A Certification approach for dynamic, agile and reUSable assessmenT fOr composite systems of ICT proDucts, servicEs, and processeS

Project Information

CUSTODES

Grant agreement ID: 101120684

DOI

10.3030/101120684

EC signature date 28 September 2023

Start date 1 October 2023

End date 30 September 2026

Funded under

• Civil Security for Society

Total cost

€ 6 382 922,50

EU contribution

€ 4 999 158,25

Coordinated by

RISE RESEARCH INSTITUTES OF SWEDEN AB
Sweden

CORDIS provides links to public deliverables and publications of HORIZON projects.

Links to deliverables and publications from FP7 projects, as well as links to some specific result types such as dataset and software, are dynamically retrieved from OpenAIRE .

Deliverables

Documents, reports (2)

First Integrated Prototype and Collaborative Certification Ecosystem Tools and Activities

This report will provide the details of the first integrated prototype along with the reporting of the Collaborative Certification Ecosystem Discovery and Sharing tools.

Taxonomy for Cybersecurity Certification Information Re-use

This report will deliver all the templates and taxonomies for reusing cybersecurity certification information.

Publications

Conference proceedings (10)

Towards Automated Certification Framework of Composite Systems: A SWRL-Based Approach

Author(s): Jasmin Cosic; Chatzopoulou Argyro; Marga Martín Sánchez; Antonio David Vizcaino Gomez; Drazen Morog
Published in: Proceedings of the 31st ICE IEEE/ITMC Conference on Engineering, Technology, and Innovation ICE 2025, ISSN 2693-8855
Publisher: Universitat Politecnica de Valencia/IEEEE

Composite Inspection and Certification (CIC) System for Cybersecuity Assessment of ICT Products, Services, and Processes

Author(s): Spyridon Papastergiou, Shareeful Islam, Eleni Maria Kalogeraki, Argyro Chatzopoulou, Panagiotis Bountakas, Konstantinos Pournaras, Sreedevi Beena, Nineta Polemi
Published in: 2024 IEEE International Conference on Cyber Security and Resilience (CSR), 2024
Publisher: IEEE
DOI: 10.1109/CSR61664.2024.10679467

Deciphering Cyber-Security Certifications: An Ontological Journey through Composite Systems and their certification

Author(s): Jasmin Cosic, Admir Jukan
Published in: 2024 IEEE International Conference on Engineering, Technology, and Innovation (ICE/ITMC), 2024
Publisher: IEEE
DOI: 10.1109/ICE/ITMC61926.2024.10794255

Human Factors and Strategic Approaches in Cybersecurity: Threats for Critical Infrastructures in NIS2 Dοmains

Author(s): Kioskli, Maglaras, Fotis, Varouchas
Published in: Proceedings of the 31st ICE IEEE/ITMC Conference on Engineering, Technology, and Innovation ICE 2025, 2025, ISSN 2693-8855
Publisher: AHFE 2025
DOI: 10.54941/AHFE1006136

Onion CoAP: Enabling Onion Routing for the IoT

Author(s): Rikard Höglund, Marco Tiloca, Christian Amsüss, Simon Bouget, Shahid Raza
Published in: 2026 22nd International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT), 2026, ISSN 2325-2944
Publisher: IEEE
DOI: 10.1109/DCOSS-IOT69657.2026.00079

Benchmarking LLMS for Threat Level Determination

Author(s): Han Wang, Murathan Kurfalı, Alfonso Iacovazzi
Published in: 2025 IEEE International Conference on Data Mining Workshops (ICDMW), 2026, ISSN 2375-9259
Publisher: IEEE
DOI: 10.48550/ARXIV.2609.07582

End-to-End Encryption: Technological and Human Factor Perspectives

Author(s): Leandros Maglaras, Kitty Kioskli
Published in: Lecture Notes in Computer Science, Augmented Cognition, 2025
Publisher: Springer Nature Switzerland
DOI: 10.1007/978-3-031-93724-8_10

Shielding the Edge: A Practical Architecture for CRA-Compliant and Physically-Robust Ambient Intelligence

Author(s): Vicenç Porras, Julia Igual, Marisa Catalán, David Sarabia
Published in: 2026 Joint European Conference on Networks and Communications & 6G Summit
Publisher: 2026 Joint European Conference on Networks and Communications & 6G Summit
DOI: 10.5281/ZENODO.20590601

