Pierre Chifflier
Head Of The Research And Exploration In Intrusion Detection Lab
Greater Paris Metropolitan Region France
Summary
👤
Senior🎓
Top SchoolPierre Chifflier is a seasoned IT security researcher and leader with 15+ years' experience focused on OS/kernel hardening, compilers, language and protocol analysis, and safe parser design. As Head of Research and Exploration in ANSSI's intrusion detection lab he manages a ten-person team, teaches advanced security topics, and presents at major conferences such as SSTIC and LangSec. He combines hands-on engineering—contributions to high-profile open-source projects like Suricata and core Rust libraries (nom, libpnet)—with applied data analysis and visualization for intrusion detection. His work spans low-level firmware (BIOS/UEFI, SecureBoot) to network protocol detection rules and Rust-based code quality improvements, reflecting a rare blend of systems, language, and security expertise. A long-standing Debian developer and former Chief Research Officer in industry, he is comfortable translating deep technical research into production-ready security tooling and audits.
15 years of coding experience
Ingénieur, Electronique, Ingénieur, Electronique at CPE Lyon
English, German, Japanese
Github Skills (29)
snmp10
ips10
kerberos10
testing10
parser-combinators10
cybersecurity10
it-security10
snmpd10
packet10
cross-platform10
networking10
security10
rust-macros10
proc-macro10
packet-analysis10
Programming languages (7)
Github contributions (5)
OISF/suricata
Jun 2011 - Jan 2022
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:21 reviews, 145 commits, 84 PRs in 10 years 9 months
Contributions summary:Pierre's commits focused on enhancing the security and functionality of the Suricata network intrusion detection system. The user implemented new event rules for NTP and IKEv2 traffic, increasing the system's ability to detect malicious activity. They also introduced Kerberos 5 support, including an event to identify weak encryption algorithms, and extended the functionality with a new SNMP PDU type keyword. Further, they addressed build issues and code quality through the use of Rust.
git-repositorynsmipssecurityids
libpnet/libpnet
Jan 2020 - May 2021
Cross-platform, low level networking using the Rust programming language.
Role in this project:Back-end Developer
Back-end DeveloperContributions:11 commits, 5 PRs, 11 comments in 1 year 4 months
Contributions summary:Pierre primarily worked on the `pnet_macros` and `pnet_packet` crates, which are core to the `libpnet` networking library. Their contributions involved refactoring and improving the `#[packet]` macro, addressing compiler errors, and migrating from `syntex` to `proc-macro`, syn and quote for building macros. The user also moved code to plain source files and updated tests to trybuild for better testing, ensuring the library's functionality and maintainability. These changes improved code quality and streamlined the build process.
packetsrustnetworkingcross-platformlibpnet
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.