Internship: Intelligent Application Self Defense with Reinforcement Learning- F/M Job

Requisition ID: 237363
Work Area: Software-Research
Expected Travel: 0 - 10%
Career Status: Student
Employment Type: Limited Full Time

COMPANY DESCRIPTION

SAP started in 1972 as a team of five colleagues with a desire to do something new. Together, they changed enterprise software and reinvented how business was done. Today, as a market leader in enterprise application software, we remain true to our roots. That’s why we engineer solutions to fuel innovation, foster equality and spread opportunity for our employees and customers across borders and cultures.

SAP values the entrepreneurial spirit, fostering creativity and building lasting relationships with our employees. We know that a diverse and inclusive workforce keeps us competitive and provides opportunities for all. We believe that together we can transform industries, grow economics, lift up societies and sustain our environment. Because it’s the best-run businesses that make the world run better and improve people’s lives.

CONTEXT

Maintaining security is a constantly shifting task, and we need to respond with continuous learning and research. The portfolio of SAP Security Research contains those topics that we believe are most important

for SAP’s security future.

SAP’s vision to secure business is built on 3 ideals: Zero-Vulnerability, to harden the software by eliminating vulnerabilities, Defensible Application, to enable the software to identify and prevent attacks, and Zero-Knowledge, to make any theft of data useless through encryption.

Considering these aspects, SAP Security Research covers the following focal areas: Anonymization for Big Data, Secure Internet of Things, Software security analysis, Open-source analysis, Deceptive application, Applied cryptography, Quantum technology, and Machine Learning as enabler for the next generation of security.

Security Research proposes a 6-month internship in its Sophia-Antipolis offices (Mougins, France).

INTERNSHIP TOPIC

This internship is based in the SAP Labs France Research Lab, in Sophia-Antipolis. The work will be performed in the context of the Research Program “Security & Trust”, under the “Defendable Application” topic. We intend to apply machine learning to allow applications to determine which deceptive elements it shall present to attackers at a given point in time.

SAP has developed an approach consisting in detecting malicious activity thanks to a set of deployed or virtual honeytokens, followed by a diversion phase where the attacker is re-routed to a honeypot. The honeypot is designed to make attackers spend considerable amounts of resources by dealing with misleading functionality and data, as to render their actions ineffective and infeasible.

The goal of the internship is to train machine learning models to find the most appropriate response to attacker requests in order to trick adversaries towards trying to exploit vulnerabilities that do not exist. We expect that the student will setup the infrastructure to collect attack information for our test applications, to prepare training and test data, to define ML model architecture, and run experiments.

Some of the tasks to be addressed shall include:

• Create a reinforcement learning environment for assessing attack and defense actions, for training application agents to select appropriate deceptive web response
• Define different attack scenario and attacker behaviors to adjust the application self-defending policies and appropriate rewards
• Code different autonomous strategies for self-defending applications to improve their reward, based on attack efficiency loss

We expect that 90% of time will be dedicated to development / integration and 10% to research activities.

CANDIDATE PROFILE

• University Level: Last year of MSc in Computer Science or beyond
• Good knowledge of Python, Neural Networks, Deep Learning, and notions of application security
• Knowledge or experience with Tensorflow is a strong plus
• Experience with OpenAI Gym is a strong plus
• Good knowledge of HTTP protocol, traffic routing and of web applications
• Fluency in English (working language)
• Abilities in organizing meeting and contacting people
• Good oral and written communication skills
• Capacity to write documents in English, ability to synthesize

INTERNSHIP CONTEXT

SAP

Founded in 1972, SAP has grown to become the world's leading provider of business software solutions. SAP is market leader in enterprise application software. The company is also the fastest-growing major database company. Globally, more than 77% of all business transactions worldwide touch an SAP software system. With more than 347.000 customers in more than 180 countries, SAP includes subsidiaries in all major countries. SAP is the world's largest inter-enterprise software company and the world's third-largest independent software supplier, overall. SAP solutions help enterprises of all sizes around the world to improve customer relationships, enhance partner collaboration and create efficiencies across their supply chains and business operations. SAP employs more than 98.600 people.

Security Research at SAP Labs France, Sophia Antipolis

Based at SAP Labs France Mougins, Security Research Sophia-Antipolis addresses the upcoming security needs, focusing on increased automation of the security life cycle and on providing innovative solutions for the security challenges in networked businesses, including cloud, services and mobile.

WHAT YOU GET FROM US

Success is what you make it. At SAP, we help you make it your own. A career at SAP can open many doors for you. If you’re searching for a company that’s dedicated to your ideas and individual growth, recognizes you for your unique contributions, fills you with a strong sense of purpose, and provides a fun, flexible and inclusive work environment – apply now.

SAP'S DIVERSITY COMMITMENT
To harness the power of innovation, SAP invests in the development of its diverse employees. We aspire to leverage the qualities and appreciate the unique competencies that each person brings to the company.

SAP is committed to the principles of Equal Employment Opportunity and to providing reasonable accommodations to applicants with physical and/or mental disabilities. If you are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team (Americas: Careers.NorthAmerica@sap.com or Careers.LatinAmerica@sap.com, APJ: Careers.APJ@sap.com, EMEA: Careers@sap.com).

Successful candidates might be required to undergo a background verification with an external vendor.

Additional Locations: