Hardening open source software libraries i Järfälla

Surveillance provides efficient solutions for safety and security, for surveillance and decision support, and for threat detection and protection. The portfolio covers airborne, ground-based and naval radar, electronic warfare, combat systems and C4I solutions, and traffic management systems.

Our Cyber Security business unit develops products and services to increase the level of cyber security in Saabs portfolio. The rapid ongoing digitalization demands continuously improved and updated cyber security capability and data protection to maintain the privacy, integrity and availability of data and systems.

We develop a cloud based platform that takes full advantage of the benefits of virtualisation without compromising cyber security including tool chains that enables continuous compliance with high release velocity.

Keywords: Security, Continuous integration, Test automation, Fuzzing, Mutation testing

Open source libraries and increasingly used as part of large industrial software systems. Some of these systems are subject to strict safety and security constraints. In this context, it is essential to assess the quality of open source libraries. This assessment acitivity has to rely on state of the art testing and analysis techniques proposed in the scientific literature.

For this master thesis, you will experiment with the latest tools for safety and security analysis. These tools are in the area of fuzzing, automatic testing, and mutation analysis. You will be in charge of assessing the scalability, performance and effectiveness of these tools on large, critical libraries, such as the EFJCBA library for public Key Infrastucture (PKI)[1].

[1] https://github.com/EnigmaBridge/ejbca-community
[2] https://github.com/STAMP-project/pitest-descartes
[3] https://github.com/guneljahan/OASIs
[4] Vera-Pérez, Oscar Luis, et al. "A comprehensive study of pseudo-tested methods." Empirical Software Engineering (2017): 1-31.
[5] Gunel Jahangirova, David Clark, Mark Harman, and Paolo Tonella. OASIs: Oracle Assessment and Improvement Tool. In Proc. ISSTA’2018.
[6] https://github.com/bcgit

You need to be on the last year of your studies for a computer science degree. The master thesis project will start in the first quarter of 2019. Java skills is a strong plus.