Cyber-Resilience Enhancing Authentication and Forensics for Industrial Control Systemscore
CREAF-ICS · Horizon Europe grant · 2026-10-01–2028-09-30
EC contribution
Total cost
Beneficiaries
About the data
Source: CORDIS (official EU open data), Horizon Europe. Framework HORIZON · call HORIZON-WIDERA-2025-TALENTS-01 · scheme HORIZON-TMA-MSCA-PF-EF · topic HORIZON-WIDERA-2025-TALENTS-01-01. CORDIS record →
Objective
Industrial Control Systems (ICSs), integral to modern critical infrastructures, are increasingly exposed to cyber threats. The project, Cyber-Resilience Enhancing Authentication and Forensics for Industrial Control Systems (CREAF-ICS), proposes a defense-in-depth framework that authenticates communication and enables attack forensics for ICSs. For communication authentication, CREAF-ICS develops an in-network, zero-trust strategy to verify communications of all ICS components. Compared to traditional unencrypted and/or high-latency authentication, CREAF-ICS's in-network design enables encrypted and low-latency verification. For attack forensics, CREAF-ICS develops a cross-domain investigation approach that enables the detection of attacks and the tracing of their origins. Moving beyond state-of-the-art attack attributions in individual information domains, CREAF-ICS is capable of identifying the root causes of abnormal behaviors in physical processes and pinpointing the associated malicious activities in hosts of the ICS network. By reinforcing the pre-incident authentication with during-incident forensic results, CREAF-ICS delivers a self-upgrading defense-in-depth framework, enhancing the ICS cyber-resilience while ensuring seamless integration with existing ICS infrastructures.
Beneficiaries (1)
| Organisation | Country | Role | EC contribution | SME |
|---|---|---|---|---|
| UNIVERSITY OF CYPRUS | CY | coordinator | €174,379 |
Get the DFM funding briefing — free
New EU defence calls, tenders and awards in your inbox.
Defence Finance Monitor is an analytical and informational product. Grant data is official CORDIS; payment and subscription happen on DFM Analysis.