Master Thesis - Enhancing software security: A study of hardware capabilities

  • Contract
  • Legal Entity: Robert Bosch AB

Company Description

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference.

Bosch R&D Center Lund stands for modern development in cutting edge technology in the areas of connectivity, security, mobility solutions and AI. We are growing rapidly and looking for people to join us on our mission to become the Bosch Group’s 1st address for secure connected mobility solutions.  We are working on a range of interesting projects, with a particular focus on software development for the automotive industry, electrical bicycles and Internet of Things. 

Job Description

Problem statement
If you are interested in shaping the future of securing connected mobility, we are excited to offer an inspiring and fun master’s thesis project.

The increasing dependence on connectivity and software has brought about a new set of security challenges. One of the biggest problems is the prevalence of software bugs that leave systems insecure. As software becomes more complex and interconnected, the likelihood of bugs and vulnerabilities increases. These bugs can be exploited by attackers to gain unauthorized access to systems, steal sensitive data, or even cause physical damage. In addition, the increasing use of third-party software components and libraries can introduce additional security risks, as these components may contain vulnerabilities that are not immediately apparent. To address these challenges, it is important to adopt a proactive approach to software security, starting from the hardware platforms on which the software is executed.

Proposed solution
The focus in this thesis project shall be on evaluating the effectiveness of utilizing Capability Hardware Enhanced RISC Instructions (CHERI) to mitigate against commonly exploited software vulnerabilities.

We propose the following topics to be covered in the thesis:
•    Benefits of utilizing CHERI versus conventional hardware instructions sets for C/C++ development
•    Research and find suitable alternatives to CHERI
•    Identification of toolchain and development effort for utilizing CHERI
•    Run-time performance impact for CHERI
•    Build-time performance impact for CHERI

You will of course have the opportunity to shape the thesis based on your knowledge, skills and discoveries during the project.

Scope of master thesis project
Two students completing 30 credits each (20 weeks) onsite at the Lund office.

Qualifications

Please note: Only applications from students at a Swedish University are accepted.

Your profile
In order to be successful in the project with think you are:

  • A student in Information Technology, Computer Science, Electronics, Math or Physics.
  • Interested in cybersecurity and have some experience with software vulnerabilities.
  • Experienced with Linux, programming in C/C++ and has knowledge of computer hardware architecture.
  • Self-driven, able to challenge yourself, and gain the experience needed to move the project forward.
  • A person with team spirit, social skills and a curiosity for exploring new technology areas.

Supervisors:
Bosch: Andreas Elvstam Cantner

Privacy PolicyImprint