The Twente University Centre for Cybersecurity Research has a vacancy for a PhD Position in Federated Monitoring and Automated Response.
Real-time monitoring is essential for threat detection and response. Many different monitoring approaches have been proposed in the state-of-the-art and several tools are available on the market. However, the complexity and dynamism of modern distributed environments pose a critical challenge to such tools, which are limited in terms of scalability and visibility. Additionally, in such distributed architectures it is crucial to correlate observed insights (e.g., indicators of compromise) to track lateral movement.
The goal of this PhD Project is to research novel methodologies to monitor distributed environments, ultimately aiming at threat detection, automate the extraction, learning, and correlation of cyber threat intelligence (CTI), and reason about effective and transferable threat response strategies.
Research Question:
How do we monitor distributed environments for threat detection and how do we extract, share, and deploy response strategies in an automated way?
Information and application
Are you interested in this position? Please submit your application before may 31st via the ‘Apply now’ button below and include:
- A motivation letter, emphasizing your specific interest and motivation to apply for a PhD position in this research area.
- A detailed Curriculum Vitae, including any publications if applicable, academic awards and your working experience.
- An academic transcript of BSc and MSc education, including grades.
For more information, you are welcome to contact Tom van Boven, t.w.vanboven@utwente.nl
About the department
About TUCCR
The Twente University Centre for Cybersecurity Research (TUCCR) is a public-private partnership where experts, professionals, entrepreneurs, researchers, and students from industry and knowledge partners collaborate to deliver talents, innovations, and know-how in the domain of cybersecurity.
The mission of TUCCR is to strengthen the security and digital sovereignty of our society by performing top-level research on real-world data and network security challenges. To achieve significant societal impact, TUCCR combines technical, socio-economic, and ethical know-how and is equipped with state-of-the-art infrastructure, ranging from security labs, testbeds, data lakes, and dedicated attack-defense environments, such as cyber ranges.
The Twente University Centre for Cybersecurity Research is a public-private partnership between the University of Twente, Cisco, SIDN, Thales, TNO, BetterBe, NDIX, NCSC, Vereniging Nederlandse Banken, SURF and Northwave.
About the organization
The faculty of Electrical Engineering, Mathematics and Computer Science (EEMCS) uses mathematics, electronics and computer technology to contribute to the development of Information and Communication Technology (ICT). With ICT present in almost every device and product we use nowadays, we embrace our role as contributors to a broad range of societal activities and as pioneers of tomorrow's digital society. As part of a people-first tech university that aims to shape society, individuals and connections, our faculty works together intensively with industrial partners and researchers in the Netherlands and abroad, and conducts extensive research for external commissioning parties and funders. Our research has a high profile both in the Netherlands and internationally. It has been accommodated in three multidisciplinary UT research institutes: Mesa+ Institute, TechMed Centre and Digital Society Institute.
Want to know more?
