LAZARUS

LAZARUS (pLatform for Analysis of Resilient and secUre Software) is a three-year research and innovation project that aims to heal many of the security issues that befall modern software during its development life cycle. The recently introduced paradigm of DevSecOps - in medium to large companies - unfortunately, lacks automated security tools, while most existing solutions are targeting only one narrow step of the SDLC process but miss a much-needed holistic overview of the global security solution. LAZARUS innovates by intervening in multiple steps of the SDLC, performing targeted security checks and collecting valuable information and intelligence from each step, and exploiting advanced ML and AI methods to convert this intelligence into actionable insights and recommendations. The main innovations of LAZARUS are illustrated in the figure below. Moreover, we provide advanced features for developers, that employing our tools would be able to deploy more intelligent and distributed solutions through dedicated APIs. LAZARUS follows an open-source approach for the core functionality, which is supported by a realistic and viable business model for the sustainability and further exploitation of the project after it reaches the end of this financing phase.

Standards development and liaisons, conformity assessment/assurance, harmonisation  (M9 – M36)

This task will champion and manage the development of standards in the context of the project. To this end, this task will be responsible for the project’s relationships and liaisons with standardisation organisations (in particular European Standards Organisations such as CEN/CENELEC and ETSI), including direct participation of the project’s partner representatives in the appropriate Working Groups and Technical Committees to facilitate the uptake of methodologies developed by the project by the SDO consensus process and leading to eventual publication. The standardisation process will be developed in synergy with dissemination activities, in order to enable the widest participatory stakeholder engagement. The aim is to provide schemes of harmonisation that meet the demands and needs of people as an inherent aspect of standardisation.

Reason for applying to HSbooster.eu services

The project is applying for the Standardisation Booster service to ensure that the innovative methodologies developed by the Lazarus Project are integrated into widely accepted European and international standards. The project aims to address security vulnerabilities across the entire Software Development Life Cycle (SDLC) by introducing automated, comprehensive security solutions. By aligning our efforts with established standardisation bodies such as CEN/CENELEC and ETSI, they can enhance the visibility, credibility, and adoption of their security innovations.

The HSBooster services can best help them achieve our standards-related goals by providing expert guidance and support in engaging with relevant standardisation organisations. Their consultancy will facilitate their participation in key Working Groups and Technical Committees, ensuring their methodologies are thoroughly vetted and adopted through the SDO consensus process. This strategic engagement will not only streamline the standardisation process but also ensure that their solutions meet the industry's highest standards for security and resilience.

Moreover, HSBooster's support will enhance our dissemination activities, enabling them to effectively communicate their project's outcomes to a broad range of stakeholders. By harmonising their standardisation efforts with their dissemination strategy, we can foster wide participatory stakeholder engagement, ensuring that the Lazarus Project's contributions to software security are recognised and implemented across the industry. This comprehensive approach will ultimately help them achieve long-term sustainability and impact for their innovative security solutions.