Skip to main content

Fine-Grained Analysis of Software Ecosystems as Networks

Objective

A popular form of software reuse involves linking open source software (OSS) libraries hosted on centralized code repositories, such as Maven or PyPI. Developers only need to declare dependencies to external libraries, and automated tools make them available to the workspace of the project. As recent events such as the LeftPad incident, which led to hundreds of thousands of websites to stop working, and the Equifax data breach, which led to a leak of hundreds of thousands of credit card numbers, have demonstrated, dependencies on networks of external libraries can introduce to projects significant operational and compliance risks as well as difficult to assess security implications. Solving these problems would boost the efficiency and production quality of software development companies by allowing them to reuse OSS code with confidence, covering a large untapped potential. To address this situation, the FASTEN project introduces fine-grained, method-level, tracking of dependencies on top of existing dependency management networks. Specifically, the project will introduce a service that tracks dependencies at the method call-graph level and performs sophisticated analyses of i) security vulnerability propagation, ii) licensing compliance, and iii) dependency risk profiles. To facilitate adoption, FASTEN will bring those analyses to the hands of developers by integrating the analysis service to popular package managers, for the Java, C, and Python programming languages. The project consortium comprises world-leading experts on ecosystem analysis, graph processing, and software risk and compliance assessment, along with established OSS community integrators and managers.

Call for proposal

H2020-ICT-2018-20

See other projects for this call

Sub call

H2020-ICT-2018-2

Coordinator

TECHNISCHE UNIVERSITEIT DELFT
Net EU contribution
€ 965 580,00
Address
Stevinweg 1
2628 CN Delft
Netherlands

See on map

Region
West-Nederland Zuid-Holland Delft en Westland
Activity type
Higher or Secondary Education Establishments
Non-EU contribution
€ 0,00

Participants (6)

ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS - RESEARCH CENTER
Greece
Net EU contribution
€ 542 750,00
Address
Kefallinias Street 46
11251 Athens

See on map

Region
Κεντρικός Τομέας Αθηνών Aττική Αττική
Activity type
Higher or Secondary Education Establishments
Non-EU contribution
€ 0,00
UNIVERSITA DEGLI STUDI DI MILANO
Italy
Net EU contribution
€ 366 225,00
Address
Via Festa Del Perdono 7
20122 Milano

See on map

Region
Nord-Ovest Lombardia Milano
Activity type
Higher or Secondary Education Establishments
Non-EU contribution
€ 0,00
XWIKI
France
Net EU contribution
€ 360 578,00
Address
4 Rue Du Faubourg Poissonniere
75010 Paris

See on map

SME

The organization defined itself as SME (small and medium-sized enterprise) at the time the Grant Agreement was signed.

Yes
Region
Ile-de-France Ile-de-France Paris
Activity type
Private for-profit entities (excluding Higher or Secondary Education Establishments)
Non-EU contribution
€ 154 533,43
HOVERTURE DEUTSCHLAND AG
Germany
Net EU contribution
€ 474 058,00
Address
Gerichtstrasse 23, Hof 5, Aufgang 6
13347 Berlin

See on map

Region
Berlin Berlin Berlin
Activity type
Private for-profit entities (excluding Higher or Secondary Education Establishments)
Non-EU contribution
€ 203 167,71
SOFTWARE IMPROVEMENT GROUP BV
Netherlands
Net EU contribution
€ 397 470,00
Address
Fred. Roeskestraat 115
1076 EE Amsterdam

See on map

SME

The organization defined itself as SME (small and medium-sized enterprise) at the time the Grant Agreement was signed.

Yes
Region
West-Nederland Noord-Holland Groot-Amsterdam
Activity type
Private for-profit entities (excluding Higher or Secondary Education Establishments)
Non-EU contribution
€ 170 344,29
OW2
France
Net EU contribution
€ 381 875,00
Address
7 Rue De Phalsbourg
75017 Paris

See on map

SME

The organization defined itself as SME (small and medium-sized enterprise) at the time the Grant Agreement was signed.

Yes
Region
Ile-de-France Ile-de-France Paris
Activity type
Other
Non-EU contribution
€ 0,00