An overview of the progress beyond the state of the art made so far along with the expected results until the end of the project as well as their potential impact is presented below:
-Advanced Cybersecurity Analytics Service (ACAS): The benefit of the ACAS architecture is its flexibility, as both the different features and Deep Learning models can be easily added to the structure and integrated into the final solution. Additional experiments will be performed utilizing different datasets to train the existing Deep Learning model, whereas it will be extended by considering different types of attacks and multi class labels.
-Data Models for Cyber Security and Information Exchange Services: An upper-level model based on the interlinking of concepts that exist in current data models was defined in the context of PUZZLE framework. Such a data model represented cybersecurity threats, vulnerabilities and risks and will be used as the main model for information harmonization activities of the data collected by the set of SMEs&MEs.
- Complex Event Processing and Cyber Ranges: By the propose Complex Event Processing mechanism, it is feasible to process events on-line, as they are generated and introduce context as the temporal and causal relations between events. Then, event correlation based on event patterns permits to specify what to detect, instead of how to detect by increasing detection rate, reducing false alarms, and detecting large-scale attack patterns at an early stage.
-Collective and Interactive Data Visualizations: A novel collaborative and cross-platform visual and correlation analytics, personalized end user centric data reusable visualization tools and services supporting all steps of cybersecurity analysis through appropriate interactive visualizations were developed, including both generic components and components tailored for specific security and digital forensics applications.
-Multi Dependency Cyber Physical Risk Assessment & Policy-based Services Deployment: A universal risk analysis and assessment methodology for edge-to-cloud SMEs&MEs protection in multi dependent environments were developed to ensure advanced protection by integrating heterogeneous component-level risk analysis and deploying policy-based cybersecurity services according to their personalized needs.
- Trust Assurance Services: A novel lightweight collective and distributed attestation mechanisms were designed for the bulk attestation of the edge devices and the SME/ME infrastructure assets. Thus, remote services can get assurance of the integrity of a remote platform and, furthermore, detect and blacklist compromised devices.
PUZZLE bring SMEs&MEs in the foreground with the dual role of being the consumers and the producers of the shared data and the services at the same time, while the outcomes from the analysis, insights, events extraction and predictions for future incidents will be made available anonymously for fare, reusable and collaborative know-how, exchange of experience and best practices.
