12-month Post-doc Position in Formal Approaches for Software Production

id="offer-description" class="ecl-u-type-heading-2 ecl-u-mt-none ecl-u-mb-l">Offer Description. The objective of this position is to contribute to the research axis . "Identification and Management of Infrastructure Cybersecurity Risks" . that aims to specifies methods for risk analysis, threat identification, and auditing of dynamic and collaborative cloud infrastructures. More specifically, . the goal is to contribute to the strengthening of the supply chain for software components integrated into the architecture that enables the sovereign execution of cloud services, in particular large scale Cloud architecture or multi-cloud systems. This research will impact the following domains: . - Validation and certification of the supply chain (software, algorithm libraries, and technical data). - Specification, evaluation, and monitoring of component security, taking into account their configuration—particularly for open-source and royalty-free components within the cloud ecosystem. - Auditability and traceability of component configurations. - Maintenance of operational readiness during component updates. The project aims to develop an integrated approach to modeling and securing software production pipelines in multi-cloud environments. It focuses on microservice architectures, where components may be replicated or duplicated across open-source and proprietary cloud providers. The objective is to model production processes as workflows to analyze their dependencies and security