Description de l'offre
Research Context and Challenge.
Fault-injection attacks exploit hardware perturbations to move a processor into unexpected states or execution paths, potentially exposing secrets or escalating privileges.
Recent research has highlighted the need to consider the consequences of fault injection in the processor micro-architecture.
In this area, we have developed pre-silicon methodologies and tools that have shown to be successful to find microarchitectural vulnerabilities and/or formally prove the robustness, for a given fault model, of various RISC-V based processors.
We have also developed binary-level program analysis methods (BINSEC/ASE) able to efficiently take into account some predefined ISA-level fault injection models.
Yet, a major and common challenge of all these approaches lies in the state space generated by the modeling of processor’s behavior executing a sequence of instructions and under a fault model.
Objective.
This position focuses on defining and implementing security contracts for fault-injection attacker models.
The proposed security contracts should support a multi-level approach, enabling the design and analysis of hybrid countermeasures, while also bridging fault models derived from experimental characterizations to the software level.
They will also be used to revisit our k-fault-resistant partitioning methodology to analysis multi-fault models within complex systems, such as applications processors, and to help our binary-level code analyzers to handle more generic classes of fault models.
Within the TwinSec research project, your main missions will be to:
#CEA-List ; #Post-doc ; #Post-doctorat ; #Researcher ; #LI-CB1 ; #CDD
Profil du candidat
The major breakthrough introduced by security contracts will be the ability to provide formal composable security properties, thus enabling the exploration of binary-level software analyses with RTL or post-synthesis level analyses of secure hardware circuits.
We are seeking a motivated researcher with:
In accordance with the commitments made by the CEA in favor of the integration of people with disabilities, this job is open to everyone.
The TwinSec project is also recruiting a PhD candidate to work on the topic of security contracts for fault-injection attacker models.
The Post-doc researcher will participate in the co-supervision of this PhD project and contribute to the development of the methodologies and tools designed by the PhD student.
Conformément aux engagements pris par le CEA en faveur de l'intégration des personnes handicapées, cet emploi est ouvert à toutes et à tous.
Le CEA propose des aménagements et/ou des possibilités d'organisation pour l'inclusion des travailleurs handicapés