OntoCRA-NS: A Neuro-Symbolic Framework for Explainable and Auditable Cybersecurity Compliance Aligned with EU Regulatory Frameworks

Author(s): Jasmin Cosic, Admir Jukan, Miroslav Baca
Published in: 2026 IEEE Conference on Artificial Intelligence (CAI), 2026
Publisher: IEEE
DOI: 10.1109/CAI68641.2026.11536562

Strengthening Cybersecurity Certifications Through Robust Chain of Custody Practices

Author(s): Jasmin Cosic, Admir Jukan, Miroslav Baca
Published in: 2024 IEEE International Conference on Cyber Security and Resilience (CSR), 2024
Publisher: IEEE
DOI: 10.1109/CSR61664.2024.10679449

Peer reviewed articles (9)

A Practical Human-Centric Risk Management (HRM) Methodology

Author(s): Kitty Kioskli, Eleni Seralidou, Nineta Polemi
Published in: Electronics, Issue 14, 2025, ISSN 2079-9292
Publisher: MDPI AG
DOI: 10.3390/ELECTRONICS14030486

Enhanced-LLM extraction of CTI from unstructured threat reports. A tough nut to crack or a walk in the park?

Author(s): Konstantina Psarrou, Panagiotis Bountakas, Dimitris Eleutheriou, Rafail A. Ellinitakis, Konstantinos Fysarakis, Alexios Lekidis, George Spanoudakis
Published in: Future Generation Computer Systems, Issue 183, 2026, ISSN 0167-739X
Publisher: Elsevier BV
DOI: 10.1016/J.FUTURE.2026.108514

A taxonomy for cybersecurity standards

Author(s): Eleni-Maria Kalogeraki, Nineta Polemi
Published in: Journal of Surveillance, Security and Safety, Issue 5, 2024, ISSN 2694-1015
Publisher: OAE Publishing Inc.
DOI: 10.20517/JSSS.2023.50

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

Author(s): Nihala Basheer, Shareeful Islam, Mohammed K. S. Alwaheidi, Spyridon Papastergiou
Published in: Sensors, Issue 24, 2025, ISSN 1424-8220
Publisher: MDPI AG
DOI: 10.3390/S24154859

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

Author(s): Nihala Basheer, Shareeful Islam, Mohammed K. S. Alwaheidi, Spyridon Papastergiou
Published in: Sensors, Issue 24, 2025, ISSN 1424-8220
Publisher: MDPI AG
DOI: 10.3390/S24154859

Explainable AI based dynamic cybersecurity risk management for cyber insurability

Author(s): Spyridon Papastergiou, Nihala Basheer, Kostas Lampropoulos, Panayiotis Verrios, Shareeful Islam
Published in: International Journal of Information Security, Issue 25, 2026, ISSN 1615-5262
Publisher: Springer Science and Business Media LLC
DOI: 10.1007/S10207-025-01189-8

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

Author(s): Nihala Basheer, Shareeful Islam, Mohammed K. S. Alwaheidi, Spyridon Papastergiou
Published in: Sensors, Issue 24, 2025, ISSN 1424-8220
Publisher: MDPI AG
DOI: 10.3390/S24154859

Hybrid AI-Based dynamic risk assessment framework with explainable AI practices for composite product cybersecurity certification

Author(s): Shareeful Islam, Bilal Sardar, Eleni Maria Kalogeraki, Kostas Lampropoulos, Spyridon Papastergiou
Published in: International Journal of Information Security, ISSN 1615-5262
Publisher: Springer Nature
DOI: 10.1007/S10207-026-01218-0

A risk and conformity assessment framework to ensure security and resilience of healthcare systems and medical supply chain

Author(s): Kitty Kioskli, Elisavet Grigoriou, Shareeful Islam, Andrianos M. Yiorkas, Loizos Christofi, Haralambos Mouratidis
Published in: International Journal of Information Security, Issue 24, 2025, ISSN 1615-5262
Publisher: Springer Science and Business Media LLC
DOI: 10.1007/S10207-025-01009-Z

Book chapters (1)

Theoretical Foundations of Human Factors and Trustworthiness in Large Language Models

Author(s): Kitty Kioskli
Published in: 2026
Publisher: CRC/Routage