Explore Projects

<p>The GStreamer libcamera element allows libcamera to be used in GStreamer pipelines. libcamera supports simultaneous streaming, for example having lower quality one stream for preview, while another higher quality one is used for recording. We would like to extend support for the GStreamer libcamera element to support this multistreaming.</p>

<h3>Description</h3><p>This mentorship project combines both hands-on development and exploratory research.</p><p>CBOMkit currently supports cryptographic detection and analysis for Java, Python, and Go ecosystems. However, a significant portion of production systems relies on other programming languages like C/C++ (used especially in systems programming, embedded environments, and high-performance applications) and widely rely on crypto libraries like OpenSSL.</p><p><br></p><p>On the development side, the mentee will extend CBOMkit to support C/C++, with a primary focus on detecting usage of OpenSSL APIs, and cryptographic primitives. This includes adding C/C++ language support, designing detection logic in sonar-cryptography, integrating it into CBOMkit’s architecture, developing test cases and validating against real-world C/C++ projects, ensuring practical applicability and robustness.</p><p><br></p><p>Additionally, mentee will also test some other policies through existing Open Policy Agent (OPA) integration feature of CBOMkit.</p><p><br></p><p>On the research side, the mentee will analyze additional cryptographic libraries in the C/C++ ecosystem such as wolfSSL, libsodium, BoringSSL, and Botan, along with exploring language support for Rust and its associated cryptographic libraries. The goal is to evaluate their feasibility for future integration into CBOMkit.</p><h3><br></h3><h3>Learning Objectives</h3><ul><li>Understand analysis techniques for detecting cryptographic usage</li><li>Gain hands-on experience with cryptographic libraries such as OpenSSL in C/C++</li><li>Learn how to extend and contribute to a production-grade open-source security tool</li><li>Develop skills in designing test cases and validating tools on real-world codebases</li><li>Learn how policy-based security analysis works using Open Policy Agent (OPA)</li><li>Conduct technical research and evaluate cryptographic libraries and programming language for integration</li></ul><h3><br></h3><h3>Expected Outcome and Deliverables</h3><ul><li>C/C++ language support integrated into sonar-cryptography</li><li>OpenSSL detection module with meaningful coverage</li><li>integration with CBOMkit</li><li>Test suite for validating detection accuracy</li><li>Validation report using real-world C/C++ projects</li><li>Research document comparing additional libraries (wolfSSL, libsodium, BoringSSL, Botan) and language(Rust with its library) for integration feasibility</li><li>Blog post(s) or technical documentation describing implementation and findings</li><li>Evaluation with other policy through OPA</li></ul><h3><br></h3><h3>Recommended Skills</h3><ul><li>Proficiency in java with good understanding of C/C++</li><li>Experience with OpenSSL and general cryptographic APIs</li><li>Good understanding of cryptographic concepts (encryption, hashing, key exchange)</li><li>Experience with static analysis or code parsing (preferred but not mandatory)</li><li>Familiarity with Open Policy Agent</li><li>Familiarity with Git and open-source contribution workflows</li></ul><h3><br></h3><h3>Additional Information</h3><ul><li><a href="https://github.com/cbomkit/sonar-cryptography/blob/main/docs/LANGUAGE_SUPPORT.md" rel="noopener noreferrer" target="_blank" style="color: rgb(9, 105, 218);">https://github.com/cbomkit/sonar-cryptography/blob/main/docs/LANGUAGE_SUPPORT.md</a></li><li><a href="https://github.com/cbomkit/sonar-cryptography/blob/main/docs/DETECTION_RULE_STRUCTURE.md" rel="noopener noreferrer" target="_blank" style="color: rgb(9, 105, 218);">https://github.com/cbomkit/sonar-cryptography/blob/main/docs/DETECTION_RULE_STRUCTURE.md</a></li></ul>

Description: Use OCI References in image verification Expected Outcome: PR sent to kyverno/kyverno implementing support for OCI references in verifyImages rules

<p>The goal of this project is to implement an adaptive bitrate (ABR) module into video streaming protocols over HTTP such as DASH / HLS to achieve better QoE.</p>

<p>This project focuses on implementing OpenCL support for Libavfilter, with other parts of the project (including scaling, color conversion and deinterlacer) being treated as optional improvements for FFmpeg.</p>

Enable Tremor to receive and send Syslog Protocol Messages (https://tools.ietf.org/html/rfc5424), supporting as many Syslog implementations as possible that might deviate from the standard

OpenELB is an open-source load balancer implementation designed for exposing the LoadBalancer type of Kubernetes services in bare metal, edge, and virtualization environments. Currently, OpenELB supports the BGP protocol. However, the BGP policy is not fully supported in OpenELB. Therefore, based on the BGP protocol, OpenELB is supposed to support the BGP policy to enable leveraging the GoBGP policy feature for controlling the route advertisement.

<p>Currently, mypy and mypyc are unable to recognize uses of the singledispatch decorator, making mypy generate false positives and mypyc generate incorrect or slow code when it is used. This project would improve both of these problems by adding special support for singledispatch in mypy and mypyc.</p>

<p>The task is to create software support for FPGA cape (based on iCE40 device). The completed project will provide the BeagleBoard.org community with easy to implement and powerful tools for realization of projects based on Programmable Logic Device(FPGA), which will surely increase the number of applications based on it.</p>

<p>This is a proposal to add serialization and deserialization support for TOML in the functional configuration language Dhall. TOML is a relatively new configuration language that is easily human readable, supports dates and times, and is unambiguous. The biggest users of TOML are Rust’s Cargo, and consequently many Rust programs read TOML. Adding support for TOML in Dhall would mean users do not have to choose between readability and the power to program their configurations.</p>

The goal of this project is to develop an HR management module for the CARE system, streamlining employee management and automating leave and holiday tracking. The platform enables HR to efficiently manage employee records, process leave requests, securely handle document uploads, manage holidays, and allows employees to apply for leave and access their profiles and leave history.

