Damien Octeau

Experience

Google Inc., Mountain View, CA
Software Engineer, September 2015 - Present University of Wisconsin-Madison, Madison, WI
Pennsylvania State University, University Park, PA
Postdoctoral Research Associate, September 2014 - September 2015 Pennsylvania State University, University Park, PA
Research Assistant, January 2009 - July 2014 Google Inc., Mountain View, CA
Intern in the Security team, Summer 2013

Google Inc., Mountain View, CA
Intern, Summer 2011
Pennsylvania State University, University Park, PA
Teaching Assistant, August 2010 - December 2010
Assisted students in labs for CMPSC 122, the course in intermediate programming in C++.

Osiatis France, Bordeaux, France
Intern, Summer 2008

Education

Pennsylvania State University, 2014 Ecole Centrale de Lyon, France

Publications

Journal Publications

Damien Octeau, Daniel Luchaup, Somesh Jha, and Patrick McDaniel. Composite Constant Propagation and its Application to Android Program Analysis. IEEE Transactions of Software Engineering (TSE), vol. 42, no. 11, pp. 999-1014, November 2016.

Basak Guler, Burak Varan, Kaya Tutuncuoglu, Mohamed Nafea, Ahmed A. Zewail, Aylin Yener, and Damien Octeau. Using Social Sensors for Influence Propagation in Networks with Positive and Negative Relationships. IEEE Journal on Selected Topics in Signal Processing: Special Issue on Signal Processing for Situational Awareness from Networked Sensors and Social Media. March 2015.

Conference Publications

Li Li, Tegawende F. Bissyande, Damien Octeau and Jacques Klein. Reflection-Aware Static Analysis of Android Apps, Proceedings of the 31st IEEE/ACM International Conference on Automated Software Engineering (ASE), Tool Track, September 2016, Singapore, Singapore.

Michael Backes, Sven Bugiel, Erik Derr, Patrick McDaniel, Damien Octeau, and Sebastian Weisgerber. On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis. Proceedings of the 25th USENIX Security Symposium, August 2016, Austin, TX. Acceptance rate: 15.6%.

Li Li, Tegawende F. Bissyande, Damien Octeau, and Jacques Klein. DroidRA: Taming Reflection to Support Whole-Program Analysis of Android Apps. Proceedings of the 25th International Symposium on Software Testing and Analysis (ISSTA)}. Saarbrucken, Germany, July 2016. Acceptance rate: 25.17%.

Damien Octeau, Somesh Jha, Matthew Dering, Patrick McDaniel, Alexandre Bartel, Li Li, Jacques Klein, and Yves Le Traon. Combining Static Analysis with Probabilistic Models to Enable Market-Scale Android Inter-Component Analysis. Proceedings of the 43rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL). St. Petersburg, Florida, USA, January 2016. Acceptance rate: 23.3%.

Damien Octeau, Daniel Luchaup, Matthew Dering, Somesh Jha, and Patrick McDaniel. Composite Constant Propagation: Application to Android Inter-Component Communication Analysis. Proceedings of the 37th International Conference on Software Engineering (ICSE), May 2015. Florence, Italy. Acceptance rate: 18.5%.

Li Li, Alexandre Bartel, Jacques Klein, Yves Le Traon, Steven Artz, Siegfried Rasthofer, Eric Bodden, Damien Octeau, and Patrick McDaniel. I Know What leaked in Your Pocket: Uncovering Privacy Leaks on Android Apps with Static Taint Analysis. Proceedings of the 37th International Conference on Software Engineering (ICSE), May 2015. Florence, Italy. Acceptance rate: 18.5%.

Basak Guler, Burak Varan, Kaya Tutuncuoglu, Mohamed Nafea, Ahmed A. Zewail, Aylin Yener, and Damien Octeau. Communicating in a Socially-Aware Network: Impact of Relationship Types. Proceedings of the 2nd IEEE Global Conference on Signal and Information Processing (GlobalSIP), December 2014. Atlanta, GA.

Wenhui Hu, Damien Octeau, Patrick McDaniel, and Peng Liu. Duet: Library Integrity Verification for Android Applications. Proceedings of the 7th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec), July 2014. Oxford, UK. Acceptance rate: 26.0%.

Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, and Patrick McDaniel. FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android Apps. Proceedings of the 35th Conference on Programming Language Design and Implementation (PLDI), June 2014. Edinburgh, UK. Acceptance rate: 18.1%.

