Automated Vulnerability Detection in Software Development Using AI Techniques

Descripción del proyecto

Una inteligencia artificial más inteligente para un «software» más seguro

Las amenazas cibernéticas evolucionan constantemente y las pruebas tradicionales a menudo tienen dificultades para adaptarse al ritmo. Con esto en mente, el equipo del proyecto AISSAM, financiado con fondos europeos, integrará una detección de vulnerabilidades más inteligente en el desarrollo de «software». Al combinar el análisis estático, el análisis simbólico y la inteligencia artificial (IA), en AISSAM se crea una herramienta que simula ataques, identifica debilidades en tiempo real y reduce las falsas alarmas. A diferencia de otros sistemas de IA que solo manejan un tipo de análisis, en AISSAM se integran ambos, lo que hace que la detección sea más rápida y precisa. En el proyecto se entregará un prototipo para mejorar las pruebas de penetración, lo que ayuda a los desarrolladores a descubrir las vulnerabilidades de manera rápida y confiable. Al apoyar a las pymes, en AISSAM se promete una ciberseguridad más fuerte y ahorros económicos, lo que hace más alcanzable el desarrollo de «software» más seguro.

Objetivo

"In today's software development problematic become new security threats that always appearing. To combat this, we can integrate penetration testing right into the development framework. With penetration testing, we can make the program mimic an attacker and simulate several different ways an attacker would try to breach the system. This gives us some immediate and valuable feedback on the system's potential weaknesses. Even when we use additional tools to do the actual pen testing, we can still derive value from doing them in the development framework. These ""tests"" are also valuable based in real time.
The project aims to ensure more effectively uncover software vulnerabilities by combining static and symbolic analysis with artificial intelligence (AI) advances.
The project objectives:
1. to analyse existing practices on minimizing positives and enhance method efficiency by harnessing AI capabilities, for results to decrease Cybersecurity problems.
2. to develop an AI-based model that improves bug detection accuracy by efficiently integrating symbolic execution with static analysis.
3. to develop AI based prototype on static and symbolic analysis improving penetration testing accuracy.
AI-powered prototype will enhance current techniques by improving the resource-intensive symbolic execution process and minimizing false positives, which are frequently linked to static analysis.
While current AI tools typically handle either symbolic analysis or static analysis, the AI model we will develop will cover both of them. AISSAM promises more comprehensive problem finding tool than either kind of analysis can deliver on its own. Technological impact will be made on up to 20 SME’s and will significantly increase efficiency of bug detection accuracy by efficiently integrating symbolic execution. SME’s will get also an economic impact by saving funding for cybersecurity challenges solving.
"