Research Intern, Compiler Instrumentation with hardware assistance for Morphing

Huawei Finland R&D; Helsinki; On-site; EUR 11,000 - 17,000; Part time

Job summary

Huawei Finland R&D's Helsinki System Security Lab (HSSL) invites applications for a 6-month internship in Helsinki, Ruoholahti. The project focuses on compiler instrumentation with hardware assistance for morphing and dynamic code protection, exploring churned randomization and memory encryption techniques.

The intern will plan, design and implement solutions under the guidance of security experts, gain hands-on experience with LLVM/GCC modifications and hardware emulators, and contribute to

Qualifications

• A student who has completed most of their M.Sc courses in CS/E.Eng, or a recent M.Sc graduate / PhD student.
• Compiler familiarity through coursework or prior exposure to LLVM / GCC modifications.
• Understanding of low-level system/OS architecture, and hardware emulators is a plus.
• Sufficient skills to work and interact in English.
• Good team-working skills.

Responsibilities

• Plan, design and implement the work under the guidance of security experts in Helsinki System Security Laboratory.
• Collaborate with experienced security professionals on compiler instrumentation and hardware-assisted protection topics.
• Work on a 6-month internship with results potentially remaining proprietary and not immediately suitable for public dissemination.

Skills

Compiler familiarity

English communication

Teamwork

Low-level architecture understanding

Education

M.Sc completed courses in CS/E.Eng or PhD student

Tools

LLVM

GCC

Hardware emulators

Job description

Helsinki System Security Lab (HSSL) Internship
Compiler Instrumentation with hardware assistance for Morphing

Dynamic code randomization and code morphing (churned randomization, encryption in memory) are effective mechanisms to thwart memory attacks in the AI era, where machine learning has proven to be very effective to find shortcomings (bugs) in deployed software, and 50-70% of all bugs in C/C++ code are still today memory safety issues.

In this work we will use new hardware architecture (instructions) to prototype solutions that by a combination of code randomization and encryption makes it harder for an attacker to pinpoint the location where to apply an exploit in deployed code in the field. Primarily this project relates to compiler instrumentation to leverage existing architecture and instructions in in-house hardware. The work may also encompass augmenting hardware emulators (such as QEMU) for testing the compiler instrumentation results with standard benchmarking tests.

If selected, the intern will be working with experienced security experts in the Helsinki System Security Laboratory, and plan, design and implement the work under their guidance. This work is conducted as a internship where the results are not necessarily public-facing (closed IP), i.e., without further negotiation the results of this research may be chosen to remain proprietary, and therefore is not immediately suitable e.g. as a M.Sc. topic or part of a PhD studies.

We are looking for:

• A student who has completed most of their M.Sc. courses, in the field of CS/E.Eng, or a recent M.Sc graduate / PhD student
• Compiler familiarity, e.g. through coursework or prior exposure to LLVM / GCC modifications
• An understanding of low-level (system / OS) architecture, and hardware emulators is considered a plus
• Sufficient skills to work and interact in English
• Good team-working skills

The following we count as advantage:

• Background (courses) in compiler technology, hardware architecture, platform security, cryptography or equivalent
• An interest to do research and explore new challenges.

Location and internship period:

This is a 6-month internship based at our Helsinki, Ruoholahti office.

The Helsinki Systems Security Laboratory in Huawei Finland (HSSL) drives renewal and mastery in the field of platform / device related security technologies for consumer devices such as mobile phones and PCs. Our topical expertise lies in hardware-assisted memory protection, trustworthy execution (processor isolation primitives, hypervisor, TEE, kernel hardening), as well as functionality like device key management, attestation and integrity. We are also making inroads in the areas of security testing and AI protection on terminal devices