AuVeGoS

Autonomous Analysis and Verification of Distributed e-Government Systems

AuVeGoS develops a software framework for automated security analysis of e-Government systems. The developed solution aims at the identification and elimination of potential exploitation of the vulnerabilities in the computing and network infrastructure.

Motivation and Goals

The project “AuVeGoS” develops a framework for autonomous analysis and verification of e-government systems, to ensure security, availability and service quality. For this purpose, e-government service architectures are analyzed for vulnerabilities and measures for improvement of the security configuration are implemented. An instrument for this will be the connection to a simulation environment that will be integrated into the process of decision making.

The AuVeGoS framework is composed of:

— Components for extraction of security relevant information from standardized public vulnerability databases 

— Components for distributed data analysis of the extracted information and creation of attack graphs 

— Components for simulation based evaluation of possible mitigation strategies 

— A decision support system component The focus of AuVeGoS is the preventive identification and elimination of potential exploitation opportunities based on vulnerabilities identified in the infrastructure´s configuration to be protected.

RUN-TIME

From 01.06.2013 to 31.05.2016

KEYWORDS

IT-Security, analysis and scanning of services, preventive identification and elimination of vulnerabilities of an infrastructure

CONTACT

Bianca Scheibel
E-MAIL Bianca.Scheibel@gt-arc.com