This position is offered through the ANU Computing Internship ([COMP4820] / [COMP8830])
Company
Penten (Applied AI) https://www.penten.com/
Penten leverages AI-driven solutions to enhance cyber defence. Active Cyber Defence protects critical infrastructure, Electronic Deception disrupts adversaries, and Cyber Training prepares organisations with realistic simulations, all ensuring robust protection and strategic advantage against digital threats.
Project
Detection Methods for Honeyfiles
A Honeyfile is a cybersecurity deception technique designed to identify and deceive potential cyber threats within a network. It is a decoy file that appears to be valuable or sensitive to an attacker but is, entirely fake. The purpose of a HoneyFile is to attract and detect unauthorised or malicious activity within a network by enticing potential attackers to interact with it.
This project involves researching and developing interaction detection mechanisms that can be embedded into a range of file types. Students will:
- explore innovative techniques and technologies that can be used to detect and track interactions with files
- assess the accuracy & efficiency of these techniques
- capture data from the Honeyfile interaction that will enable cybersecurity professionals to investigate.
Some interesting open questions that the student may wish to investigate:
- Can we compile a database of Indicators of Honey (IoH)?
- Can AI be used in the detection of honey files and canary tokens?
- Example file types: DOCX, PPTX, XLSX, PDF, EXE
- Can we detect honey files at scale?
Required/Preferred technical skills
Programming experience (preferably Python), Linux
Required/preferred professional and other skills
Able to collaborate, work independently towards a goal
Special Requirements
• Intern requires Australian citizenship
Delivery Mode
• In-Person Internship
Type of internship
Paid internship. The intern/s will be engaged as a casual employee.
How to apply
Applications are invited from students who have already passed the eligibility checks for the Computing Internship courses COMP4820 or COMP8830. Further information about the Computing Internships can be found on the Computing Internship page.
You can nominate multiple preferred Internship projects and host organisations through the one application form.
Student applications will be open from the 13th to 29th Sep, 2024.