Recognize and avoid weak points directly in the development process: This is what the KoTeBi test suite is designed to do. Developers can use the tool to ensure that the security implementation they are using is actually secure. The project has reached an important milestone: the development of the core functionalities has been completed and a first version has been published. We are now looking for interested companies who would like to test our software.
The most important security standard for ensuring the security of computer-based communication is TLS: TLS stands for Transport Layer Security and is a cryptographic protocol for securing IT communication. The aim of the KoTeBi project (combinatorial testing of TLS libraries) is to identify and avoid vulnerabilities during programming. To this end, the project partners have researched methods for the automatic detection of security vulnerabilities, which result primarily from the combination of various protocol parameters. Based on these methods, a test suite was developed that automatically checks TLS implementations for errors.
Milestone meeting in July in Paderborn: tool is ready for validation - interested companies can join in
The core functionalities of the test suite are functional and a first version can already be used. The validation phase of the project has now begun. To this end, the project participants are looking for partners who would like to test the tool. In workshops or individual appointments, companies can find out how the test suite is used, why it is so important and how the evaluation works. In addition to software developers, non-technical employees and decision-makers are also welcome to get to know the tool. Interested parties can contact Dr. Simon Oberthür from SICP - Software Innovation Campus Paderborn or Ovidiu Ursachi from InnoZent OWL e.V. (contact information see below). (See below for contact information)
Why is the test suite so important and what is its innovative power?
The test suite is intended to enable software developers to test their own implementation for security and to build up new expertise in the field of TLS. Previous products only offer limited tests and no approach for combinatorial testing. The novelty of the KoTeBi solution approach is that combinatorial testing achieves a greater depth of testing and potentially uncovers more problems.
The open source framework TLS-Attacker, which was jointly developed by the University of Paderborn, Ruhr University Bochum and Hackmanit GmbH in the context of the SICP, is used as the basis for the test suite. Requirements are contributed by the cooperation partners and via the InnoZent OWL e.V. technology network.
Next project steps: validating the test suite and establishing new workshop formats
Until the final release of the test suite, the project partners are now collecting feedback and requirements from software developers and taking these into account when “fine-tuning” the software and improving usability.
One challenge is to bring the project closer to non-technical people and decision-makers in companies. To this end, the InnoZent OWL e.V. technology network is working on establishing new workshop formats. The focus will be less on theory and more on practice. Questions on the use of the tool and the evaluation of test results will be addressed.
Register now for the next KoTeBi workshop
Interested parties can register for our next online workshop on 19.09.2024 from 4 to 6 pm:
During this non-technical workshop, the KoTeBi project team will present why you should specifically look into TLS for your company.
You can register here: https://forms.office.com/e/hBQUYcdd5V
You can find further information at: https://www.kotebi.de/
Are you interested in getting to know and testing the tool outside of our workshops? Then get in touch with us!
Dr. Simon Oberthür, Head of Digital Sovereignty Innovation, oberthuer@sicp.uni-paderborn.de, +49 151 61 48 91 33
Ovidiu Ursachi, IT Security, Artificial Intelligence, InnoZent OWL e.v., oursachi@innozentowl.de, +49 5251 2055 - 900
