security research projects eu research secure eu research for …€¦ · it aims to develop a...

24
Migration and Home Affairs SECURE Security Research Projects under the Horizon 2020 Programme for Research and Innovation Infrastructure protection and protection of public spaces 2018 EU Research for a Society

Upload: others

Post on 18-Aug-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

Migration and Home Aff airs

SECURESecurity Research Projectsunder the Horizon 2020 Programme for Research and Innovation

Security Research Projectsunder the Horizon 2020 Programme for Research and Innovation

EU Research for a Secure Society

Further information available at: http://ec.europa.eu/dgs/home-aff airs/what-we-do/policies/industry-for-security/index_en.htm http://ec.europa.eu/dgs/home-aff airs/fi nancing/fundings/research-for-security/index_en.htm

Infrastructure protection and protection of public spaces2018

EU Researchfor a

Society

Page 2: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

Manuscript completed in 2018 The European Commission is not liable for any consequence stemming from the reuse of this publication. Luxembourg: Publications Offi ce of the European Union, 2019 © European Union, 2019Reuse is authorised provided the source is acknowledged.The reuse policy of European Commission documents is regulated by Decision 2011/833/EU (OJ L 330, 14.12.2011, p. 39).For any use or reproduction of photos or other material that is not under the copyright of the European Union, permission must be sought directly from the copyright holders. Print ISBN 978-92-79-98061-9 doi:10.2837/142014 DR-02-17-205-EN-CPDF ISBN 978-92-79-98060-2 doi:10.2837/16339 DR-02-17-205-EN-N Set: DR-02-17-202-EN-Y

INFRASTRUCTURE PROTECTION AND PROTECTION OF PUBLIC SPACESFINSECIMPACTIMPROVERLIQUEFACTRESILENS RESISTORESOLUTESmartResilienceSTOP-ITSUCCESSSAYSO

Page 3: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

4Project objectives

Information

Coordinator

Grant Agreement N°786727Total Cost:€10,194,437.87EU Contribution:€7,817,631.25Starting Date:05/01/2018Duration:36 monthsEnd Date:04/30/2021

GFT Italy SrlEuropean Project UnitVia Sile 18 20139MilanoItalyContactMaurizio FerrarisTel: +39 010 583158Mobile: +39 335 1357094Fax: +39 010 8680479E-mail: [email protected]: http://www.finsec-project.eu/

FINSECIntegrated Framework for Predictive and Collaborative Security of Financial Infrastructures

FINSEC’s objective is to bring together prominent financial institutions and global leaders in physical and IT security, in order to study and develop innovative solutions for the security needs of the financial sector as a whole. It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical) security to enable timely preparation against attacks, while at the same time facilitating stakeholders’ collaboration for risk assessment/mitigation in the financial supply chain, as a means of confronting complex threats and their cascading effects.

Infrastructure Protection and Protection of Public

Spaces

1

Page 4: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workFINSEC will provide a mature implementation of the reference architecture, based on the enhancement and integration of novel solutions of the partners), which will be bundled in a toolbox.

Implementation of the reference architecture and the toolbox will be validated through realistic pilots involving stakeholders in the identification, assessment and mitigation of threats. Its five pilots involve high-impact scenarios that include SWIFT network protection, buildings and ATM networks security, data/text mining, peer-to-peer payments network protection, blockchain systems, risk assessment for insurance purposes and securing financial SMEs.The pilots are expected to involve over 500 security and finance experts, while providing a representative coverage of the financial services industry (i.e. banking, capital management, insurance, card & P2P payments), which is a sound basis for FINSEC’s broader impact. FINSEC will establish an ecosystem of security solutions for the financial sector, which will be supported by the partners’ dense network of sales, marketing, standardisation and regulation channels worldwide.

GFT Italia Srl - (GFT)ATOS Spain S.A. – (ATOS)IBM Israel - Science and Technology Ltd. – (IBM)Fujitsu Technology Solutions GmbH – (Fujitsu)Hewlett Packard Italiana Srl – (HPE)UTI Group – (UTI)Singularlogic Anonymi Etaireia Pliroforiakon Systimaton Kai Efarmogon Pliroforikis – (SiLO)Liberbak S.A. – (LIB)HDI Assicurazioni S.p.A. – (HDI)SIA S.p.A. – (SIA)JRC Capital Management Consultancy & Research GmbH – (JRC)NEXI S.p.A. – (NEXI)WIRECARD Romania SA - (Wirecard)Assentian Limited - (AS)Clear Communication Associates Limited – (CCA)Innov-Acts Limited - (INNOV-ACTS)Zanasi Alessandro S.r.l. – (Z&P)Norsk Regnesentral - (NRS)Consiglio Nazionale delle Ricerche - (CNR)Association O.R.T. – (ORT)Fondazione Bruno Kessler – (FBK)Consorzio Interuniversitario Nazionale per l’Informatica – (CINI)

ItalySpainIsraelGermanyItalyRomaniaGreece

SpainItalyItalyGermanyItalyRomaniaUnited KingdomUnited KingdomCyprusItalyNorwayItalyFranceItalyItaly

Page 5: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

6Project objectives

Information

Coordinator

IMPACTImpact of Cultural aspects in the management of emergencies in public Transport

IMPACT aims to better understand the links between culture, risk perception and disaster management in transport hubs. The objectives of this CSA are to:

- Analyse how emotional, psychological, social and cultural needs, can affect the way certain urban communities prepare, respond, engage in restoration and recover from disaster.

