Lab Summary:

As part of the Knox Security team in the B2B lab at SRA, security research engineers identify and solve difficult security challenges involving Samsung’s mobile and enterprise laptop products. Team members are typically expert in one or more specialties, and can expect to learn more about other areas from exposure to the rest. Broad areas of work include proposing and prototyping novel security features, researching and architecting hardware-based and software security mechanisms, performing vulnerability assessments, analyzing reported exploits and suggesting ways to strengthen security, and developing automated tools for security analysis of code and binaries.

Position Responsibilities:

Our team seeks candidates for a research internship to work on security technologies on our Knox Android mobile devices and Intel-based laptops:

• Propose and build new hardware-based and software-based security features.
• Build and improve tools for automated security analysis of system software on Samsung Android mobile devices and Intel-based laptops, such as UEFI/BIOS, bootloaders, ARM TrustZone, hypervisors.
• Candidates have flexibility in choosing their area of work, analysis techniques and targets. We encourage work during the internship to be patented and/or published in academic conferences as applicable.

Required Skills:

• The candidate must currently be pursuing a graduate degree (Masters or PhD) in computer science or a related technical field.
• Candidates are expected to have a background in at least one of the following areas:
  • (i) Systems security with knowledge of:
    • ARM-based Android and/or Intel-based Windows
    • Linux kernel
    • Trusted execution environments such as ARM TrustZone or Intel SGX or
    • Embedded systems and firmware
  • (ii) Program analysis techniques such as:
    • Fuzz testing
    • Reverse engineering
    • Symbolic execution
    • Vulnerability discovery
    • Exploit development