Network and Information Security Steering Group (NISSG) - CEN 1 28 June 2006 What Needs To Be Implemented In Order To Improve Pan-European Security Mechanisms Jan Sjoerd de Vries European Commission DG ENTR-H4 Creating Interoperability Through Technological Development

Network and Information Security Steering Group (NISSG) - CEN 2 28 June 2006 Europe is facing new threats, more diverse, less predictable – New York September 11, Madrid March 11, London summer 05, ……… EU Enlargement leads to increased population, increased territory and direct borders with less stable regions Need to invest in a European security culture supported by a credible EU industry Need to address fragmentation and capitalise on existing RTD activities, capabilities and competences Need to develop synergies between civil and military research, between public and private sector Need to stimulate coherence, coordination and investment Security challenges today:

Network and Information Security Steering Group (NISSG) - CEN 3 28 June 2006 Why EU Security Research ? To support CFSP and to achieve a high level of security within a EU wide area of Justice, Freedom and Security. To contribute to developing technologies and capabilities in support of other EU policies such as transport, civil protection, energy and environment. To contribute, through technology and innovation, to reinforcing the competitiveness of European security industry To exploit synergies & dualities between civil / security / defence sectors as well as between public / private research sectors To coordinate efforts and reduce fragmentation & duplication To stimulate investment in technology (Barcelona objective of 3% of GDP for research) and hence contribute to the Lisbon objective

Network and Information Security Steering Group (NISSG) - CEN 4 28 June 2006 PREPARATORY ACTION on Security Research (PASR) An immediate response from the Commission to the requests coming from the Council, from the European Parliament and from industry. With the ultimate goal of preparing the a fully- fledged programme to advance security of European Citizens through research and technology from 2007

Network and Information Security Steering Group (NISSG) - CEN 5 28 June 2006 European Security Research: The Next Steps (Sept 2004) GoP report Research for a secure Europe (March 2004) A set of coherent initiatives time Towards an EU Defence Equipment Policy (March 2003) Preparatory Action for Security Research – PASR ( ) European Security Research within FP 7 ( ) ESRAB ESRAB = European Security Advisory Board

Network and Information Security Steering Group (NISSG) - CEN 6 28 June 2006 PASR Three calls: 15 M budget each and ~15x over-subscribed Participants from EU25 + EEA (2005 & 2006) No classified information such as EU confidential, EU secret, EU top secret Evaluation with assistance of independent external evaluators, mainly from Member States Results Projects 123 (6)120 (7)121 (~8) Supporting activities 50 (6)36 (5)44 (~7) Total 173 (12)156 (12)165 (~15)

Network and Information Security Steering Group (NISSG) - CEN 7 28 June 2006 Project priority missions 1.Protection of networked systems 2.Protection against terrorism (including bio- terrorism and incidents with biological, chemical and other substances) 3.Enhancing crisis management 4.Interoperability and integrated systems 5.Improving situation awareness In addition: Supporting activities for roadmaps, networks, research infrastructures, SMEs, studies, etc.

Network and Information Security Steering Group (NISSG) - CEN 8 28 June 2006 Participation of stakeholder groups in PASR-2004 & submitted ranked list

Network and Information Security Steering Group (NISSG) - CEN 9 28 June 2006 European Security Research: The Next Steps (Sept 2004) GoP report Research for a secure Europe (March 2004) A set of coherent initiatives time Towards an EU Defence Equipment Policy (March 2003) Preparatory Action for Security research – PASR ( ) European Security Research within FP 7 ( ) ESRAB

Network and Information Security Steering Group (NISSG) - CEN June 2006 General Principles for Security Research Dual Objective: –Contributing to the security of citizens –Industrial competitiveness Individual rights, public liberties and democratic values to be taken into account Activities to be mission-oriented in order to develop technologies necessary to meet capability requirements Activities to complement & integrate technology and system- oriented research carried out in other themes Programme to be flexible to accommodate unknown future security threats and possible new policy requirements. Cross-fertilisation with other research sectors and development of multi-purpose technologies to be stimulated Cooperation between providers (industry) and users (public authorities) of security solutions to be encouraged

Network and Information Security Steering Group (NISSG) - CEN June Main missions 1.Protection against terrorism and crime –Technology solutions for threat awareness (e.g. CBRN) –Detection, prevention, identification, protection, neutralisation and containment of effects of terrorism & crime 2.Security of infrastructures and utilities –Analysing & securing existing & future infrastructures, systems and services 3.Border security –Technologies & capabilities to enhance security of land & coastal boarders, including border control & surveillance issues 4.Restoring security in case of crisis –Technologies to support emergency management operations, inter- organisational coordination & communication, distributed architectures & human factors

Network and Information Security Steering Group (NISSG) - CEN June Cross-cutting areas 1.Security Systems Integration & Interoperability –Technologies to enhance interoperability of systems, equipment, services & processes –Organisation, protection of confidentiality & integrity of information, traceability of transactions, processing 2.Security and Society –Socio economic aspects related to crime, perception of security, ethics, privacy, societal foresight –Safeguarding privacy & liberties, vulnerabilities, new threats, management & impact assessment of consequences 3.Security Research Coordination & Structuring –Coordination of security research efforts, development of synergies (civil/security/defence), legal conditions, use of infrastructures

Network and Information Security Steering Group (NISSG) - CEN June 2006 Demonstration projects Integration Projects Capability projects A Low Maturity Level - System development - Mission specific - Combination of capabilities, i.e. - intelligent urban environment observation, Abnormal behaviour detection, Sea border surveillance, Network enabled Command & Control, etc - Systems of Systems validation - Multi-mission - Combination of project results, i.e. -Integrated border management system, Aftermath Crisis management system, etc - Capability development, i.e. - risk assessment, modelling, training & excercises, detection, identification & authentication, information management, etc. Missions High Route 3Route 2Route 1 BCDEFGH Start with capabilities and projects - Phase in larger projects consistent with EC funding curve proposal Research Paths

Network and Information Security Steering Group (NISSG) - CEN June 2006 Relations with the EDA Common objective of the cooperation: increase the efficiency of EU action by encouraging synergies/avoiding duplication Full association of the EDA in all Commission initiatives and reciprocally ESRAB will advise the Commission on the substance and the implementation of security part of FP7 at the level of the specific program and the work program EDA participant in ESRAB will be the central coordination focal point to ensure coordination

Network and Information Security Steering Group (NISSG) - CEN June 2006 Complementarity Principle of Complementarity –to other parts of FP7 –to other activities in the EU Security-mission oriented research Technological development in so far the application of these technologies are security specific Bridging the gap between civil & defence & security research

Network and Information Security Steering Group (NISSG) - CEN June 2006 Main messages Security is pre-condition for Europes growth and competitiveness Technology alone will not solve all security problems but security without the use of technology is impossible Security research will centre on meeting commonly defined end-user requirements Research with civil application focus but full transparency with EDA Need for balance between protection of civil liberties/freedoms and security needs Research is not an end it itself – standards, regulation etc..

Network and Information Security Steering Group (NISSG) - CEN June 2006 Security Research Roadmap Continue Preparatory Action PASR (2006) Prepare security research agenda for FP7, specific programme and overall governance with the help of –ESRAB –other security user DGs within the Commission –EDA, and –in consultation with MS Define cooperation with EDA Establish specific implementation rules (e.g. contract aspects, funding level, handling of classified information, participation) FP7 approval: end of 2006 Launch of first call: 2007

Network and Information Security Steering Group (NISSG) - CEN June 2006 More Information on EU Security Research website Help Desk PASR