PhD position in Cross-device Tracking Analysis

Internet Analytics Group

Deadline for receipt of applications: October 30, 2024 23:59 AoE (31 October 2024, 13:59h Europe/Madrid Time)

The Internet Analytics Group at IMDEA Networks Institute led by Dr. Narseo Vallina-Rodriguez (https://www.narseo.com) (Ramon y Cajal Fellow, AEPD and CNIL Privacy Research Award winner) has an opening for one PhD student in the area of Privacy to analyze and uncover the use of cross-device tracking technologies in the wild.

Cross-device tracking refers to the set of technologies and methods used to track users across multiple devices such as mobile devices, desktop computers, laptops, and smart TVs. These technologies, whose functioning and prevalence are poorly known, work by matching activity across different devices to the same user who performs them by using shared identifiers, such as sign-in data or probabilistic methods, that are in use on each user’s device.

The candidate will design novel methods for the analysis of such privacy-intrusive behaviours in the wild, combining software analysis pipelines and data-driven methods to detect their presence and prevalence, and trackers’ capacity to monitor users across devices, including the detection of side-channels that leverage overlooked channels such as wireless technologies.

The candidate will make fundamental contributions to unsolved technical and enforcement challenges in the privacy domain and to the long and impactful track records of the IAG group in the field of software analysis, cybersecurity, and online privacy [See bibliographic references below]. The PhD student will have privileged access to various cutting-edge software analysis tools, and to a big data analysis platform with substantial computing resources for their processing.

The position offers:

• Data-analysis skills and/or hands-on training in software analysis and reversing
• a vibrant, collaborative, multi-cultural and English-speaking research environment
• the prospect to publish applied research at top-tier venues in cybersecurity and privacy with direct societal and regulatory impnact
• an advantageous path to a successful career in industry or academia [7].
• the high quality of life of the region of Madrid, Spain.

The position requires:

• a B.Sc. in Computer Science, Telecommunications or related field, with a solid academic record. Postgraduate studies (holding a M.Sc. or being currently enrolled in one) will be a plus.
• Good programming skills (e.g., C/C++, Java, R, or Python) and an interest for working in the area of cybersecurity and privacy.
• Software and data analysis skills are recommended, especially in the area of static and dynamic analysis of software, binary analysis and reverse engineering.
• fluency in written and spoken English.
• enthusiasm for interdisciplinary research with real-world impact.

Inquiries on the position can be directed to the thesis supervisors via email to Dr. Narseo Vallina-Rodriguez (narseo.vallina “at” imdea.org)

Candidates shall submit by the call deadline a CV, a motivation letter, and the contact details of two references through the IMDEA Networks Institute hiring portal, at https://careers.networks.imdea.org/.

Bibliographic References of Relevant Group Research Outputs:

[1.] “In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes.” A. Girish, T. Hu, V. Prakash, D. J. Dubois, S. Matic, D. Huang, S. Egelman, J. Reardon, J. Tapiador, D. Choffnes, N. Vallina-Rodriguez  In Proc. of the 2023 ACM on Internet Measurement Conference, 2023.

[2.]  IoTLS: Understanding TLS Usage in Consumer IoT Devices. M. Paracha, D. Dubois, N. Vallina-Rodriguez, D. Choffnes. Proc. of the ACM IMC, 2021

[3.]  Trouble over-the-air: An analysis of fota apps in the android ecosystem. Blázquez, E., Pastrana, S., Feal, Á., Gamba, J., Kotzias, P., Vallina-Rodriguez, N., & Tapiador, J.  IEEE Symposium on Security and Privacy (SP) 2021

[4.] An Analysis of Pre-installed Android Software. J. Gamba, M. Rashed, A. Razaghpanah, J. Tapiador, N. Vallina-Rodriguez IEEE Symposium on S&P’20 (BEST PRACTICAL PAPER AWARD, AEPD EMILIO ACED AWARD, CNIL-INRIA PRIVACY RESEARCH AWARD)

[5.] 50 Ways to Leak Your Data: An Exploration of Apps’ Circumvention of the Android Permissions Systems. J. Reardon, A. Feal, P. Wijesekera, A. Elazari Bar On, N. Vallina-Rodriguez, S. Egelman. USENIX Security, 2019 (USENIX’19 DISTINGUISHED PAPER AWARD, CNIL-INRIA PRIVACY RESEARCH AWARD, AEPD EMILIO ACED)

[6.] ““Won’t somebody think of the children?” examining COPPA compliance at scale.” Reyes, Irwin, Primal Wijesekera, Joel Reardon, Amit Elazari Bar On, Abbas Razaghpanah, Narseo Vallina-Rodriguez, and Serge Egelman.  In The 18th Privacy Enhancing Technologies Symposium (PETS 2018). 2018. (CASPAR BOWDEN AWARD)

[7] https://networks.imdea.org/team/imdea-networks-team/alumni-network

This contract is part of the project PID2022-143304OB-I00 (PARASITE) funded by MCIN/AEI /10.13039/501100011033/ and by the ERDF, A way of making Europe

Equal Employment Opportunity:

IMDEA Networks Institute aims to increase the proportion of women and therefore qualified female applicants are explicitly encouraged to apply. Until a balanced ratio of men and women has been achieved at the institute, preference will be given to women if applicants have similar qualifications. IMDEA Networks Institute actively promotes diversity and equal opportunities. Applicants are not to be discriminated against in personnel selection procedures on the grounds of gender, ethnicity, religion or ideology, age, sexual orientation (anti-discrimination). People with disabilities who have the relevant qualifications are expressly invited to apply