Cel The field of software security analysis stands at a critical juncture.Applications have become too large for security experts to examine by hand,automated verification tools do not scale, and the risks of deploying insecure software are too great to tolerate anything less than mathematical proof.A radical shift of strategy is needed if programming and analysis techniques are to keep up in a networked world where increasing amounts of governmental and individual information are generated, manipulated, and accessed through web-based software applications.The basic tenet of this proposal is that the main roadblock to the security verification of a large program is not its size, but rather the lack of precise security specifications for the underlying libraries and security-critical application code. Since, large-scale software is often a collaborative effort, no single programmer knows all the design goals. Hence, this proposal advocates a collaborative specification and verification framework that helps teams of programmers write detailed security specifications incrementally and then verify that they are satisfied by the source program.The main scientific challenge is to develop new program verification techniques that can be applied collaboratively, incrementally, and modularly to application and library code written in mainstream programming languages. The validation of this approach will be through substantial case studies. Our aim is to produce the first verified open source cryptographic protocol library and the first web applications with formal proofs of security.The proposed project is bold and ambitious, but it is certainly feasible, and has the potential to change how software security is analyzed for years to come. Dziedzina nauki natural sciencescomputer and information sciencescomputer securitycryptographynatural sciencescomputer and information sciencessoftwaresoftware applications Program(-y) FP7-IDEAS-ERC - Specific programme: "Ideas" implementing the Seventh Framework Programme of the European Community for research, technological development and demonstration activities (2007 to 2013) Temat(-y) ERC-SG-PE6 - ERC Starting Grant - Computer science and informatics Zaproszenie do składania wniosków ERC-2010-StG_20091028 Zobacz inne projekty w ramach tego zaproszenia System finansowania ERC-SG - ERC Starting Grant Instytucja przyjmująca INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET AUTOMATIQUE Wkład UE € 1 406 726,00 Adres DOMAINE DE VOLUCEAU ROCQUENCOURT 78153 Le Chesnay Cedex Francja Zobacz na mapie Region Ile-de-France Ile-de-France Yvelines Rodzaj działalności Research Organisations Kontakt administracyjny Valérie Boutheon (Ms.) Kierownik naukowy Karthikeyan Bhargavan (Dr.) Linki Kontakt z organizacją Opens in new window Strona internetowa Opens in new window Koszt całkowity Brak danych Beneficjenci (1) Sortuj alfabetycznie Sortuj według wkładu UE Rozwiń wszystko Zwiń wszystko INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET AUTOMATIQUE Francja Wkład UE € 1 406 726,00 Adres DOMAINE DE VOLUCEAU ROCQUENCOURT 78153 Le Chesnay Cedex Zobacz na mapie Region Ile-de-France Ile-de-France Yvelines Rodzaj działalności Research Organisations Kontakt administracyjny Valérie Boutheon (Ms.) Kierownik naukowy Karthikeyan Bhargavan (Dr.) Linki Kontakt z organizacją Opens in new window Strona internetowa Opens in new window Koszt całkowity Brak danych