Intelligent Methods for
Detection of Software Backdoors

Project IVAN

The research project IVAN is concerned with developing novel methods for detecting backdoors in software. As part of the project, we aim at bringing together concepts from computer security, program analysis, and machine learning to automatically identify unusual structures in code. The project will give rise to novel approaches for spotting backdoors, such as manipulated authentication, illegitimate control flows and elevated privileges. While the general detection of backdoors is an unsolvable (undecidable) problem, we are optimistic to raise the bar for adversaries to slip their code into legitimate software.


Further Information

The project officially started in April 2020 and ended in December 2023. It was funded by the German Federal Ministry of Education and Research. The project consortium consists of SAP Security Research and TU Braunschweig. Additional information are available in German on the corresponding webpage of the German Federal Ministry of Education and Research (BMBF).


SAP Security Research

Over the past 48 years, SAP SE has grown to become the world's leading provider of business software solutions and the world's third-largest independent software supplier, overall. SAP Security Research serves as a security thought leader at SAP, constantly transforming SAP by improving security. The group collaborates with universities in cutting-edge scientific research and looks for ways to refine and adapt methodologies and technology concepts and finally apply them to fulfill industrial needs.


TU Braunschweig

The TU Braunschweig was founded in 1745 and belongs to the TU9, the nine leading technical-oriented universities in Germany. The Institute of System Security at TU Braunschweig conducts research on computer and network security, including the detection of attacks, the analysis of malicious code, and the discovery of vulnerabilities. A special emphasis is put on the combination of computer security and machine learning, which allows for developing security systems that learn from data and adapt to changing threats.




Dr. Martin Härterich
Email: martin.haerterich@sap.com
Phone: +49 6227 7 47474

Dietmar-Hopp Allee 16
69190 Walldorf