Advanced Software Tools for JavaScript Developers
PAWTOOLS aims to commercialize novel program analysis techniques for JavaScript, enhancing security and stability in software development by automating library dependency management.
Projectdetails
Introduction
Modern web-based software uses the JavaScript programming language together with the Node.js framework and extensively relies on freely available third-party software libraries that provide common functionality. These libraries are continuously improved, and new versions are released frequently.
Importance of Library Reuse
This massive reuse of libraries is essential to the productivity of software developers. However, the dependence on other people's libraries opens the door to security vulnerabilities and programming errors that may have severe consequences for the applications and end users.
Challenges Faced by Developers
With current technology, it is extremely difficult for software developers to:
- Adapt programs to breaking changes in libraries.
- Avoid unintended breaking changes.
- Investigate the possible consequences of security vulnerabilities in libraries.
Project Overview
The ERC project PAW has delivered a range of novel program analysis techniques that can help JavaScript programmers by automating these complex tasks. The analysis techniques have been implemented as prototype software tools, and preliminary experimental results have demonstrated that they are effective on real-world software.
Future Directions
The proposed project, PAWTOOLS, aims to explore the commercial and innovative aspects of these scientific results by:
- Further developing the prototype tools into commercial products.
- Performing more extensive evaluations of their effectiveness.
- Engaging with potential users and industry partners.
Financiële details & Tijdlijn
Financiële details
Subsidiebedrag | € 150.000 |
Totale projectbegroting | € 150.000 |
Tijdlijn
Startdatum | 1-5-2022 |
Einddatum | 31-10-2023 |
Subsidiejaar | 2022 |
Partners & Locaties
Projectpartners
- AARHUS UNIVERSITETpenvoerder
Land(en)
Geen landeninformatie beschikbaar
Vergelijkbare projecten binnen European Research Council
Project | Regeling | Bedrag | Jaar | Actie |
---|---|---|---|---|
Vulnerability Exposure Analysis for JavaScriptPAWJAM aims to commercialize the JAM tool, enhancing JavaScript vulnerability analysis by pinpointing library usage, enabling developers to mitigate security risks effectively. | ERC Proof of... | € 150.000 | 2023 | Details |
Self-Optimizing Static Program AnalysisSOSA aims to revolutionize static program analysis by creating self-adaptive analyses that optimize performance and precision, enhancing software security and developer efficiency. | ERC Advanced... | € 2.500.000 | 2024 | Details |
Resilient and Sustainable Software SecurityThe RS³ project aims to enhance software security by developing resilient and sustainable countermeasures through innovative testing, secure compilers, attack mitigation, and hardware improvements. | ERC Consolid... | € 1.998.851 | 2023 | Details |
Realizing the benefits of safety-security co-analysis through effective tool supportRUBICON aims to develop a proof-of-concept software tool for integrated safety-security risk analysis in technology, enhancing decision-making through advanced algorithms and multi-objective optimization. | ERC Proof of... | € 150.000 | 2024 | Details |
Practical, Learning-Based Tools for Finding and Fixing BugsBugGPT aims to develop practical AI-based tools for automatically finding and fixing software bugs, enhancing efficiency in the software development process and paving the way for a commercial product. | ERC Proof of... | € 150.000 | 2024 | Details |
Vulnerability Exposure Analysis for JavaScript
PAWJAM aims to commercialize the JAM tool, enhancing JavaScript vulnerability analysis by pinpointing library usage, enabling developers to mitigate security risks effectively.
Self-Optimizing Static Program Analysis
SOSA aims to revolutionize static program analysis by creating self-adaptive analyses that optimize performance and precision, enhancing software security and developer efficiency.
Resilient and Sustainable Software Security
The RS³ project aims to enhance software security by developing resilient and sustainable countermeasures through innovative testing, secure compilers, attack mitigation, and hardware improvements.
Realizing the benefits of safety-security co-analysis through effective tool support
RUBICON aims to develop a proof-of-concept software tool for integrated safety-security risk analysis in technology, enhancing decision-making through advanced algorithms and multi-objective optimization.
Practical, Learning-Based Tools for Finding and Fixing Bugs
BugGPT aims to develop practical AI-based tools for automatically finding and fixing software bugs, enhancing efficiency in the software development process and paving the way for a commercial product.
Vergelijkbare projecten uit andere regelingen
Project | Regeling | Bedrag | Jaar | Actie |
---|---|---|---|---|
Protecting modern open-source web applicationsThe project aims to enhance website security by integrating independent security researchers with automated virtual patching technology to protect against open-source code vulnerabilities. | EIC Accelerator | € 1.904.000 | 2022 | Details |
Ontwikkeling Platform onafhankelijke Development toolHet project onderzoekt de haalbaarheid van een tool die ontwikkelaars helpt om de structuur van applicaties platformonafhankelijk te analyseren en te verbeteren voor robuustheid en cyberveiligheid. | Mkb-innovati... | € 20.000 | 2020 | Details |
Secure “Annex K” software library voor de security marktSolid Sands onderzoekt de haalbaarheid van een Secure Annex K software library voor de security markt, met een focus op technische en economische aspecten, met een budget van 50.100 EUR. | Mkb-innovati... | € 20.000 | 2020 | Details |
Situational Awareness Software (SAS)Het Situational Awareness Software-project verbetert de detectie van onveiligheden met machine learning, waardoor politieteams proactief kunnen handelen en de veiligheid in Nederland toeneemt, met aandacht voor privacy en toegankelijkheid. | Mkb-innovati... | € 238.140 | 2021 | Details |
De ontwikkeling van een unieke C++ software integration botOntwikkeling van een software-integratiebot voor autonoom genereren en testen van de snelste C++ programma's en validatie van de bijbehorende library code in stream processing systemen. | Mkb-innovati... | € 187.500 | 2018 | Details |
Protecting modern open-source web applications
The project aims to enhance website security by integrating independent security researchers with automated virtual patching technology to protect against open-source code vulnerabilities.
Ontwikkeling Platform onafhankelijke Development tool
Het project onderzoekt de haalbaarheid van een tool die ontwikkelaars helpt om de structuur van applicaties platformonafhankelijk te analyseren en te verbeteren voor robuustheid en cyberveiligheid.
Secure “Annex K” software library voor de security markt
Solid Sands onderzoekt de haalbaarheid van een Secure Annex K software library voor de security markt, met een focus op technische en economische aspecten, met een budget van 50.100 EUR.
Situational Awareness Software (SAS)
Het Situational Awareness Software-project verbetert de detectie van onveiligheden met machine learning, waardoor politieteams proactief kunnen handelen en de veiligheid in Nederland toeneemt, met aandacht voor privacy en toegankelijkheid.
De ontwikkeling van een unieke C++ software integration bot
Ontwikkeling van een software-integratiebot voor autonoom genereren en testen van de snelste C++ programma's en validatie van de bijbehorende library code in stream processing systemen.