A Certification approach for dynamic, agile and reUSable assessmenT fOr composite systems of ICT proDucts, servicEs, and processeS

Informations projet

CUSTODES

N° de convention de subvention: 101120684

DOI

10.3030/101120684

Date de signature de la CE 28 Septembre 2023

Date de début 1 Octobre 2023

Date de fin 30 Septembre 2026

Financé au titre de

• Civil Security for Society

Coût total

€ 6 382 922,50

Contribution de l’UE

€ 4 999 158,25

Coordonné par

RISE RESEARCH INSTITUTES OF SWEDEN AB
Sweden

CORDIS fournit des liens vers les livrables publics et les publications des projets HORIZON.

Les liens vers les livrables et les publications des projets du 7e PC, ainsi que les liens vers certains types de résultats spécifiques tels que les jeux de données et les logiciels, sont récupérés dynamiquement sur OpenAIRE .

Livrables

Documents, reports (2)

First Integrated Prototype and Collaborative Certification Ecosystem Tools and Activities

This report will provide the details of the first integrated prototype along with the reporting of the Collaborative Certification Ecosystem Discovery and Sharing tools.

Taxonomy for Cybersecurity Certification Information Re-use

This report will deliver all the templates and taxonomies for reusing cybersecurity certification information.

Publications

Conference proceedings (10)

Towards Automated Certification Framework of Composite Systems: A SWRL-Based Approach

Auteurs: Jasmin Cosic; Chatzopoulou Argyro; Marga Martín Sánchez; Antonio David Vizcaino Gomez; Drazen Morog
Publié dans: Proceedings of the 31st ICE IEEE/ITMC Conference on Engineering, Technology, and Innovation ICE 2025, ISSN 2693-8855
Éditeur: Universitat Politecnica de Valencia/IEEEE

Composite Inspection and Certification (CIC) System for Cybersecuity Assessment of ICT Products, Services, and Processes

Auteurs: Spyridon Papastergiou, Shareeful Islam, Eleni Maria Kalogeraki, Argyro Chatzopoulou, Panagiotis Bountakas, Konstantinos Pournaras, Sreedevi Beena, Nineta Polemi
Publié dans: 2024 IEEE International Conference on Cyber Security and Resilience (CSR), 2024
Éditeur: IEEE
DOI: 10.1109/CSR61664.2024.10679467

Deciphering Cyber-Security Certifications: An Ontological Journey through Composite Systems and their certification

Auteurs: Jasmin Cosic, Admir Jukan
Publié dans: 2024 IEEE International Conference on Engineering, Technology, and Innovation (ICE/ITMC), 2024
Éditeur: IEEE
DOI: 10.1109/ICE/ITMC61926.2024.10794255

Human Factors and Strategic Approaches in Cybersecurity: Threats for Critical Infrastructures in NIS2 Dοmains

Auteurs: Kioskli, Maglaras, Fotis, Varouchas
Publié dans: Proceedings of the 31st ICE IEEE/ITMC Conference on Engineering, Technology, and Innovation ICE 2025, 2025, ISSN 2693-8855
Éditeur: AHFE 2025
DOI: 10.54941/AHFE1006136

Onion CoAP: Enabling Onion Routing for the IoT

Auteurs: Rikard Höglund, Marco Tiloca, Christian Amsüss, Simon Bouget, Shahid Raza
Publié dans: 2026 22nd International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT), 2026, ISSN 2325-2944
Éditeur: IEEE
DOI: 10.1109/DCOSS-IOT69657.2026.00079

Benchmarking LLMS for Threat Level Determination

Auteurs: Han Wang, Murathan Kurfalı, Alfonso Iacovazzi
Publié dans: 2025 IEEE International Conference on Data Mining Workshops (ICDMW), 2026, ISSN 2375-9259
Éditeur: IEEE
DOI: 10.48550/ARXIV.2609.07582

End-to-End Encryption: Technological and Human Factor Perspectives

Auteurs: Leandros Maglaras, Kitty Kioskli
Publié dans: Lecture Notes in Computer Science, Augmented Cognition, 2025
Éditeur: Springer Nature Switzerland
DOI: 10.1007/978-3-031-93724-8_10

Shielding the Edge: A Practical Architecture for CRA-Compliant and Physically-Robust Ambient Intelligence

Auteurs: Vicenç Porras, Julia Igual, Marisa Catalán, David Sarabia
Publié dans: 2026 Joint European Conference on Networks and Communications & 6G Summit
Éditeur: 2026 Joint European Conference on Networks and Communications & 6G Summit
DOI: 10.5281/ZENODO.20590601

