Master thesis; Securing AI-Generated Dependencies

Technology, Data & Digital · Software & Web Development · Software Engineering · Cybersecurity · Artificial Intelligence

Join for updates

In short

This Master's thesis project will investigate slopsquatting, a software supply chain attack where AI coding assistants recommend non-existent packages. The work will analyze the impact on enterprise development and explore how secure dependency management and CI/CD controls can mitigate risks, with direct relevance to Ericsson.

Responsibilities

Conduct a literature review on slopsquatting and AI-generated dependencies.
Perform controlled experiments with AI coding assistants to measure recommendations of non-existent dependencies.
Assess exposure of selected language models to this risk.
Analyze how phantom dependencies could enter enterprise development workflows.
Evaluate existing security controls (dependency scanners, SBOM) for detecting/preventing phantom dependencies.
Propose practical mitigation measures, including dependency verification, developer guidance, and DevSecOps controls.
Document findings in a thesis report and present to stakeholders.

Requirements

Background in computer science, cybersecurity, software engineering, artificial intelligence, machine learning, or similar.
Good programming skills, preferably in Python or JavaScript.
Basic understanding of AI, machine learning, and large language models.
Strong spoken and written English skills.
Ability to communicate, document findings, and collaborate effectively.

Desired Qualifications

Knowledge of software supply chain security is beneficial.
Knowledge of secure development practices is beneficial.
Knowledge of CI/CD is beneficial.
Analytical, curious, and research-oriented mind.
Proactive and independent approach to problem-solving.

Benefits

Outstanding opportunity to use skills and imagination.
Opportunity to build solutions to tough problems.
Challenging work environment.
Join a team of diverse innovators.
Encouraging a diverse and inclusive organization.

Skills

PythonJavaScriptArtificial IntelligenceMachine LearningLarge Language ModelsSoftware Supply Chain SecuritySecure DevelopmentCI/CDDevSecOpsSBOM

#AI#Software Supply Chain#Cybersecurity#Master Thesis#Ericsson

About Ericsson

Pioneering technology for connecting billions of people worldwide

Our purpose \nTo create connections that make the unimaginable possible.\n\nOur vision\nA world where limitless connectivity improves lives, redefines business and pioneers a sustainable future.\n\nOur values\nPerseverance, professionalism, respect and integrity.\n\nThe future is a place for purpose & vision – ours are clear, and we invite partners, customers and consumers to join us in our journey. \n\nFor a brighter future. For all. Let's #ImaginePossible

See all open jobs at Ericsson Read more about Ericsson Website