Guillaume Leconte

Perf oriented architecture to limit the scanner's memory and network footprints, alongside strong parallelism

Client-Server architecture to remotely control/query the scanner

Design a modular architecture to easily onboard new developers

Use of external signatures (Nmap signatures, Nuclei & Jaeles CVE detection, . . . ) along side our own

Heavy testing (unit tests, functional tests, . . . )

Keywords: Golang, Linux, gRPC, C, GitHub, AWS, . . .

Member of the Qualys Security Advisory Team : source code audit, exploit writing, etc.

Details on demand.

Keywords: Open Source, C, Linux, Bash, Exploit, Advisories, CVE, Audit

Design and conception of several daemons to extracts data from the network and send them for (malware) analysis.

From data link layer to application layer, protocol analysis: Ethernet, IPv4, IPv6, GRE, ARP, ICMP, UDP, TCP, DNS, FTP, HTTP, SMTP

Generic module to manage Layer7 connection tracking

TCP reassembly, packet loss management, deduplication . . .

Use of Qosmos SDK for application layer analysis

Developed several drivers to manage data exchange between components, to bench IOPS (on disk, redis, POSIX mqueues . . . ), to link metadata to a given file . . .

Significant contributions to the library used by the whole team (from basic data structures to more specific ones: adaptative radix trees, skiplists)

Design and implementation of a unified and complete configuration system for daemons (JSON output on demand, real-time value modifications . . . )

Keywords: C, Linux, Qosmos, Networking, IOPS, Performances, Threads, Git