He has been involved in several research project, such as the French ANR CESSA Project to propose systematic and seamless integration of software security in the software development life-cycle, using AOSD and AOP paradigm. His research work covers a large part of security engineering: secure programming, web service security, risk analysis and policy enforcement, but also a large part on distributed computing: SOA, Cloud computing, etc.