The H2020 IRIS project aimed to deliver a framework to support European CERT and CSIRT networks detecting, sharing, responding and recovering from cybersecurity threats and vulnerabilities of IoT and AI-driven ICT systems, in order to minimize the impact of cybersecurity and privacy risks.
Some of the main results achieved have been:
- A set of tools for automated threat analytics for IoT and AI-driven systems operating in Critical Infrastructures, including risk and vulnerability assessment (ref. VDM and CERCA assets of Cyber), monitoring and detection of threats (including network traffic analysis, host-based intrusions, and machine learning algorithms to detect and prevent anomalies and cyber-attacks for IoT-based smart environments and for vision systems in automated vehicles) and digital twin honeypots (with replicas of complex systems, such as LiDAR and Modbus).
- Proof of concept of an innovative Automated AI-based Pentesting Framework based on reinforcement learning for continuous vulnerability discovery and assessment imitating a human pentester behaviour.
Sharing, storing, communicating and collaborating on cyber threat intelligence between all stakeholders using advanced threat intelligence orchestration and data protection and accountability using distributed ledger technologies (DLT). - Semi-automated risk-based incident response and self-recovery capabilities on target IoT and AI-based infrastructures.
- Enhancement of the MeliCERTes platform with a customized dashboard suitable for different target users with appropriate role and rights access management capabilities to shared information.
- Virtual cyber range platform and training environment for emulating complex ICT systems and with the deployment of IRIS components.