Offensive Security Internship

il y a 2 semaines


Paris, Île-de-France Apple Temps plein

Apple System-on-Chips (SoCs) implement multiple security mechanisms to ensure platform integrity against a broad spectrum of threats, including hardware fault attacks. These attacks are sophisticated techniques where adversaries intentionally introduce physical disturbances to disrupt normal processor operation, causing exploitable errors that can reveal sensitive data or bypass critical security mechanisms. While Apple SoCs demonstrate strong resilience against these attack vectors, our hardware security teams maintain continuous research efforts to ensure sustained protection against evolving threats. Laser Fault Injection (LFI) currently represents the most effective technique for disrupting SoC operation, but it requires expensive equipment and specialized chip preparation that are only accessible to well-equipped laboratories. Additionally, this technique cannot be effectively applied to mixed logic-memory stacking architectures where the logic (CPU) package is positioned beneath the memory package. Electromagnetic Fault Injection (EMFI) does not suffer from these limitations and is increasingly recognized as a cost-effective alternative approach. The objective of this internship is to advance the state-of-the-art in EMFI attacks against advanced semiconductor technologies like those employed in Apple products. The ultimate goal is to use these research findings to further strengthen Apple's hardware security implementations and ensure the best protection against emerging fault injection techniques.

Description

This internship provides an exceptional opportunity to work with cutting-edge hardware attack methodologies against state-of-the-art semiconductor technologies. The 6-month program is scheduled to take place in Paris during 2026 and will be conducted using a specialized test chip platform where selected software and hardware countermeasures have been disabled to permit comprehensive analysis and precise characterization of attack effects. The internship program will begin with comprehensive training on existing Electromagnetic Fault Injection (EMFI) techniques, applying these methodologies against test devices with direct CPU access. The second phase will focus on advancing EMFI capabilities through systematic setup and technology optimizations, including improvements to injection probe resolution and reductions in electromagnetic pulse duration. The final phase will involve evaluating these enhanced attack methodologies on SoCs with stacked DRAM architectures to quantitatively determine how this configuration affects attack effectiveness and success rates. Throughout the internship, you will work alongside other hardware security researchers on your missions

Minimum Qualifications

  • Experience in physical attacks
  • Knowledge of electromagnetism fundamentals
  • Knowledge and experience in analog electronic and microprocessors architecture
  • Great analytical and presentation skills.

Preferred Qualifications

  • Proficiency in switching power supply techniques
  • Applied cryptography
    Experience in fault attacks

Envoyer un CV



  • Paris, Île-de-France Apple Temps plein

    Apple is seeking a motivated student for the position of Microarchitecture Security Intern. The team pursues research & development in the areas of microarchitectural attacks with particular focus on cache side-channels, transient execution vulnerabilities and fault injections. As a member of the team, you will work on finding microarchitectural side-channel...

  • Offensive Security

    il y a 4 jours


    Paris, Île-de-France Apple Temps plein

    As part of Apple's Security Engineering & Architecture (SEAR) organization, you'll join our mission to create the world's most secure products. We are committed to building groundbreaking tools that enable our security researchers to delve deep into our numerous codebases and frameworks to identify any security concerns efficiently. We are seeking a...

  • Offensive Security

    il y a 4 jours


    Paris, Île-de-France Apple Temps plein

    Apple's Security Engineering & Architecture team (SEAR) focus on security needs. Passionate about safeguarding, we believe the best defense is a good offense. When it comes to securing more than a billion devices running the world's most sophisticated operating systems, that means finding vulnerabilities first. Can you make a difference on this scale? Join...


  • Paris, Île-de-France Ledger Temps plein

    Job title: Internship | Security Engineer Analyst (ZTNA)Location: Paris, FranceAbout LedgerWe're a team of experts pushing the limits of what's possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with...


  • Paris, Île-de-France AXA Group Operations Temps plein

    Kickstart your career in cybersecurity and strategic anticipation Join a global team, develop expertise in cyber threats, and shape security strategies for a leading insurer. Embrace diversity, innovation, and international collaboration. Apply now for a 6-month internship starting March 2025About AXAAs a world-leading insurance company, we act for human...


  • Paris, Île-de-France HeadMind Partners Temps plein

    Paris - Stage fin d'étudesDéveloppez une expertise sécurité technique de pointeVos MissionsL'équipe « Audit 360 » évalue le niveau de résistance à une attaque de nos clients au travers d'approches offensives (tests d'intrusion, red team) ou d'audits plus classiques (audit de configuration, d'architecture, audit de code). En rejoignant cette équipe...


  • Paris, Île-de-France Alpic Temps plein

    About UsAlpic is the all-in-one MCP hosting platform.We're entering a major technological shift where AI is replacing traditional search and beginning to act on our behalf through agents. These agents won't rely on human interfaces, they'll interact through AI-native protocols. The current UI-based web is too slow, costly, and fragile for agents, while also...


  • Paris, Île-de-France Alpic Temps plein

    About UsAlpic is the all-in-one MCP hosting platform.We're entering a major technological shift where AI is replacing traditional search and beginning to act on our behalf through agents. These agents won't rely on human interfaces, they'll interact through AI-native protocols. The current UI-based web is too slow, costly, and fragile for agents, while also...


  • Paris, Île-de-France Alpic Temps plein

    About UsAlpic is the all-in-one MCP hosting platform.We're entering a major technological shift where AI is replacing traditional search and beginning to act on our behalf through agents. These agents won't rely on human interfaces, they'll interact through AI-native protocols. The current UI-based web is too slow, costly, and fragile for agents, while also...

  • Hardware Security Researcher

    il y a 1 semaine


    Paris, Île-de-France Ledger Temps plein

    About LedgerWe're a team of experts pushing the limits of what's possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a...