Founded by Comunidad Autónoma de Madrid. CIBERDINE. S2013/ICE-3095

Cofunded by the European Union FEDER funds

Research Groups: COSEC –Coordinador– (Universidad Carlos III de Madrid); AIDA (Universidad Autónoma de Madrid), GICSI (Consejo Superior de Investigaciones Científicas).

Associates Companies and Institutions: Mando Conjunto de la Ciberdefensa (MCCD); Centro Universitario de la Guardia Civil (CUGC); Centro Criptológico Nacional/Centro Nacional de Inteligencia (CCN/CNI); INDRA.

Abstract

This project aims at strengthening our capabilities to prevent, detect, and respond to cyberattacks by developing techniques that improve situational awareness and cater for a dynamic threat management. To do so, we propose an interdisciplinary research program that tackles three important challenges in cybersecurity research.

Firstly, interdependences among networks and information systems are forcing us to adopt cooperative strategies where entities of a very different nature exchange information about vulnerabilities, threats, actors, tactics, ongoing incidents, countermeasures, etc. However, organizations are extremely reluctant to openly share such information. This calls for models and technologies that facilitate sharing by determining what to share, when, with whom, as well as reasoning about the repercussions of sharing confidential data. Secondly, an improved defense capability requires a deeper and more intelligent analysis of all events that take place in the network. This requires to adapt, and develop where necessary, Big Data technologies to analyze massive amounts of security­related information.

Finally, an effective threat management system needs to put in context available information, automatically derive dynamic risk levels for all systems, and support decisions about the selection and deployment of optimal countermeasures.