About

Due to the widespread adoption of open-source software development, software vulnerabilities can spread rapidly, especially through widely-used third-party packages. This provides opportunities for attackers to inject malicious code into public open-source libraries or software updates. As a result, downstream software customers may unknowingly incorporate the malicious code into their products, making them susceptible to supply chain attacks.

TRUSTED research project, funded by EPSRC, aims to propose solutions and techniques with formal foundations to develop secure open-source software. This research project will leverage the concept of security summaries to control information flow in large-scale software applications through reliable and sound methods, ensuring the safe and transparent release and reuse of software artifacts.