Internship: guided fuzzing Barco applications (Security)

Barco

Barco designs technology that makes everyday life a little better. Seeing beyond the image, we develop hardware, software, and service solutions to help you work together, share insights, and wow audiences. Our focus is on three core markets: Enterprise (from meeting and control rooms to corporate spaces), Healthcare (from the radiology department to the operating room), and Entertainment (from movie theaters to live events and attractions). Our solutions make a visible impact, allowing people to enjoy compelling entertainment experiences, to foster knowledge sharing and smart decision-making in organizations and to help hospitals provide their patients with the best possible healthcare. Headquartered in Kortrijk (Belgium), Barco has a global team of 3,000+ employees, whose passion for technology is captured in +500 granted patents. 

The task at hand 

 For the security of applications on an ClickShare product, it is very important to ensure secrets cannot leak or IP cannot be reverse engineered. Our current testing methods (unit tests, component tests, system tests, penetration testing, SAST) may not uncover all potential security flaws, leaving the apps (and thus the device) susceptible to attacks. Especially if in the future 3rd party apps would be allowed on the system, we need our own apps to be flawless. One of the possible solutions to further improve the security of apps would be guided fuzzing. Guided fuzzing is a testing technique that involves providing random or semi-random data to the inputs of a program to discover vulnerabilities. 

Internship goals: 

• Tool Selection: Research which fuzzing tools are available and select an appropriate fuzzing tool usable on ClickShare applications. 

• Implementation: Set up the fuzzer and deploy it (using Ansible scripts).  It should be running effectively and be able to report in an automated way back to our ticketing system 

Qualifications

• Android knowledge 

• Security background 

Furthermore, you should be a student in a technical discipline, eligible to work at our HQ in Kortrijk, Belgium.