(Internship / Master Thesis) Web-compatible VPN client
| Job number |
1228
|
Date posted | Feb 15, 2023 |
| Job category | Cybersecurity | Level of experience | - |
| Job type | External | Employment type |
Internship
|
| Work site | Lausanne | Company |
|
About ELCA Security
ELCA Security is a subsidiary of the ELCA Group. With more than 15 years of expertise, several key solution partners and hundreds of completed cybersecurity projects, ELCA Security's mission is to serve any company or public organisation in terms of anticipation (strategic security consulting), protection (secure architecture and encryption), detection (endpoint monitoring) and defense (incident response).
Your role
The current UX (User eXperience) of VPN client is most of the time very basic.
Those VPN clients are usually based on RADIUS protocol. This protocol has restrictions which limit the capabilities of VPN client, regarding UX.
VPN is hopefully protected by MFA (Multi-Factor Authentication) in most cases. Modern UX and MFA may require user interactions, which are not easy to set up with the RADIUS protocol.
Frontend is embedded into the client and therefore do not offer a huge flexibility in terms of customizations (theming).
Additionally, RADIUS is an old protocol with limitations as it is a de facto standard.
We would like to prompt the user with the web UI (User Interface) that we use today on desktop browsers for the authentication while keeping a RADIUS integration to guarantee backward-compatibility.
This internship will require to study how a VPN client is working (i.e. OpenVPN client, an open source project) and to study the RADIUS protocol.
Then, to define a solution to combine both worlds and implement it as an extension of this open-source project.
Objectives:
- Understand the concepts and protocols involved into VPN (IPsec, RADIUS…)
- Analyze and propose a solution to provide our current desktop UX during login
- Understand OpenVPN and develop an extension to offer this feature
Our offer
- A dynamic work and collaborative environment with a highly motivated multi-cultural and multiples international sites team
- Personal development through training and coaching
- A flat hierarchy and a culture of collaboration across all disciplines
- The chance to make a difference in peoples’ life by building innovative solutions
- High innovation and research backed up by collaboration with universities like EPFL
- Various internal coding events (Hackathon, Brownbags), see our technical blog
- Monthly After-Works organized per locations
- Good life balance (41 working hours per week and possibility to work 2 days per week from home)
Your profile
- Security fundamentals
- C/C++
No knowledge regarding IPsec & RADIUS protocols are expected. Their study is expected to be part of the work