. Zeldovich. OSDI 22
paper, slides - Every Byte Matters: Traffic-Analysis of Bluetooth Wearable Devices (Distinguished Paper Award)
2021
L. Barman, A. Dumur, A. Pyrgelis, J-P. Hubaux. Ubicomp 2021
paper, code, press article - Decentralized Privacy-Preserving Proximity Tracing (DP3T)2020
My contribution to this large team effort consists of security/privacy analysis of the initial PEPP-PT, then of DP3T, and security reviews of alternative proposals (ROBERT/DESIRE).
paper, some press articles: Reuters, BBC, Financial Times, Blick, Le Temps - PriFi: Low-Latency Metadata Protection for Organizational Networks 2018
L. B., I. Dacosta, M. Zamani, E. Zhai, A. Pyrgelis, B. Ford, J. Feigenbaum, J-P. Hubaux. PETS 2020
paper, code - Reducing Metadata Leakage from Encrypted Files and Communication with PURBs 2018
K. Nikitin & L. Barman, M. Underwood, W. Lueks, B. Ford, J-P. Hubaux. PETS 2019
paper, presentation, press article, code, blog post. Padmé is used in iMessage and Messages. - Mirror: Enabling Proofs of Data Replication and Retrievability in the Cloud 2015
F. Armknecht, L. Barman, J-M. Bohli, G. Karame. USENIX Security 2016
paper - EPFL, Lausanne: PhD in Security and Privacy, co-advised by Jean-Pierre Hubaux and Bryan Ford 2021
- EPFL: Bachelor/Master in Communications Systems (with a 1-year exchange at NUS, Singapore) 2015
Full list on Google Scholar