The discovery of highly sophisticated and targeted attacks such as Stuxnet and Duqu showed that these threats are a reality. Their success in infiltrating Critical Infrastructure environments is calling attention on the ineffectiveness of standard security mechanisms at detecting them.
Following the aftermath of these cyber-weapons, the CRISALIS project focused on devising new approaches and technology to protect Critical Infrastructure and their Industrial Control Systems from cyber attacks. EE-ISAC members Enel, Liander, Siemens and Security Matters participated in the project delevering innovative tools to monitor, detect and analyse strange behaviour in the ICS and AMI systems.
Reducing down the time required to perform forensics analysis after a (supposed) cyber incident to only hours
The project team will be presenting the outcomes of the project during the EE-ISAC Open House Member Meeting on 4 November at European Utility Week. Tools delivered and presented include passive fingerprinting techniques, intrusion detection solutions and fuzzer tools. Both the tools and lessons learned will be shared by the projectteam.
Damiano Bolzoni (Security Matters) is more than satisfied with the results of the project. “The CRISALIS consortium not only achieved the original goal of making Europe’s Critical Infrastructure more secure, but went beyond to improve the overall cyber resilience”. The project’s end-to-end approach resulted in the development of:
- methodologies and technologies for testing critical software in a more comprehensive way so that issues can be fixed before deployment
- technologies for detecting both intentional and unintentional (cyber) events that could affect business continuity, including cyber attacks, operational errors or misconfiguration
- technology for reducing down the time required to perform forensics analysis after a (supposed) cyber incident to only hours
Join our free-to-attend Open House Member Meeting during European Utlity Week and hear about all the technical details!