<p>Kodi codebase is written in C++ which is dynamically converted to Python through SWIG and Groovy. In this project Python 3 support is to be added for Kodi add-ons and updating the Kodi built-in libraries by changing the custom Python templates provided as an input to Groovy and updating the calls to threads and sub-interpreters as per Python3 C API.</p>

<p>This project adds support for dump and restore of io_uring instances. The three main goals of this project is to handle dump/restore of empty io_uring, dump/restore of io_uring with completed events and no inflight events, and dump/restore of io_uring with in flight as well as completed events. The ring buffer needs to replay unconsumed entries on restore in a way that is transparent to the application. This project achieves these objectives.</p>

<p>Add support for timeless debugging in r2. This requires r2 to create tracing session and read, write memory at any moment in tracing sessions. Same for registers.<br> Add new reverse execution commands, like ‘dsb’, that may read previous tracing sessions, and seek program counter to backward. And moreover, r2 should load recorded tracing sessions from tools like, rr or QIRA.</p>

Niffler provides various modules to handle different DICOM related tasks. Some of the modules are to be executed sequentially by the user to get the desired output. This project aims to reduce human intervention by building flexible and scalable pipelines using Nextflow. Nextflow is a domain-specific language for workflow orchestration. It enables scalable and reproducible workflows using software containers. Nextflow allows us to add new modules without having to hard-code the pipeline.

<p>Matlab Simulink is an advanced tool for simulating physical systems. Adding support to ArduPilot will allow for greater depth of understanding of both the ArduPilot control systems and the behavior of the simulated vehicle. This understanding can be used to improve the control systems of ArduPilot and test behavior without risking a real vehicle. It is hoped that this will allow the implementation of more advanced control systems tailored to particular vehicle types.</p>

PostgreSQL extensions can offer detailed views of query performance, storage usage, and system health but this would need frequent manual setup to be used with monitoring systems. Our proposal improves upon pgexporter through automatic detection of supported extensions and the output of pre-configured metrics for vital extensions such as pg_stat_statements, pg_buffercache, and pg_stat_monitor. It allows easy observability, diminishes the role of manual setup, and helps for optimal data-driven database performance monitoring.

The problem I am trying to solve is to add ARM support. Right now, when the CircleCI pipeline is triggered, it pushes a Docker image that only supports the AMD64 architecture and does not support ARM architecture. I plan to solve this issue by using Docker's buildx functionality to build multi-architecture images. As a deliverable by the end of the tenure, we will have a shell script which, when run, will execute the circleci/config.yml associated with the repository. This will result in the creation of maintainable and portable code.

This project aims to improve Git-based collaboration in JabRef by building a reliable synchronization layer for BibTeX files. It treats Git changes as edits from remote collaborators and introduces support for conflict detection, a guided merge UI, and safe synchronization workflows. Key deliverables include a modular GitSyncService, a conflict resolution interface, integration with JabRef’s save flow, and secure credentials management. The result will be a smoother, more collaborative experience for researchers using version control in their bibliography workflows.

The Open Build Service (OBS) is a generic system to build and distribute binary packages from sources in an automatic, consistent, and reproducible way. It streamlines the process of creating and distributing software packages across various Linux distributions. The goal of this project is to implement support for Packit to build in OBS. The packit project consists of two parts: the [packit-service](https://github.com/packit/packit-service/tree/main/packit_service) and [packit](https://github.com/packit/packit-service/tree/main/packit)

This project aims to significantly enhance libssh capability to handle OpenSSH certificates. Currently, libssh only supports certificates as opaque blobs for basic interoperability with some compatible OpenSSH servers. This implies that there is no control over the certificate attributes, thus preventing both user and host authentication by means of certificates. This project entails the development of a parsing mechanism for extracting certificate contents, along with a proper system to manage them. The deliverables are a set of new APIs for handling certificate-based user and host authentication, combined with an entire key revocation control infrastructure.

<ul> <li><strong>Add support of Kotlin/Native in processing-android</strong>.</li> <li><strong>Migration of Java based processing's android mode to Kotlin</strong>.</li> <li>Spilt Android specific logic from the plain java code.</li> <li>Restructuring the android mode to Multiplatform library using Kotlin/Native.</li> <li>Implementing on at least one platform (<strong>primarily JVM</strong>).</li> <li>Migrating Groovy based Gradle System to Kotlin Script (kts) based Gradle System.</li> </ul>

<p>The TensorFlow.js will be highly computational consuming while we are doing prediction or classification. And if such a computation happens at the UI threads, it will block all the things until the computation is done. The above will results in a bad experience while using the web to render the results and so on. And it is natural to come up with the idea that is doing a multi-threads model that let the main thread(ui thread) run for rendering UI and listen to the results from other threads and let another thread opens when the computation is needed. This WebWorker is the base for the multi-thread model over the browser. We can use the WebWorker to achieve the paradigm that separates the heavy computation apart from UI rendering.</p>