INESC ID is looking for a researcher to engage under the scope of of project CMU/TIC/0006/2019 PassCert: Exploring the Impact of Formal Verification on the Adoption of Password Security Software. The duration of the research fellowship is 6 months.
The researcher will be a member of the research project PassCert, which aims at building an open-source, proof-of-concept password manager that through the use of formal verification, is guaranteed to satisfy properties on data storage and password generation. PassCert is a research collaboration between researchers from INESC-ID Lisboa (PT), INESC TEC (PT), and Carnegie Mellon University (US).
The selected candidate will:
1) Contribute to the development of the proof-of-concept verified password manager.
2) Explore ways in which the data security of the password manager can improve.
3) Investigate ways of formally verifying the data security properties identified.
4) Actively participate in and contribute to PassCert’s activities and regular meetings.
The candidates should have a Bachelor Degree in Computer Science or related areas.
By the grant start date, the candidate must be enrolled in a MSc programme or in a non-degree programme.
Preference will be given to candidates who satisfy one or more of the following criteria:
i) Experience with formal verification and with automated/interactive provers (e.g. Dafny, Verifast, Coq, Isabelle/HOL)
ii) Proven knowledge of current research on usable security in the context of password managers.
The activity will be supervised by João Fernando Peixoto Ferreira, assistant professor at Instituto Superior Técnico, Universidade de Lisboa and researcher at INESC- ID Lisboa, and Alexandra Mendes, assistant professor at Univ. da Beira Interior and researcher at INESC-TEC. INESC ID will integrate the grantee in the research team of the scientific advisor.
The fellowship is renewable, if the candidate is enrolled in a MSc program or a non-degree program.
Application period: 22 April 2021 – 5 May 2021.