Section: Partnerships and Cooperations

European Initiatives

The PANOPTESEC project (http://www.panoptesec.eu ) started on the 1st of November 2013. It deals with the automated and assisted security management of IT and SCADA system. The main objective of PANOPTESEC is to provide an integrated solution that will allow to efficiently monitor SCADA systems, detect intrusions and react to them. To that end, it encompasses many of the research topics that are addressed by the CIDRE team: alerts aggregation and correlation, policy-aware intrusion detection, architecture-aware intrusion detection, automated trust management, trust-based automated reaction and visualization.

The CIDRE team is involved in the project on all of these aspects. The partners are:

• REHA (BE),

• Alcatel-Lucent Bell Labs France (FR),

• Epistematica (IT),

• The University of Rome (IT),

• the University of Hamburg (GE),

• the Institut Mines-Telecom (FR),

• ACEA (IT),

• Supélec (FR).

This year, our work focused on requirements and design. CIDRE was the WP leader of WP2 - Deficiency and Requirement Analysis and was also particularly involved in WP4 - Data Collection and Correlation, WP5 - Dynamic Risk Management and WP6 - Visual Analytics and Display. In WP2, we produce an document presenting the state of the art and current limitations in the fields of security data collection and correlation, mission impact evaluation, threat assessment, automated and semi-automated reaction and visualization and interaction. We also produced an operational requirement analysis. In WP4, we produced a document presenting the system requirements for data collectin and low-level correlation. In WP5, we produced a document presenting the system requirements for risk evaluation and dynamic risk management. In WP6, we produced a document presenting visualization challenges and requirements in the context of PANOPTESEC. More generally, we also contributed to the design and architecture of what will be the PANOPTESEC system.