Internship | Research on a knowledge graph for cybersecurity guidance

3 weken geleden


Eindhoven, Nederland TNO Voltijd

About this position

Could it be possible to verify cybersecurity compliance of a whole industry by just clicking a button? That’s the innovation this internship works towards

What will be your role?

Our society is becoming increasingly digitalized, and dependent on ICT infrastructures. Besides daily life, digitalization and telecommunication is also revolutionising industries in the critical sector, such as the power grids: monitoring and control of energy generation, transmission, and distribution is enhanced by industrial Internet of Things (IIoT), internet-connected capabilities to handle assets and operations flexibly and automatically. While this opens to unprecedented advantages, it also exposes industries to cyber threats like never before. In fact, cyber-attacks to industrial plants represent a real cyber-warfare weapon. The cybersecurity posture and preparedness of the energy sector has never been so crucial.

To address this, the European Union is releasing legislation () to bring the cyber-resiliency and security of critical industries across the EU at the same level, building a Union-wide cyber shield against cyberattacks. In particular, industries can attest their cybersecurity posture via compliance to cybersecurity frameworks such as the IEC , the ISO :. At the same time, several implementation guidelines exist to improve the cybersecurity posture of an organization (e.g., ) and , and . These documents list extensive sets of requirements to reach a determined cybersecurity posture.

An abundance of frameworks and guidelines for cybersecurity is – in principle – good. On the other hand, Regulations and guideline documents tend to use different terminology across different organization, assumptions, and contexts. Different frameworks may be suited for different scopes (e.g., organization management, supply-chain management, inherent product security features, etc.) and the distinction is not always easy to delineate. This implies that companies spend considerable effort and resources in parsing through several documents, identifying the guideline items that best fit their industries, align with their risk strategies, and fulfil regulations.

At TNO CST, we are involved in several projects with energy grids organizations, and have often recorded this issue. We hence propose an internship to work on this interdisciplinary challenge, ubiquitous in research fields such as cybersecurity, governance and policy-making, and data science. The internship aims to research on, and assemble, a data model to facilitate the navigability, comparison, and scoping of cybersecurity framework requirements, and their implementation approaches in specific contexts. The internship takes place as a cooperation between TNO Cyber Security Technologies (CST), and TNO Data Science (DS) departments, and contributes to the project (Grant NWA..18.).

What you will be doing
You will work on the task of designing a knowledge graph that generalizes the representation of cybersecurity requirements (such as those listed in the ISO/IEC -2-1), their connection to cybersecurity controls (such as those listed in the NIST - and MITRE DEF3ND) and regulations, and to the cyber-attacks that such controls aim at preventing (such as those listed in the MITRE ATT&CK). You may research the state-of-art of cybersecurity ontologies employed in the industry; design and implement algorithms to compare information items from multiple documentary sources, collect it in a unified representation, and work on its graphical visualization. Furthermore, you may create a query language or ML-based query strategy specific for such data model, aimed at assisting energy industry CISOs in navigating the broad regulatory and framework space. Finally, remember that you are free to approach this problem flexibly and creatively. Contributing your point of views and ideas is greatly welcomed

This is a captivating socio-technical puzzle, challenging your problem solving skills. It can be engaged through several approaches in machine learning, ontologies engineering, data modelling, and concretized in tools and contribution to standards, and even legislation Sounds like something for you? Then apply now

What we expect from you

You thrive on conducting research that helps protect our clients against cyber risks. As you’ll be spending between six and nine moths research for your Master’s thesis, you are highly motivated to contribute to the fast-moving field of cyber security in a multi-disciplinary environment. And you enjoy learning from the best and working with colleagues from different backgrounds.

Other knowledge and skills you bring to TNO:

A University Bachelor’s Degree. And you’re in the final phase of your Master’s Degree training in mathematics, physics, computer science, data science, or related. You are comfortable with programming at university level. Experience of, or a keen interest in cyber security, helping you master the topic within the first few months of your internship. An excellent command of English at academic level.

