Security Testing Tool
Coordinated by
CNR
GdpR-based cOmbinatOrial Testing (GROOT) is a general combinatorial strategy for testing systems managing GDPR’s concepts (e.g., Data Subject, Personal Data or Controller).
Description
Describe the innovation content of the result:
GROOT tool is leveraging Combinatorial Testing for assessing mechanisms and tool processing Personal Data with respect to the GDPR’s demands.
Who will be the customer?
Public and private Companies using ICT systems and authorization systems for managing protected resources and personal data.
What benefit will it bring to the customers?
A data protection by design solution for improving the compliance with the currently applicable legal framework concerning the protection of personal data.
When is the expected date of achievement in the project (Mth/yr)?
08/2023
When is the time to market (Mth/yr)?
At the end of the project
What are the costs to be incurred after the project and before exploitation?
After finishing BIECO, GROOT will be ready for use without further investment. However, further research, based on it, will need to be framed on other innovation projects..
What is the approximate price range of this result/price of licences?
Open Source
What are the market size in Millions € for this result and relevant trend?
According to recent survey, the GDPR Services market was valued at € 1042.97 million in 2020 and is expected to reach € 3846.12 million by 2026
How will this result rank against competing products in terms of price/performance?
We have applied data protection by design and by default approach, by incorporating GDPR concepts at the early stage of developing GROOT, differentiating this result from the existing security solutions.
Who are the competitors for this result?
Other security testing tools based on combinatorial approaches.
How fast and in what ways will the competition respond to this result?
Incorporating GDPR concepts into existing methodologies and tools is not a straightforward task. We estimate that pairing security and privacy in a unique framework takes at least one year.
Who are the partners involved in the result?
CNR
Who are the industrial partners interested in the result (partners, sponsors, etc.)?
Unknown at the moment
Have you protected or will you protect this result? How? When?
GROOT has been presented at ICTSS7 2021, and the first related research contribution8 will be available soon. We are planning to prepare an extended contribution for a journal article by the end of the project.
Other results
Domain Specific Language
The domain specific language enables specification of digital twin behaviour in a manner that can enable a predicted evaluation of its trustworthy behaviour in a simulated environment
Fail-operation clock synchronization methodology
Synchronization loss can occur due to many reasons, either because of a device or link failure or due to a targeted attack on the reference node, which supplies the corrected time to the network’s nodes.
Time sensitive network simulation
Simulate the real time communication for the distributed based on the Time sensitive network simulation. Additionally, simulate the fail-operation clock synchronization methodology. This simulation will validate the communication stack.
Remote updating- upgrading of vehicle firmware
Securing remote and in-vehicle communications against cyber-attacks, possibly performed with quantum computers in the near future, is a major goal in the automotive sector.
Extension of the approach to the communications within the whole supply chain of the Microfactory
Once the secure communication with a vehicle has been demonstrated for remote FW update, it is straightforward to extend it to a general Service-Over-the-Air architecture and even further.
Ontology Manager Tool
Ontology Manager is a Framework responsible for managing the Core Ontology used in BIECO, called DAEMON. It aims to support organizing concepts and their relationships related to System of Systems (SoS), Internet of Things (IoT), and System Components management and Monitoring.
