I527-290 ESRIF Final Report (WEB).indd - European Commission

Research Needs: Information and Communication Technology, including Financial Systems
RESEARCH NEEDS
"HARD" ICT SECURITY Aff ordable hardening and immunisation of civilian critical cores/nodes and system elements
against various kinds of interferences (i.e. mechanical tampering, EMP/HPM eff ects etc.
CYBERSPACE
SITUATIONAL
AWARENESS,
PREVENTION AND
PROTECTION
Development of methods and procedures to detect suspicious web sites
Continued development of anti-virus programmes extended with online
investigation modules for identification of and attribution to senders of messages
Development of international applicable unique interfaces, protocols, connectors
etc. for trusted exchange of sensitive information
Parameterisation methodologies for detection of suspicious cyberspace behaviour
SECURE IDENTITIES Continuing improvement of publicly available encryption/authentication methods
Development of secure protocols and architectures that verify e-identity/-ies
CYBERSPACE FORENSICS Development of capabilities to trace illegal activity in cyberspace back to its origin. In
addition, enhanced detection methodologies and blocking/fi ltering technologies
Enhanced identifi cation processes and investigative tools
EDUCATION AND
TRAINING
Methods for increasing user awareness on the potential risks of ICT-behaviour
2.3.7 Security of Sites (nuclear, chemical, biological, fi nancial, research)
Securing sites linked to critical infrastructures will still represent points of emphasis due to the nexus character of these sites:
They usually off er privileged access to a system, dispersal potential and maybe even varying control functions. The crucial issue
therefore will continue to be limiting access to site and critical infrastructure functions and mitigating disturbance eff ects. Site
security thus will need advanced protective materials (i.e. «smart» materials), real-time sensor data on people on-site, correlation
with zone access rights, behavioural pattern analysis capabilities, tiered data access and control rights, etc. – in short, tight
monitoring of who is on a site and what he/she is allowed to do, and correlating this to actual sensor feeds. Particular sites, like
radiological or bio-labs, will continue to need state-of-the-art containment and decontamination facilities. Where possible, the
area of surveillance, usually beginning at the perimeter and moving inwards, should be extended outwards to access routes.
Here, behavioural pattern analysis could constitute a useful tool in providing advance warnings.
The already technically possible security level is relatively high, with almost all required capabilities existing at least in theory. But the
degree of implementation varies vastly: Where tight regulation is in place (e.g. nuclear or bio-lab sites), standards are generally enforced
and resulting in a comparably high level of security. Gaps identifi ed are therefore in the area of security implementation, and have been
identifi ed for example in the area of hazardous materials detection (CBRNE) and data fusion capabilities in large scale sites.
Research Needs: Security of Sites
DETECTION AND
VERIFICATION OF
INTRUSIONS AND
INCIDENTS
RESEARCH NEEDS
Continuous improvement of novel indicators, moving beyond classic sensor
technologies, for situational awareness and alerting
Extension of surveillance to access routes (while in line with privacy and individual
rights protection)
Psychological research to detect and potentially trigger-reveal malicious intent (i.e. via
bio-/psychosomatic reaction triggers
79