AVSV
Automatic Vulnerability Scanning and Verification

Software is an indispensable part of our lives today. Vulnerable software poses high security risks and is one of the greatest challenges in the field of IT security.

The research area AVSV in ATHENE is working on effective, novel methods and tools for an automated vulnerability search in software and is developing solutions with which gaps in complex systems can be detected and as much detailed information as possible about the individual vulnerabilities can be provided.


more info

VUSC - the code scanner

VUSC finds security vulnerabilities, gives a generally understandable description of the problem for each vulnerability and automatically creates a classification of the vulnerabilities.

more info

Highlight Talk

The talk gives an overview of the research work in AVSV.

go to talk on youtube

Accepted Papers

We present our research results at high-profile conferences in front of an inter­national audience.

more info

Team

Dr.-Ing. Steven Arzt
Coordinator AVSV
Fraunhofer SIT
E-Mail

Projectcoordinator:

  • Automatic Vulnerability Scanner for Mobile Applications
  • Automatic Vulnerability Verification

 

Prof. Dr. Iryna Gurevych
TU Darmstadt
E-Mail

Project: Code transformers and knowledge graphs for ​vulnerability detection

 

 

Dr. Jens Heider
Fraunhofer SIT
E-Mail

Projectcoordinator: 

  • Cross-Language Data Flow Detection and Analysis for iOS Binaries (XDaFlowD)

Prof. Dr.-Ing. Jörn Kohlhammer
Fraunhofer IGD
E-Mail

Projectcoordinator: 

  • User-centric visualization of security problems

Prof. Dr. Kristian Kersting
TU Darmstadt
E-Mail

Projectcoordinator: 

  • Machine Learning for Vulnerability Detection

Project: Code transformers and knowledge graphs for ​vulnerability detection

Prof. Dr.-Ing. Mira Mezini
TU Darmstadt
E-Mail

Projectcoordinator: 

  • Vulnerability Detection for Hybrid Apps using Generic Analyses
  • Further development of the CogniCrypt Assistant to ensure the correct use of crypto libraries
  • Code transformers and knowledge graphs for ​vulnerability detection

Dr. Philipp Holzinger
Fraunhofer SIT
Project: Automatic Vulnerability Verification

Steven Lamarr Reynolds-Ringer, M. Sc.
Fraunhofer IGD
Project: User-centric visualization of security problems

Dr. Marc Miltenberger
Fraunhofer SIT
Projects:Asset-Driven Vulnerability Analysis with AI (VulnAssetAI), Enhanced Vulnerability Detection

 

Dr. Krishna Narasimhan
TU Darmstadt
Project: Code transformers and knowledge graphs for vulnerability detection

Markus Toran, M.Sc. 
Fraunhofer SIT
Projects: Asset-Driven Vulnerability Analysis with AI (VulnAssetAI), Enhanced Vulnerability Detection 

Dipl.-Inf. Jonas Zabel, M.Sc. 
Fraunhofer SIT
Project: Hybrid Fuzzing for Apps and Web Applications

 

PhD Theses

We accompany our researchers on their way to a successful doctorate.

So far, the following have completed their doctorates with us:

Dominik Helm
TU Darmstadt, doctorates 2023
Modular Collaborative Program Analysis

Michael Reif
TU Darmstadt, doctorates 2021
Novel Approaches to Systematically Evaluating and Constructing Call Graphs for Java Software

Leo Glanz
TU Darmstadt, doctorates 2020
Automatic Identification and Recovery of Obfuscated Android Apps

Philipp Holzinger
Fraunhofer SIT, doctorates 2019
A systematic analysis and hardening of the Java security architecture

 

Doctorates

Here is an overview of the scientists who have received their PhDs from our team so far.

To the persons