Descrizione del progetto
Aumentare la resilienza informatica delle PMI
L’UE si impegna a stimolare l’innovazione nei settori relativi a sicurezza informatica, privacy e protezione dei dati. L’obiettivo è rendere l’Europa maggiormente preparata a difendersi in ambito informatico rafforzando la deterrenza, la resilienza e la risposta alle minacce informatiche. Un importante passo da compiere è quello di garantire la sicurezza delle PMI che si affidano sempre più alle reti e ai sistemi informativi per svolgere le proprie attività. Il progetto CyberKit4SME, finanziato dall’UE, svilupperà strumenti volti a consentire alle piccole imprese di diventare più consapevoli dei rischi che corrono da questo punto di vista, nonché di monitorarli, prevederli e gestirli. In particolare, il progetto concepirà strumenti di cifratura e isolamento per proteggere i dati. Verranno inoltre sviluppati strumenti basati sulla tecnologia blockchain per consentire alle PMI di condividere relazioni di intelligence e rapporti sugli incidenti con le squadre di pronto intervento informatico.
Obiettivo
CyberKit4SME aims to democratize a kit of cyber security tools and methods enabling SMEs/MEs to: Increase awareness of cybersecurity risks, vulnerabilities and attacks; Monitor and forecast risks; Manage risks using organisational, human and technical security measures with greater confidence; and Collaborate and share information in a collective security and data protection effort.
Tools developed in the project are: Semi-automated ISO 27005 threat identification and risk mitigation analysis, using a knowledge base of technical and human/organisational risk factors; Encryption and isolation tools to protect data being stored, processed or exchanged; Security information and event management, using multiple data sources for threat detection and diagnosis, Blockchain tools for SMEs/MEs to share intelligence and incident reports with supply chain partners and with CERTs.
CyberKit4SME will make its tools cheaper and more usable by SME/ME, by 1) Exploiting synergies between tools in the kit to simplify the use of each; 2) Sharing information to increase the data available for threat detection and diagnosis at each SME/ME; 3) Embedding intelligence (e.g. machine reasoning and data analytics), to fill gaps in inputs and automate tasks such as risk analysis and security configuration.
The project will also use its tools and cyber range demos to train SMEs/MEs to identify their top threats and recognise and address them with greater confidence. Results will be validated by SME/ME in four critical sectors: Finance, Health Care, Energy and Transport. Outcomes include reducing the time/cost of cyber security awareness and protection, simplifying meeting and demonstrating compliance with NIS Directive and GDPR, protecting distributed assets from cloud services to edge devices, and engaging in secure supply chains with larger organisations. The project will also collaborate with related research projects and disseminate widely in the scientific community and in SME networks.
Campo scientifico
Parole chiave
Programma(i)
- H2020-EU.3.7. - Secure societies - Protecting freedom and security of Europe and its citizens Main Programme
- H2020-EU.3.7.6. - Ensure privacy and freedom, including in the Internet and enhance the societal, legal and ethical understanding of all areas of security, risk and management
- H2020-EU.3.7.4. - Improve cyber security
Argomento(i)
Meccanismo di finanziamento
IA - Innovation actionCoordinatore
93400 Saint Ouen Sur Seine
Francia