ICT for Societal Challenges - European Commission - Europa

Threat monitoring and security information sharing
Combating cyber-crime becomes increasingly hard, for multiple reasons:
• Malicious software is designed to defeat today’s best practices from
technological and economic points of view.
• Organizations are consolidating malicious activities into profitable professional
endeavours.
A lot can be gained by exchanging information on vulnerabilities or attacks. However,
private sector and national security authorities are reluctant to share information
unless they have a system they can fully trust. These limitations have prevented
the emergence of an open standard investigation framework for consistent and
systematic malware analysis.
In this field, the WOMBAT project aimed at providing new means to understand the
existing and emerging threats that are targeting the Internet economy and the net
citizens. The acquired datasets and knowledge was shared with all interested security
actors (ISPs, CERTs, security vendors, etc.),
enabling them to make sound security investment
decisions and to focus on the most dangerous
activities first. Special care was devoted to impact
the level of confidence of the European citizens in
the net economy by leveraging computer security
awareness in Europe. The Wombat results are
now being successfully used in a number of
applications and have given rise to additional
international research and development activities.
Wombat
The project concentrated on:
• real time gathering of a diverse set of security related raw data
• enrichment of this input by means of various analysis techniques, and
• root cause identification and understanding of the phenomena under scrutiny
http://www.wombat-project.eu/
Funded by the Seventh Framework Programme (FP7)
Duration: 2008-2011
58