Security throughout the SDLC
Follow security from intent to deployment.
How can AI keep security requirements connected to the software that is designed, built and deployed?
A security decision made during design can be lost as code, dependencies and deployment settings change. This exploratory area considers AI assistance throughout the software development life cycle: identifying requirements, checking implementation, reviewing delivery pipelines and connecting runtime observations back to development. Each decision should remain traceable to evidence that a developer can inspect.
Research areas
Translate security requirements and threat models into review questions, implementation checks and targeted tests.
Trace the effects of changes across source code, dependencies, build configuration and deployment permissions.
Investigate AI-assisted review of software supply chains and CI/CD pipelines, including the evidence behind a release decision.
Connect runtime findings to the relevant code and design assumptions so that security feedback can guide the next change.
Publications & related resources
Projects, publications and research materials will be added here.
Contribute to this research.
Explore student research, internships and collaboration with the lab.