PhD Position (M/F): Model-Based Threat Modeling for Compartmentalized Systems
Position PHD
Expected start dateAutumn 2026
Estimated duration3 years
Education levelMaster's degree or equivalent
ContactArnaud BLOUINarnaud.blouin@irisa.fr
Β
π― Join a Cutting-Edge Cybersecurity Research Project
Are you passionate about cybersecurity, software/system architecture, and model-based techniques? We’re looking for a talented PhD candidate to tackle one of the most pressing challenges in modern system security: evaluating and promoting compartmentalization in embedded systems.
π¬ The Research Challenge
In an era where cyber threats are increasingly sophisticated, compartmentalization represents a critical last line of defense against attacks. Despite its proven effectiveness, compartmentalization remains underutilized in embedded system design. Why? Current threat modeling tools simply aren’t equipped to properly evaluate compartmentalized architectures.
Your mission: Change this.
“Despite longstanding recognition within the academic sphere and proven effectiveness in seminal industry projects, the adoption of compartmentalization techniques in main-stream software remains inconsistent: compartmentalizing is still far from being a common engineering practice."
β Lefeuvre et al. [Lef+25]
π Your Project at a Glance
You’ll develop a tool-supported methodology that revolutionizes how we threat model compartmentalized embedded systems. This involves:
Core Innovations
1. Comprehensive Ontology Development
Create a formal ontology capturing the features and characteristics of various compartmentalization techniques β from virtualization to process isolation.
2. Specialized Modeling Language
Design an Architecture Description Language with rich semantics specifically tailored for compartmentalized systems.
3. Semi-Automated Threat Analysis
Build intelligent algorithms that, compared to existing tools, better take into account compartmentalization in the assessment of embedded systems architectures.
4. Real-World Validation
Evaluate your methodology on well-known compartmentalized systems (Qmail, Postfix, OpenSSH) and potentially on security-critical systems from the US Naval Research Laboratory.
π‘ What Makes This Position Unique
High-Impact Research Domain
As international regulations increasingly mandate threat modeling, your work will address a real and urgent need in the cybersecurity industry. System providers worldwide need better tools to demonstrate their products’ cyber resilience.
Strong Connections
- Collaborate directly with the French Defense Procurement Agency (DGA)
- Potential partnerships with international partners of the DiverSE team
- Evaluation on architectural models of real-world security-sensitive systems
Cutting-Edge Technical Stack
Work at the intersection of:
- (Model-Based) System Engineering β (embedded) system architecture, modeling languages, domain-specific languages
- Cybersecurity β threat modeling, compartmentalization, security evaluation
- Semi-Formal Methods β ontologies, semantics, automated reasoning
Publication Opportunities
Position yourself at the forefront of an emerging research area with excellent potential for high-quality publications at top-tier conferences.
ποΈ Your Work Environment
IRISA: A Premier Research Laboratory
IRISA (Research Institute of Computer Science and Random Systems) is one of France’s largest computer science research labs, with over 850 members contributing to groundbreaking work across seven scientific departments.
Research Focus Areas:
- Bioinformatics
- System Security & Cybersecurity
- Software Architectures
- Virtual Reality
- Big Data Analysis
- Artificial Intelligence
IRISA is embedded in a dynamic regional ecosystem with strong international collaborations, playing a key role in digital transformation, cybersecurity, health, environment, and robotics.
DiverSE Team: Excellence in Software Engineering
The DiverSE research team specializes in building reliable and efficient applications with a strong focus on:
- Cybersecurity
- Large Language Models (LLMs)
- Model-Driven Engineering
Team Composition:
- ~15 permanent members (Inria, CNRS researchers, university lecturers)
- 3 members of the prestigious French University Institute
- ~15 PhD students
- Multiple research engineers
- Strong industry partnerships at global, national, and local levels
What sets DiverSE apart:
- β Internationally recognized research excellence
- β Friendly, collaborative work atmosphere
- β Direct involvement in impactful projects
- β Close collaboration with practitioners
π Ideal Candidate Profile
Required Qualifications
- Master’s degree (or equivalent) in Computer Science, Cybersecurity, System Engineering, or related field
- Strong interest in cybersecurity and system architecture
- Excellent analytical and problem-solving skills
- Good programming and software development abilities
- Fluency in English (written and spoken)
Valuable Skills & Experience
- Background in model-based system engineering, ontologies, or formal methods
- Knowledge of threat modeling methodologies (STRIDE, PASTA, etc.)
- Experience with security analysis or compartmentalization techniques
- Familiarity with embedded systems
- Experience with tool development
πΌ Compensation & Benefits
Competitive Salary
around β¬2,200 gross/month (approx. β¬1,769 net)
Excellent Work-Life Balance
- π Remote work up to 2 days per week
- π Partial reimbursement of public transport costs
- π΄ Sustainable mobility support (cycling allowance)
- π₯ Partial health insurance coverage
- π½οΈ Subsidized on-site cafeteria
Convenient Location
- π Free car parking
- π² Free bicycle parking
- π Bus stop: 5 minutes away
- π Metro station: 10 minutes away
π Location:
Campus de Beaulieu, IRISA/Inria Rennes
Building 12, 263 Avenue du GΓ©nΓ©ral Leclerc
35042 RENNES Cedex, France
π Timeline
- Application Deadline: Spring 2026
- Position Start: Autumn 2026
- Duration: 3 years (full PhD program)
π§ How to Apply
We’d love to hear from you! Please contact:
Dr. Arnaud BLOUIN
Tenured Associate Professor, INSA Rennes
π§ arnaud.blouin@irisa.fr
Dr. Gurvan LE GUERNIC
Research Engineer, DGA
π§ Gurvan.Le_Guernic@inria.fr
Application Materials
Please include:
- Detailed CV
- Cover letter explaining your motivation and relevant experience
- Academic transcripts
- Contact information for 2-3 references
- Any relevant publications or projects
π Security Clearance Note
This position is located in a sector covered by the protection of scientific and technical potential (PPST). In accordance with regulations, your appointment will require authorization by the competent authority of the French Ministry of Higher Education and Research (MESR).
π Why This PhD Will Transform Your Career
This isn’t just a PhD β it’s an opportunity to:
- π― Tackle a critical gap in modern cybersecurity
- π¬ Work on internationally recognized research
- π€ Build a strong professional network in defense and cybersecurity
- π Contribute to work that has the potential to influence international regulations
- π Position yourself as an expert in an emerging field
- π Develop skills highly valued in both academia and industry
Join us in making compartmentalization a standard practice in secure system design!
IRISA and the DiverSE team are committed to diversity and inclusion. We encourage applications from all qualified candidates regardless of background.