- Anticipate problems and identifying solutions to cultural problems that may arise in the event of an emergency in urban areas, by providing an analysis of existing links between disaster and culture.

- Improve the effectiveness of those who respond to disasters by better meeting the needs of various cultures during disaster relief, thus improving reaction time and reducing fatalities.

- Increase hubs’ preparedness for, and ability to, recover from emergencies.- Provide a framework for improving disaster response policies and practices

by taking into consideration every disaster victim’s cultural and personal uniqueness.

Grant Agreement N° 653383Total Cost € 1 398 912,5EU Contribution € 1 398 912,5Starting Date 01/05/2015Duration 30 monthsEnd Date 31/10/2017Topic DRS-21-2014 Ethical/Societal Dimension topic 2: Better understanding the links between culture, risk perception and disaster management

Deep Blue Srl (DBL)Piazza Buenos Aires 20 I-00198 Rome Italy ContactAlessandra TedeschiTel : +39 0 68 55 52 08 Mobile: +39 34 04 03 76 47 Fax: +39 0 68 55 89 88 E-mail : [email protected] : http://www.impact-csa.eu/

©shutterstock

Infrastructure Protection and Protection of Public

Spaces

3

Page 6: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the work

Proprs / PROUniversity of Leeds / UOLStichting VU-VUMC / VUVisshe Uchilishte Mezhduranoden Kolezh / VUMAnadolu University / AUUrzad Morski W Gdyni / MOGNuovo trasporto Viaggiatori SpA / NTV

United KingdomUnited kingdomThe NetherlandsBulgariaTurkeyPolandItaly

IMPACT is a CSA structured around four general principles:- to be stakeholder-focused in all its phases;- to provide supporting measures that could be easily generalised and reused;- to advance the state of the art in cross-cultural research and improve emergency prevention and management across all European countries;- to validate, disseminate and exploit its outcomes so as to benefit European institutions and public organisations.To achieve these principles, the project is organised in 7 work packages (WPs):WP1 Psycho-Social and Cross-cultural Theoretical Framework of Crowd Behavior and Management states the theoretical basis of the project, integrating cross-cultural socio-psychological studies with crowd analysis and management and operational requirements from the transport domain users.WP2 Behavioral Modelling, Simulations and Results builds the models and software tools that will be used as a basis for the various Supporting Measures developed in: WP3 Cultural Risk Assessment, WP4 Cultural-based Emergency Communication Framework and WP5 Cultural-based Training Framework.WP6 Coordination Initiatives is dedicated to coordination and networking activities with Stakeholders across Europe, to spread of best practices identified during the project and to assess and generalise the research results with them.Finally, one package relates to Dissemination, Communication and Exploitation (WP7) and one is devoted to Project Management (WP8).

IMPACT developed methodologies and solutions for cross-cultural emergency prevention and management. The project’s main result was the IMPACT Theoretical Framework, defined mainly during the project’s first year and which served as a basis for developing its “Agent Based Models”. These models simulated and validated cultural behaviours and cultural-specific communication solutions. They also supported the design and implementation of IMPACT’s supporting measures, namely: – A cultural risk assessment methodology that integrated culturally derived hazards and identified proper cultural-compliant mitigations– Cultural-based emergency communication guidelines whose innovative solutions support public transport operators to improve their communication with passengers via dedicated messages tailored to different cultural groups– A cultural-based training package that introduced the notion of multicultural competence for both public transport operators and first respondersOther relevant project results are the best practices and policy recommendations for intermodal transport hubs and a feasibility study about IMPACT’s supporting measures for other domains of application.

Page 7: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

8Project objectives

Information

Coordinator

Grant Agreement N° 653390 Total Cost € 4 323 978,75 EU Contribution € 4 323 978,75Starting Date 01/06/2015Duration 36 monthsEnd Date 31/05/2018 Topic DRS-07-2014: Crises and disaster resilience – operationalizing resilience concepts

SP Sveriges tekniska forskningsinstitut AB (SP) Department of Fire Research Brinellgatan 4 Box 857 SE-501 15 Borås Sweden ContactDavid LangeTel : + 46 01 05 16 50 00 Mobile: + 46 01 05 16 58 61 E-mail : [email protected] : www.improverproject.eu

IMPROVERImproved risk evaluation and implementation of resilience concepts to critical infrastructure

IMPROVER aims to improve European critical infrastructure resilience to crises and disasters through the implementation of combinations of societal, organisational and technological resilience concepts to real life examples of pan-European significance, including cross-border examples. This implementation will be enabled through the development of a methodology based on risk evaluation techniques and informed by a review of the positive impact of different resilience concepts on critical infrastructures.In order to achieve its overall objective, the project will also address four underlying objectives:1) Improve our understanding of the application and interaction of different

resilience concepts2) Evaluate the baseline requirement of resilience of critical infrastructure 3) Develop a resilience management guideline 4) Perform a pilot implementation of the proposed methodology

