Jean De Bonfils Lavernelle

My name is Jean, I hold a PhD in Embedded Systems Security with three years of industry experience at Thales as an Embedded Systems Security Engineer. My main areas of expertise include virtualization security, software isolation, and related low-level mechanisms in ARM-based embedded systems.

I have a strong experience in security analysis and testing of software architecture in embedded systems. I also have expertise in embedded systems security research with proven experience in finding and reporting security vulnerabilities in hyperisors and comlex SoC firmware (e.g, CVE-2025-48507, CVE-2025-0038).

Security analysis and security design reviews of software architectures in embedded systems.

Threat modeling, security testing and code review of low-level software.

Design of software protection and mitigation in embedded systems.

Security training and awareness sessions for teams and individuals.

Preparation of security guidelines, best practices, and checklists.

- Very strong knowledge of Zynq UltraScale MPSoCs and related security support

- Strong experience in threat modeling, analysis and research on low-level software security in embedded systems.

- Extensive experience in hardware JTAG debugging (Trace32) of hypervisors and firmware in embedded systems.

- Strong experience conducting Proof-of-Concepts of advanced software attacks in ARM embedded systems.

- Strong knowledge of hypervisors and virtualization architectures (e.g., Xen, KVM).

- Strong knowledge of virtualization and security supports in ARM-based systems (e.g., TrustZone, SMMU).

- Good knowledge of ARM, SoC architecture, Linux kernel internals, and HW/SW interactions (e.g., DMA, device tree).

- Practical experience with embedded Linux, bootloaders, device drivers and build systems (e.g., Yocto).