KTH Royal Institute of Technology, School of Electrical Engineering and Computer Science is looking for a Doctoral student in Software Supply Chain Security.
The doctoral student will join the LangSec research group at KTH and work on the WASP project XSBOM, which focuses on developing innovative solutions for securing the software supply chain. The project aims to protect applications from risks introduced by third-party components while maintaining the flexibility of modern software ecosystems.
A central concept in XSBOM is the Capability-Enhanced Software Bill of Materials (CBOM), which serves as a security contract between component providers and developers. These CBOMs will be enforced dynamically using a combination of code instrumentation and program analysis. The approach will enable runtime protection and monitoring of third-party components, resulting in practical tool prototypes. The methods will be evaluated through large-scale experiments across established ecosystems such as npm and emerging platforms like AI supply chains.
Supervision: Associate Professor Musard Balliu is proposed to supervise the doctoral student. Decisions are made on admission