PhD in AI and Hardware Security

Are you passionate about uncovering and addressing vulnerabilities in AI systems, from algorithms to hardware?

Join Us!

We are looking for a highly motivated candidate with a computer security and/or machine learning background to join the Parallel Computing Systems (PCS) group at the University of Amsterdam.

We look for vulnerabilities of AI systems across the whole AI system: from adversarial examples, backdoors and model extraction attacks to physical side-channel and fault injection attacks on AI chips. We build defenses that are both robust and efficient. A strong background in machine learning, hardware or security, together with the drive to develop expertise in the other areas, is highly valued.

You'll get hands-on access to the hardware lab and close supervision.

In this project, you will work to secure AI hardware by investigating vulnerabilities at the algorithm, software, and hardware levels and developing countermeasures to address them. You will study how weaknesses in one layer can be exploited through another. For example, side-channel leakage from an accelerator can be used to extract neural network parameters.

• designing and carrying out realistic security evaluations on AI algorithms and hardware, such as model extraction, fault injection, and side-channel analysis, on platforms including NPUs, GPUs and other AI chips;
• investigating how vulnerabilities arise and how weaknesses at the algorithm, software, and hardware levels interact, and developing models and tools to explain these mechanisms;
• developing models and tools to explain why these vulnerabilities arise. Designing hardware-aware countermeasures that are robust, low-overhead and practical to deploy;
• validating your methods experimentally on real device in hardware lab, not only in simulation;
• publishing your results in leading international conference and journals, and completing a PhD thesis within four years;
• presenting your work at international venues and helping to build collaborations with academic and industrial partners;
• contributing to teaching (about 10% of your time), for example as a teaching assistant or by supervising Bachelor and Master students.

• an MSc in computer science or a related field;
• a strong background and interest in AI and hardware security;
• a demonstrated ability to perform research (for instance in the form of publications or a Master thesis);
• the willingness to work collaboratively with other researchers;
• professional command of English and presentation skills

A temporary contract for 38 hours per week for the duration of 4 years (the initial contract will be for a period of 18 months and after satisfactory evaluation it will be extended for a total duration of 4 years). The preferred starting date is as soon as possible. This should lead to a dissertation (PhD thesis). We will draft an educational plan that includes attendance of courses and (international) meetings.

We also expect you to assist in teaching undergraduates and master students.

The gross monthly salary, based on 38 hours per week and dependent on relevant experience, ranges between € 3,204 to € 4,051 (scale P). This does not include 8% holiday allowance and 8,3% year-end allowance. The UFO profile PhD Candidate is applicable. A favourable tax agreement, the '30% ruling', may apply to non-Dutch applicants. The Collective Labour Agreement of Universities of the Netherlands is applicable.

The Faculty of Science has a student body of around 8,000, as well as 1,800 members of staff working in education, research or support services. Researchers and students at the Faculty of Science are…