ECOSSIAN

European Control System Security Incident Analysis Network

The protection of critical infrastructures increasingly demands solutions which support incident detection and management at the levels of individual CI, across CIs which are depending on each other, and across borders. An approach is required which really integrates functionalities across all these levels. Cooperation of privately operated CIs and public bodies (governments and EU) is difficult but mandatory. After about 10 years of analysis and research on partial effects in CIP and for individual infrastructure sectors, ECOSSIAN is supposed to be the first attempt to develop this holistic system in the sense portrayed above. A prototype system will be developed which facilitates preventive functions like threat monitoring, early indicator and real threat detection, alerting, support of threat mitigation and disaster management. In the technical architecture with an operations centre and the interfaces to legacy systems (e.g., SCADA), advanced technologies need to be integrated, including fast data aggregation and fusion, visualization of the situation, planning and decision support, and flexible networks for information sharing and coordination support, and the connection of local operations centres. This system will only be successful, if the technical solutions will be complemented by an effective and agreed organizational concept and the implementation of novel rules and regulations. And finally, the large spectrum of economically intangible factors will have significant influence on the quality and acceptance of the system. These factors of societal perception and appreciation, the existing and required legal framework, questions of information security and implications on privacy will be analyzed, assessed and regarded in the concept. The system will be tested, demonstrated and evaluated in realistic use cases. They will be developed with the community of stakeholders and cover the sectors energy, transportation and finance, and the ubiquitous sector of ICT.

Coordinator Technikon Forschungs- Und Planungsgesellschaft Mbh (Austria)
Other participants:
ALMA MATER STUDIORUM-UNIVERSITA DI BOLOGNA
- Dip. di Scienze Giuridiche-DSG
- Resp. Scientifico: Prof. Giusella Dolores Finocchiaro 
Airbus Defence And Space Gmbh (Germany)
Bord Gais Eireann (Eire)
AIT-Austrian Institute Of Technology Gmbh (Austria)
Fraunhofer Gesellschaft Zur Forderung Der Angewandten Forschung E.V (Germany)
Cassidian Cybersecurity Sas (France) 
Inov, Inesc Inovacao, Instituto De Novas Tecnologias (Portugal)
Infraestruturas De Portugal Sa (Portugal)
Ministério Da Justiça (Portugal)
Espion Limited (Eire)
VTT-Valtion Teknillinen Tutkimuskeskus (Finland)
Katholieke Universiteit Leuven (Belgium)
Bertin Technologies Sas (France)
Institut Fuer Automation Und Kommunikation E.V. Magdeburg (Germany)
Poste Italiane - Societa Per Azioni (Italy)
Cassidian Cybersecurity Gmbh (Germany)
CESS Gmbh-Centre For European Security Strategies (Germany)
Airbusgroup Limited (UK)

Start date 01/06/2014

End date 31/05/2017

Duration 36 months

Project Reference 607577

Project cost 13.196.720 EURO

Project Funding 9.224.459 EURO

Area FP7-COOPERATION-SECURITY

Subprogramme Area SEC-2013.2.5-3 - Pan European detection and management of incidents/attacks on critical infrastructures in sectors other than the ICT sector (i.e. energy, transport, finance, etc) – Integration Project

Contract type CP-IP - Large-scale integrating project