Ludovic Barman
Hello, I'm Ludovic !
I'm a mix of a researcher and software engineer. I love programming and designing systems, in particular when related to the topics of security and privacy.
I obtained my PhD under the guidance of professors Jean-Pierre Hubaux and Bryan Ford. I worked on the analysis and protection of communication metadata (such as traffic analysis and website fingerprinting) and the design of anonymous communication networks.
I recently joined Google, where I work on the privacy of the Android operating system.
In my free time, I love hiking in the Alps, woodworking, and bouldering.
Feel free to contact me! firstname.lastname@protonmail.com
Table of contents: research / work experience / education / blog posts
Selected Research
- Groove: Flexible Metadata-Private Messaging2022
L. Barman, M. Kol, D. Lazar, Y. Gilad, N. Zeldovich. OSDI 22
paper, slides - On the ineffectiveness of QUIC PADDING against website fingerprinting 2022
L. Barman & S. Siby, C. Wood, M. Fayed, N. Sullivan, C. Troncoso
preprint - Every Byte Matters: Traffic-Analysis of Bluetooth Wearable Devices (Distinguished Paper Award) 2021
L. Barman, A. Dumur, A. Pyrgelis, J-P. Hubaux. Ubicomp 2021
paper, code, press article - Decentralized Privacy-Preserving Proximity Tracing (DP3T)2020
My contribution to this large team effort consists of security/privacy analysis of the initial PEPP-PT, then of DP3T, and security reviews of alternative proposals (ROBERT/DESIRE).
paper, some press articles: Reuters, BBC, Financial Times, Blick, Le Temps - PriFi: Low-Latency Metadata Protection for Organizational Networks 2018
L. B., I. Dacosta, M. Zamani, E. Zhai, A. Pyrgelis, B. Ford, J. Feigenbaum, J-P. Hubaux. PETS 2020
paper, code - Reducing Metadata Leakage from Encrypted Files and Communication with PURBs 2018
K. Nikitin & L. Barman, M. Underwood, W. Lueks, B. Ford, J-P. Hubaux. PETS 2019
paper, website, presentation, code, press article, blog post - Mirror: Enabling Proofs of Data Replication and Retrievability in the Cloud 2015
F. Armknecht, L. Barman, J-M. Bohli, G. Karame. USENIX Security 2016
paper - Privacy Engineer at Google, Zurich
2022
Working on privacy features for Android - Research Intern at Cloudflare, London
2020
Website Fingerprinting and Defenses on QUIC - Teaching Assistant at EPFL (part of the PhD program)
2015 - 2021
In the class "Information Security and Privacy", I rebuilt the aging infrastructure in favor of a more reliable setup with dockers and Continuous Integration. I also designed several exercises such as a TLS downgrade attack & implementation of a PAKE protocol.
In the class "Mobile Networks", I helped building hands-on exercises about Wireless networks and their security/privacy aspects. I gave lectures about Tor and the anonymity on the Web. - Intern at NEC Laboratories Europe, Heidelberg
2015
Master Thesis, NEC Laboratories Europe, Heidelberg
Supervised by G. Karame (NEC Laboratories Europe) and P. Oechslin (LASEC, EPFL) - Teaching assistant at EPFL
2012
For the class "System-oriented Programming", where students learn about SH, C, Perl, Unix. Supervision of semester projects for students in Java, involving cryptography and networking. - various Web Developer positions (Sunergic, CJ Online Works, JE EPFL, Intemporare)
2008 - 2019
At Sunergic, I created a Web application for monitoring Siemens solar panels. In addition, it enabled clients to design a roof (through a graphical wizard) and estimate the expected efficiency and profit of a solar installation. This application has been used by several partners of Sunergic and Romande Energie. - EPFL, Lausanne: PhD in Security and Privacy, co-advised by Jean-Pierre Hubaux and Bryan Ford 2021
- EPFL: Bachelor/Master in Communications Systems (with a 1-year exchange at NUS, Singapore) 2015
- Padmé: Efficiently hiding file sizes 2020
An inexpensive padding function to protect the size metadata - IoT Home Automation with 3D-Printing 2019
Keeping my fish and plants alive while I'm away - A TLS downgrade attack with NetFilter's Queues and Docker 2017
Try your very own MitM and downgrade attack now ! - A Journey into Stack Smashing 2017
A first attempt at crackme's - Should I trust the GitHub activity summary ? 2016
A «hello world» on GitHub - Escaping a PyJail 2016
Getting out of a python sandbox - Hunting Aurora Borealis : a Cookbook 2016
A step-by-step guide to finding Northern Lights
Work Experience
Education
Blog posts
Non-peer-reviewed posts, highlights on personal projects & random discussions.