Collaborative and Confidential Information Sharing and Analysis for Cyber Protection

Informazioni relative al progetto

C3ISP

ID dell’accordo di sovvenzione: 700294

DOI

10.3030/700294

Progetto chiuso

Data della firma CE 22 Aprile 2016

Data di avvio 1 Ottobre 2016

Data di completamento 30 Settembre 2019

Finanziato da

• Secure societies - Protecting freedom and security of Europe and its citizens

Costo totale

€ 5 000 045,00

Contributo UE

€ 4 176 445,63

Coordinato da

CONSIGLIO NAZIONALE DELLE RICERCHE
Italy

Periodic Reporting for period 2 - C3ISP (Collaborative and Confidential Information Sharing and Analysis for Cyber Protection)

Periodo di rendicontazione: 2017-10-01 al 2019-09-30

Sintesi del contesto e degli obiettivi generali del progetto

C3ISP provides a flexible framework allowing confidential and collaborative information sharing and analysis in order to ease cyber protection among relevant stakeholders.

We envision a flexible and confidential framework for managing information shared for security analytics. In our scenario information providers are also the consumers of the analysis results. Hence, we will refer these entities as information prosumers.
The framework will allow the prosumers to define their Data Sharing Agreements (DSAs) in order to express their contractual requirements for providing and consuming their information and possibly compulsory law obligations as well as specific anonymization/encryption actions to be performed on data.


C3ISP has the following objectives:
Objective 1: build a flexible, confidential and privacy-preserving framework for managing data sharing agreements, for security purposes, by different prosumers
Objective 2: define data analytics for security services in a collaborative and confidential way
Objective 3: improve, mature and integrate several tools provided by C3ISP partners and tailor those to the specific needs of the C3ISP platform and Pilots
Objective 4: apply the framework to four pilots for:
1. Internet Service Providers (ISPs) Pilot;
2. Governmental CERT Pilot;
3. Enterprise Pilot;
4. SMEs Pilot.
Objective 5: promote and ease the exploitation, communication, standardization, dissemination and adoption of its results.

Lavoro eseguito dall’inizio del progetto fino alla fine del periodo coperto dalla relazione e principali risultati finora ottenuti

All the planned milestones have been achieved and these are the main results in the first year:
• All the management activities have been carried out, including financial distribution and one amendment requested by the partners. More than 6 project meetings were organized by the partners;
• All the requirements from the pilots have been collected and elaborated;
• The main C3ISP architectural features have been defined using the previous requirements;
• All the pilots have their own architecture and embed the C3ISP main architectural components;
• Several components of the C3ISP architecture started the maturation phase;
• Several publications were produced in the topics of the project;
• A scientific book on collaborative security has been agreed with Springer, a main global publisher, due to the interests in the topics of the project.

Progressi oltre lo stato dell’arte e potenziale impatto previsto (incluso l’impatto socioeconomico e le implicazioni sociali più ampie del progetto fino ad ora)

The project will deliver an innovative framework for collaborative information sharing and anaylitics for cyber protection. It develops a framework where user is empowered with control and capability to define the leve of privacy and confidentiality for its data. The framework puts together and integrates several different techniqus and approachs from data usage contorl to differential privacy and homomorphic computing. In all these areas there is progress beyond the state f the art. Several improvements have been developed duirng the first year as the many publications testify.

flyer