Creach Labs opens thirteen thematic working groups

The thirteen working groups

• Cryptography

  This area covers the cryptographic primitives, protocols and mechanisms used to ensure the confidentiality, integrity, authenticity and non-repudiation of data and communications. It spans algorithm design, formal verification of their security and of their implementations, and the management of the cryptographic key and parameter life cycle. It underpins every other area, as the foundation of trust on which system protection mechanisms rest.

  DGA lead: Laurent Boher
  Contact: gt-crypto@listes.creachlabs.fr

• Component security

  This area addresses the security of hardware and low-level software components — microprocessors, integrated circuits, firmware, embedded systems — considered as elements of trust within a security chain. It covers hardening these components against physical and logical attacks, assessing their robustness through hardware evaluation techniques (side channels, fault injection), and formally verifying the soundness of their design.

  DGA lead: Rachid Dafali
  Contact: gt-composants@listes.creachlabs.fr

• Wireless transmission security

  This area covers the threats and protection mechanisms specific to wireless transmission: unintentional electromagnetic emanations (TEMPEST), vulnerabilities in radio protocols and RF chains (Wi-Fi, Li-Fi, LoRa, 5G/6G), and the convergence of cybersecurity and electronic warfare. It addresses both passive attacks (interception, observation) and active ones (jamming, spoofing, injection) against wireless communication equipment.

  DGA lead: Erwan Nogues
  Contact: gt-sans-fil@listes.creachlabs.fr

• Network security

  This area deals with the security of network infrastructure and communication protocols: hardening of existing protocols, network intrusion detection, adaptive monitoring, and secure architectures for enterprise networks and industrial systems. It also includes network stealth techniques and the detection of malicious flows, in particular in the presence of encryption.

  DGA lead: Alain Seite
  Contact: gt-reseaux@listes.creachlabs.fr

• Low-level software security

  This area covers the security of software layers close to the hardware: operating systems, hypervisors, virtualisation mechanisms, firmware and trusted execution environments. It spans both the secure design of these layers and their hardening against attack, and covers the formal specification of sound software architectures at this level of abstraction.

  DGA lead: Louis Rilling
  Contact: gt-couches-basses@listes.creachlabs.fr

• Application security

  This area covers the security of applications and application-level software systems: web applications, APIs, databases, middleware and cloud services. It includes secure development techniques, vulnerability research in source code or binaries, and application penetration testing. It is closely tied to the “Languages and software engineering” area, of which it is the applied field oriented towards flaw detection.

  DGA lead: Mickael Delahaye
  Contact: gt-applicatif@listes.creachlabs.fr

• Languages, software and binary engineering

  This area covers security-oriented software engineering methods and tools: formal languages, verification methods, program analysis (static, dynamic, symbolic), automatic code generation and assessment, fuzzing, software dependency management, obfuscation and diversification techniques, and the automatic construction of knowledge graphs from code. It provides the technical foundation shared by application security, malware analysis and vulnerability research.

  DGA lead: Gurvan Le Guernic
  Contact: gt-langages@listes.creachlabs.fr

• Hardware architecture

  This area covers the design and assessment of hardware architectures from a security standpoint: processors (ARM, RISC-V, x86), memory, heterogeneity and CPU/GPU and RAM/VRAM hybridisation, and their specific attack surfaces. It includes formalising the security properties expected of an architecture and verifying them, as well as the threats specific to new platforms (micro-architectural side channels, hardware supply chain attacks). It also covers the security of hardware infrastructure for large-scale hosting.

  DGA lead: Wilfried Gouret
  Contact: gt-archi-materielle@listes.creachlabs.fr

  --- Panel 9 --- Title: 9. Software architecture Content (source mode):

  This area covers the sound design of complex software systems: definition of security architectures, privilege separation, access control models, and formal verification of the security properties of software architectures. It complements the “Languages and software engineering” area by focusing on the architectural level rather than on code.

  DGA lead: Norbert Douchin
  Contact: gt-archi-logicielle@listes.creachlabs.fr

• Software architecture

  This area covers the sound design of complex software systems: definition of security architectures, privilege separation, access control models, and formal verification of the security properties of software architectures. It complements the “Languages and software engineering” area by focusing on the architectural level rather than on code.

  DGA lead: Norbert Douchin
  Contact: gt-archi-logicielle@listes.creachlabs.fr

• IT and OT/IoT systems security

  This is the most cross-cutting area: it covers the security of information systems in their operational entirety, including industrial systems and the IoT. It brings together intrusion detection, security monitoring, decision support and human factors. It is the integration level above the technical layers, where incident response is handled and the defensive posture is built. Threat intelligence belongs to area 13.

  DGA lead: Frédéric Majorczyk
  Contact: gt-it-ot-iot@listes.creachlabs.fr

• Social engineering for cyber

  This area covers the human and social dimensions of the cyber threat, in particular influence and manipulation operations exploiting social networks, digital media and human behaviour. It spans disinformation and deepfake detection, behavioural analysis of online communities, stylometry, attribution of influence operations and counter-narrative capabilities.

  DGA lead: Colas Hummel
  Contact: gt-ingenierie-sociale@listes.creachlabs.fr

• Cybersecurity of AI

  This area deals with the security of systems incorporating artificial intelligence, both as a target of attack (adversarial attacks, data poisoning, model theft, evasion) and as a vector or amplifier of attack. It also includes explainability as a prerequisite for trust in AI systems used defensively, the detection of unauthorised embedded AI models, and the measurement and monitoring of model training quality.

  DGA lead: Igor Sguario
  Contact: gt-cyber-ia@listes.creachlabs.fr

• Threat intelligence

  This area brings together work on understanding and characterising attackers, their modes of operation and their technical capabilities. It covers cyber threat intelligence, the analysis of offensive techniques (vulnerability exploitation, defence evasion), attribution methods, and the formalisation of threat knowledge (ontologies, knowledge bases). It is essential to every field of cyber operations.

  DGA lead: to be appointed
  Contact: gt-menace@listes.creachlabs.fr