The problem detected that the project aims to solve is that lack of effective security provision in software engineering impedes development speed, driven by the following factors:
- One bad design choice can lead to hundreds of security bugs,
- 80% of software flaws are introduced during the requirements and design phases (source: McConnell “Code Complete”),
- Insecure libraries, frameworks and 3rd party components introduce problems and vulnerabilities,
- Developers often do not understand how what they are NOT doing is putting their application/service at risk.
These factors lead to re-work and vulnerability remediation time (sunk costs) becoming increasingly expensive the later that security flaws are addressed.
These factors are particularly pertinent in the Internet of Things domain, a fast growing but still fragmented sector of industry and technology. Consumers' privacy is being affected by the surge in devices reaching the market with sub-standard safety provisions, meaning a negative impact on individuals and wider society.
Over the last two decades, the Internet and more broadly cyberspace has had a tremendous impact on all aspects of society. Our daily lives, fundamental rights, social interactions and economies depend on information and communication technology working seamlessly. Information and communications technology has become the backbone of our economic growth and is a critical resource that all economic sectors rely on. Cybersecurity incidents, be it intentional or accidental, are increasing at an alarming pace and could disrupt the supply of essential services to citizens, such as water, healthcare, electricity or telecommunication services. Furthermore, if we follow the emerging markets in the short-medium term it will be characterised by a combination of IoT with Cloud Computing and Big Data creating “smart environments”.
The overall objectives of the project:
- Deep analysis of the potential idea and its global market opportunity: The innovation strategy needs to be truly inspiring and should describe a desirable future state for the company.
- Development of a technological research and innovation roadmap & IPR plan: The innovation strategy is an open process that will be empowered by the effort and expertise of the innovation associate. Secure Secure aims to bring the outside in and raise the bar in terms of ambition and to more quickly get to more mature plans. The innovation strategy will be set up taking under account the available capabilities, technologies and gaps that may need to be filled.
- Development of an innovation strategy: Secure Secure’s main objective within this recruitment is to boost the development of an open and adaptive innovation programme for the company to enter in the IoT market sector.
