1. WISTP workshop Aljosa Pasic Atos Origin Trust, Security and Dependability in ICT – FP7

2. WISTP - 1 1.1 The Network of the Future 1.2 Service and Software Architectures, Infrastructures and Engineering 1.3 ICT in support of the networked enterprise Secure, Dependable and Trusted Infrastructures 1.4 Secure, Dependable and Trusted Infrastructures 1.5 Networked Media 1.6 New Paradigms and Experimental Facilities Critical Infrastructure Protection 1.7 Critical Infrastructure Protection Joint initiative with the Security-FP7 Theme Joint initiative with the Security-FP7 Theme Challenge 1: The Objectives Call 1 May 8th 2007

3. WISTP - 2  What are ETPs: Industry-led public-private partnerships that bring together industry, academia and public authorities in areas of strategic economic importance for Europe  5 ETPs related to ICT security, dependability & trust: – – NESSI (www.nessi-europe.com) software and trusted services – – eMobility (www.emobility.eu.org) terrestrial mobile & wireless communications – – ARTEMIS (www.artemis-office.org) embedded systems – – NEM (www.nem-initiative.org) networked and electronic media – – ISI (www.isi-initiative.eu.org) satellite communications European Technology Platforms www.nem-initiative.org www.emobility.eu.org www.isi- initiative.eu.org/ www.nessi- initiative.org www.artemis-office.org Large Scale EU Partnerships joining the future

4. WISTP - 3 NESSI & ESFORS NESSI SC SB NWG TSD ESFORS European Security Forum for Web Services, ESFORS European Technology Platform: Networked European Software & service Initiative, NESSI

5. WISTP - 4 Motivation  Demand for Secure software is much higher than available security expertise  New complex scenarios introduce security issues not addressed by conventional processes  Security properties difficult to measure and it is also difficult to evaluate their “compositional effects”  Security segmentation and market definitions are blurring

6. WISTP - 5 TSD topics in NESSI WG and SRA 1. 1.Security mechanisms for services 2. 2.Trust and dependability 1. 1. Trust analysis, management and monitoring 2. 2. Dependability assessment and monitoring 3. 3.Security and Dependability engineering 4. 4.Identity considerations 5. 5.Multidisciplinary and integrated approach to TSD 6. 6.Security of the human-computer interface 7. 7.Privacy considerations 8. 8.Dependable Architectures 9. 9.Certification, auditing and assurance 10. 10.Openness as a foundation for systems security

7. WISTP - 6 Topics for the call 2 1. 1.Integration of physical and logical security 2. 2.Real Time Risk Management

8. WISTP - 7 Topics for the call 2 Integration of physical and logical security - -Multiple sensors deliver too much info over SOA - -Autoconfiguration, clustering, filtering... - -Complex event processing - -Correlation over distributed databases - -etc

9. WISTP - 8 Topics for the call 2 Real Time Risk Management - -Extraction of context - -Predictive security - -Trust Inclinations and Behavioral analysis - -RA/RM interoperability - -Metrics and measurments - -etc

10. WISTP - 9 Next steps   Workshop in Maribor (Slovenia), July 10-11th   Input for NESSI SRA & ICT workprogramme 2009-2010   Involvement of other ETP (NEM, eMobility, ISI, Artemis): common and complementary security issues   Closer cooperation with national platforms & ENISA

11. WISTP - 10 Contact Aljosa Pasicaljosa.pasic@atosorigin.com Trust, Dependability and Security cannot be “ bolted on ”, it should be “ woven in ”.