SBIR Phase I: Automated Safety/Security Compliance Verification and Enforcement for Autonomous Vehicle Software

这个小型企业创新研究(SBIR)第一阶段项目的更广泛影响是扩大自动驾驶汽车(AV)的采用。该项目将为反病毒软件领域定制程序分析，以实现自动化的安全/安保合规性验证和执行。这个小型企业创新研究(SBIR)第一阶段项目建议利用新颖的静态程序分析和正式验证技术以及运行时安全/安全强制执行来补充现有的反病毒软件测试，并使用两项主要技术：i)纠正安全合规性问题并执行用户可配置的安全要求；ii)检测和缓解常见的安全漏洞。考虑到安全规则或漏洞模式的输入，所提出的技术将在合规性验证中提供零误判的强有力保证。这意味着，一旦验证了规则或安全属性的合规性，就可以保证软件中不存在违反该规则或安全属性的行为。该裁决反映了NSF的法定使命，并已通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The broader impact of this Small Business Innovation Research (SBIR) Phase I project is to broaden autonomous vehicles (AV) adoption. This project will customize program analysis for the AV software domain to achieve automated safety/security compliance verification and enforcement. This Small Business Innovation Research (SBIR) Phase I project proposes to leverage novel static program analysis and formal verification techniques along with runtime safety/security enforcement to complement existing AV software testing with two major technologies to: i) correct safety compliance issues and enforce user-configurable safety requirements, ii) detect and mitigate common security vulnerabilities. Given the input of safety rules or vulnerability patterns, the proposed technology will provide strong guarantees of zero false negatives in compliance verification. This means that once compliance of a rule or security property is verified, it is guaranteed that no violations of that rule or security property exist in the software.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.