NESSOS - D9.2: Initial solutions for security assurance for services

The main objective of this work package is to enable assurance in the development of software-based services in order to increase confidence in their security. The core goal is to incept a transverse methodology that enables to manage assurance throughout the software development life cycle (SDLC). Our research is divided into two main sub-domains: early assurance at the level of requirements, architecture and design using techniques such as refinement and model checking and complementary implementation-based assurance techniques such as testing and runtime verification. This deliverable summarizes the results obtained during the first year of the project. We cover most of the tasks and activities of the work package and address the majority of the challenges set out in the preceding deliverable about the state-of-the-art in assurance for services. Building on this state-of-theart, we have obtained a wide range of strong results and we were able to produce a number of highrated publications, most notably in the areas of refinement, model checking, testing and debugging, and runtime verification.