Infrastructure Protection and Protection of Public

Spaces

5

Page 8: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workThere are three stages necessary to achieve the projects objectives: first is a survey of available approaches for the definition, implementation and evaluation of resilience concepts to critical infrastructure. The second phase is an evaluation of promising available approaches and further development to improve their effectiveness, linking the developed approaches with EU risk assessment guidelines. The third stage is a demonstration of the methodologies, which are presented in the guideline, in operation.The first stage required for the success of the project is achieved through completion of an international survey, including academic literature, previous EU and national research projects and ongoing activities, as well as international projects, reports and guidelines and including also multiple operator and associate partner workshops in various sectors and regions. The goal of the survey is to identify available approaches for defining, evaluating and implementing resilience concepts to critical infrastructure. The second stage is achieved through an evaluation of multiple resilience concepts and their combined application to critical infrastructures. These infrastructures are represented through a number of living labs formed for the project. These living labs represent various sectors of critical infrastructure throughout Europe. Resilience concepts will be tested with a focus on a consequence-based approach - i.e. with the intention of disconnecting the effect from the cause, whether malicious or natural or technological, or complex - within these living labs.Finally, in order to address the third stage required, the methodology will be demonstrated in a pilot implementation within two living labs during a resilience planning exercise within these living labs.

The expected results from the IMPROVER project are:- The development of European Resilience Management Guideline and demonstration through pilot implementation- More efficient uptake of risk assessments through the Member States and associated countries and critical

infrastructure providers- More effective and coherent crisis and disaster resilience management, - Improved trainings for rescuers - Improved population engagement

Dansk brand- og sikringsteknisk institut forening / DBI Institut national de l'environnement et des risques / INERIS SP Fire Research AS / SP FR AS INOV Inesc Inovacao - instituto de novas tecnologias / INOV University College London / UCL Euro-Mediterranean Seismological Centre / EMSC Universitetet i Tromsø / UiT JRC - Joint research centre - European Commission / JRC University of Sheffield / USFD

DenmarkFranceNorwayPortugalThe United KingdomFranceNorwayBelgiumThe United Kingdom

Page 9: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

10Project objectives

Information

Coordinator

Grant Agreement N°700748Total Cost:€4,944,072.50EU Contribution:€4,944,072.50Starting Date:01/05/2016Duration:42 monthsEnd Date:31/10/2019

Anglia Ruskin University Higher Education Corporation (ARU)Faculty of Science & Technology, Engineering & the Built EnvironmentBishop Hall LaneCM1 1SQChelmsfordUnited KingdomContactKeith JonesTel: +44 (0) 1245 493131 ext 3907Mobile: +44 (0) 7912 082650E-mail: [email protected]: http://www.liquefact.eu/

LIQUEFACTAssessment and mitigation of liquefaction potential across Europe: a holistic approach to protect structures / infrastructures for improved resilience to earthquake-induced liquefaction disasters (EILD).

Seismic building regulations are strongly connected to earthquake risk assessment. It is important, however, to distinguish between new and existing construction. For new construction, hazard mitigation is embedded in earthquake-resistant design.Current building standards do not fully address the issue of liquefaction. LIQUEFACT will tackle this shortcoming through research and demonstrations to develop new simplified methodologies and tools. LIQUEFACT’s impact on innovation will be two-fold. It will develop a more comprehensive understanding of EILDs and of mitigation techniques to safeguard structures and physical assets from their effects.The project’s research objectives are to:– Establish an EILD Risk/Resilience Assessment and Improvement Framework (RAIF) to identify vulnerabilities and evaluate alternative mitigation strategies– Develop a European liquefaction hazard geographical information system (GIS) map and methodology for performing localised assessment of liquefaction potential– Develop simplified methods to assess asset vulnerability to EILDs– Use geotechnical seismic centrifuge testing and full scale field testing to analyse liquefaction mitigation techniques– Identify the most appropriate vulnerability and resilience models to support integration of mitigation techniques into the built asset lifecycle– Integrate the above into a LIQUEFACT Reference Guide (LRG), an easy-to-use software application toolbox to support effective business decision-making– Produce recommendations for task groups involved in EU Structural Eurocodes standards revision to produce new technical standards

Infrastructure Protection and Protection of Public

Spaces

7

Page 10: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workLIQUEFACT uses a mixed-research methodology to identify stakeholder and end-user needs and develop and test tools to improve community and critical infrastructure resilience to EILD events. Activities include research to support the development of:– A European liquefaction hazard map (macrozonation) and a methodology for the localised assessment of liquefaction potential (microzonation)– Methodologies to assess structural resilience and vulnerability to EILD events– A range of liquefaction mitigation measures– A community resilience and built asset management planning framework– Liquefaction mitigation planning softwareThe results of the research programme will be tested and validated through a series of case study scenarios.

First, a broad variety of stakeholder groups would be interested in the likely consequences of an EILD event. The RAIF provides stakeholders with a methodology to assess their susceptibility, vulnerability and risks to an EILD event as well as business modelling tools to evaluate mitigation options to improve their resilience. Ultimately the RAIF will be incorporated into open-source software toolbox.Second, LIQUEFACT aims at consolidating knowledge around liquefaction mitigation and contributing to the convergence of building design codes and the ongoing revision process of the Structural Eurocodes.Current design codes primarily apply to new construction and typically do not include recommendations to strengthen and rehabilitate existing structures. Existing structure weaknesses would therefore have a dramatic effect on expected losses during a future seismic event. The RAIF will be integrated into the built asset management planning process to prioritise liquefaction mitigation actions as part of the normal built asset management refurbishment process.

