Internship/Statistical Analysis of Encrypted Flows (m/f)

Description de l'offre

Internship/Statistical Analysis of Encrypted Flows (m/f)

Cassidian CyberSecurity Elancourt

European specialist in cyber security, the Airbus Defence and Space mission is to protect companies, critical national infrastructures, as well as government and defence organisations against cyber threats. Its reliable and high performance security products and services are able to detect, analyse and neutralise the most sophisticated cyber-attacks.

Airbus Group is a global leader in aeronautics, space and related services. In 2015, the Group - comprising Airbus, Airbus Defence and Space and Airbus Helicopters - generated revenues of € 64.5 billion and employed a workforce of around 136,600.

Our people work with passion and determination to make the world a more connected, safer and smarter place. Taking pride in our work, we draw on each other's expertise and experience to achieve excellence. Our diversity and teamwork culture propel us to accomplish the extraordinary - on the ground, in the sky and in space.

Description of the job

Airbus Defence and Space CyberSecurity (Elancourt) is looking for an intern (m/f) for a 6-month internship.

You will join the Cryptography team.
Your role will be to develop solutions for secure integrated systems that perfectly meet the needs of our customers. Specifically, one of its objectives is to make the execution of operations secure (data encryption, authentication, identification, etc.) from those persons potentially seeking to do harm.
You will therefore have to install cryptographic primitives in security products. You will also help the company to improve the performance of its CyberDefense products.
In this context, one of the activities of the Cryptography team consists in effectively installing analysis algorithms in high-performance platforms. Amongst the products concerned, Intrusion Detection Systems (IDS) must deal with increasing volumes of network traffic and renewed threats leading to more and more complex processing on these packets. Furthermore, IDSs are faced with more and more encrypted (often basically with OpenSSL) and anonymised (notably via the use of Tor) traffic, which makes analyses more complex and damages their performance.

This internship will start on 01 March 2017 (subject to some flexibility).

Internships at Airbus Group

Profil recherché

Tasks & accountabilities

The aim of your internship is to install a statistical analysis module for encrypted network flow.
Some initial work completed at Airbus Defence and Space - CyberSecurity has shown that this type of analysis is possible, based on encrypted flow parameters, such as average length and timing of network packets, to try and reveal information about these packets (e.g. application type) and therefore about the attack which could currently be occurring (e.g. botnet).
One of the goals of your internship is to continue this work with a view to improving and industrialising it.
The impact of the analysis module you design must be estimated, particularly as far as the throughput of our IDS is concerned.
The ultimate goal is to be able to produce an analysis in runtime of monitored traffic. Another prospect would be to correlate the security alerts detected in encrypted and in plain flows. Finally, methods aiming to detect traffic anonymisation will be considered.

Required skills

You are in the final year of engineering school, completing a Master's degree or in the 5th year of university, specialising in IT/Security.

You ideally have initial experience in this field.

You are a good team player and have excellent interpersonal skills.

English: intermediate level
French: fluent