This is an old revision of the document!


Job offerings - CRoCS

This page lists currently open employment and PhD positions to our lab.

We currently have no employment positions open, but feel free to see the list of current research projects to see the areas we work in.

 Topic: Examining the ecosystems of computer security certification schemes

 Supervisor: Vashek Matyas <matyas@fi.muni.cz>

 Industry cooperation: Red Hat Czech s.r.o.

 Start date: September 2024 or February 2025

Contact the supervisor

We are looking for two doctoral students to work in the areas of computer security and machine learning improving the security certification scene. The students will join an existing research team around the sec-certs project. Positions are fully funded by the faculty with extra remuneration provided by the industrial partner.

The aim of these PhD positions is to analyse and improve the ecosystems of products certified under security certification frameworks such as FIPS 140 and Common Criteria. Even such security-certified products suffer from critical vulnerabilities, and assessing which certified products are impacted by such vulnerabilities is complicated due to the large amount of unstructured certification-related data and unclear relationships between the certificates. Our tooling (https://seccerts.org) automates the analysis of tens of thousands of certification-related documents, extracting machine-readable features where manual analysis is unattainable. This tooling is still to be improved and utilized.

We expect candidate(s) who have (or soon will have) a MSc degree or equivalent and a solid background in computer science or engineering, with some background either in computer security or machine learning or natural language processing (though not necessarily both). Fluent communication in spoken and written English is expected.

tba

sec-certs project

The successful candidate(s) will work with CRoCS during the whole duration of the project, while cooperation with Red Hat is expected in a form of regular meetings with Red Hat experts where progress will be evaluated and next targets agreed. The work to be undertaken during all years of research will be at the intersection of computer security and machine learning.

In case of inquires related to the industrial cooperation, please contact Martin Ukrop <mukrop@redhat.com>.

