Christian Studer
Security Research And Software Engineering at Luxembourg House of Cybersecurity
Luxembourg
Summary
🤩
Rockstar🎓
Top School
Top expert inCybersecurity Analytics and Threat Intelligence
Christian Studer is a security researcher and software engineer with nine years of experience building and hardening open-source threat intelligence tooling from Luxembourg. At CIRCL and as a MISP core team member he has driven backend development for MISP, improving STIX 2 ingestion, enrichment modules, and data conversion scripts that integrate sources like MITRE ATT&CK into the MISP Galaxy. He combines deep Python/Linux automation skills with practical network forensics and data-mining expertise, shipping features such as RBL checks, Joe Sandbox importers, and warning-list generators. Beyond code, he contributes to standards as STIX co-chair at OASIS and teaches security topics at Universite de Lorraine, bridging research, policy, and operational practice. Known for turning messy threat data into reliable, test-covered integrations, he brings a pragmatic, curiosity-driven approach to solving complex security problems.
9 years of coding experience
Master en informatique, Sécurité informatique, Master en informatique, Sécurité informatique at Universite de LorraineLicence Informatique, Licence Informatique at Université de Haute-Alsace Mulhouse-ColmarDUT Génie Électrique et Informatique Industrielle, DUT Génie Électrique et Informatique Industrielle at IUT De Mulhouse
French, English, German
Github Skills (29)
json10
python10
api-client10
data-engineering10
msp10
data-parsing10
regular-expression10
threat-intelligence10
dns10
yaml10
network-security10
ati10
pytest9
dfu9
dfd9
Programming languages (6)
Github contributions (5)
MISP/misp-modules
Jan 2018 - Nov 2022
Modules for expansion services, enrichment, import and export in MISP and other tools.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:1 review, 613 commits, 64 PRs in 4 years 10 months
Contributions summary:Christian primarily focused on developing a Python module for checking IPv4 addresses against known RBLs within the MISP system. Their code involved implementing RBL checks using the dnspython3 library. They also contributed to an import module designed to parse and extract information from Joe Sandbox reports, including features such as handling and integrating information about files. This indicates an emphasis on integrating security and data processing functionalities to enhance the capabilities of the MISP platform.
exportmisppassive-dnsimport-and-exportexpansion
MISP/MISP
Oct 2017 - Jan 2023
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Role in this project:Backend Developer
Backend DeveloperContributions:2010 commits, 28 PRs, 828 pushes in 5 years 4 months
Contributions summary:Christian's commits primarily focused on the development of features related to the STIX 2 import process within the MISP platform. Their work involved significant modifications to the `rework_stix2misp.py` script, with a focus on parsing STIX patterns and observable objects and handling external references. The user contributed to the correct interpretation and integration of various STIX object types (e.g., course of action, vulnerability, etc.), ensuring a robust and accurate import process. Their changes enhanced the platform's ability to ingest external threat intelligence data.
bugbountythreat-analysisctifraud-preventionsharing
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.