Anglia Ruskin University Higher Education Corporation (ARU)Universita Degli Studi di Pavia (UNIPV)Universidade Do Porto (UPORTO)Universita Degli Studi Di Napoli Federico Ii. (UNINA)Trevi Societa Per Azioni (TREVI)Stiftelsen Norsar (NORSAR)Univerza V Ljubljani (ULJ)Universita Degli Studi Di Cassino E Del Lazio Meridionale (UNICAS)Slp Specializirano Podjetje Za Temeljenje Objektov, Doo, Ljubljana (SLP)Istituto Sperimentale Modelli Geotecnici Societa A Responsabilita Limitata (ISMGEO)Istanbul Universitesi (Istan-Uni)

United KingdomItalyPortugalItalyItalyNorwaySloveniaItalySloveniaItalyTurkey

Page 11: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

12Project objectives

Information

Coordinator

RESILENS Disaster-Resilience: Safeguarding and Securing Society, Including Adapting to Climate Change

- Operationalise crisis and disaster resilience concepts for Critical Infrastructure (CI). - Strengthen resilience management - Fuse relevant concepts from multiple traditions - Build on relevant European programs and projects - Develop a European Resilience Management Guideline and Resilience

Management tools - Develop an integrated multi-agency CONcept of OPerationS (CONOPS)

framework- Provide a foundation for future regulatory standards for application across

all CI sectors - Increase societal resilience - Increase the ability of economic and institutional systems to cope and

respond in the event of a crisis - Promote awareness of the importance of resilient CI - Educate CI stakeholders in adopting organisational structures for integrated

crisis management coordination - Support the realisation that the citizen is as an active rather than a passive

participant in crisis response - Enhance safety of European citizens and support effective community

response and recovery from crises

Grant Agreement N° 653260 Total Cost € 4 091 842,50 EU Contribution € 4 091 842,50 Starting Date 01/05/2015Duration 36 monthsEnd Date 30/04/2018 Topic Crisis management topic 7: Crisis and Disaster Resilience - Operationalizing Resilience Concepts

Future Analytics Consulting Ltd. Research department 23 Ftizwilliam Square (South)Dublin 2 D02RV08 Dublin Ireland ContactDoctor William Hynes Tel : + 353 0 16 39 48 36 Mobile: + 353 08 68 52 44 38 Fax: + 353 0 15 54 73 34E-mail : [email protected] : http://resilens.eu/

Infrastructure Protection and Protection of Public

Spaces

9

Page 12: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

COUNTRYPARTNERS

Description of the work

Results

University of Warwick / UoW Fraunhofer-Gesellschaft Zur Foerderung Der Angewandten Forschung E.V. / FhG Trinity College Dublin / TCD MTRS Solution and Services Ltd. / MTRS Factor Social / FS Skills for Justice Enterprises / SfJE Bundesanstalt für Straßenwesen/ Federal Highway Research Institute / BASt EDP Distribuição / EDPD Eastern and Midlands Regional Assembly / EMRA Câmara Municipal de Lisboa, Lisbon City Council / CML Irish Water / IW

United KingdomGermany

IrelandIsraelPortugalUnited KingdomGermany

PortugalIrelandPortugalIrish Water

The frequency and severity of the impacts of disaster and crises requires a focused approach to the protection of our critical infrastructure assets. The removal or suspension of critical infrastructure assets from normal service would significantly affect public safety, security, economic activity or environmental quality. The RESILENS project will advance traditional risk management practices to develop resilience measurements and enhancement methods. This will allow for a greater understanding of the elements of CI which are most vulnerable to disaster so that focused measures can be taken to increase the resilience of CI. RESILENS will develop a user-friendly, citizen centric European Resilience Management Guideline, founded in the principles of risk management and vulnerability reduction. It will be interactive to increase uptake , leading to clear, coherent and effective crises and disaster resilience management for Critical Infrastructure. This in turn will contribute to more resilient and secure economic and societal systems.

- The development of a European Resilience Management Guideline with demonstration and operationalisation through pilot implementation

- Development of a Resilience Management and Audit Toolkit- More efficient uptake of risk assessments through Member States and Associated Countries, and CI providers - More effective and coherent crises and disaster resilience management, including improved training for rescuers

and population engagement (supported by the development of the RESILENS e-learning hub)

Page 13: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

14Project objectives

Information

Coordinator

Grant Agreement N°786409Total Cost:€ 10,617,476.75EU Contribution:€ 7,999,970.00Starting Date:01/05/2018Duration:36 monthsEnd Date:30/04/2021

Leonardo - Società per Azioni (LDO)Security and Information Systems DivisionHomeland Security and Critical Infrastructures LoBCTO - Funded ProgramsVia delle Officine Galileo, 150013 FirenzeItalyContactFederico FrosaliTel: +39 055 5369640Mobile: +39 334 6253264E-mail: federico.frosali@leonardo company.comWebsite: http://www.resistoproject.eu/

RESISTORESIlience enhancement and risk control platform for communication infraSTructure Operators

The main goal of RESISTO is to improve the risk control and resilience of modern communication critical infrastructures (CIs) against a wide variety of cyber-physical threats.RESISTO’s objectives are to:– Help managers of communication CI to guarantee their business and asset continuity by delivering an innovative platform for optimised decision support in the face of physical, cyber and combined cyber-physical threats– Develop an integrated risk and resilience analysis and management tool– Provide a suite of innovative cyber/physical security solutions that can deliver unprecedented cost-effective performance in a comprehensive technology framework– Support adoption of RESISTO platform’s via extensive validation– Contribute to the European Programme for Critical Infrastructure Protection and to the objectives of the EU’s Cybersecurity Strategy

