VeriDevOps: Automated Protection and Prevention to Meet Security Requirements in DevOps

Andrey Sadovykh, Gunnar Widforss, Dragos Truscan, Eduard Paul Enoiu, Wissam Mallouli, Rosa Iglesias, Alessandra Bagnto, Olga Hendel

Research output: Chapter in Book/Conference proceedingConference contributionScientificpeer-review

Abstract

Current software development practices are increasingly based on using both COTS and legacy components which make such systems prone to security vulnerabilities. The modern practice addressing ever changing conditions, DevOps, promotes frequent software deliveries, however, verification methods artifacts should be updated in a timely fashion to cope with the pace of the process. VeriDevOps, Horizon 2020 project, aims at providing a faster feedback loop for verifying the security requirements and other quality attributes of large scale cyber-physical systems. VeriDevOps focuses on optimizing the security verification activities, by automatically creating verifiable models directly from security requirements formulated in natural language, using these models to check security properties on design models and then generating artefacts such as, tests or monitors that can be used later in the DevOps process. The main drivers for these advances are: Natural Language Processing, a combined formal verification and model-based testing approach, and machine-learning-based security monitors. VeriDevOps is in its initial stage - the project started on 1.10.2020 and it will run for three years. In this paper we will present the major conceptual ideas behind the project approach as well as the organizational settings.

Original languageEnglish
Title of host publicationProceedings of the 2021 Design, Automation and Test in Europe, DATE 2021
Publisherthe Institute of Electrical and Electronics Engineers, Inc.
Pages1330-1333
Number of pages4
ISBN (Electronic)978-3-9819263-5-4
ISBN (Print)978-1-7281-6336-9
DOIs
Publication statusPublished - 1 Feb 2021
MoE publication typeA4 Article in a conference publication
EventDesign, Automation and Test in Europe Conference and Exhibition -
Duration: 1 Feb 20215 Feb 2021

Publication series

NameProceedings -Design, Automation and Test in Europe, DATE
Volume2021-February
ISSN (Print)1530-1591

Conference

ConferenceDesign, Automation and Test in Europe Conference and Exhibition
Abbreviated titleDATE
Period01/02/2105/02/21

Keywords

  • Cybersecurity
  • Design checking
  • Machine Learning
  • Model-Driven Engineering
  • Natural Language Processing
  • Prevention and Reaction
  • Requirement
  • Root cause analysis
  • Runtime Analysis
  • Security-by-design
  • Testing and validation

Fingerprint

Dive into the research topics of 'VeriDevOps: Automated Protection and Prevention to Meet Security Requirements in DevOps'. Together they form a unique fingerprint.

Cite this