OntoCRA-NS: A Neuro-Symbolic Framework for Explainable and Auditable Cybersecurity Compliance Aligned with EU Regulatory Frameworks

Auteurs: Jasmin Cosic, Admir Jukan, Miroslav Baca
Publié dans: 2026 IEEE Conference on Artificial Intelligence (CAI), 2026
Éditeur: IEEE
DOI: 10.1109/CAI68641.2026.11536562

Strengthening Cybersecurity Certifications Through Robust Chain of Custody Practices

Auteurs: Jasmin Cosic, Admir Jukan, Miroslav Baca
Publié dans: 2024 IEEE International Conference on Cyber Security and Resilience (CSR), 2024
Éditeur: IEEE
DOI: 10.1109/CSR61664.2024.10679449

Peer reviewed articles (9)

A Practical Human-Centric Risk Management (HRM) Methodology

Auteurs: Kitty Kioskli, Eleni Seralidou, Nineta Polemi
Publié dans: Electronics, Numéro 14, 2025, ISSN 2079-9292
Éditeur: MDPI AG
DOI: 10.3390/ELECTRONICS14030486

Enhanced-LLM extraction of CTI from unstructured threat reports. A tough nut to crack or a walk in the park?

Auteurs: Konstantina Psarrou, Panagiotis Bountakas, Dimitris Eleutheriou, Rafail A. Ellinitakis, Konstantinos Fysarakis, Alexios Lekidis, George Spanoudakis
Publié dans: Future Generation Computer Systems, Numéro 183, 2026, ISSN 0167-739X
Éditeur: Elsevier BV
DOI: 10.1016/J.FUTURE.2026.108514

A taxonomy for cybersecurity standards

Auteurs: Eleni-Maria Kalogeraki, Nineta Polemi
Publié dans: Journal of Surveillance, Security and Safety, Numéro 5, 2024, ISSN 2694-1015
Éditeur: OAE Publishing Inc.
DOI: 10.20517/JSSS.2023.50

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

Auteurs: Nihala Basheer, Shareeful Islam, Mohammed K. S. Alwaheidi, Spyridon Papastergiou
Publié dans: Sensors, Numéro 24, 2025, ISSN 1424-8220
Éditeur: MDPI AG
DOI: 10.3390/S24154859

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

Auteurs: Nihala Basheer, Shareeful Islam, Mohammed K. S. Alwaheidi, Spyridon Papastergiou
Publié dans: Sensors, Numéro 24, 2025, ISSN 1424-8220
Éditeur: MDPI AG
DOI: 10.3390/S24154859

Explainable AI based dynamic cybersecurity risk management for cyber insurability

Auteurs: Spyridon Papastergiou, Nihala Basheer, Kostas Lampropoulos, Panayiotis Verrios, Shareeful Islam
Publié dans: International Journal of Information Security, Numéro 25, 2026, ISSN 1615-5262
Éditeur: Springer Science and Business Media LLC
DOI: 10.1007/S10207-025-01189-8

Adoption of Deep-Learning Models for Managing Threat in API Calls with Transparency Obligation Practice for Overall Resilience

Auteurs: Nihala Basheer, Shareeful Islam, Mohammed K. S. Alwaheidi, Spyridon Papastergiou
Publié dans: Sensors, Numéro 24, 2025, ISSN 1424-8220
Éditeur: MDPI AG
DOI: 10.3390/S24154859

Hybrid AI-Based dynamic risk assessment framework with explainable AI practices for composite product cybersecurity certification

Auteurs: Shareeful Islam, Bilal Sardar, Eleni Maria Kalogeraki, Kostas Lampropoulos, Spyridon Papastergiou
Publié dans: International Journal of Information Security, ISSN 1615-5262
Éditeur: Springer Nature
DOI: 10.1007/S10207-026-01218-0

A risk and conformity assessment framework to ensure security and resilience of healthcare systems and medical supply chain

Auteurs: Kitty Kioskli, Elisavet Grigoriou, Shareeful Islam, Andrianos M. Yiorkas, Loizos Christofi, Haralambos Mouratidis
Publié dans: International Journal of Information Security, Numéro 24, 2025, ISSN 1615-5262
Éditeur: Springer Science and Business Media LLC
DOI: 10.1007/S10207-025-01009-Z

Book chapters (1)

Theoretical Foundations of Human Factors and Trustworthiness in Large Language Models

Auteurs: Kitty Kioskli
Publié dans: 2026
Éditeur: CRC/Routage