Bust the Trust: Dissect and Analyze the Security and Privacy Impacts of the Widevine DRM

Opaque systems present a unique challenge for Digital Rights Management (DRM), with Widevine DRM as a key illustration. Despite its widespread usage, this DRM system has revealed significant vulnerabilities in protecting media content. In this thesis, we dissect Widevine inner working and analyze how this opacity hampers security for both companies and users. We explore its usage across OTT platforms, identifying barriers that prevent its full utilization. Privacy concerns are also addressed, as we investigate real problems due to browser misimplementation within DRM systems standardization by the W3C with the Encrypted Media Extension (EME) recommendation. These findings not only expose Widevine challenges but also signal future research avenues in the broader DRM landscape, emphasizing the need for transparency, security, and user-centric design.

ATTENTION  dans le cadre du plan VIGIPIRATE la règle suivante s'applique pour cet évènement :

L’accès du public à cette soutenance est contraint à une inscription préalable obligatoire auprès de aurelie [*] patieririsa [*] fr (aurelie[dot]patier[at]irisa[dot]fr)

– L’accès ne sera pas autorisé sans inscription préalable. Par ailleurs, les visiteurs ne porteront ni bagage ni sac.