PhD position on threat intelligence operationalization

Eindhoven University of Technology (TU/e), Netherlands

Updated: over 2 years ago
Deadline: 09 Oct 2021

We are looking for one PhD student at the Department of Computer Science and Mathematics at the Eindhoven University of Technology. The candidate will work in the SECurity cluster on the NWA CATRIN project. The goal of CATRIN is to startup the Responsible Internet, a novel security-by-design concept and extension to the Internet that enables higher levels of trust and sovereignty.

CATRIN integrates technology, economics, and policy research to deliver a first operational Responsible Internet. All the PhDs hired in the project contribute to this effort from different expertise angles.

The research position

This position focuses on the enhancement of current threat intelligence and threat monitoring technologies. The goal of the position is to develop, test, and operationalize enhanced and extensible data models for threat intelligence to support monitoring and detection activities by including information on adversaries, attack procedures, and the information provided by the 'Responsible Internet' model. This approach will require a multidisciplinary approach integrating a deep understanding of attacker operations and methods with technical solutions for data analysis and threat monitoring. These approaches will integrate methods from the domains of Natural Language Processing (NLP), and Artificial Intelligence and Machine Learning (AI/ML).

The SECurity cluster at TU/e is uniquely positioned to support this type of research: the cluster conducts cutting-edge research on cybercriminal operations via underground market infiltration and attacker measurements, as well as running its own, in-house, commercial Security Operation Center (SOC). As such the cluster offers unique insights and data on attacker and defender operations supporting this research. The successful candidate will have access to a broad network of researchers and data, as well as direct access to the TU/e SOC for data collection and experimentation.

An extensive project description is available on request.

Tasks:

- carry out research within the project, in cooperation with the other parties involved;
- develop the techniques and tool prototypes required by the project, in cooperation with the other parties involved;
- contribute to the writing of scientific papers;
- finishing a PhD thesis within four years;
- contributing to the teaching activities of the Security group.


Similar Positions