Project description
Advanced tools for disrupting cybercrime operations
Cybercriminals pose a serious threat to our societies by spreading disinformation or malicious software that infects computers. Computer law enforcement agencies (LEAs) and approved entities (CERTs and CSIRTs) are working to combat these growing Crime-as-a-Service (CaaS) operations. The EU-funded SafeHorizon project aims to disrupt CaaS by gathering intelligence from various sources, including internet-facing services, public dumps and leaks, and datasets from law enforcement agencies and security providers. The project will use machine learning to identify correlations and extract evidence for court use. SafeHorizon will actively search for leaks of illegal services, forums, and software to support LEAs. It will deliver user-friendly tools, a monitoring platform, a correlation engine, and datasets and notebooks.
Objective
SafeHorizon offers computer law enforcement agencies (LEAs), emergency response teams (CERTs), and computer security incident response teams (CSIRTs) a toolbox with underdevelopment and improved open-source solutions that will be simple to plug-and-play, maintain, and adapt. SaferHorizon aims to disrupt CaaS by harnessing intelligence collected from internet-facing services (the clear, deep, and dark web), public dumps and leaks (from ransomware groups and hacking forums and channels), as well as datasets from LEAs and security providers, and using machine learning (ML) to identify correlations and extract actionable evidence that can be used in court. Beyond crawling for information, SafeHorizon will actively search for possible leaks of information on illegal services, forums, and software that would allow LEAs to track down users, developers, and operators. SafeHorizon will deliver i) a toolkit that is broken down into individual and interoperable easy-to-use tools (in the form of Docker containers), ii) a monitoring platform that integrates the output of these tools, iii) a correlation engine to find the connections among diverse and big datasets, and iv) datasets and notebooks that will be shared with all EU LEAs and vetted organisations and companies to enable the easy uptake and processing of data to deliver tangible results. Moreover, SafeHorizon aims to give cybercriminals a taste of their own medicine by, e.g. spreading disinformation on hacking, carding, forums and channels to dismantle their rings of trust.
Fields of science (EuroSciVoc)
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques.
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques.
- natural sciencescomputer and information sciencessoftware
- social scienceslawlaw enforcement
- natural sciencescomputer and information sciencesartificial intelligencemachine learning
- natural sciencescomputer and information sciencescomputer security
You need to log in or register to use this function
Programme(s)
Funding Scheme
HORIZON-RIA - HORIZON Research and Innovation ActionsCoordinator
151 25 Maroussi
Greece