Master Thesis Interrupt Intelligence for Embedded System Security

Bosch Group; Renningen; Vor Ort; EUR 40.000 - 60.000; Vollzeit

Zusammenfassung

Ein innovatives Unternehmen sucht einen Masterstudenten für eine spannende Thesis im Bereich Systemsicherheit. In dieser Rolle werden Sie die Interrupte von Linux-basierten Systemen untersuchen und Methoden zur Bewertung der Ausnutzbarkeit von Schwachstellen entwickeln. Sie haben die Möglichkeit, kreativ zu arbeiten und Ihre Ideen mit einem Team von Sicherheitsexperten zu diskutieren. Diese Thesis kann entscheidend dazu beitragen, die Priorisierung von Schwachstellen zu verbessern und die Sicherheit in der Technologiebranche zu stärken. Wenn Sie eine Leidenschaft für Technologie und Forschung haben, ist dies die perfekte Gelegenheit für Sie.

Qualifikationen

• Masterstudium in Informatik oder vergleichbarem Bereich erforderlich.
• Erfahrung mit Linux-basierten Systemen ist von Vorteil.

Aufgaben

• Forschung im Bereich Systemsicherheit für Linux-basierte eingebettete Systeme.
• Entwicklung von Methoden zur Extraktion system-spezifischer Interrupt-Informationen.

Kenntnisse

Linux-basierte Systeme

Fuzzing-Methoden

Selbstmotivation

Zuverlässigkeit

Unabhängigkeit

Ausbildung

Masterstudium in Informatik

Tools

YOCTO-Projekt

QEMU

Jobbeschreibung

Company Description

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference.

The Robert Bosch GmbHis looking forward to your application!

Job Description

• During your Master thesis, you will conduct research in the area of system security for Linux-based embedded systems. The thesis is about investigating interrupt behaviour and its influence on the exploitability of vulnerabilities. Interrupts can be used by an attacker to increase the chances of provoking a race condition vulnerability.
• You will design and implement methods for extracting system-specific interrupt information. The aim is to assess the interrupt capabilities of an attacker from user space or external interfaces.
• Furthermore, you will evaluate the methods on emulated systems using the YOCTO project and QEMU.
• Last but not least, you will have the opportunity to work creatively and discuss your own ideas with our team of security researchers. The results of this thesis can potentially help to prioritise vulnerability mitigation by more accurately assessing exploitability.

Qualifications

• Education: Master studies in the field of Computer Science or comparable
• Experience and Knowledge: experience with Linux-based systems; fuzzing methods is an advantage
• Personality and Working Practice: a self-motivated, reliable and independent person
• Languages: good in English, German is a plus

Additional Information

Start:according to prior agreement
Duration:6 months

Requirement for this thesis is the enrollment at university. Please attach your CV, transcript of records, examination regulations and if indicated a valid work and residence permit.

Diversity and inclusion are not just trends for us but are firmly anchored in our corporate culture. Therefore, we welcome all applications, regardless of gender, age, disability, religion, ethnic origin or sexual identity.

Need further information about the job?
Nils Benecke (Functional Department)
[phone]

#LI-DNI