NSF Safe-OSE: Implementing Artificial Intelligence (AI)-Enabled Vulnerability Management Practices to Enhance Safety and Security of Open-Source Cloud Computing Ecosystems

NSF Award Search · 01002526DB NSF RESEARCH & RELATED ACTIVIT · $1,500,000 · view on nsf.gov ↗

Abstract

This Safety, Security, and Privacy of Open-Source Ecosystems (Safe-OSE) project aims to make important research tools in the cloud safer from cyber threats by using artificial intelligence (AI) to detect and fix software vulnerabilities. The project focuses on two widely used open-source platforms: Jetstream Cloud, which helps researchers build secure cloud systems, and Exosphere, which provides an easy-to-use interface for accessing cloud resources. The project scans both platforms for security issues, uses AI to analyze and reduce risks, and builds tools to help users understand and address potential problems. By improving the safety and reliability of these tools, the project supports researchers, cloud operators, and broader scientific communities, helping the U.S. maintain leadership in secure cloud computing. The Safe-OSE project executes three inter-related activities to help national cloud services overcome the wide-range of software vulnerabilities that can threaten their security posture. First, extensive vulnerability scanning is conducted on Jetstream Cloud OSE, Exosphere OSE, and user-defined virtual machines, containers, infrastructure as code, and code repositories on Jetstream2. Second, reinforcement learning and large language model-based vulnerability management methods suggest alternatives for vulnerable software components and generate vulnerability-minimizing software. The AI-enabled vulnerability management information helps overcome challenges with e

Key facts

NSF award ID
2533181
Awardee
Indiana University (IN)
SAM.gov UEI
YH86RTW2YVJ4
PI
Bradley C Wheeler
Primary program
01002526DB NSF RESEARCH & RELATED ACTIVIT
All programs
ARTIFICIAL INTELL & COGNIT SCI, Cyber Secur - Cyberinfrastruc, Software Services and Applications
Estimated total
$1,500,000
Funds obligated
$1,500,000
Transaction type
Cooperative Agreement
Period
10/01/2025 → 09/30/2027