Phd Position F/m Security Mechanisms for

il y a 4 semaines


Strasbourg, France Inria Temps plein

Le descriptif de l’offre ci-dessous est en Anglais_

**Type de contrat **:CDD

**Niveau de diplôme exigé **:Bac + 5 ou équivalent

**Fonction **:Doctorant

**Contexte et atouts du poste**:
This PhD thesis will take place in team COAST and will be supervised by Claudia-Lavinia Ignat, HDR, CRCN Inria, Inria center of Lorraine University and Olivier Perrin, Professor, Lorraine University.

**Mission confiée**:
We want to propose a **security mechanism** adapted for distributed collaborative systems without a central authority. The security mechanism has to deal with **user access rights** to the shared documents as well as with **end-to-end encryption** of data with **key management** suitable for dynamic user groups. The mechanism has to be **easy to use** and will be tested with users.

Existing access control mechanisms mainly based on a central authority feature several difficulties in the context of collaborative systems. In the case of a federation of organizations, agreeing on an authority that manages access rights is almost impossible. Lack of a central authority raises issues of group management such as joining and leaving the group as well as rights revocation. Indeed, it should be possible for a partner to revoke granted rights without contacting an external authority. Moreover, current access control mechanisms feature performance issues that are critical for real-time collaboration where the number of updates is high. Indeed, delays are too high for sending at each user action an access request and waiting for its answer from a trusted central authority which maintains the security policies.

In order to provide high data availability in collaborative systems, data is typically replicated and users are allowed to concurrently modify replicated data. In order to avoid the use of a central server that stores access rights, we propose that in addition to the replication of data, access rights are also replicated. CRDTs (Commutative Replicated Data Types) [1, 2] were proposed as suitable replicated data structures where parallel modifications are conflict free by construction. We want to propose **CRDTs for managing replicated data and replicated access control**.

Group key generation and revocation can be done in concurrency with modifications on the shared document and its access rights. The challenge is to **compose CRDTs for access rights and data synchronisation with group key management operations**.

**Bibliography**:
[1] Gérald Oster, Pascal Urso, Pascal Molli, and Abdessamad Imine. “Data Consistency for P2P Collaborative Editing”. In: Proceedings of the ACM Conference on Computer-Supported Cooperative Work - CSCW 2006. Banff, AB, Canada, 2006, pp. 259-267. isbn: 1-59593-249-6. doi: 10.1145/1180875.1180916.

[2] Marc Shapiro, Nuno M. Preguiça, Carlos Baquero, and Marek Zawirski. “Conflict-Free Replicated Data Types”. In: 13th International Symposium on Stabilization, Safety, and Security of Distributed Systems, SSS 2011. Oct. 2011, pp. 386-400. doi: 10.1007/978-3-642-24550-3_29.

[3] Ted Wobber, Thomas L. Rodeheffer, and Douglas B. Terry. “Policy-Based Access Control for Weakly Consistent Replication”. In: Proceedings of the 5th European Conference on Computer Systems. EuroSys ’10. Association for Computing Machinery, Apr. 2010, pp. 293-306. isbn: 978-1-60558-577-2. doi: 10.1145/1755913.1755943. (Visited on 04/01/2021).

[4] Asma Cherif, Abdessamad Imine, and Michaël Rusinowitch. “Practical Access Control Management for Distributed Collaborative Editors”. Pervasive and Mobile Computing. Special Issue on Information Management in Mobile Applications 15 (Dec. 2014), pp. 62-86. issn: 1574-1192. doi: 10.1016/j.pmcj.2013.09.004.

[5] Mathias Weber, Annette Bieniusa, and Arnd Poetzsch-Heffter. “Access Control for Weakly Consistent Replicated Information Systems”. In: Proceedings of International Workshop on Security and Trust Management. STM 2016. Springer International Publishing, Sept. 2016, pp. 82-97. isbn: 978-3-319-46598-2. doi: 10.1007/978-3-319-46598-2_6.

[6] Pierre-Antoine Rault, Claudia-Lavinia Ignat, and Olivier Perrin. “Distributed Access Control for Collaborative Applications using CRDTs”. In: Proceedings of 9th Workshop on Principles and Practice of Consistency for Distributed Data. Rennes, France, Apr. 2022. doi: 10.1145/3517209.3524826. hal: hal-03584553.

[7] Pierre-Antoine Rault, Claudia-Lavinia Ignat, and Olivier Perrin. “Access control based on CRDTs for Collaborative Dis
- tributed Applications”. In: The International Symposium on Intelligent and Trustworthy Computing, Communications, and Networking (ITCCN-2023), Proceedings of the 22nd IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom-2023). Exeter, UK, Nov. 2023. hal: hal-04224855.

[8] Florian Jacob, Luca Becker, Jan Grashöfer, Hannes Hartenstein. Matrix Decomposition: Analysis of an Access Control Approach on Transaction-based D



  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Contexte et atouts du poste**: This PhD thesis will take place in team COAST, under the supervision of Claudia-Lavinia Ignat, HDR, CRCN Inria, Inria center of Lorraine University and Gérald Oster,...


  • Strasbourg, France Consol Partners Temps plein

    the supervision of the compliance of physical security standards, - the management of Physical Security Projects meant to integrate new systems, and will also - serve on cross functional teams related to new facilities' security systems to be integrated into the existing ones. The consultant success will be measured by how they assist the Protective...


