Post Doc

**About the role**: Your role is to carry out a Post doc mission on "Scalable and provable attestation framework" attached to the international project "IPCEI CIS". **Global context and problem** Next mobile network generations are based on virtualization and the sharing of physical resources. This should provide more flexible and dynamic networks offering new opportunities and services to end users. This new context thus involves multiple stakeholders and implies a new overview of the mobile network: a mobile network operator (MNO) establishes its network using infrastructure provided by one or more infrastructure providers and VNFs provided by one or more providers of VNFs, then constitute a set of virtualized network (“slices”) for verticals (e.g., IoT, e-health, industry 2.0). This paradigm shift therefore leads to many challenges. In particular, how can the MNO prove to the verticals using its network that the latter indeed offers the required functionalities and ensures the expected properties (for example, restricted geolocation of network nodes, requirements of flow transit, low latency times, etc.). In this context, mechanisms to measure and verify the state of a network are essential. One of the research axes of this post-doc will focus on the attestation framework which aims to provide technical, undeniable, and verifiable proofs of the state of a network. **Scientific objective - Results and challenges to overcome** The goal of the post-doc is to define and specify a provable attestation framework that (1) allows multiple attestation types to be performed, (2) can be easily enriched with new attestation types (e.g., DA, integrity, PP ) and (3) considers several types of execution environment (e.g., VM, container, function ). The main scientific challenges in this post-doc are: - Existing security models and proofs are limited to the cryptographic primitives: The post-doc must define attestation protocols and establish security proofs that consider not only to the cryptographic primitives but also the entire protocols. - No attestation framework proposes to attest multiple properties: existing research projects primarily focus on one property (integrity of a system). The post-doc must design an attestation framework that proposes to attest several properties. - No attestation framework considers multiple execution environments: The post-doc must provide implementations of attestation protocols in multiple execution environments. The main expected achievements are: - A security analysis of existing attestation solutions - A complete security model of attestation protocols to be integrated into the framework. - An implementation of the attestation framework **About you**: **Scientific and technical skills** - Cryptography: security protocols, security proofs, attestation protocols - System: TPM 2.0, TEE, IMA - Mobile network: basic knowledge of the architecture, functions, procedures - Development: python, REST, C **Personal qualities**: - Autonomous - Take the lead - Curious - Work in a multicultural environment. **Required training**: PhD in computer security or cryptography **Additional information**: The postdoc will integrate a dynamic research team with high level skills in the fields of cryptography, network security and mobile services. He / She will have the opportunity to participate to French and European collaborative projects, in particular IPCEI CIS and ANR MobiS5. Finally, the topic of the postdoc is a main challenge in new mobile networks as well as the use cases associated with it (e.g., dynamic certification). **Department**: Orange Innovation brings together the research and innovation activities and expertise of the Group's entities and countries. We work every day to ensure that Orange is recognized as an innovative operator by its customers and we create value for the Group and the Brand in each of our projects. With 740 researchers, thousands of marketers, developers, designers and data analysts, it is the expertise of our 6,000 employees that fuels this ambition every day. Orange Innovation anticipates technological breakthroughs and supports the Group's countries and entities in making the best technological choices to meet the needs of our consumer and business customers. In Orange Innovation, you will be part of a research team at the forefront of innovation and expertise in the security of networks and services of the future (mobile networks, virtualization, Could Computing, mobile edge computing, Cryptography). **Contract**: Post Doc