Helsinki System Security Lab (HSSL) Internship (1H/2025 or summer 2025)

Optimized use of Pointer Authentication with HW Shadow stack。Are you looking for summer internship, Welcome to join us! At Huawei, we believe that innovation drives everything we do. We turn bold ideas into cutting-edge products and services that reshape industries. By bringing your passion and dedication, you’ll have the chance to make a real impact. Our team of forward-thinking individuals collaborates to develop world-class technology that empowers millions. We’re committed to digital transformation, sustainability, and building a more connected, intelligent world. If you're passionate about Security technology and want to contribute to this exciting area, we'd love to invite you join us!

A sizable proportion of security vulnerabilities afflicting computer programs stem from memory corruption vulnerabilities such as buffer overflow and object boundary violations that can be exhibited through “unsafe” programming languages such as C and C++. Recent years have seen various technologies attempting to remediate these issues in existing program through instrumentation and run-time checks, with varying success and cost.

Hardware assisted shadow stack technology is also coming to ARM devices in the next few years (ARM Guarded Call stack) https://community.arm.com/arm-community-blogs/b/architectures-and-processors-blog/posts/arm-a-profile-architecture-2022. As shadow stack technology is a performant way of protecting the return edge of a function call, this technology can fully compensate for some of the pointer authentication protections that otherwise would be needed to protect against the same attacks. Further, the latest design iteration of the ARM shadow stack allows us to have many such stacks in parallel (per process). The aim of this work is to study the co-existence of ARM GCS, PAC and possibly BTI technologies, and construct a compiler-assisted memory-safety solution that uses these technologies in concert for best performance and security benefit.

As part of the internship, the intern will take part in proposing a new design and developing a prototype demonstrating the feasibility and potential limitations of hardware-assisted memory safety leveraging many parallel technologies in hardware. This work is suitable as a Master’s thesis work in the field of platform security and computer science, since we believe the work will combine some measure of novelty with development, prototyping and testing.

We are looking for:

• Students who have completed most of their M.Sc. courses, in the field of CS/E.Eng
• System / embedded coding experience in C
• An understanding of low-level (system / OS) architecture
• Prior engagement with compiler modification or compiler theory considered a plus.
• Sufficient skills to work and interact in English
• Good team-working skills

Students with interest to do research and explore new challenges.

The following we count as advantage:

• Background (courses) in platform security, cryptography or equivalent
• An interest to do research and explore new challenges.

Location and internship period: This is a 6-month internship basedat our Helsinki, Ruoholahti office.

The Helsinki Systems Security Laboratory in Huawei Finland (HSSL) drives renewal and mastery in the field of platform / device related security technologies for the mobile device. Our topical expertise lies in hardware-assisted isolation and system protection (hypervisor, TEE, kernel hardening) as well as functions like device key management, attestation and integrity.