Automated Protection and Prevention to Meet Security Requirements in DevOps Environments
What is VeriDevOps?
VeriDevOps aims at providing a faster feedback loop for verifying security requirements i.e. confidentiality, integrity, availability, authentication, authorization and other functional and extra-functional attributes of large scale industrial systems.
What are the case studies about?
They are specifically selected to demonstrate addressing security and safety in systems integrating both software and hardware
VeriDevOps will develop methods that target these challenges by bringing trade-off analysis in energy-aware security verification using formal models that can be used in the execution of test cases earlier in the development process by verification and test generation.
In VeriDevOps we are shortening the development, deployment, and feedback loops by using formal verification and test generation to identify security vulnerabilities in system models early in the development process. We use statistical model checking to ensure the correctness of the system against given formal security properties with a specified degree of confidence.
VeriDevOps concentrates on rapid changes of security requirements by leveraging formal specifications for automated re-configuration of prevention and protection mechanisms.
VeriDevOps will propose automated tool chains for security requirements generation and formalization, generation of monitors and tests, design checking and anomalies detection both at operations and at development time.
Formal specifications in VeriDevOps are the source for automation in dealing with security at operations and development, thus they are the means for further DevOps integration.
Our Partners
Organized and Efficient
The VeriDevOps project will develop technologies for a smooth and automatic workflow allowing verification of security in VeriDevOps environments.
Flexible and Committed
VeriDevOps brings together European industrial and academic communities to develop and demonstrate
VeriDevOps technologies ranging from processes, methodologies to tools and demonstrators.
Creative & Resourceful
VeriDevOps expects to be able to present a substantial contribution to achieving what we believe are the underlying benefits with regards to the EC targets.