aCtive sEcurity foR connecTed devIces liFecYclescore
CERTIFY · Horizon Europe grant · 2022-10-01–2025-09-30
EC contribution
Total cost
Beneficiaries
About the data
Source: CORDIS (official EU open data), Horizon Europe. Framework HORIZON · call HORIZON-CL3-2021-CS-01 · scheme HORIZON-RIA · topic HORIZON-CL3-2021-CS-01-02. CORDIS record →
Objective
Cyber-attacks get more sophisticated every day, thus affecting a large number of IoT-related infrastructures and raising security and privacy concerns of consumers and businesses. Security management of IoT infrastructures encompassing full lifecycle of products and continuous certification are fundamental tools to guarantee a high-level of security, as emphasized by the European Union Agency for Cybersecurity (ENISA) Cybersecurity Act (CSA).CERTIFY defines a methodological, technological, and organizational approach towards IoT security lifecycle management based on (i) security by design support, (ii) continuous security assessment and monitoring (iii) timely detection, mitigation, and reconfiguration, (iv) secure IoT Over-The-Air (OTA) updating, and (v) continuous security information sharing.To ensure the security compliance throughout the lifetime of the device, we propose the design and implementation of a cybersecurity lifecycle management framework for IoT devices. The framework is intended to support the device security management by collecting and sharing relevant security information both internally (via monitoring and self-assessment services) and externally, e.g., by interacting with device manufacturers, threat databases, certification authorities, Information Sharing and Analysis Centres (ISACs), and more. The received information is meant to support the local decision making with respect to the security, monitoring, updating and configuration of the device. Moreover, this information sharing will enable a continuous risk assessment, gathering evidence that could agile future certifications.CERTIFY's provides IoT stakeholders with mechanisms achieving high-level of security. CERTIFY will detect and respond to a wide spectrum of attack, in a collaborative/decentralized fashion. CERTIFY will validate the architecture through cutting-edge use-cases and pave the way towards innovative security in a broad spectrum of IoT environments.
Beneficiaries (13)
| Organisation | Country | Role | EC contribution | SME |
|---|---|---|---|---|
| UNIVERSIDAD DE MURCIA | ES | coordinator | €648,938 | |
| STMICROELECTRONICS SRL | IT | participant | €603,260 | |
| COLLINS AEROSPACE IRELAND, LIMITED | IE | participant | €494,512 | |
| ENGINEERING - INGEGNERIA INFORMATICA SPA | IT | participant | €494,375 | |
| DIGITAL WORX GMBH | DE | participant | €432,500 | Yes |
| TRUST UP SRL | IT | participant | €345,000 | Yes |
| GIOUMPITEK MELETI SCHEDIASMOS YLOPOIISI KAI POLISI ERGON PLIROFORIKIS ETAIREIA PERIORISMENIS EFTHYNIS | EL | participant | €327,500 | Yes |
| RED ALERT LABS | FR | participant | €271,188 | Yes |
| FUNDACION INSTITUTO INTERNACIONAL DE INVESTIGACION EN INTELIGENCIA ARTIFICIAL Y CIENCIAS DE LA COMPUTACION | ES | participant | €191,875 | |
| EUROPEAN CYBER SECURITY ORGANISATION | BE | participant | €188,750 | Yes |
| ADVANCED LABORATORY ON EMBEDDED SYSTEMS SRL | IT | thirdParty | €0 | |
| UNIVERSITAT ZURICH | CH | associatedPartner | — | |
| Trust Square Service AG | CH | associatedPartner | — |
Get the DFM funding briefing — free
New EU defence calls, tenders and awards in your inbox.
Defence Finance Monitor is an analytical and informational product. Grant data is official CORDIS; payment and subscription happen on DFM Analysis.