WISTP workshop Aljosa Pasic Atos Origin Trust, Security and Dependability in ICT – FP7

WISTP The Network of the Future 1.2 Service and Software Architectures, Infrastructures and Engineering 1.3 ICT in support of the networked enterprise Secure, Dependable and Trusted Infrastructures 1.4 Secure, Dependable and Trusted Infrastructures 1.5 Networked Media 1.6 New Paradigms and Experimental Facilities Critical Infrastructure Protection 1.7 Critical Infrastructure Protection Joint initiative with the Security-FP7 Theme Joint initiative with the Security-FP7 Theme Challenge 1: The Objectives Call 1 May 8th 2007

WISTP - 2  What are ETPs: Industry-led public-private partnerships that bring together industry, academia and public authorities in areas of strategic economic importance for Europe  5 ETPs related to ICT security, dependability & trust: – – NESSI ( software and trusted services – – eMobility ( terrestrial mobile & wireless communications – – ARTEMIS ( embedded systems – – NEM ( networked and electronic media – – ISI ( satellite communications European Technology Platforms initiative.eu.org/ initiative.org Large Scale EU Partnerships joining the future

WISTP - 3 NESSI & ESFORS NESSI SC SB NWG TSD ESFORS European Security Forum for Web Services, ESFORS European Technology Platform: Networked European Software & service Initiative, NESSI

WISTP - 4 Motivation  Demand for Secure software is much higher than available security expertise  New complex scenarios introduce security issues not addressed by conventional processes  Security properties difficult to measure and it is also difficult to evaluate their “compositional effects”  Security segmentation and market definitions are blurring

WISTP - 5 TSD topics in NESSI WG and SRA 1. 1.Security mechanisms for services 2. 2.Trust and dependability Trust analysis, management and monitoring Dependability assessment and monitoring 3. 3.Security and Dependability engineering 4. 4.Identity considerations 5. 5.Multidisciplinary and integrated approach to TSD 6. 6.Security of the human-computer interface 7. 7.Privacy considerations 8. 8.Dependable Architectures 9. 9.Certification, auditing and assurance Openness as a foundation for systems security

WISTP - 6 Topics for the call Integration of physical and logical security 2. 2.Real Time Risk Management

WISTP - 7 Topics for the call 2 Integration of physical and logical security - -Multiple sensors deliver too much info over SOA - -Autoconfiguration, clustering, filtering Complex event processing - -Correlation over distributed databases - -etc

WISTP - 8 Topics for the call 2 Real Time Risk Management - -Extraction of context - -Predictive security - -Trust Inclinations and Behavioral analysis - -RA/RM interoperability - -Metrics and measurments - -etc

WISTP - 9 Next steps   Workshop in Maribor (Slovenia), July 10-11th   Input for NESSI SRA & ICT workprogramme   Involvement of other ETP (NEM, eMobility, ISI, Artemis): common and complementary security issues   Closer cooperation with national platforms & ENISA

WISTP - 10 Contact Aljosa Trust, Dependability and Security cannot be “ bolted on ”, it should be “ woven in ”.