idw – Informationsdienst Wissenschaft

Nachrichten, Termine, Experten

Grafik: idw-Logo
Science Video Project
idw-Abo

idw-News App:

AppStore

Google Play Store



Instance:
Share on: 
09/11/2023 15:17

Demonstrable IT security through formal verification

Michael Lindner Presse
Agentur für Innovation in der Cybersicherheit GmbH

    New research call “Ecosystem formally verifiable IT” (EvIT)

    Demonstrable IT security through formal verification

    The Agentur für Innovation in der Cybersicherheit GmbH (Cyberagentur) has launched a call for groundbreaking research on an “Ecosystem formally verifiable IT” (EvIT) to strengthen the cyber security of IT systems. The aim is to develop methods for the formal verification of security properties of hardware and software in order to make them provably secure. Tenders can be submitted until 30 November 2023.

    "The project," says project leader Dr Sebastian Jester, "focuses on two core elements: The development of technologies and tools for end-to-end formally verified IT components and the establishment of an ecosystem of IT developers among commercial providers as well as end users."

    “Formal verification” provides mathematical and logical proof that IT systems are free of security vulnerabilities. The approach enables a previously unattained level of protection, especially for highly complex systems. Current verification methods are however time-consuming and require specialised knowledge. To overcome these limitations, the Cyberagentur is calling for tenders for an “Ecosystem formally verifiable IT” (EvIT) as a new large research project.

    "The innovative approach behind EvIT is to make formal verification more accessible and efficient," explains Dr Jester, Head of Secure Hardware and Supply Chains in the Cyberagentur Secure Systems Department. A key feature of the approach is improved usability – for example, the ability quickly to verify software changes, rather than having to re-verify the system in its entirety. Another focus is on active community building. This is because the mathematical-logical procedures used require specialised knowledge, even among computer scientists, and are not easy or quick to apply to hardware and software of today's complexity. The new community is intended to offer researchers a platform to exchange ideas and to jointly make formal verification applicable to more complex systems and with a greater degree of automation, and to (further) develop the methods and software tools necessary for this. A further goal is to attract more IT talent to formal verification.

    The selected project or projects is to define and implement reference systems of different levels of complexity, from simple microprocessors to servers. Using a stepwise approach, initial tests will focus on less complex systems. Possible approaches have been examined in five EvIT preliminary studies (“ÖvIT-Vorstudien”) for the Cyberagentur.

    A successful project could fundamentally change the landscape of IT security with an ecosystem of researchers, commercial providers, and businesses and public administration as users. The project has the potential to close common security gaps in a wide range of IT systems, whether standard office systems or hardened IT for critical infrastructure or national security, and to make "cybersecurity by design" more widespread as a philosophy.

    Researchers have until 30 November 2023 to formulate concepts and submit tenders to the Cyberagentur. This pre-commercial procurement is open to businesses, research and higher education institutions, and natural persons located in the European Union (EU), the European Economic Area (EEA), Switzerland, NATO member countries as well as Australia and New Zealand.

    The invitation to tender with the contract number 2023/S 173-542341is published in the Supplement to the Official Journal of the European Union: https://www.evergabe-online.de/tenderdocuments.html?0&id=536095

    Further information:

    https://www.cyberagentur.de/oevit/
    https://www.cyberagentur.de/oevit-vorstudien/

    Contact

    Michael Lindner
    Press Officer of the Cyberagentur
    Phone: +49 151 44150 645
    E-mail: presse@cyberagentur.de

    Background: Cyberagentur

    The Agentur für Innovation in der Cybersicherheit GmbH (Cyberagentur) was founded in 2020 as a fully in-house company of the Federal Government under the joint leadership of the Federal Ministry of Defence and the Federal Ministry of the Interior and Home Affairs with the aim of taking a cross-departmental view of internal and external security in the area of cybersecurity that is related to application strategy. Against this background, the work of the Cyberagentur is primarily aimed at the institutionalised implementation of highly innovative projects that are associated with a high risk with regard to the achievement of objectives, but at the same time can have a very high disruptive potential if they are successful.

    The Cyberagentur is part of the National Security Strategy of the Federal Republic of Germany.

    The Cyberagentur is headed by Prof. Dr Christian Hummert as Research Director and Managing Director and Daniel Mayer as Commercial Director.


    Contact for scientific information:

    Dr. Sebastian Jester


    Original publication:

    https://www.cyberagentur.de/gesucht-ansaetze-fuer-beweisbare-it-sicherheit-durch...


    More information:

    https://www.cyberagentur.de/oevit/
    https://www.cyberagentur.de/oevit-vorstudien/


    Images

    New research project "Ecosystem Trustworthy IT" (EvIT) plans provable IT security through formal verification . Photo: freepik/Cyberagentur
    New research project "Ecosystem Trustworthy IT" (EvIT) plans provable IT security through formal ver ...
    freepik/Cyberagentur
    Cyberagentur


    Criteria of this press release:
    Business and commerce, Journalists, Scientists and scholars, Students
    Economics / business administration, Electrical engineering, Information technology, Mathematics, Physics / astronomy
    transregional, national
    Contests / awards, Research projects
    English


     

    New research project "Ecosystem Trustworthy IT" (EvIT) plans provable IT security through formal verification . Photo: freepik/Cyberagentur


    For download

    x

    Help

    Search / advanced search of the idw archives
    Combination of search terms

    You can combine search terms with and, or and/or not, e.g. Philo not logy.

    Brackets

    You can use brackets to separate combinations from each other, e.g. (Philo not logy) or (Psycho and logy).

    Phrases

    Coherent groups of words will be located as complete phrases if you put them into quotation marks, e.g. “Federal Republic of Germany”.

    Selection criteria

    You can also use the advanced search without entering search terms. It will then follow the criteria you have selected (e.g. country or subject area).

    If you have not selected any criteria in a given category, the entire category will be searched (e.g. all subject areas or all countries).