  • Strasbourg, France INRIA Temps plein

    PhD Position F/M CONTACTS: Control Optimization of Nonlinear Tendon-Actuated Continuum roboTs for Surgical applications Le descriptif de l’offre ci-dessous est en Anglais Type de contrat : CDD Niveau de diplôme exigé : Bac + 5 ou équivalent Fonction : Doctorant Mission confiée Continuum robots have emerged as promising...


  • Strasbourg, France NRB Temps plein

    **Who are we?** **Trasys International **is a dynamic global organization that takes pride in being the trusted partner of **EU Institutions.** With strong commitment to excellence and a **30-years track record** of delivering high-quality solutions, we are dedicated to supporting the growth and success of our clients. Our Mission is to help our clients...

  • IT Security Specialist

    il y a 7 jours


    Strasbourg, France Spektrum Group Temps plein

    Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. **Background**: eu-LISA is the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) manages...

  • IT Security Test Specialist

    il y a 2 semaines


    Strasbourg, France NRB Temps plein

    Who are we?Trasys International is a dynamic global organization that takes pride in being the trusted partner of EU Institutions. With strong commitment to excellence and a 30-years track record of delivering high-quality solutions, we are dedicated to supporting the growth and success of our clients. Our Mission is to help our clients keep up with the...

  • IT Security Test Specialist

    il y a 1 semaine


    Strasbourg, France NRB Temps plein

    Who are we?Trasys International is a dynamic global organization that takes pride in being the trusted partner of EU Institutions. With strong commitment to excellence and a 30-years track record of delivering high-quality solutions, we are dedicated to supporting the growth and success of our clients. Our Mission is to help our clients keep up with the...


  • Strasbourg, France infeurope S.A. Temps plein

    **Job Type(s)**:contract**Location(s)**:Strasbourg**We are looking for several Security/Penetration Tester for a client project in Strasbourg.** **Start Date**: 01/02/2023 **End Date**: 31/10/2023; possible extensions **Work Location**: 6 months off-site and 3 months onsite/mixed **Task description**: - Provide the following automated, manual or hybrid...


  • Strasbourg, France IGBMC Temps plein

    New postdoc and doctoral positions available in the laboratory of Romeo Ricci at the IGBMC in Strasbourg, France (; ). Our institute is a leading research institution in Europe currently hosting 46 teams with researchers from all over the world. It is a facility-driven institute with state-of-the-art equipment and core expertise covering all experimental...


  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Niveau d'expérience souhaité **:Jeune diplômé **Contexte et atouts du poste**: Ischemic stroke is a major cause of disability and death worldwide. The occlusion of blood vessels results in a...


  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Niveau d'expérience souhaité **:Jeune diplômé **Contexte et atouts du poste**: LARSEN is a robotics team, located in Inria Nancy / Loria, that develops human-centered technologies, at the...


  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Contexte et atouts du poste**: **Location**: The PhD will be hosted at the University of Strabourg in the city center and founded by the project PDE-IA of the PEPR IA. Since this is a...

  • IT Security Specialist

    il y a 1 mois


    Strasbourg, France Uni Systems Temps plein

    Perform IT infrastructure/ Application Security configuration reviews; - Design and implement technical security mechanisms and technologies; - Design and develop technical security standards and procedures; - Supporting the design, implementation, management and maintenance of IT security solutions, e.g. SIEM, EDR; - Supporting the execution of security...


  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Mission confiée**: Continuum robots have emerged as promising tools in Minimally Invasive Surgery due to their unique ability to navigate through small incisions or openings, offering flexible and...


  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Contexte et atouts du poste**: [1] Y. Karami, et al. Exploring a Structural Data Mining Approach to Design Linkers for Head-to-Tail Peptide Cyclization. Journal of Chemical Information and Modeling...


  • Strasbourg, France Vector Synergy Temps plein

    **Location**: Strasbourg, France **Security Clearance**: EU Secret **Reference No**: 291 / Strasbourg **Skills, knowledge, experience required**: - A level of post-secondary education attested by a diploma or a level of secondary education attested by a diploma giving access to post-secondary education and, after obtaining the diploma, 3 years’ proven...


  • Strasbourg, France Inria Temps plein

    Le descriptif de l’offre ci-dessous est en Anglais_ **Type de contrat **:CDD **Niveau de diplôme exigé **:Bac + 5 ou équivalent **Fonction **:Doctorant **Niveau d'expérience souhaité **:Jeune diplômé **Contexte et atouts du poste**: **Context** The Artemis program aims to establish a sustained human presence on the Moon by the 2030s. Space...


  • Strasbourg, France infom consulting GmbH Temps plein

    We are looking for up to **one SOA Architect with EU-passport to start an initial 1-year contract for an EU-agency-client in Strasbourg (**100% on-site, EU-nationals ONLY). It's to **start a 220-day contract **(extensions possible) for **an international Org' client in Strasbourg.** **Start**:in 2-3 months or earlier when you have an existing...


  • Strasbourg, France infom consulting GmbH Temps plein

    We are looking for **one SOA Architect with EU-passport to start an initial 1-year contract for an EU-agency-client in Strasbourg (**100% on-site, EU-nationals ONLY). It's to **start a 220-day contract **(extensions possible) for **an international Org' client in Strasbourg.** **Start**:in 2-3 months (or earlier when you have an existing...


  • Strasbourg, France Leonardo Belgium Temps plein

    The **Cyber & Security** division of **Leonardo Belgium** is part of a globally recognized group that recently settled offices in **Brussels**. The company's Cyber & Security Division is a pivotal innovator in the field of cybersecurity, offering tailor-made solutions and utilizing leading-edge technology for a variety of sectors. **Leonardo Belgium**, has...