66123 Saarbrücken, de
+49 (681) 30270783
CEBIT 2018: Intelligent mass testing for greater IT securitySaarbrücken, )
"Modern programs can very quickly generate a huge number of tests. But the wheat is separated from the chaff when it comes to generating valid entries that penetrate deeply into the target program", explains Professor Andreas Zeller, who teaches software engineering at the University of Saarland and carries out research at the CISPA Helmholtz Centre.
He has therefore developed the "Autogram" program together with his PhD students. This automatically identifies the rules that must apply to inputs to ensure they are accepted as being valid. The computer scientists refer to these rules collectively as "context-free grammar". These are in turn processed by "tribble", another piece of software produced by the computer scientists at Saarbrücken, and thus millions of random, but valid, inputs are generated for the software system under investigation. "This allows us to check the software system down to the very last detail", explains Zeller. The large number of tested entries considerably reduces the probability of overlooking a security loophole. In a global first, the test system from Saarbrücken only requires the program being tested in order to perform its work, while the competition is dependent upon comprehensive example entries.
Background: Saarland Informatics Campus (SIC)
1,800 students from 81 nations are studying 15 computer-science-related courses across three established faculties at the Saarland Informatics Campus (SIC) of the University of Saarland. At two graduate schools and six globally respected research institutes more than 800 scientists are researching the entire spectrum of computer science related subjects and furthering progress particularly in IT security, artificial intelligence, visual computing, bioinformatics and the semantic web – from the fundamentals right through to innovative applications. The SIC cooperates with international groups such as Google, Microsoft and Facebook, promotes a large number of business start-ups with its IT incubator (ITI) and acts as a driver for further developments through industrial, research and development laboratories. The overall potential of the site is leveraged in order to take advantage of scientific publications, prizes, patent applications and technological innovations. Thanks to the excellent levels of expertise and competitiveness, joint success at the Saarland Informatics Campus is guaranteed.
Die Nutzung von hier veröffentlichten Informationen zur Eigeninformation und redaktionellen Weiterverarbeitung ist in der Regel kostenfrei. Bitte klären Sie vor einer Weiterverwendung urheberrechtliche Fragen mit dem angegebenen Herausgeber. Bei Veröffentlichung senden Sie bitte ein Belegexemplar an firstname.lastname@example.org.