Hola,
¿eres nuevo aquí?

Regístrate gratis y conecta tu empresa con financiación pública, partners y proyectos.

Tengo cuenta

Regístrate

Ver video

CIRCUS

Financiado

Cerrado

An end to end verification architecture for building Certified Implementations o...

An end to end verification architecture for building Certified Implementations of Robust Cryptographically Secure web applications The security of modern web applications depends on a variety of critical components including cryptographic libraries, Transport Layer Security (TLS), browser security mechanisms, and single sign-on protocols. Although these compo... ver más

31/03/2021

INRIA

2M€

Presupuesto del proyecto: 2M€

Líder del proyecto

INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQU... No se ha especificado una descripción o un objeto social para esta compañía.

TRL 4-5

Fecha límite participación Sin fecha límite de participación.

Ver 2 Participantes

Financiación concedida El organismo H2020 notifico la concesión del proyecto el día 2021-03-31

ERC-CoG-2015: ERC Consolidator Grant

I+D

Cerrada hace 9 años

0% 100% 100%

Información adicional privada

No hay información privada compartida para este proyecto. Habla con el coordinador.

2 Participantes

INRIA

1.89M€ | Lider

MUEBLES J. MARIN

216.90K€ | Participante

Proyectos interesantes

END2ENDSECURITY

Cybersecurity

Software

1M€ Cerrado

REWORC

Cybersecurity

Software

2M€ Cerrado

BRiCPT

Cybersecurity

Software

1M€ Cerrado

PROSECURE

Cybersecurity

Software

1M€ Cerrado

SoBaSyC

Cybersecurity

Software

2M€ Cerrado

SYNEIDIS I D EN CIBERSEGURIDAD ORIENTADA A...

Cybersecurity

Software

350K€ Cerrado

Conecta tu I+D

¿Tienes un proyecto y buscas un partner? Gracias a nuestro motor inteligente podemos recomendarte los mejores socios y ponerte en contacto con ellos. Te lo explicamos en este video

Duración del proyecto: 60 meses Fecha Inicio: 2016-03-27
Fecha Fin: 2021-03-31

Líder del proyecto

INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQU... No se ha especificado una descripción o un objeto social para esta compañía.

TRL 4-5

Presupuesto del proyecto 2M€

Fecha límite de participación Sin fecha límite de participación.

Descripción del proyecto The security of modern web applications depends on a variety of critical components including cryptographic libraries, Transport Layer Security (TLS), browser security mechanisms, and single sign-on protocols. Although these components are widely used, their security guarantees remain poorly understood, leading to subtle bugs and frequent attacks. Rather than fixing one attack at a time, we advocate the use of formal security verification to identify and eliminate entire classes of vulnerabilities in one go. With the aid of my ERC starting grant, I have built a team that has already achieved landmark results in this direction. We built the first TLS implementation with a cryptographic proof of security. We discovered high-profile vulnerabilities such as the recent Triple Handshake and FREAK attacks, both of which triggered critical security updates to all major web browsers and TLS libraries. So far, our security theorems only apply to carefully-written standalone reference implementations. CIRCUS proposes to take on the next great challenge: verifying the end-to-end security of web applications running in mainstream software. The key idea is to identify the core security components of web browsers and servers and replace them by rigorously verified components that offer the same functionality but with robust security guarantees. Our goal is ambitious and there are many challenges to overcome, but we believe this is an opportune time for this proposal. In response to the Snowden reports, many cryptographic libraries and protocols are currently being audited and redesigned. Standards bodies and software developers are inviting researchers to help analyse their designs and code. Responding to their call requires a team of researchers who are willing to deal with the messy details of nascent standards and legacy code, and at the same time prove strong security theorems based on precise cryptographic assumptions. We are able, we are willing, and the time is now.

Conecta tu I+D

Entra hoy

¿Olvidé mi contraseña?

Financiación

Empresas

CTIs/Universidades

Proyectos

Investigadores