Building Trust in Ecosystems and Ecosystem Components

Informations projet

BIECO

N° de convention de subvention: 952702

DOI

10.3030/952702

Projet clôturé

Date de signature de la CE 21 Août 2020

Date de début 1 Septembre 2020

Date de fin 31 Août 2023

Financé au titre de

• INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)

Coût total

€ 4 999 607,50

Contribution de l’UE

€ 4 999 607,50

Coordonné par

UNINOVA-INSTITUTO DE DESENVOLVIMENTO DE NOVAS TECNOLOGIAS-ASSOCIACAO
Portugal

CORDIS fournit des liens vers les livrables publics et les publications des projets HORIZON.

Les liens vers les livrables et les publications des projets du 7e PC, ainsi que les liens vers certains types de résultats spécifiques tels que les jeux de données et les logiciels, sont récupérés dynamiquement sur OpenAIRE .

Livrables

Documents, reports (25)

Report on the identified security and privacy metrics and security claims to evaluate the security of a system

Identification of the metrics and claims to assess the security of an ICT system in an objective and measurable way

Dissemination Strategy - Initial Version

Plan and Dissemination activities including a plan for frequent updates

Updated Report of the tools for vulnerability detection and forecasting

This deliverable provides the description of the prototypes developed for detecting and forecasting vulnerabilities

BIECO Assessment report

It will comprise the assessment done during the demonstrators cases and at the end it will include the final assessment and recommendations for the solution refinements in the post project period when the final commercialisation will be prepared

Updated Report of the tools for vulnerabilities propagation

This deliverable provides the description of the prototype developed to characterize the propagation of vulnerabilities across the ICT supply chain

BIECO Assessment methodology

Methodology detailing which tests will be performed to validate the projects results how the tests will be carried out and by whom describing how the participants will be selected The first version a will be issued at month 12 after the concept is defined and a full version b will be issued after the requirement specifications and the business cases are defined

Final version of the simulation environment and monitoring tools

This deliverable contains mature solutions ready to be implemented and validated

Blockly4SoS model and simulator

This deliverable includes the Blockly4SoS model including the attack graphs and the Blockly4SoS simulator that is used to test the attack paths

Project Quality Manual

The project quality will be based on a set of rules defined in the guidelines

Risk Assessment and additional requirements

This deliverable contains the description of the dynamic risk analysis of security and safety threads

Security certification methodology development

Implementation of the methodology through the tools defined within the project to provide evidence based security certification

Report on the state of the art of vulnerability management

This deliverable reports on the current state of the art and forms the basis for further development

Project Requirements

This deliverable describes the requirements of the project in terms of delivered artefacts

Overall framework architecture design (1st Draft)

This document includes all the major aspects of the BIECO architecture as defined in T23

First version of the simulation environment and monitoring solutions

This deliverable will contain preliminary solutions ready to be implemented and validated

Report of the tools for vulnerability detection and forecasting

This deliverable provides the description of the prototypes developed for detecting and forecasting vulnerabilities

Dissemination Strategy - Updated Version

Plan and Dissemination activities including a plan for frequent updates

Blockly4SoS user guide.

This deliverable represents the user guide of the Blockly4SoS at the light of the new features added

Dissemination Strategy - Final Report

Plan and Dissemination activities including a plan for frequent updates

Security certification methodology definition

Definition and description of the security certification methodology and its different phases and interconnections

Report of the tools for vulnerabilities propagation

This deliverable provides the description of the prototype developed to characterize the propagation of vulnerabilities across the ICT supply chain

Update of Data Management Plan

The Data Management Plan DMP will be set up according to the special needs of the project and will act as a monitoring system to keep track of IP issues and open research data for the H2020 pilot

BIECO verification and testing strategy

Definition of a testing and integration strategy for the individual components as well as the unified BIECO platform

Overall system architecture Update (Final)

This deliverable presents the final version of the envisioned framework architecture

Mitigations identification and their design

This deliverable details and architect the approach to define mitigations

Open Research Data Pilot (1)

Data Management Plan

The Data Management Plan DMP will be set up according to the special needs of the project and will act as a monitoring system to keep track of IP issues and open research data for the H2020 pilot

Publications

Other (1)

BIECO, un approccio olistico alla cybersecurity (BIECO and holistic approach for the cybersecurity)

Auteurs: Eda Marchetti
Publié dans: Italian newspaper “il sole 24 ore” special insert “SCENARI”, Numéro daily (published 28th of February 2022), 2022, Page(s) 9
Éditeur: Gruppo 24 ORE

Conference proceedings (17)

