DeVulnIX (Design-Level Vulnerabilities Identification and Fixing) addresses software design vulnerabilities, brought on by risky or problematic design decisions, such as a lack of authentication between services. In this project, we will combine large language models with proven software engineering techniques to develop everyday tools for continuous security checks and corrections as code evolves. DeVulnIX aims to save development effort and time, reduce overlooked security issues, and make secure design the norm.
The project is funded by the Austrian Science Fund (FWF↗). It is a collaboration with the Institute of Software Security↗ of the Hamburg University of Technology (TUHH↗). The team from the University of Vienna is led by Uwe Zdun and the team from TUHH is led by Riccardo Scandariato↗.
More information on the project can be found in u:cris↗.