Red Hat

2024
  • Two-factor authentication time: How time-efficiency and time-satisfaction are associated with perceived security and satisfaction
    Agata Kruzikova, Michal Muzik, Lenka Knapova, Lenka Dedkova, David Smahel and Vashek Matyas,
    Computers \& Security, 2024, 103667.
    Keywords: usablesec, authentication, DOI website, paper website, BibTeX
2022
  • Assessing Real-World Applicability of Redesigned Developer Documentation for Certificate Validation Errors
    Martin Ukrop, Michaela Balážová, Pavol Žáčik, Eric Vincent Valčík and Vashek Matyas,
    Proceedings of the 2022 European Symposium on Usable Security, ACM, 2022, 131-144.
    Keywords: usablesec, red-hat, pre-print PDF, DOI website, BibTeX
  • Comparing Nonresponders and Responders of Online Intercept Surveys: A Large-Scale Experimental ICT Security-Related Study
    Lenka Knapova, David Smahel, Lenka Dedkova and Vashek Matyas,
    Human Behavior and Emerging Technologies, Hindawi, 2022, 3107621.
    Keywords: usablesec, DOI website, paper website, BibTeX
  • Even if users do not read security directives, their behavior is not so catastrophic
    Vashek Matyas, Kamil Malinka, Lydia Kraus, Lenka Knapova and Agata Kruzikova,
    Communications of the ACM, ACM, 2022, 37–40.
    Keywords: usablesec, directive, DOI website, BibTeX
  • Usability Insights from Establishing TLS Connections
    Lydia Kraus, Matej Grabovsky, Martin Ukrop, Katarina Galanska and Vashek Matyas,
    ICT Systems Security and Privacy Protection, Springer International Publishing, 2022.
    Keywords: usablesec, pre-print PDF, DOI website, BibTeX
  • Usable and secure? User perception of four authentication methods for mobile banking
    Agata Kruzikova, Lenka Knapova, David Smahel, Lenka Dedkova and Vashek Matyas,
    Computers \& Security, 2022, 102603.
    Keywords: usablesec, tacr, authentication, DOI website, paper website, BibTeX
2021
  • How Do Users Chain Email Accounts Together?
    Lydia Kraus, Maria Svidronova and Elizabeth Stobert,
    IFIP International Conference on ICT Systems Security and Privacy Protection, Springer, Cham, 2021, .
    Keywords: usablesec, pre-print PDF, BibTeX
  • Who Is Smart with Their Smartphones? Determinants of Smartphone Security Behavior
    Lenka Knapova, Agata Kruzikova, Lenka Dedkova and David Smahel,
    Cyberpsychology, Behavior, and Social Networking, Mary Ann Liebert, Inc., 2021, 584-592.
    Keywords: usablesec, paper website, BibTeX
2020
  • Evolution of SSL/TLS Indicators and Warnings in Web Browsers
    Lydia Kraus, Martin Ukrop, Vashek Matyas and Tobias Fiebig,
    27th International Workshop on Security Protocols (SPW 2019), Springer International Publishing, 2020, 267–280.
    Keywords: usablesec, pre-print PDF, DOI website, BibTeX
  • Will You Trust This TLS Certificate? Perceptions of People Working in IT (Extended Version)
    Martin Ukrop, Lydia Kraus and Vashek Matyas,
    Digital Threats: Research and Practice, Association for Computing Machinery, 2020.
    Keywords: usablesec, red-hat, pre-print PDF, DOI website, BibTeX
2019
  • Will You Trust This TLS Certificate? Perceptions of People Working in IT
    Martin Ukrop, Lydia Kraus, Vashek Matyas and Heider Ahmad Mutleq Wahsheh,
    Proceedings of the 35rd Annual Computer Security Applications Conference (ACSAC'2019), ACM, 2019.
    Keywords: usablesec, red-hat, pre-print PDF, DOI website, BibTeX
2018
  • A Large-scale Comparative Study of Beta Testers and Regular Users
    Vlasta Stavova, Lenka Dedkova, Martin Ukrop and Vashek Matyas,
    Communications of the ACM, ACM, 2018, 64–71.
    Keywords: usablesec, eset, pre-print PDF, DOI website, BibTeX
  • Experimental large-scale review of attractors for detection of potentially unwanted applications
    Vlasta Stavova, Lenka Dedkova, Vashek Matyas, Mike Just, David Smahel and Martin Ukrop,
    Computers \& Security, 2018, 92–100.
    Keywords: usablesec, eset, gamu, DOI website, paper website, BibTeX
  • Why Johnny the Developer Can't Work with Public Key Certificates: An Experimental Study of OpenSSL Usability
    Martin Ukrop and Vashek Matyas,
    Topics in Cryptology – CT-RSA 2018: The Cryptographers' Track at the RSA Conference 2018, Springer International Publishing, 2018, 45–64.
    Keywords: usablesec, red-hat, pre-print PDF, DOI website, BibTeX
2017
  • Factors Influencing the Purchase of Security Software for Mobile Devices – Case Study
    Vlasta Stavova, Vashek Matyas, Mike Just and Martin Ukrop,
    Infocommunications Journal, 2017, 18–23.
    Keywords: usablesec, eset, gamu, pre-print PDF, paper website, BibTeX
2016
  • Codes v. People: A Comparative Usability Study of Two Password Recovery Mechanisms
    Vlasta Stavova, Vashek Matyas and Mike Just,
    IFIP International Conference on Information Security Theory and Practice, 2016, 35–50.
    Keywords: usablesec, sodatsw, gamu, DOI website, BibTeX
  • On the impact of warning interfaces for enabling the detection of Potentially Unwanted Applications
    Vlasta Stavova, Vashek Matyas and Mike Just,
    Euro Usable Security (EuroUSEC) Workshop Programme, 2016.
    Keywords: usablesec, eset, pua, gamu, DOI website, BibTeX
2015
  • The challenge of increasing safe response of antivirus software users
    Vlasta Stavova, Vashek Matyas and Kamil Malinka,
    International Doctoral Workshop on Mathematical and Engineering Methods in Computer Science, 2015, 133–143.
    Keywords: usablesec, eset, gamu, DOI website, BibTeX

Are you interested in the position? The next step is to contact the supervisor to discuss each other's expectations and meet the rest of the team.

Contact the supervisor