What you'll get in return

You want to work on the precursor of your career; a work placement gives you an opportunity to take a good look at your prospective future employer. TNO goes a step further. It’s not just looking that interests us; you and your knowledge are essential to our innovation. That’s why we attach a great deal of value to your personal and professional development. You will, of course, be properly supervised during your work placement and be given the scope for you to get the best out of yourself. Furthermore, we provide:

A highly professional, innovative working environment, with top experts as colleagues. A suitable internship allowance ( euro for wo- and hbo-students, euro for mbo-students, for a full-time internship). Eight hours of leave per internship month (for a full-time internship). A free membership of , where you can meet TNO-colleagues and join , such as sports activities, (work-related) courses or the yearly ski-trip. Use of a laptop. An allowance for travel expenses in case you don’t receive an OV-card.

  • Eindhoven, Nederland TNO Voltijd

    Internship and graduation project Eindhoven Master Fulltime – 40 Internship | Investigating the Best Practice of Research OSS Apply now Delen op Facebook Delen op LinkedIn Delen op Twitter About this position The absence of clear guidance on best practices of research projects in the open source world can create a knowledge gap that hinders...


  • Eindhoven, Nederland TNO Voltijd

    Internship and graduation project Eindhoven Master Fulltime – 40 Internship | Investigating the Best Practice of Research OSS Apply now Delen op Facebook Delen op LinkedIn Delen op Twitter About this position The absence of clear guidance on best practices of research projects in the open source world can create a knowledge gap that hinders...


  • Eindhoven, Nederland TU Eindhoven Voltijd

    **Job description**: Solving some of our major societal challenges related to climate, energy and sustainability will require a significant reduction in CO2 emissions through implementation of completely new hydrogen-based or electrified industrial processes. Producing hydrogen via pyrolysis of (bio)methane, which captures carbon as solid by-products, is an...


  • Eindhoven, Nederland DAF Voltijd

    We are looking for an interested intern who have affinity or study related to Marketing. You will create a Market Research plan for DAF Trucks. For our DAF Marketing & Sales department, we are looking for a enthusiastic intern. You will be responsible for gathering Market Research for a Key market in Europe. Your responsibilities: - Creating and executing...


  • Eindhoven, Noord-Brabant, Nederland DAF Voltijd

    We are looking for an interested intern who have affinity or study related to Marketing. You will create a Market Research plan for DAF Trucks. For our DAF Marketing & Sales department, we are looking for a enthusiastic intern.You will be responsible for gathering Market Research for a Key market in Europe.Your responsibilities: Creating and executing a...

  • Cybersecurity Analyst

    2 weken geleden


    Eindhoven, Nederland Forescout Technologies Inc. Voltijd

    **What We Do** Managing cyber risk, together. Forescout delivers automated cybersecurity across the digital terrain. We empower our customers to achieve continuous alignment of their security frameworks with their digital realities, across all asset types - IT, IoT, OT, and IoMT. It is a non-stop journey, managing cyber risk through automation and...

  • Internship R&d

    2 weken geleden


    Eindhoven, Nederland IONIQA Technologies BV Voltijd

    Location: Eindhoven_ - Period: starting end August 2024/ beginning of September 2024_ As we embark on an exciting journey of growth and innovation here at Ioniqa Technologies, we are looking for talented and ambitious individuals to join our R&D internship program. At Ioniqa Technologies we believe in nurturing talent, fostering creativity, and providing...


  • Eindhoven, Nederland Forescout Technologies Inc Voltijd

    Vedere Labs Cyber Security Internship Vedere Labs is the cybersecurity research arm of Forescout Technologies. “Vedere” is an Italian verb that means to see, understand analyze. This word describes exactly the mission of the team. At Vedere Labs, our researchers focus on threat and vulnerability research with the goals of improving the cyber security...


  • Eindhoven, Noord-Brabant, Nederland Forescout Technologies Inc Voltijd

    Vedere Labs Cyber Security Internship Vedere Labs is the cybersecurity research arm of Forescout Technologies. "Vedere" is an Italian verb that means to see, understand analyze. This word describes exactly the mission of the team. At Vedere Labs, our researchers focus on threat and vulnerability research with the goals of improving the cyber security...