Damien Octeau, Patrick McDaniel, Somesh Jha, Alexandre Bartel, Eric Bodden, Jacques Klein, and Yves Le Traon. Effective Inter-Component Communication Mapping in Android with Epicc: An Essential Step Towards Holistic Security Analysis. Proceedings of the 22nd USENIX Security Symposium, August 2013. Washington, DC. Acceptance rate: 16.2%.

Damien Octeau, Somesh Jha, and Patrick McDaniel. Retargeting Android Applications to Java Bytecode. Proceedings of the 20th International Symposium on the Foundations of Software Engineering, November 2012. Cary, NC. Acceptance rate: 17.4%. Best Artifact Award

William Enck, Damien Octeau, Patrick McDaniel, and Swarat Chaudhuri. A Study of Android Application Security. Proceedings of the 20th USENIX Security Symposium, August 2011. San Francisco, CA. Acceptance rate: 17.2%.

Other Publications

Basak Guler, Burak Varan, Kaya Tutuncuoglu, Mohamed Nafea, Ahmed A. Zewail, Aylin Yener, and Damien Octeau. Optimal Strategies for Targeted Influence in Signed Networks. Proceedings of the ASONAM C3-2014 Workshop, August 2014. Beijing, China.

Damien Octeau. Analysis of Inter-Component Communication in Mobile Applications Through Retargeting. Ph.D. Dissertation. Pennsylvania State University, University Park, PA, August 2014.

Damien Octeau. Automated Certification of Android Applications. Master's Thesis. Pennsylvania State University, University Park, PA, May 2010.

Damien Octeau, William Enck and Patrick McDaniel. The ded Decompiler. Technical Report NAS-TR-0140-2010, Network and Security Research Center, Department of Computer Science and Engineering, Pennsylvania State University, University Park, PA.

Awards

Presentations

Combining Static Analysis with Probabilistic Models to Enable Market-Scale Android Inter-Component Analysis. 43rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), St. Petersburg, Florida, USA, January 2016.

Composite Constant Propagation: Application to Android Inter-Component Communication Analysis, 37th International Conference on Software Engineering (ICSE), Florence, Italy, May 2015.

Analysis of Inter-Component Communication in Mobile Applications Through Retargeting, Invited talk at the City University of New York, New York, NY, April 2015.

Analysis of Inter-Component Communication in Mobile Applications Through Retargeting, Invited talk at IBM Research, Yorktown Heights, NY, March 2015.

Analysis of Inter-Component Communication in Mobile Applications Through Retargeting, Invited talk at the Virginia Polytechnic Institute and State University, Blacksburg, VA, March 2015.

Analysis of Inter-Component Communication in Mobile Applications Through Retargeting, Invited talk at the North Carolina State University, Raleigh, NC, March 2015.

Analysis of Inter-Component Communication in Mobile Applications Through Retargeting, Invited talk at the New York University, New York, NY, February 2015.

Duet: Library Integrity Verification for Android Applications, 7th ACM Conference of Security and Privacy in Wireless and Mobile Networks, July 2014.

Effective Inter-Component Communication Analysis in Android with Epicc, 2014 Network and Distributed Systems Security (NDSS) Symposium, San Diego, CA, February 2014 (poster).

Effective Inter-Component Communication Mapping in Android with Epicc: An Essential Step Towards Holistic Security Analysis, Invited talk at Google Inc., Mountain View, CA, August 2013.

Effective Inter-Component Communication Mapping in Android with Epicc: An Essential Step Towards Holistic Security Analysis, 22nd USENIX Security Symposium, August 2013.

Retargeting Android Applications to Java Bytecode, 20th International Symposium on the Foundations of Software Engineering, November 2012.

Retargeting Android Applications to Java Bytecode for Static Analysis, Invited talk at the University of Luxembourg, September 2012.

Android Application Analysis through Retargeting, Network and Security Research Center Industry Day 2012 (poster).

Decompiling Android Applications, Network and Security Research Center Industry Day 2009 (poster).

Decompiling Android Applications, 18th USENIX Security Symposium (work-in-progress report), Montreal, Canada, August 2009.

Patents

U.S. Patent 8,830,909. Methods and Systems to Determine User Relationships, Events and Spaces using Wireless Fingerprints. Damien Octeau and Arunesh Mishra. Issued September 9, 2014.

Professional Activities

Committees: Reviewer (conferences): Reviewer (journals):