Infrastructure Protection and Protection of Public

Spaces

11

Page 14: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workMost CIs rely on communication infrastructure for their operations. Therefore they are a primary target for cyber-criminals. The same hold true for physical attacks and coordinated cyber-physical events. Extreme weather events and natural disasters also represent challenges due to their increased frequency and intensity.These threats require smarter resilience from communication CIs. This increasingly complex architecture is extremely vulnerable due to evolution towards 5G, extensive use of programmable platforms and the exponential growth of connected devices (the “internet of things”, or IoT).The fact that most enterprises still manage physical and cyber-security systems independently is another vulnerability.RESISTO’s platform will be an innovative solution for CI physical and logical situation awareness and enhanced resilience. Based on its integrated risk and resilience analysis, RESISTO will create an innovative decision support system to protect from combined cyber/physical threats. It will exploit cyber/physical data through improved correlation, integrated threat propagation modelling and its software defined security model. It also will provide state-of-the-art security components and services for detection and reaction: Blockchain for data integrity, machine learning for threat Intelligence, IoT security and smart spectrum surveillance for physical security, enhanced and video-audio analytics for improved situational awareness, airborne threat detection for malicious UAV prevention, vulnerability assessment and, finally, zero-day attack analysis services for attack prevention and mitigation.Through RESISTO, operators will be able to select and adopt a set of mitigation actions and countermeasures that significantly reduce the impact of negative events for performance, social consequences and cascading effects.

– State-of-the-art analysis of physical/cyber detection technologies and risk scenarios for Communication CIs– Innovative tools, concepts, and technologies for combatting combined physical/cyber threats– Security risk management plans integrating systemic and physical and cyber aspects– Innovative approaches to protecting and communicating with inhabitants near CI– Extended validation of the RESISTO framework against physical/cyber threats across three verticals: current, future (i.e., 5G) and interconnected communication infrastructure– Convergence of safety and security standards, dissemination throughout the relevant user communities of specific models for information sharing on incidents, threats and vulnerabilities

Leonardo - Società per Azioni (LDO)Università degli Studi Roma Tre (RM3)Telecom Italia SpA (TIM)Hellenic Telecommunications Organization S.A. (OTE)British Telecommunications Public Limited Company (BTC)Orange Romania SA (ORO)Retevision I SA (RTV)Altice Labs SA (ALB)Ericsson Telecomunicazioni (TEI)Ernst & Young Financial Business Advisors SPA (EY)Fraunhofer Gesellschaft zur Foerderung der angewandten Forschung E.V. (EMI)Institute of Communication and Computer Systems (ICCS)Bergische Universitaet Wuppertal (BUW)Istituto Superiore delle Comunicazioni e delle Tecnologie dell’Informazione (CER)Integrasys SA (INT)Guardtime AS (GT)ADITESS Advanced Integrated Technology Solutions & Services LTD (ADI)TREELOGIC Telematica y Logica Racional Para La Empresa Europea SL (TRE)Bit Sentinel Security (BSS)

ItalyItalyItalyGreeceUnited KingdomRomaniaSpainPortugalItalyItalyGermanyGreeceGermanyItalySpainEstoniaCyprusSpainRomania

Page 15: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

16Project objectives

Information

Coordinator

RESOLUTERESilience management guidelines and Operationalization appLied to Urban Transport Environment

- Systematic review and assessment of state of the art resilience assessment and management concepts to develop a conceptual framework for creating/maintaining Urban Transport Systems

- Develop European Resilience Management Guidelines (ERMG)- Operationalise and validate the ERMG by implementing the RESOLUTE

Collaborative Resilience Assessment and Management Support Systems for Urban Transport Systems

- Enhance resilience through improved support of human decision making processes, particularly by training professionals and civil users on ERMG

- Adoption of the ERMG at EU and Associated Countries level

Grant Agreement N° 653460 Total Cost € 3 848 581,25 EU Contribution € 3 848 581,00 Starting Date 01/05/2015End Date 30/04/2018 Topic Crisis management topic 7: Crises and disaster resilience – operationalizing resilience concepts

University of Florence Department of Information Engineering, DISIT Lab ( Distributed Systems and Internet Tehcnologies) Via S. Marta 3 50139 Firenze Italy ContactPaolo Nesi, Emanuele Bellini Tel : + 39 055-2758515Mobile: + 39 335-5668674 Fax: + 39 055-2758570 E-mail : [email protected]

[email protected] Website : http://www.resolute-eu.org

Infrastructure Protection and Protection of Public

Spaces

13

Page 16: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

COUNTRY

Results

Description of the work

University of Florence, DINFO, DISIT lab / UNIFI DINFO DISIT Thales Italia / THALIT ATTIKO Metro / ATTIKO Comune di Firenze / CDF Center for Research and Technologies Hellas / CERTH Fraunhofer IAO / FHGIAO Humanist VCE / HUMANIST Swarco Mizar SPA / SWARCO MIZAR ADI ISG / ADI ISG Consorzio Milano Ricerche / CMR

