Internship | Securing AI models using verifiable computation

AI has seen a huge increase in adoption in recent years, enabling many new possibilities. With this widespread adoption, concerns regarding the security of these AI models are also increasing. For example, more and more questions are raised on whether AI models make biased predictions, censor information, or contain backdoors. On the other hand, the AI models as well as the underlying datasets are typically kept secret due to concerns around privacy and intellectual property. This makes it difficult to properly validate the behavior of AI models.

Recently, increased attention has been devoted to cryptographic solutions to circumvent this deadlock. Verifiable computation techniques such as zero-knowledge proofs enable a model or dataset owner to prove statements about the model or data without revealing other information to a verifier. This could be applied in several ways, such as verifying that an agreed upon training procedure was performed correctly; checking that an unbiased dataset was used or validating that the AI model came to a certain output in the correct way. Another interesting application of cryptographic techniques is AI watermarking, where cryptographic signatures can be used to watermark AI-generated outputs in such a way that they cannot be altered and are only detectable by other machines. At a later moment, the watermark can be verified to decide which AI model was used to generate a certain output.

Your goal is to further explore the interplay between verifiable computation and AI security. You will first familiarize yourself with the topic of verifiable computation and zero-knowledge proofs, as well as explore the different applications that have already been proposed in the scientific literature. After that, you are encouraged to propose a new, interesting application that will be researched in the remainder of the thesis. With this being a relatively new and active field, there will be plenty of room for creativity as well as support and exchanges from supervisors within TNO.

You thrive on conducting research that will make a mark on information security. As you’ll be spending between six and nine months researching for your Master’s thesis, you are highly motivated to contribute to the fast-moving field of cryptography and information security in a multi-disciplinary environment. And you enjoy learning from the best and working with colleagues from different backgrounds.

Other knowledge and skills you bring to TNO:

• A University Bachelor’s Degree. And you’re in the final phase of your Master’s Degree training in mathematics, or another suitable programme. Programming skills would be a plus.
• Experience with, or a keen interest in cryptography or AI, helping you master the topic within the first few months of your internship.
• An excellent command of English at academic level.

The Applied Cryptography and Quantum Algorithms department has offices in The Hague, Groningen and Eindhoven. We encourage you to spend at least two days a week at the office.

You want an internship opportunity on the precursor of your career; an internship gives you an opportunity to take a good look at your prospective future employer. TNO goes a step further. It’s not just looking that interests us; you and your knowledge are essential to our innovation. That’s why we attach a great deal of value to your personal and professional development. You will, of course, be properly supervised during your work placement and be given the scope for you to get the best out of yourself. Furthermore, we provide:

• A highly professional, innovative internship environment, within a team of top experts.
• A suitable internship allowance (615 euro for wo-, hbo- and mbo-students, for a full-time internship).
• Possibility of eight hours of free leave per internship month (for a full-time internship).
• A free membership of Jong TNO, where you can meet other TNO professionals and join several activities, such as sports activities, (work-related) courses or the yearly ski-trip.
• Use of a laptop.
• An allowance for travel expenses in case you don’t receive an OV-card.

At TNO, we innovate for a healthier, safer and more sustainable life. And for a strong economy. Since 1932, we have been making knowledge and technology available for the common good. We find each other in wonder and ingenuity. We are driven to push boundaries. There is all the space and support for your talent and ambition. You work with people who will challenge you: who inspire you and want to learn from you. Our state-of-the-art facilities are there to realize your vision. What you do at TNO matters: impact makes the difference. Because with every innovation you contribute to tomorrow’s world. Read more about TNO as an employer.

At TNO we encourage an inclusive work environment, where you can be yourself. Whatever your story and whatever unique qualities you bring to the table. It is by combining our unique strengths and perspectives that we are able to develop innovations that make a real difference in society. Want to know more? Read what steps we are taking in the area of diversity and inclusion.

After the first CV selection, the application process will be conducted by the concerning department. TNO will provide a suitable internship agreement. If you have any questions about this vacancy, you can contact the contact person mentioned below.

Important to be aware of before applying:

• Before the start of the internship, the internship agreement from TNO needs to be signed. For students at a college or university based in the Netherlands, TNO uses the UNL-template (supplemented with a number of specific agreements from TNO). For students of foreign and MBO educational institutions, the TNO internship agreement applies. TNO does not sign any other internship agreements.
• Before the start of the internship, the educational institution will need to confirm in writing that:
  • 1) you are enrolled at the educational institution during the internship, and;
  • 2) the internship takes place as part of the programme of the study.
• The confirmation of educational institution takes place by signing the UNL template or forms prepared by TNO.
• Interns at TNO must be in possession of a Dutch residential address at the start of the internship. Performance of internship activities from abroad is not possible.