From 1 Sept 2021 to 31 August 2024 progress has been made in the following areas:
- Requirements Analysis, Use Cases and Architecture Design: The Consortium elicited the end-users’ and technical requirements, defined the pilot use cases and produced the initial version of the SECANT architecture. An analysis of the state of the art has been made. We identified the individual components, modules, and tools of SECANT, as well as their mean of validation. Four deliverables have been submitted and three milestones have been achieved.
- Cyber Security Risk Assessment in Connected ICT Ecosystems: During this period, work has been focused on defining the internal architecture and functionalities for each risk assessment component as well as detailed activity and sequence flow diagrams showing both internal functionalities and interactions with the rest of the components of the platform. In parallel, additional subcomponents were introduced to cover better the requirements such as the TVIA internal services and the monitoring agent to facilitate the multi-level monitoring of threats. All tasks in this area have started and progressed with the literature review, technical specifications, interactions and interfaces with the rest of work packages, as well as with the creation of early working versions for demonstration of some components.
- Trusted and Secure Data Sharing: The main advances have been focused on the specification of the components (Trusted and accountability module (TAM), Privacy Toolkit and Decentralized Identity Management (DIM)), specification of their interaction with the other elements in the platform and early implementation of the components. Internal Architectures for these components and functionalities have been specified, and UML flow diagrams have been created. Multiple back end upgrades to IOTA's "integration services" (IS) have been implemented to improve usability and security of the service, the IS are a key component of the TAM as they allow easy access to the IOTA ledgers features. Specification and implementation of the Universal decentralised ID register that will allow interoperable DID management across different ledgers, user stories and data flow have been also developed for the DIM. The API functionality has been rolled into a subcomponent known as the "Data Common Securer" (DCS); Analysis of the actual communication protocols between the end-users' devices to integrate the DCS API's has been performed. The privacy toolkits architecture, including the syntax and the security model and cryptography scheme has been defined.
- SECANT End-User Applications and Training: Work has start on developing security awareness training methodologies and platform relevant to healthcare professionals and clients and to setup virtualised cyber range platform and healthcare-related scenarios including a user interfacing dashboard (for security professionals). Functional and non-functional requirements for these tools have been defined as well as the architecture and the relation between the components and with the others elements of the platform. An initial version of the chatbot app and CSTM has been developed, and a mock-up integration between the Secant End-User Application, CSTM and the Chatbot app. The Cyber range tool has been selected and instantiated. Lastly, it has been produced the initial design of the SECANT Dashboard, including the selected technology stack, technical specifications, the internal tool architecture, the interfaces, and the UI blueprint.
- Dissemination, Communication and Exploitation: the SECANT consortium collectively developed 5 parallel axis: a) means to communicate the project by setting up a webpage, producing marketing material etc, b) means to disseminate the project through participation in international conferences or publishing articles, c) coordination with other parties in order to create some clustering activities, d) producing an exploitation plan in order to prepare the SECANT’s result for the market and e) preparing the standardization procedure of the SECANT’s products.
