Project description
An innovative runtime assurance framework for securing CPS supply chains
As the demand for increasingly autonomous Cyber-Physical Systems (CPSoS) grows, so does the need for advanced certification mechanisms that can enhance their security posture without compromising their safety. Existing validation methods require exhaustive offline testing of every possible state scenario prior to fielding the system. The EU-funded ASSURED project is introducing an innovative, formally verified runtime assurance framework for securing CPS supply chains: by leveraging edge computing ecosystems, a universal distributed solution will be developed for the transformation of CPSoS into distributed safety-critical CPSoS solutions, hosting multiple mixed-criticality applications. The project’s approach will ensure a smooth transition and advancement beyond current limiting strategies towards holistic security (attestation) services that are capable of reducing complex attack surfaces in (near) real-time.
Objective
ASSURED’s vision is to introduce a ground-breaking policy-driven, formally verified, runtime assurance framework in the complex CPS domain. As the demand for increasingly autonomous CPSs grows, so does the need for certification mechanisms to ensure their safety. Current methods towards software and system validation requires exhaustive offline testing of every possible state scenario PRIOR to fielding the system. In this context, novel assurance services ensure that the control output of such controllers does not put the system or people interacting with it in danger, especially in safety-critical applications as the ones envisaged in the ASSURED Demonstrators. ASSURED leverages and enhances runtime property-based attestation and verification techniques to allow intelligent (unverified) controllers to perform within a predetermined envelope of acceptable behaviour, and a risk management approach to extend this to a larger SoS. ASSURED elaborates over the coordination of deployed TEE agents in horizontal scope, encompassing numerous technologies applicable to everything from edge devices to gateways in the cloud. Such technologies DICE for binding devices to firmware/software, trusted execution environments, formal modelling of protocols and software processes, software attestation, blockchain technology for distributed verification of transactions between system elements and control-flow attestation techniques for enhancing the operational correctness of such devices. In this frame, we consider the mutual verification of system components in distributed multi-operator environments. Our approach ensures a smooth transition and advancement beyond current strategies where security management services are considered in an isolated manner relying on traditional perimeter security and forensics in a “catch-and-patch” fashion without dwelling on the safety of the overall network as a whole, to holistic network security services capable of minimizing attack surfaces.
Fields of science (EuroSciVoc)
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: https://op.europa.eu/en/web/eu-vocabularies/euroscivoc.
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: https://op.europa.eu/en/web/eu-vocabularies/euroscivoc.
- natural sciences computer and information sciences software
- natural sciences computer and information sciences computer security cryptography
- natural sciences computer and information sciences computer security network security
- social sciences sociology governance crisis management
You need to log in or register to use this function
We are sorry... an unexpected error occurred during execution.
You need to be authenticated. Your session might have expired.
Thank you for your feedback. You will soon receive an email to confirm the submission. If you have selected to be notified about the reporting status, you will also be contacted when the reporting status will change.
Keywords
Project’s keywords as indicated by the project coordinator. Not to be confused with the EuroSciVoc taxonomy (Fields of science)
Project’s keywords as indicated by the project coordinator. Not to be confused with the EuroSciVoc taxonomy (Fields of science)
Programme(s)
Multi-annual funding programmes that define the EU’s priorities for research and innovation.
Multi-annual funding programmes that define the EU’s priorities for research and innovation.
-
H2020-EU.2.1.1. - INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)
MAIN PROGRAMME
See all projects funded under this programme
Topic(s)
Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.
Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.
Funding Scheme
Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.
Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.
RIA - Research and Innovation action
See all projects funded under this funding scheme
Call for proposal
Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.
Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.
(opens in new window) H2020-SU-ICT-2018-2020
See all projects funded under this callCoordinator
Net EU financial contribution. The sum of money that the participant receives, deducted by the EU contribution to its linked third party. It considers the distribution of the EU financial contribution between direct beneficiaries of the project and other types of participants, like third-party participants.
8600 Dubendorf
Switzerland
The organization defined itself as SME (small and medium-sized enterprise) at the time the Grant Agreement was signed.
The total costs incurred by this organisation to participate in the project, including direct and indirect costs. This amount is a subset of the overall project budget.