Post-Doc and/or Research Engineer positions on Software Security

CONTEXT

The PACSS team develops semantically well-founded tools for code analysis, both for safety or security purposes. Research topics that are covered by the team are (not exhaustively): proof assistant, abstract interpretation, certification, binary code analysis, security properties, reasoning in presence of active attackers.

Several PhD and/or research engineers positions are open in the team. These positions are supported by several collaborating projects: ERC, FUI, Idex Grenoble Alpes Cybersecurity Institute, IRT Nanoelec.

TOPIC ADDRESSED

The proposed positions address the following topics:

  • Proof of security for secure processors (classical vulnerability, fault injection, side channels)
  • Tools for security analysis: robustness and counter-measure evaluation
  • Information-flow analysis using dynamic-symbolic execution
  • behavioral inference of low level-code
  • development of a compiler back-end (CompCert) for a secure processor

EXPECTED SKILLS

The candidate is expected to hold a Master degree or a PhD in software engineering, with excellent software development skills. Some knowledge and competences are expected in at least one of the following domains: - software security - software analysis (static or dynamic analysis, abstract interpretation) - binary code, assembly-level tools, reverse - secure compilation - proof development using Coq

WORKING ENVIRONMENT AND LOCATION

Grenoble is also called the capital of the French Alps and is one of the most active areas in Europe for research in Information and Communication Technologies. VERIMAG is a public joint research laboratory of Universit´e Joseph Fourier, Grenoble INP, and the CNRS. Research topics addressed at VERIMAG aim at providing theoretical and technical means for developing embedded systems. Computer security is one of the research fields studied at VERIMAG since about 10 years, with a strong emphasis on cryptographic protocol validation and software security.

STARTING DATE, DURATION, TERMS of EMPLOYMENT

This position is a one-year full-time position as a contractual researcher with the possibility of a follow-up contract. It could start between October 2014 and January 2015. Salary will depend on the applicant’s degree and experience.

APPLICATION

The application should consist of a motivation letter and a curriculum vitae. Letters of recommendation or contacts for referees are welcome.

Applications and requests should be sent to: David.Monniaux@univ-grenoble-alpes.fr Marie-Laure.Potet@univ-grenoble-alpes.fr