  • Eindhoven, Nederland Forescout Technologies Inc Voltijd

    Vedere Labs Cyber Security Internship Vedere Labs is the cybersecurity research arm of Forescout Technologies. “Vedere” is an Italian verb that means to see, understand analyze. This word describes exactly the mission of the team. At Vedere Labs, our researchers focus on threat and vulnerability research with the goals of improving the cyber security...


  • Eindhoven, Nederland DAF Voltijd

    Job description For our DAF Marketing & Sales department, we are looking for a enthusiastic intern. You will be responsible for gathering Market Research for a Key market in Europe.  Your responsibilities: Creating and executing a Market Research Plan;  Working closely with the Marketing Manager to develop the customer personas for the key...


  • Eindhoven, Noord-Brabant, Nederland DAF Voltijd

    Job description For our DAF Marketing & Sales department, we are looking for a enthusiastic intern. You will be responsible for gathering Market Research for a Key market in Europe. Your responsibilities: Creating and executing a Market Research Plan; Working closely with the Marketing Manager to develop the customer personas for the key market; ...


  • Eindhoven, Nederland DAF Voltijd

    Job description For our DAF Marketing & Sales department, we are looking for a enthusiastic intern. You will be responsible for gathering Market Research for a Key market in Europe.  Your responsibilities: Creating and executing a Market Research Plan;  Working closely with the Marketing Manager to develop the customer personas for the key...


  • Eindhoven, Nederland Eindhoven University of Technology Voltijd

    Job description Solving some of our major societal challenges related to climate, energy and sustainability will require a significant reduction in CO2 emissions through implementation of completely new hydrogen-based or electrified industrial processes. Producing hydrogen via pyrolysis of (bio)methane, which captures carbon as solid by-products, is an...


  • Eindhoven, Noord-Brabant, Nederland TU Eindhoven Voltijd

    Job description:Solving some of our major societal challenges related to climate, energy and sustainability will require a significant reduction in CO2 emissions through implementation of completely new hydrogen-based or electrified industrial processes. Producing hydrogen via pyrolysis of (bio)methane, which captures carbon as solid by-products, is an...


  • Eindhoven, Nederland TNO Voltijd

    About this position The absence of clear guidance on best practices of research projects in the open source world can create a knowledge gap that hinders researchers and research institutes from making well-informed choices. Bridging this knowledge gap is essential to empower researchers with the insights needed to navigate the dynamic landscape of...

  • Cybersecurity Analyst

    1 maand geleden


    Eindhoven, Nederland Forescout Technologies Inc Voltijd

    What We Do Managing cyber risk, together. Forescout delivers automated cybersecurity across the digital terrain. We empower our customers to achieve continuous alignment of their security frameworks with their digital realities, across all asset types – IT, IoT, OT, and IoMT. It is a non-stop journey, managing cyber risk through automation and...

  • Cybersecurity Analyst

    3 weken geleden


    Eindhoven, Nederland Forescout Technologies Inc Voltijd

    What We Do Managing cyber risk, together. Forescout delivers automated cybersecurity across the digital terrain. We empower our customers to achieve continuous alignment of their security frameworks with their digital realities, across all asset types – IT, IoT, OT, and IoMT. It is a non-stop journey, managing cyber risk through automation and...


  • Eindhoven, Nederland TNO Voltijd

    About this position Would you like to contribute to the information security of smart industry? Cryptographic innovations are needed to keep industrial data secure and available in the future. Become a master thesis intern in Groningen or Eindhoven at TNO’s Applied Cryptography and Quantum Algorithms department, where you will conduct your research...


  • Eindhoven, Nederland TNO Voltijd

    About this position The solar cell technology based around the perovskite material group is relatively young but very successful, with excellent efficiencies reached with lab-scale cells. One of the remaining hurdles preventing commercialization is, however, the stability of perovskite solar cells. ​​​​​​​ One of the causes for rapid...