From Cloud to Microcontrollers
PhD candidate specializing in cybersecurity and constrained systems
PhD candidate at Inria and CNAM, specializing in cybersecurity and constrained systems. My research focuses on security mechanisms for microcontrollers, particularly using WebAssembly and containerization techniques. I work at Orange Innovation on multi-tenant embedded systems.
Proceedings of the 2025 International Conference on Embedded Wireless Systems and Networks
This paper presents TinyML-as-a-Service (TMLaaS), a novel architecture for deploying machine learning workloads on multi-tenant microcontrollers. We propose a runtime system that enables secure isolation between tenants while minimizing resource overhead. Our approach leverages WebAssembly Micro Runtime (WAMR) to provide a sandboxed execution environment for TinyML models on constrained devices.
Contribution: Main author. Designed the TinyML-as-a-Service architecture for multi-tenant microcontrollers.
ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec)
We present TinyContainer, a container runtime middleware designed for multi-tenant microcontrollers with built-in security features. TinyContainer provides lightweight process isolation, access control, and resource scheduling for embedded systems. Our implementation demonstrates minimal overhead while maintaining strong security guarantees suitable for IoT and constrained device environments.
Contribution: Main author. Designed the TinyContainer runtime and access control mechanisms.
SenSys-Adjunct 2026
This demo presents TinyContainer running on RIOT OS, showcasing access control and scheduling mechanisms for WebAssembly runtimes on microcontrollers. The demo illustrates how multiple tenants can coexist securely on a single device with guaranteed quality of service.
Contribution: Main author. Implemented demo system for TinyContainer.
DCOSS-IoT 2026 - 22nd Annual International Conference on Distributed Computing in Smart Systems and the Internet of Things
We present treVM, a tiny Rust embedded virtual machine supporting WebAssembly on variable resource-constrained hardware. Our system adapts to available resources by dynamically selecting appropriate execution strategies, from interpretation to JIT compilation, based on device capabilities.
Contribution: Survey on Wasm runtimes and paper review. Contributed to runtime evaluation.
JavaCard development with NFC read on Android. Implementation of secure applet for constrained devices.
Developed secure JavaCard applets with NFC communication capabilities for Android devices.
Management of Linux servers using Docker Compose. Automated deployment and monitoring.
Set up and maintained Linux servers with Docker Compose for various personal projects.
49-hour game development competition (Gamesicaen). Designed and implemented a 3D unity game.
Participated in a team of three.
Real-time multiplayer quiz application with Node.js and Socket.io.
Built a real-time multiplayer quiz system using Node.js and Socket.io for real-time communication.
Browser extension using Twitch API for enhanced viewing experience.
Developed a browser extension integrating Twitch API to enhance the viewing experience.
Open source application for RIOT OS strengthening application isolation using virtualized WebAssembly.
Main contributor. Designed and implemented security mechanisms for WebAssembly runtime isolation on microcontrollers.
Container runtime middleware enabling multi-tenant microcontrollers with built-in security.
Contributor. Work on demo with TinyContainer and implementation of TinyML endpoints. (Not publicly available).