[ecoop-info] Ph.D./postdoc/scientist positions: PL/types for secure mobile web

[Jonathan Aldrich]

** Note: deadline for Ph.D. applications is TOMORROW Dec 15 **


At Carnegie Mellon University we are beginning a 3-5 year project 
focused on languages and type systems for secure mobile web 
applications.  Our goal is to evaluate the hypothesis that many security 
vulnerabilities in web-based mobile applications are a consequence of 
expressing programs at a low level of abstraction.  We believe that a 
lightweight, pragmatic language- and type-based approach to expressing 
web-based mobile applications at a higher level of abstraction can make 
security properties explicit and more directly relate those properties 
to the code that enforces them.  Such an approach could reduce or 
eliminate important classes of security vulnerabilities while also 
increasing productivity.  Research topics of interest include type 
system and programming language support for security, web programming 
abstractions, structured and semi-structured data, software frameworks, 
empirical user studies, and verification.  Our style of research 
combines a grounding in mathematical models and theory with insights and 
empirical evaluation methodologies from software engineering.  The 
language to be developed combines insights from object-oriented and 
functional programming.

More information on the project and the positions below will be 
available at http://www.cs.cmu.edu/~aldrich/securemobileweb/



Ph.D. Positions - DECEMBER 15th deadline

Multiple Ph.D. positions are available in topics listed in the project 
description above.  Interested applicants should apply to CMU's Ph.D. 
programs in Software Engineering (my primary formal affiliation) or 
Computer Science.  The deadline is TOMORROW DECEMBER 15.  In view of the 
late notice (the project was approved only yesterday) it is usually 
possible to consider very strong applicants even if recommendation 
letters and scores arrive a bit after the 15th--but they should still be 
sent in as soon as possible.  Apply at:

http://www.cs.cmu.edu/prospectivestudents/doctoral/application.html


Postdoctoral Researcher Position

We anticipate hiring at least one postdoctoral researcher, and possibly 
two.  Responsibilities will include contributing to the overall research 
program outlined above and contributing to advising of students at all 
levels.  Teaching opportunities are available if desired.  Compensation 
will be competitive with typical US academic postdoctoral positions. 
The initial appointment will be for one year, potentially renewable for 
1-2 additional years.  Applicants should have a Ph.D. in computer 
science or a related field and a strong programming language research 
record, with expertise in some or all of the following areas: type 
theory, security, program analysis, databases, distributed and web 
systems, software design, empirical user studies, and verification.

The positions could begin as soon as late January or February 2012, so 
interested applicants should send a CV and contact information for three 
references to jonathan.aldrich at cs.cmu.edu ASAP.  The positions will, 
however, remain open until filled.


Research Programmer or System Scientist Position

We also anticipate a position for a research programmer or system 
scientist; the title will depend on the interests and qualifications of 
the selected applicant, and compensation will be competitive with 
comparable US academic positions.  A research programmer would focus on 
development of a compiler and related tools in support of the project 
described above.  An understanding of type theory and familiarity with 
compilers is essential.  Responsibilities of a system scientist would 
include perhaps 50% of time spent developing software, but in addition 
would include contributing to day-to-day management and the overall 
research direction of the project, assisting with advising students, and 
assisting with possible follow-on funding opportunities.  A system 
scientist should have a Ph.D. in computer science or a related field, 
development experience with compilers, knowledge of type theory, and a 
strong programming language research record.  Expertise in some or all 
of the following additional areas is helpful: security, program 
analysis, databases, distributed and web systems, software design, 
empirical user studies, and verification.

Interested applicants should send a CV and contact information for three 
references to to jonathan.aldrich at cs.cmu.edu by January 15, 2012, though 
the position will be open until filled.