Description du projet
Une nouvelle approche de la certification en matière de cybersécurité
Dans un monde de plus en plus numérique, la certification en matière de cybersécurité constitue un outil essentiel pour renforcer la confiance. La nature complexe de ce processus comporte toutefois de nombreux défis. Dans cette optique, le projet CUSTODES, financé par l’UE, fournira des capacités d’appréciation de la conformité rentables, souples et portables à un large éventail de parties prenantes. CUSTODES comprend plusieurs éléments conçus pour découvrir et traduire les informations de certification, offrant ainsi transparence et confiance dans l’évaluation des produits et services TIC. Il recourt à un environnement d’exécution restreint et fiable (RTE pour «restricted and trusted execution») pour garantir la conservation du produit pendant l’évaluation. Mené par un consortium de 17 organisations issues de 11 États membres de l’UE et de pays tiers, ce projet sera validé par trois projets pilotes, couvrant un éventail de produits et de services TIC.
Objectif
Cybersecurity certification as introduced by the EU Cybersecurity Act (EUCSA) will play a crucial role in increasing the trust to and security of ICT Products, ICT Services and ICT Processes. Cybersecurity certification is a complex process, posing a variety of challenges to the different interested parties.
This proposal introduces the CUSTODES, a system comprised of a variety of components with the aim to provide trustworthy, cost-effective, agile and portable conformity assessment capabilities, to a variety of interested parties, covering multiple Assurance levels of Composite ICT products or ICT services.
The CUSTODES system will discover and translate certification information of the Building Blocks of the composite ICT products or Services under evaluation, will provide Certification information to the interested parties and will share information on newly identified vulnerabilities related to the specific blocks or composite products as needed increasing transparency, re-usability and trust. It will also utilize a Restricted & Trusted Execution (RTE) Environment, to ensure the chain of custody of the product under assessment.
CUSTODES will be validated in three pilots, a) one of two Class I composite products with digital elements, b) one of an ICT product with an embedded AI component and c) a final one of the as-a-service functionality through EIT Digital extensive digital ecosystem.
The CUSTODES project is built on a collaboration of 17 organisations from 11 EU member states and third countries. The Consortium which includes 3 Conformity Assessment Organizations is composed by 10 SMEs, 3 large industry partners, 2 research organizations, and 2 public organizations/associations. The Consortium is led by RISE which has extensive experience in national and European research projects, and numerous collaborations with industrial partners.
Champ scientifique
Mots‑clés
Programme(s)
Régime de financement
HORIZON-IA - HORIZON Innovation ActionsCoordinateur
501 15 Boras
Suède