This position is offered through the ANU Computing Internship (COMP3820 / COMP4820 / COMP8830)
Company
Penten Pty Ltd
Penten is an Australian-based cyber technology company focused on innovation in secure mobility, applied AI (artificial intelligence) and tactical communications security.
Project - Blue Team Cyber Puzzles
Cyber analysts require data from network traffic to develop and improve their skills. This data needs to be realistic and original. However, existing data generation techniques are problematic. Capturing real network activity and manually generating dummy data both require a lot of time and effort, while existing machine generation techniques produce data suited for stress-testing and network configuration testing - not training human analysts. Generating dummy network activity with a LLM would allow for much greater volumes of useful data.
Publicly available LLMs can produce network packets. But further questions remain.
- Can we generate network traffic with evidence of a specific cyber incident?
- Can we assemble generated packet data into PCAP file?
- Can we generate realistic TCP/IP headers, (Src IP, Dst IP, TTL, Src Port, Dst Port etc)
- Can we generate different application layer packet data? (HTTP, SMB, TLS etc)
- Can we use exisiting, publicly available LLMs to produce realistic log data?
- Can we generate log files with evidence of a specific cyber incident?
- Can we generate log files for different applications/services. Eg: Nginx, Apache, Sysmon, auditd
Student Outcomes
- Immersive exposure to publicly available LLMs
- Gain expertise in crafting network packets
- Hands on with cyber security tools and applications
Technology that might be useful:
- Python Scapy
- Zeek (Bro)
- Publicly available LLMs
Required technical skills
Coding, machine learning, network administration
Required/preferred professional and other skills
N/A
Delivery Mode
In-Person Internship
Student location
Student must be located in Canberra only
Project’s Special Requirements/ Conditions
- Intern requires Australian citizenship
- Applicants are expected to be eligible for an NV2 security clearance (to be arranged by Penten after starting)
Type of internship
Paid (intern/s will be engaged as a casual employee)
How to apply
Applications are invited from eligible students to apply for the Computing Internship courses COMP3820 or COMP4820 or COMP8830. Eligibility details of COMP3820 / COMP4820 / COMP8830 and further information about the Computing Internship can be found on the Computing Internship page.
Eligible students can apply through the Computing Internship application form which will be available via the Computing Internship page between Friday 15th September to Sunday 1st October.
You can nominate multiple preferred Internship projects and host organisations through the one online application form.
Eligibility and Room Available in degree to undertake COMP3820/COMP4820/COMP8830 will be assessed at the time of application. If you do not meet the eligibility criteria or do not have room in your degree to fit COMP3820/COMP4820/COMP8830, your application will not be progressed.
Your application will require you to upload the following documents:
- an updated copy of your Resume, and
- an Expression of Interest (limit 350 words) for each organisation you wish to apply to (for organisations with multiple projects only submit one Expression of Interest but state clearly which project/s you wish to be considered for).
Semester 1 2024 applications open on Friday 15th September to Sunday 1st October.