WP7 – Security and Privacy Claims
Coordinated by
UMU (M01-M12)
Objective
The main objective of this work package is to develop a security certification methodology combining risk assessment and testing to evaluate a system over a series of security and privacy claims based on objective metrics, allowing harmonisation and mutual recognition based on evidence that quantify the level of trust.
The specific goals of WP7 are to:
- Identify suitable security and privacy metrics and claims to evaluate the security and privacy of a system
- Develop a security certification methodology using the identified security and privacy metrics and claims.
Deliverables
- D7.1 Report on the identified security and privacy metrics and security claims to evaluate the security of a system WP7 (6 – UMU) Report Public M12
- D7.2 Security certification methodology definition WP7 (6 – UMU) Report Public M18
- D7.3 Security certification methodology development WP7 (6 – UMU) Report Public M24
Outcomes
Monitoring Tool
The monitoring tool is an infrastructure in charge of setting up and managing a monitoring component. It is based on event messages and enables the collection of complex events.
Security Testing Tool
GdpR-based cOmbinatOrial Testing (GROOT) is a general combinatorial strategy for testing systems managing GDPR’s concepts (e.g., Data Subject, Personal Data or Controller).
Domain Specific Language
The domain specific language enables specification of digital twin behaviour in a manner that can enable a predicted evaluation of its trustworthy behaviour in a simulated environment
Fail-operation clock synchronization methodology
Synchronization loss can occur due to many reasons, either because of a device or link failure or due to a targeted attack on the reference node, which supplies the corrected time to the network’s nodes.
Time sensitive network simulation
Simulate the real time communication for the distributed based on the Time sensitive network simulation. Additionally, simulate the fail-operation clock synchronization methodology. This simulation will validate the communication stack.
Remote updating- upgrading of vehicle firmware
Securing remote and in-vehicle communications against cyber-attacks, possibly performed with quantum computers in the near future, is a major goal in the automotive sector.
