Overview

We are seeking a highly motivated candidate for a PhD position in the "Automated Kernel Exploitation" project.

Leveraging advances in program analysis, we built a platform to automate certain steps in prioritizing vulnerabilities based on their practical exploitability. We employ the Linux kernel as target, given its preponderance in cloud services, smartphones, and many embedded components used throughout critical infrastructure.

Specifically, the project could entail:

1. Designing, implementing, and evaluating new compiler passes to assess bug exploitability.
2. Designing, implementing, and evaluating fuzzer extensions to automate part of the exploitation process.
3. Designing, implementing, and evaluating new mitigations for preventing exploitation of vulnerabilities.
   
   

Required Skills

• Fuzzing
• Memory error exploitation
• Linux kernel internals
• C programming
• Debugging
  
  

About the position

You will be part of a team working in the " Systems security " group at IBM Research GbmH, Rüschlikon, Switzerland. You will be mentored by Dr. Anil Kurmus .

The successful candidate will enjoy an internationally competitive salary and work with collaborative and creative groups in an exclusive research environment.

The project should start in the first half of 2025.

Diversity

IBM is committed to diversity at the workplace. With us you will find an open, multicultural environment. Excellent flexible working arrangements enable all genders to strike the desired balance between their professional development and their personal lives.

How to apply

If you are interested in this position, please submit your application here.