Cyber-Trust is an innovative platform, deriving from the integration of different technological components, in order to cope with complicated cyber threats targeting heterogenous IoT systems (e.g. smart homes).
Cyber-Trust system consists of the components, modules and services progressing beyond the SOTA in the cyber-threat intelligence gathering, detection and mitigation framework.
To achieve these objectives, technological solutions and current trends regarding cyber-security and attacks have been analyzed, experts in the field of ICT, cyber-security, LEAs (cybercrime and digital forensic investigators) and blockchain have been consulted and tested the integrated platform. The results proved the capability of the Cyber-Trust platform. During the 2nd pilot we had 33 participants from diverse groups (ISP, LEAs, IoT/Smart Home, Administrators). More specifically twelve from the ISP group, five LEAs, three administrators and thirteen IoT/Smart Home owners. The satisfaction rate was between 74 to 96.2 percentage (well above the project’s KPI-70 percent).
To measure the impact of the platform, the consortium measured 41 KPIs from which 33 were technical oriented, measuring the capabilities of the components and platform as am integrated solution. To efficiently measure most of the KPIs a plethora of attacks were employed:
• Mirai Attack
• Zero-day Attack
• Zitmo Attack
• BlackEnergy
• Zeus + another 10 malware families
• Java-RMI backdoor
• distcc_exec backdoor
• UnrealIRCD backdoor
• Web Tomcat exploit
• Ruby DRb code execution
• Hydra FTP brute force
• Hydra SSH brute force
• Vsftpd exploit
• SMTP User Enumeration
• NetBIOS-SSN
Also, using PCAP files generated from the physical Smart Home of the SPEAR which contains various IoT devices, multisensorial network, PhotoVoltaic system of 10kW for energy production and net metering services the Cyber-Trust platform was tested without any prior testing/training on the data produced by the physical smart home. Five attacks were deployed, Brute force, Fuzzing, DoS-Flooding, Unauthorized access and Function enumeration. Four out of five attacks were successfully identified while three out of five attacks were successfully blocked.
The overall outcome maximised the impact of the Cyber-trust platform against the current trend of cyber-attacks, targeting Smart ecosystems, having great potential on defending the EU citizens from becoming victims.
Thus, Cyber-Trust reached the initial goals providing a multidisciplinary and multidimensional platform which is:
• Enhance detection of sophisticated attacks, targeting IoT ecosystems
• Enhance the mitigation and response time, through automated and semi-automated means, against cyber-attacks
• Enhance the resilience of smart infrastructures against cyber-attacks
• Improve the safety, security and privacy of the EU citizen’s data
• Assisting LEAs and ISPs to tackle security incidents against IoT systems more efficiently
• Improve the time needed in order to identify and exchange data that might contain digital evidences
Finally, eleven components have been made available as Open Source through the project’s repository in GitHub (
https://github.com/CyberTrustProject(si apre in una nuova finestra)).