ItalyItalyGreeceItalyGreeceGermanyFranceItalyPortugalItaly

RESOLUTE aims to achieve sustained adaptability of UTS (Urban Transportation System) to enhance resilience. Its final is to adapt methods for the operationalisation of the European Resilience Management Guidelines and for their evaluation when addressing UTS as Critical Infrastructure. The resilience is considered an emergent property of a complex system and is about managing high variability in order to continuously pursue successful performance of a system. This requires two fundamental methodological stages: 1) system analysis and understanding in support of the identification of critical functions and interdependencies through the use of tools like FRAM, RAG and Network analysis/science techniques that also permit to infer, model, simulate and predict possible events propagation, preventing/mitigating cascading behaviour in the Network-of-Networks or System-of-Systems; 2) Big Data gathering, semantic processing and mining to connect data flows to the models.This analysis would provide the means to assess the levels of criticality of interdependencies at quantitative levels and seeks to enhance the capabilities of UTS to take the right decision at strategic, tactical and operational levels, with the aim of maintaining operations under continuously changing conditions. This is achieved through the implementation of the Collaborative Resilience Assessment and Management Support Systems that adopt a highly synergic approach towards the definition of a resilience model for the next-generation of collaborative emergency services and decision making processes. Within this framework, the RESOLUTE objective faces the challenge of relating dynamic and emergent system features, to a wide variety of human, technical and organizational elements that generate diversified operational needs.

PARTNERS

RESOLUTE is based on the vision of achieving higher adaptive capacity of operations in European urban transport systems (UTS). The project recognises foremost the on-going profound transformation of urban environments as well as the growing importance of mobility within every human activity. The project developed European resilience management guidelines (ERMG) for critical infrastructures (CI) to help them develop and sustain their adaptability. The ERMG provides guidance on how to dampen function performance variability to continue delivering the desired outcome under any unexpected condition/event. The ERMGs were operationalised on UTS in Florence and Athens. The following capacities were enhanced:– Monitoring: implementation of the project’s “Collaborative Resilience Assessment and Management Support System” which – via big data collection, sharing, mining and deduction in real time – improves communication, coordination and situation awareness among decision makers and first responders in a system – Response: implementation of an “Evacuation and Emergency Support Smart Mobile App” for operators and citizens to guide evacuation in real time– Anticipation: applying game based-training for citizens such as a training module for primary school kids and a mobile app to boost their preparedness in case of emergenciesLearning: implementation of models and methods for the behavioural analysis of people in motion, real time impact assessment and resilience quantifications

Page 17: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

18Project objectives

Information

Coordinator

Grant Agreement N°700621Total Cost:EUR 4960831.25EU Contribution:EUR 4809948.75Starting Date:May 1st, 2016Duration:36 MonthsEnd Date:April 30th, 2019

European Virtual Institute for Integrated Risk Management EU VRI EWIV (EU-VRi)Willi Bleicher Str. 1970174 StuttgartGermanyContactAleksandar JovanovicTel: +49 711 41004129Mobile: +49 172 635 9190Fax: +49 711 677 0600E-mail: [email protected]: http://www.smartresilience.eu-vri.eu/

SmartResilienceSmart Resilience Indicators for Smart Critical Infrastructures

Modern systems of critical infrastructure (CI) are becoming more complex and interdependent, but also “smarter” in normal operation and use. The project’s goal is to improve their performance by providing an innovative “holistic” methodology to assess the resilience of critical infrastructure. SmartResilience addresses:– Smart critical infrastructures (SCIs)– Emerging risks (primarily those related to new technologies)– Smart indicators (including big data)– Cascading and ripple effects among multiple SCIs, eight of which are in the project), and insurance/re-insurance aspects

Infrastructure Protection and Protection of Public

Spaces

15

Page 18: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workThe project answers the above questions in several steps, by addressing the following objectives:– Identifying indicators suitable for assessing the resilience of SCIs and especially resilience indicators (RIs) based on big and open data– Developing a new advanced resilience assessment methodology based on smart RIs while structured and used as “dynamic check-lists” for resilience assessment– Developing an interactive “SCI Dashboard” tool allowing participants to assess and monitor resilience levels, perform resilience stress-tests and optimise their decisions– Applying the methodology/tools in the eight case studies, integrated under one virtual, smart city-like European case study. The SCIs deal with energy, transportation, health, water, flood protection, supply chain and finance.

SmartResilience will significantly improve SCI resilience by providing a comprehensive methodology of risk and resilience assessment. This should lead to proactive innovations to eventually raise the level of resilience of SCIs via:– new product development and solutions– novel tools and insights for rapid response planning, improved business continuity and organisational adjustments to become more resilient– enhancing resilience of society as a whole– new standards (CEN/ISO/national)

European Virtual Institute for Integrated Risk Management EU-VRI EWIV (EU-VRi)IBM Israel - Science and Technology ltd (IBM)Schweizerische Ruckversicherungs-Gesellschaft AG (Swiss Re)The Mayor and Commonalty and Citizens of the City of London (CoL)Stadtwerke Heidelberg GmbH (SWH)Cork City Council (CCC)Orszagos Rendor - Fokapitanysag (HNP)NIS AD NOVI SAD (NIS)Teknologian tutkimuskeskus VTT Oy (VTT)Stiftelsen Sintef (SINTEF)IVL Svenska Miljoeinstitutet ab (IVL)Steinbeis Advanced Risk Technologies GmbH (R-Tech)Fraunhofer Gesellschaft zur Forderung der angewandten Forschung e.v. (FhG INT)European dynamics advanced systems of telecommunicationsinformatics and telematics SA (ED)Applied Intelligence Analytics limited (AIA)Bay Zoltan Alkalmazott Kutatasi Kozhasznu nonprofit kft. (BZN)Medizinische Universitaet Wien (MUW),SRH Hochschulen GmbH Univeristy of Applied Sciences (SRH)Bergische Universitaet Wuppertal (BUW),Universitaet Stuttgart (USTUTT)City of Edinburgh Council (CoE)

