Anthropic proves security properties in 123 open-source libraries with Claude
Summary
In a groundbreaking initiative, researchers have utilized the AI model Claude to achieve formal verification of security properties in over 123 real-world open-source software libraries, significantly speeding up the verification process that historically required years of expert effort. This project, conducted in collaboration with Theorem, represents a substantial shift in the scalability of formal verification, now allowing such proofs to be generated at the assembly level in just weeks. Moreover, the process has revealed latent bugs in mature and extensively tested libraries that traditional methods had overlooked, thereby enhancing the overall security of software development. The effort also demonstrates that sharing formal models and proof components across various projects can reduce repetitive work, suggesting a promising future for the integration of AI in securing software.