Skip to main content
Przejdź do strony domowej Komisji Europejskiej (odnośnik otworzy się w nowym oknie)
polski pl
CORDIS - Wyniki badań wspieranych przez UE
CORDIS

Program Analysis for Software Supply Chain Security

Cel

Modern software development relies on reusable, publicly available software packages in the form of open-source libraries, tools, and frameworks. This massive reuse of software has enabled remarkable improvements of programmer productivity, however, it also causes major problems with security vulnerabilities, compromised code, and breaking changes can propagate through the “software supply chain” and cause major threats to the security and robustness of the end-user applications. These problems are particularly critical for software written in the dynamic programming languages JavaScript and Python, which constitute the foundation of many categories of modern software.

The main research hypothesis of ProSec is that program analysis technology has the potential to fundamentally improve software supply chain security. By creating novel program analysis techniques for dynamic programming languages, ProSec will make it possible to analyze applications and open source packages with unprecedented precision and scalability, to detect and prevent security issues in the program code during development before it reaches the end users.

ProSec covers four essential aspects of software supply chain security: vulnerability exposure – analyzing how known security vulnerabilities in open source packages may affect application code, vulnerability detection – analyzing program code to reveal unknown vulnerabilities, malware – detecting malicious code and its capabilities, and change impact – determining how breaking changes may affect application code, and how to adapt to such changes. I have identified eight research challenges and corresponding opportunites for new, groundbreaking approaches to program analysis. Together, these elements form the plan for ProSec to achieve the ambitious objectives. If successful, the scientific outcomes will constitute breakthroughs in program analysis, leading to significant impact in software supply chain security.

Dziedzina nauki (EuroSciVoc)

Projekt nie został jeszcze sklasyfikowany według klasyfikacji EuroSciVoc.
Wskaż dziedziny nauki, które twoim zdaniem są najbardziej istotne z punktu widzenia tego projektu i pomóż nam usprawnić naszą usługę klasyfikacji.

Słowa kluczowe

Program(-y)

Temat(-y)

System finansowania

HORIZON-ERC - HORIZON ERC Grants

Wyświetl wszystkie projekty finansowane w ramach tego programu finansowania

Zaproszenie do składania wniosków

(odnośnik otworzy się w nowym oknie) ERC-2025-ADG

Wyświetl wszystkie projekty finansowane w ramach tego zaproszenia

Instytucja przyjmująca

AARHUS UNIVERSITET
Wkład UE netto
€ 2 500 000,00
Koszt całkowity
Brak danych

Beneficjenci (1)