GermanyIsraelSwitzerlandUnited KingdomGermanyIrelandHungarySerbiaFinlandNorwaySwedenGermanyGermanyGreeceIrelandHungaryAustriaGermanyGermanyGermanyUnited Kingdom

Page 19: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

20Project objectives

Information

Coordinator

Grant Agreement N°740610Total Cost:€9,616,525.18EU Contribution:€8,255,319.50Starting Date:01/06/2017Duration:48 monthsEnd Date:31/05/2021

STIFTELSEN SINTEF (SINTEF)SINTEF Building and InfrastructureForskningsveien 3bNO-0314 OsloNORWAYContactRita Maria UgarelliTel: +47 454 29 787Mobile: +47 454 29 787E-mail: [email protected]: www.stop-it-project.eu

STOP-ITStrategic, Tactical, Operational Protection of water Infrastructure against cyber-physical Threats

STOP-IT’s objective is to make water systems secure and resilient by improving preparedness, awareness and responsiveness to physical threats, cyber threats, either individual or in conjuncture with each other.Specific Objectives:– Raise awareness and encourage cooperation in the water sector for cyber-physical security and promote exchanges of best practices, knowledge and benchmarks among stakeholders via the creation of communities of practice (CoP)– Enhance water utilities’ ability to identify and test alternative risk treatment options– Improve the water industry's procedures for assessing the vulnerability of systems to physical, cyber, and combined physical-cyber security threats– Strengthen current response and recovery capacities and improve preparedness through enhanced event detection and prevention capabilities– Ensure the wide applicability of security solutions by developing flexible and validated solutions for different usage contexts– Protect inhabitants near water utility critical infrastructure (CI) and enhance communication with security personnel, first responders and monitoring teams by providing an innovative shared-information method based on public warning systems– Enhance the project’s external impact by demonstrating the financial and investment options for different project outcomes– Enhance practical knowledge of cyber-physical water infrastructure protection through training and accreditation schemes for water system operators.– Contribute to open access knowledge – Establish certification mechanisms that corss boundaries between different CI sectors

Infrastructure Protection and Protection of Public

Spaces

17

Page 20: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workSTOP-IT will be implemented through a set of 10 work packages (WPs):– WP1 - coordination and management– WP2 - design, set up, support and synchronise three levels of CoPs– WP3 - establish the context of involved water utilities for risk assessment and deliver risk identification database– WP4 - evaluate risk events against the risk criteria defined in WP3 and support the choice of risk reduction measures (RRM) for risk treatment. Will also integrate an online guide for assets vulnerability assessment, a toolkit for analysing and evaluating risks and stress-testing mitigation options and a RRM-database– WP5 - provide innovative solutions for risk treatment of water CIs at operational level, with proposed schemes to cover full spectrum from communications to IT and SCADA to physical protection– WP6 - provide a modular software package, integrating components from WP4 and WP5 plus additional modules for sharing information with the public and improved visualisation interfaces for the provision of a common operational picture for water CI operators– WP7- STOP-IT’s platform will be adapted to local conditions to develop a strategic, tactical and operational risk management plan for each water utility involved– WP8 - focus on "train & transfer" of the methodological, technological and procedural advances of the project through dedicated training products– WP9 – identify relevant target audience and dissemination channels, and use project website as the major dissemination vehicle – WP10 – ensure that STOP-IT’s work is in line with European legislation and ethical guidelines

Modular solutions embedded into an integrated, scalable and adaptable software platform will detect, respond to, mitigate and prevent physical and cyber risks to water security at the strategic, tactical and operational levels.

Stiftelsen SINTEF (SINTEF)IWW Rheinisch Westfalisches Institut fur Wasserforschung gemeinnutzige GmbH (IWW)Cetaqua, Centro Tecnologico del Agua, Fundacion Privada (CET)KWR Water B.V. (KWR)Fundacio Eurocat (EUT)Technion – Israel Institute of Technology (TECHN)ATOS Spain SA (ATOS)Mekorot Water Company Limited (MEK)Aigues de Barcelona, Empresa Metropolitana De Gestio Del Cicle Integral De L’Aigua SA (AB)Hessenwasser GmbH & Co. KG (HW)Oslo Kommune (VAV)Institute of Communication and Computer System (ICCS)Bergen Kommune (BK)Berliner Wasserbetriebe (BWB)European Water Supply and Sanitation Technology Platform (WssTP)PNO Innovation (PNO)Beit Tochna Aplicatzia Ltd. (Apl.)Empresa Municipal de Abastecimiento Y Saneamiento De Granada SA (EMA)Worldsensing S.L.N.E (WS)Risa Sicherheitsanalysen GmbH (RISA)Mnemonic AS (mnem)Vlaamse Maatschappij Voorwatervoorziening CVBA (DeW)

