| Elie Bursztein | |
|---|---|
| Born | France |
| Residence | US |
| Nationality | French |
| Fields | Computer Security |
| Institutions | Stanford University |
| Alma mater | École Normale Supérieure de Cachan, 2008 |
| Doctoral advisor | Jean Goubault-Larrecq |
| Known for | CAPTCHA security Web security Applied cryptography |
Elie Bursztein is a French security researcher which focus on web[p 1], mobile[r 1] and offensive security[p 2] . He is most known for his work on CAPTCHA[p 3],[p 4], his novel attacks[p 5] and his creative use of applied cryptography[p 6]. Elie Bursztein is currently post-doctoral fellow at Stanford University in California, US.
Contents |
Elie Bursztein obtained his computer engineering degree from EPITA in 2004, his master degree in computer science from Paris 7/ ENS, in 2004 (under the supervision of Patrick Cousot) and his PhD in computer science from École Normale Supérieure de Cachan in 2008 (under the supervision of Jean Goubault-Larrecq). His PhD thesis tilted "Anticipation games. Théorie des jeux appliqués à la sécurité réseau" (Anticipation game. Game theory applied to network security) showed how to combine model-checking, temporal logic and game theory to find the optimal responses to network attacks.
In addition to his work on CAPTCHA security, Bursztein's other contributions to the security field include the analysis of DPAPI and the invention of the XCS attacks[p 7] and HTTPS caching attacks[p 2]. In 2010 with Jocelyn Lagarenne he demonstrated at the Defcon 18 novel memory based attacks against games[r 2] and devised with Mike Hamburg and Dan Boneh the first defense against map hacking using homomorphic encryption[p 6] .
Bursztein's research on CAPTCHA aim at making CAPTCHAs easier for human and harder for computers. In 2009, Bursztein showed with Steven Bethard that eBay audio captchas were broken[p 4]. In 2010, he studied with S. Bethard, C. Fabry, D. Jurafsky and J. C. Mitchell how humans perform on real world CAPTCHAS by running a large scale study[p 3]. In 2011, he demonstrated with R Bauxis, H. Paskov, D. Perito, C. Fabry and J. Mitchell than every none-continous audio captchas are broken[p 8].
Some of his notable achievements in web security include:
In 2009 Bursztein presented the first complete analysis of the Microsoft DPAPI with Jean Michel Picod.[p 5]. In 2011 with J. Lagarenne, M. Hamburg and D. Boneh he used private set intersection protocols to defend against game map hacking [p 6].
Elie 's awards: In 2010 Bursztein came 4th of the 2010 top ten web hacking techniques for his HTTPS caching attack technique,[r 6] and in 2008 he received the WISPT best paper Award.