Basic Aspects in Redundancy-Based Intrusion Tolerance

Auteurs: Felicita Di Giandomenico, Giulio Masetti
Publié dans: 14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021). CISIS - ICEUTE 2021. Advances in Intelligent Systems and Computing, vol 1400., Numéro 23 September 2021, 2021, ISBN 978-3-030-87872-6
Éditeur: Springer, Cham
DOI: 10.1007/978-3-030-87872-6_19

A Comparative Study of the Most Important Methods for Forecasting the ICT Systems Vulnerabilities

Auteurs: O. Cosma, M. Macelaru, P. C. Pop, C. Sabo, I. Zelina
Publié dans: 14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021), Numéro 1400, 2022, Page(s) 224-233, ISBN 978-3-030-87871-9
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-87872-6_22

A Survey on the State of the Art of Vulnerability Assessment Techniques

Auteurs: Eva Sotos Martínez, Nora M. Villanueva and Lilian Adkinson Orellana
Publié dans: 14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021). CISIS - ICEUTE 2021. Advances in Intelligent Systems and Computing, vol 1400., Numéro 22 September 2021, 2021, Page(s) 203-2013, ISSN 978-3-030-87871-9978-3-030-87872-6
Éditeur: Springer, Cham
DOI: 10.1007/978-3-030-87872-6_20

Out-of-sync Schedule Robustness for Time-sensitive Networks

Auteurs: Silviu S. Craciunas, Ramon Serna Oliver
Publié dans: 17th IEEE International Conference on Factory Communication Systems (WFCS), Numéro 1905, 2021, Page(s) 8, ISBN 978-1-6654-2478-3
Éditeur: IEEE
DOI: 10.1109/wfcs46889.2021.9483602

Goals within Trust-based Digital Ecosystems

Auteurs: Emilia Cioroaica, Akanksha Purohit, Barbora Buhnova, and Daniel Schneider
Publié dans: 2021 IEEE/ACM Joint 9th International Workshop on Software Engineering for Systems-of-Systems and 15th Workshop on Distributed Software Development, Software Ecosystems and Systems-of-Systems (SESoS/WDES), Numéro 3rd of June 2021, 2021, Page(s) 1-7, ISBN 978-1-6654-4561-0
Éditeur: IEEE
DOI: 10.1109/sesos-wdes52566.2021.00006

Predictive Simulation for Building Trust Within Service-Based Ecosystems

Auteurs: Emilia Cioroaica, Said Daoudagh, Eda Marchetti
Publié dans: 2022, Page(s) 34-37
Éditeur: IEEE

GRADUATION: A GDPR-based Mutation Methodology

Auteurs: Said Daoudagh, Eda Marchetti
Publié dans: Quality of Information and Communications Technology. QUATIC 2021. Communications in Computer and Information Science, vol 1439, Numéro 08 September 2021, 2021, Page(s) 311-324, ISBN 978-3-030-85347-1
Éditeur: Springer, Cham
DOI: 10.1007/978-3-030-85347-1_23

BIECO Runtime Auditing Framework

Auteurs: Antonello Calabrò, Emilia Cioroaica, Said Daoudagh, Eda Marchetti
Publié dans: 14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021). CISIS - ICEUTE 2021. Advances in Intelligent Systems and Computing, vol 1400, Numéro 22 September 2021, 2021, Page(s) 181-191, ISSN 978-3-030-87871-9978-3-030-87872-6
Éditeur: Springer, Cham
DOI: 10.1007/978-3-030-87872-6_18

Comparison of Safety and Security Analysis Techniques

Auteurs: Emilia Cioroaica, Smruti Ranjan Kar, and Ioannis Sorokos
Publié dans: 14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021). CISIS - ICEUTE 2021. Advances in Intelligent Systems and Computing, vol 1400, Numéro 22 September 2021, 2021, Page(s) 234-242, ISBN 978-3-030-87872-6
Éditeur: Springer, Cham
DOI: 10.1007/978-3-030-87872-6_23

StaDRE and StaDRo: Reliability and Robustness Estimation of ML-based Forecasting using Statistical Distance Measures

Auteurs: Mohammed Naveed Akram, Akshatha Ambekar, Ioannis Sorokos, Koorosh Aslansefat, and Daniel Schneider
Publié dans: 2022
Éditeur: Springer

MENTORS - Monitoring Environment for System of Systems

Auteurs: Antonello Calabrò, Said Daoudagh, Eda Marchetti
Publié dans: Proceedings of the 17th International Conference on Web Information Systems and Technologies (WEBIST 2021), Numéro 26 October 2021, 2021, Page(s) 291-298, ISBN 978-989-758-536-4
Éditeur: SciTePress
DOI: 10.5220/0010658900003058

