Description du poste
Domaine
Mathématiques, information scientifique, logiciel
Contrat
Stage
Intitulé de l'offre
Large Language Model (LLM) for source code analysis in security evaluation H/F
Sujet de stage
Using LLM to identify vulnerabilities by source code analysis is an emerging technique whose limitations have to be studied before it can be integrated in a security evaluation methodology as specified by ANSSI note 26 [1] (Common Criteria certification applicable document).
[1] https://cyber.gouv.fr
Durée du contrat (en mois)
5 to 6 months
Description de l'offre
The objective of this internship is to show how the LLM approach modifies the traditional approach using static analysis techniques. Several new LLM-based approaches will have to be defined and experimented on code bases. The complementarity of an LLM with static analysis tools, in particular those provided by the Frama-C platform [2] will have to be studied, for example the automatic generation of formal specifications for Frama-C/WP.
[2] https://frama-c.com
Moyens / Méthodes / Logiciels
LLM, static analysis, formal methods, cybersecurity
Profil du candidat
Computer engineering degree, final year.
Knowledge of static analysis techniques and software attack techniques (vulnerabilities and exploits).
Interest for AI agent assisted software development and for the possible interactions between LLM and static analysis and formal verification tools.
Localisation du poste
Site
Grenoble
Localisation du poste
France, Auvergne-Rhône-Alpes, Isère (38)
Ville
Grenoble
Critères candidat
Langues
Anglais (Intermédiaire)
Diplôme préparé
Bac+5 - Diplôme École d'ingénieurs
Possibilité de poursuite en thèse
Non
Domaine
Mathématiques, information scientifique, logiciel
Contrat
Stage
Intitulé de l'offre
Large Language Model (LLM) for source code analysis in security evaluation H/F
Sujet de stage
Using LLM to identify vulnerabilities by source code analysis is an emerging technique whose limitations have to be studied before it can be integrated in a security evaluation methodology as specified by ANSSI note 26 [1] (Common Criteria certification applicable document).
[1] https://cyber.gouv.fr
Durée du contrat (en mois)
5 to 6 months
Description de l'offre
The objective of this internship is to show how the LLM approach modifies the traditional approach using static analysis techniques. Several new LLM-based approaches will have to be defined and experimented on code bases. The complementarity of an LLM with static analysis tools, in particular those provided by the Frama-C platform [2] will have to be studied, for example the automatic generation of formal specifications for Frama-C/WP.
[2] https://frama-c.com
Moyens / Méthodes / Logiciels
LLM, static analysis, formal methods, cybersecurity
Profil du candidat
Computer engineering degree, final year.
Knowledge of static analysis techniques and software attack techniques (vulnerabilities and exploits).
Interest for AI agent assisted software development and for the possible interactions between LLM and static analysis and formal verification tools.
Localisation du poste
Site
Grenoble
Localisation du poste
France, Auvergne-Rhône-Alpes, Isère (38)
Ville
Grenoble
Critères candidat
Langues
Anglais (Intermédiaire)
Diplôme préparé
Bac+5 - Diplôme École d'ingénieurs
Possibilité de poursuite en thèse
Non
