The Institute of Software Security provides a dynamic and multidisciplinary research environment with the aim of creating new fundamental knowledge through innovation. Our research covers a wide range of activities related to the design and implementation of secure and privacy-friendly applications, particularly in the realms of micro-services, IoT ecosystems, and cyber-physical systems.
The overall mission of the institute is to build round-trip security & privacy engineering methods, which are based on lightweight design models and connect the design models with the implementation code, in the context of fast-paced, continuous, and decentralized development ecosystems. In this research agenda, an important role is played by the use of ML/AI, as well as the adoption of other emerging trends, like dev-bots, i.e., security-oriented intelligent agents that seamlessly collaborate with human developers.
The work at the institute is also characterized by the systematic use of empirical methods for security and privacy, including controlled experiments and mining software repositories.