NorwayGermanySpainThe NetherlandsSpainIsraelSpainIsraelSpain

GermanyNorwayGreeceNorwayGermanyBelgiumBelgiumIsraelSpainSpainGermanyNorwayBelgium

Page 21: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

22Project objectives

Information

Coordinator

Grant Agreement N°700416Total Cost:€ 4,999,946.25EU Contribution:€ 4,999,946.25Starting Date:01/05/2016Duration:30 monthsEnd Date:30/10/2018

Ericsson GmbH (EDD)Eurolab Rsearch & DevelopmentEricsson Allee 1D-52134 HerzogenrathContactDr. Fiona WilliamsTel: +49 172 2434132Mobile: +49 172 2434132Fax: +49 2407 575400E-mail: [email protected]: https://www.success-energy.eu/

SUCCESSSecuring Critical Energy Infrastructures

SUCCESS will develop an overarching approach to threat and countermeasure analysis with a special focus on vulnerabilities created by smart meters. The project will prepare the conditions for Europe’s future energy system to be as reliable as it is today.

Infrastructure Protection and Protection of Public

Spaces

19

Page 22: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

PARTNERS COUNTRY

Results

Description of the workEmphasising security-by-design, resiliency, and survivability, the project proposes a new joint design of energy infrastructure and information and communication technologies (ICT). Building on research results, the project will define and implement a next-generation, open and real-time smart meter (NORM) as a key building block. At the systems’ level a cloud-approach, based on double virtualisation, is the goal.SUCCESS will provide countermeasures, including specifications and open source software for NORMs, security monitoring centres for distributed system operators (DSOs) and at pan-European levels, and secure communications solutions complemented by data privacy studies. Trials will be run in Ireland, Italy and Romania.

Implementing the “customer-centric utility” is vital for making the overall system more open and secure. As ICT increases in importance to utilities, new communications technologies are being deployed. These developing technologies, combined with new power technologies, enable the development of a secure future smart grid, which will offer safe green power to consumers, prosumers, and other critical utilities relying on the public power supply.SUCCESS will make a comprehensive contribution to maintaining the security, reliability, and resilience of critical infrastructure, with a particular focus on power infrastructure, given that many other critical infrastructures depend on it. As a result, new business opportunities for energy providers, SMEs, and start-ups will generate economic growth in the energy and ICT sectors.

Ericsson GmbH (EDD)ASM Terni SpA (ASM)KEMA Netherland BECRO SRL (DNV GL)Electrica SA (ELEC)Engineering-Ingegneria Informatica SPA (ENG)ESB Networks Ltd (ESB)Istituto Superiore Mario Boella (ISBM)Kungliga Tekniska Hoegskolan (KTH)OY L M Ericsson AB (LMF)P3 Communications GmbH (P3C)P3 Energy & Storage GmbH (P3E)Rheinisch-Westfaelische Technische Hochschule Aachen (RWTH)Synelixis Solutions Ltd (SYN)TeamWare SRL (TW)Vrije Universiteit Brussel (VUB)

GermanyItalyThe NetherlandsRomaniaItalyIrelandItalySwedenFinlandGermanyGermanyGermanyGreeceItalyBelgium

Page 23: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

Manuscript completed in 2018 The European Commission is not liable for any consequence stemming from the reuse of this publication. Luxembourg: Publications Offi ce of the European Union, 2019 © European Union, 2019Reuse is authorised provided the source is acknowledged.The reuse policy of European Commission documents is regulated by Decision 2011/833/EU (OJ L 330, 14.12.2011, p. 39).For any use or reproduction of photos or other material that is not under the copyright of the European Union, permission must be sought directly from the copyright holders. Print ISBN 978-92-79-98061-9 doi:10.2837/142014 DR-02-17-205-EN-CPDF ISBN 978-92-79-98060-2 doi:10.2837/16339 DR-02-17-205-EN-N Set: DR-02-17-202-EN-Y

INFRASTRUCTURE PROTECTION AND PROTECTION OF PUBLIC SPACESFINSECIMPACTIMPROVERLIQUEFACTRESILENS RESISTORESOLUTESmartResilienceSTOP-ITSUCCESSSAYSO

Migration and Home Aff airs

SECURESecurity Research Projectsunder the Horizon 2020 Programme for Research and Innovation

Security Research Projectsunder the Horizon 2020 Programme for Research and Innovation

EU Research for a Secure Society

Further information available at: http://ec.europa.eu/dgs/home-aff airs/what-we-do/policies/industry-for-security/index_en.htm http://ec.europa.eu/dgs/home-aff airs/fi nancing/fundings/research-for-security/index_en.htm

Infrastructure protection and protection of public spaces2018

EU Researchfor a

Society

Page 24: Security Research Projects EU Research SECURE EU Research for …€¦ · It aims to develop a novel standards-based security reference architecture for integrated (cyber and physical)

Migration and Home Aff airs

SECURESecurity Research Projectsunder the Horizon 2020 Programme for Research and Innovation

Security Research Projectsunder the Horizon 2020 Programme for Research and Innovation

EU Research for a Secure Society

Further information available at: http://ec.europa.eu/dgs/home-aff airs/what-we-do/policies/industry-for-security/index_en.htm http://ec.europa.eu/dgs/home-aff airs/fi nancing/fundings/research-for-security/index_en.htm

Infrastructure protection and protection of public spaces2018

EU Researchfor a

Society