Model-Based Threat Modeling For Compartmentalized Systems H/F

INRIA

Model-Based Threat Modeling for Compartmentalized Systems
Le descriptif de l'offre ci-dessous est en Anglais
Niveau de diplôme exigé : Bac +5 ou équivalent

Fonction : Ingénieur scientifique contractuel

A propos du centre ou de la direction fonctionnelle

The Inria Centre at Rennes University is one of Inria's eight centres and has more than thirty research teams. The Inria Centre is a major and recognized player in the field of digital sciences. It is at the heart of a rich R&D and innovation ecosystem: highly innovative PMEs, large industrial groups, competitiveness clusters, research and higher education players, laboratories of excellence, technological research institute, etc.

Mission confiée

Description

Threat modeling [TC20] is a methodology used to analyze the robustness of systems to cyberattacks. It involves identifying threats to the security of a system or data it processes. However, threat modeling is more commonly used for large distributed systems rather than single programs or embedded systems. Architecture compartmentalization [Shu+16; Lef+25] is an efficient last defense against cyber attacks, but it is seldom used in the design of security-sensitive embedded systems.

One reason for this is that compartmentalization is not a concept mastered by embedded system architects. Threat modeling can play a role in incentivizing compartmentalization by providing a better evaluation of compartmentalized systems.

Principales activités

Main activities (5 maximum) :

The engineer will propose a new tool-supported approach to threat model compartmentalized embedded systems from a precise model of their architecture. The approach uses a detailed ontology of compartmentalization to support a precise semantics of compartmentalization, allowing the proposed semi-automated threat modeling algorithm to take into account the advantages and limitations of various compartmentalization techniques.

The evaluation of the proposed approach consists of comparing it to existing tools on known well-compartmentalized software systems. We will also conduct an evaluation on a security-sensitive real-world embedded system from the US NRL. The goal is to provide a better evaluation of compartmentalized systems and incentivize the use of compartmentalization in embedded system design. By using a precise model of the architecture, the proposed approach can help identify threats and vulnerabilities in compartmentalized systems, ultimately leading to more secure embedded systems.

Additional activities (3 maximum) :

This work is both a scientific study aimed at providing an overview of current practices and a technical effort focused on prototyping a potential approach. It also aims to compare existing tool-based approaches.

Avantages

- Subsidized meals
- Partial reimbursement of public transport costs
- Leave: 7 weeks of annual leave + 10 extra days off due to RTT (statutory reduction in working hours) + possibility of exceptional leave (sick children, moving home, etc.)
- Possibility of teleworking (after 6 months of employment) and flexible organization of working hours
- Professional equipment available (videoconferencing, loan of computer equipment, etc.)
- Social, cultural and sports events and activities
- Access to vocational training

Rémunération

monthly gross salary from 2675 euros according to diploma and experience