Dynamic verification of security properties – VéDySec

Security risks have become a major concern during the recent years.
A security flaw can be exploited by attackers and allow them to steal
confidential data (personal, medical, financial, industrial, defence, etc.),
to access services without authorisation, or to modify or to compromise
sensible data with a malicious goal (identity usurpation, espionage,
hybrid war, terrorism, etc.)

Static verification techniques, namely by abstract interpretation
or deductive verification, can demonstrate the absence of vulnerabilities
in a software product. However, these techniques remain difficult
and expensive to apply on industrial software.
Indeed, their application requires deep expertise and significant
effort. In this context, developing dynamique verification techniques
for security properties, easier to apply than static techniques,
is necessary for application of these techniques to a large
range of projects.

The goal of the VéDySec project is to consolidate the techniques and tools
for dynamic verification of security properties.