pad

pad

pad

Next-Generation Software Assurance

AssuranceLabs Inc. develops and markets next-generation software and services to assure that software systems perform as specified. This capability can provide substantial benefits for functional verification, cyber security analysis, and enterprise risk reduction at scale. The technology is unique, is based on years of research, and has strong IP protection.

The objective of this assurance technology is complete mathematics-based verification of source code. No gaps, no heuristics, no approximations. Nothing left out.

AssuranceLabs' next-generation software assurance addresses a multi-billion dollar global market spanning commercial and government organizations that develop and use software. Use-cases include:

  • Software Development and Testing

  • AI/ML/DNN Validation

  • Malware Detection and Analysis

  • Forensic Analysis

  • Supply Chain and Open-Source Validation

  • Reverse Engineering

  • Maintenance and Evolution

Function Extraction Technology

Traditional software assurance depends largely on testing, which, no matter how extensive, can exercise only a fraction of possible paths in code, and those only partially. The result can be untested functionality and potential risk that can result in software failures and breaches despite best efforts.

AssuranceLabs is working with a leading university to develop its Function Extraction™ product that computes the full behavior of software for precise verification of functionality and detection of malicious content. This technology extracts the entire domain-to-range functionality of behaviors in code, essentially producing its as-built specification. Most current testing and analysis tools cannot do this. Function Extraction™ provides an answer to the simple question, “What does your software do?” in all circumstances of use. The technology can be applied to any source language and any application domain. A single Function Extraction™ run can provide more information about product quality than a large number of test runs.

A critical breakthrough is extracting the precise functionality of loops, a problem that has resisted practical solution despite decades of research. Most analysis tools simply unroll loops once or twice as an approximation of behavior that is guaranteed to be suspect. Computation of loop functionality has been the missing ingredient that enables a new level of precision and rigor in software assurance.

This technology is based on the mathematical foundations of invariant relations, embodied in new theorems and algorithms that can automatically compute the full behavior of software.

pad

pad

pad

The Enterprise Value of Reduced Risk

The enterprise value of Function Extraction™ lies in reduced risk through precise, automated software assurance achieved with less cost and effort. Validation of intended functionality and security properties can detect and eliminate sources of risk before they become known through unanticipated events. Knowing the full behavior of software means increased security and resiliency for government and commercial systems of all kinds.

Computed behavior is a Digital Twin of the code. It is a precise definition of behavior that supports informed maintenance and evolution, and reduces technical debt. Code paired with its computed behavior is more valuable than code alone.

AssuranceLabs is seeking partners to collaborate in evolution and deployment of its next- generation Function Extraction™ software assurance platform.

pad

pad

pad

Program Correctness in Software Engineering Education

Typical computer science curricula defines programmer education in three broad steps: years one and two, introduction to programming concepts; years two and three, algorithms, data structures, and discrete mathematics; years three and four, programming language concepts and semantics, and (possibly) an introduction to program verification.

Thus, students are generally taught how to write programs before being taught how to write correct programs, or even what a correct program is. Software engineering is the only engineering discipline burdened by this educational paradox.

Function Extraction™ can help students specify and verify programs as they are written. It is easy to imagine a student starting a session with a vaguely formulated specification and an incorrect program, and concluding the session with a valid specification and a correct program. Instilling program verification principles will serve students well over their entire professional careers.

pad

pad

pad

pad

pad

Company Information

AssuranceLabs, Inc. was founded in 2021 by experienced computer scientists and entrepreneurs to fully commercialize this opportunity. The company owns all rights to the technology and patents pending based on the solution.

AssuranceLabs is seeking enterprise clients and partners to collaborate in the evolution and deployment of its next-generation Function Extraction™ software assurance platform.

For more information about AssuranceLabs and its offerings, please contact us at: info@assurancelabs.tech