Description
Modern embedded software products rely on a large number of third-party and
open-source components. Identifying and managing security vulnerabilities in
these components is becoming increasingly important.
During this internship, the vulnerability management process for embedded
software products should be assessed and improved. The focus will be on
analyzing detected vulnerabilities, improving the assessment and triage process,
reducing false positives, and exploring opportunities to automate repetitive
activities.
The ultimate goal is to help development teams focus on vulnerabilities that truly
matter while minimizing manual effort.

Your task
• Analyze the current vulnerability management workflow.
• Investigate methods for assessing and prioritizing detected vulnerabilities
based on their actual impact and relevance.
• Study common causes of false positive vulnerability findings and propose
efficient ways to reduce them.
• Define and evaluate a practical triage process that supports consistent
decision-making and documentation.
• Explore automation opportunities to reduce manual work for software
developers and security engineers.

Contact
For more information, please contact Tom Lierman: [email protected]