The GDPR Compliance and Access Control Systems: Challenges and Research Opportunities

Auteurs: Said Daoudagh, Eda Marchetti
Publié dans: Proceedings of the 8th International Conference on Information Systems Security and Privacy - ICISSP, Numéro 09 February 2022, 2022, Page(s) 571-578, ISBN 978-989-758-553-1
Éditeur: SciTePress
DOI: 10.5220/0010912300003120

Bridging Trust in Runtime Open Evaluation Scenarios

Auteurs: Emilia Cioroaica, Barbora Buhnova, Eda Marchetti, Daniel Schneider, Thomas Kuhn
Publié dans: Model and Data Engineering in the Digitalization Era. MEDI 2021. Communications in Computer and Information Science, vol 1481, Numéro LNCS, volume 12732, 2021, Page(s) 112-120, ISBN 978-3-030-87657-9
Éditeur: Springer, Cham
DOI: 10.1007/978-3-030-87657-9_9

A MDE Tool for Security RiskAssessment of Enterprises

Auteurs: Enrico Schiavone, Nicola Nostro, Francesco Brancati
Publié dans: INDUSTRY TRACK - LATIN-AMERICAN SYMPOSIUM ON DEPENDABLE COMPUTING (LADC), 10. , 2021, Florianópolis., Numéro 22 November 2021, 2021
Éditeur: SBC
DOI: 10.5753/ladc.2021.18530

Forecasting the Number of Bugs and Vulnerabilities in Software Components using Neural Network Models

Auteurs: Ovidiu Cosma, Petrică Pop, Cosmin Sabo, Laura Cosma
Publié dans: 2022
Éditeur: Springer

The BIECO Conceptual Framework Towards Security and Trust in ICT Ecosystems

Auteurs: Ricardo Peres, Lilian Adkinson, Emilia Cioroaica, Eda Marchetti, Enrico Schiavone, Sara Matheu, Ovidiu Cosma, Radoslaw Piliszek, Jose Barata.
Publié dans: The 33rd IFIP International Conference on Testing Software and Systems (IFIP-ICTSS), Numéro 10-11 November 2021, 2021
Éditeur: Springer, Cham

GROOT: A GDPR-Based Combinatorial Testing Approach

Auteurs: Said Daoudagh and Eda Marchetti
Publié dans: 2021, Page(s) 210-217
Éditeur: Springher

Peer reviewed articles (4)

LPWAN and Embedded Machine Learning as Enablers for the Next Generation of Wearable Devices

Auteurs: Ramon Sanchez-Iborra
Publié dans: Sensors, Numéro Vol 21 Numéro 15, 2021, ISSN 1424-8220
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s21155218

On Autonomous Dynamic Software Ecosystems

Auteurs: Rafael Capilla,Emilia Cioroaica, Barbora Buhnova, and Jan Bosch
Publié dans: IEEE Transactions on Engineering Management, Numéro 27 October 2021, 2021, Page(s) 1-15, ISSN 1558-0040
Éditeur: IEEE
DOI: 10.1109/tem.2021.3116873

The Challenges of Software Cybersecurity Certification

Auteurs: José Luis Hernández-Ramos, Sara Nieves Matheu-García, Antonio Skarmeta
Publié dans: IEEE Security & Privacy, Numéro Vol. 19, Numéro 1, 2021, Page(s) 99-102, ISSN 1558-4046
Éditeur: IEEE
DOI: 10.1109/msec.2020.3037845

Defining the Behavior of IoT Devices Through the MUD Standard: Review, Challenges, and Research Directions

Auteurs: José Luis Hernández-Ramos, Sara Nieves Matheu-García, Angelo Feraudo, Gianmarco Baldini, Jorge Bernal-Bernabe, Poonam Yadav, Antonio Skarmet Paolo Bellavista
Publié dans: IEEE Access, Numéro Vol 9, 2021, Page(s) 126265 - 126285, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2021.3111477

Book chapters (1)

Data Based Message Validation as a Security Cornerstone in Loose Coupling Software Architecture

Auteurs: Oliviu Matei, Rudolf Erdei, Daniela Delinschi, Laura Andreica
Publié dans: 14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021), Numéro 1400, 2022, Page(s) 214-223, ISBN 978-3-030-87871-9
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-87872-6_21

Thesis and dissertations (1)

The GDPR Compliance Through Access Control Systems

Auteurs: Said Daoudagh
Publié dans: ETD Archivio digitale delle tesi discusse presso l'Università di Pisa, Numéro 20 July 2021, 2021
Éditeur: University of Pisa