WP3 – Vulnerabilities Management
Coordinated by
GRAD (M01-M30)
Objective
This work package has the following objectives:
- Analyze the state of the art to incorporate the latest advances in detection, forecasting and propagation of vulnerabilities
- Compile a representative dataset of software vulnerabilities, taking into account the data provided by BIECO’s use cases as well as from other public sources, and select the most representative features for an effective vulnerability detection process.
- Provide advanced tools to detect and forecast accurately vulnerabilities in ICT systems and components.
- Provide an advanced tool to analyze the propagation of vulnerabilities across the ICT supply chain.
Deliverables
- D3.1 Report on the state of the art of vulnerability management WP3 (5 – GRADIANT) Report Public M6
- D3.2 Dataset with software vulnerabilities WP3 (4 – UTC) Other Confidential, only for members of the consortium (including the Commission Services) M12
- D3.3 Report of the tools for vulnerability detection and forecasting WP3 (5 – GRADIANT) Report Public M18
- D3.4 Report of the tools for vulnerabilities propagation WP3 (5 – GRADIANT) Report Public M21
- D3.5 Updated Report of the tools for vulnerability detection and forecasting WP3 (5 – GRADIANT) Report Public M30
- D3.6 Updated Report of the tools for vulnerabilities propagation WP3 (5 – GRADIANT) Report Public M30
Outcomes
WP8 monthly meeting
BIECO WP8 monthly meetingThe 9th of November 2021, the monthly meeting for Work Package 8 was held. It was a great meeting, with lots of clarifications, where some low and high-level aspects of the platform were discussed and agreed upon..
On Autonomous Dynamic Software Ecosystems
The Journal paper "On Autonomous Dynamic Software Ecosystems" co-authored together with experts in the field of architecture has been accepted in the journal of IEEE Transactions on Engineering Management. Document type: Article DOI: 10.1109/tem.2021.3116873...
WP6 monthly meeting M15
The 8th November took place the WP6 monthly meeting. In the meeting, 7Bulls updated on their status regarding T6.4, Fraunhofer IESE updated regarding the status of T6.3, IESE provided an allocation for deliverable sections, CNR provided updates regarding their...
ISSRE, within the joint IWSF&SHIFT
The 5th International Workshop on Software Faults& The 3rd Annual International Workshop on Software Hardware Interaction FaultsThe goal of the joint 5th International Workshop on Software Faults (IWSF) and 3rd Annual International Workshop on Software Hardware...
WP7 monthly meeting M14
The 25th October took place the WP7 monthly meeting. We focused on the definition of the different steps needed to evaluate and certificate the security of a system.
Monthly WP3 meeting
BIECO WP3The monthly meeting of Wp3 took place on October 25, where the latest progress as well as the future actions of the WP were updated. The discussions were centered on both T3.3 and T3.4 tasks, which focus on detecting the vulnerabilities in the source code, as...