Abstract
The protection of critical infrastructures increasingly demands solutions across interdependent infrastructures all over Europe supporting incident detection and management. This necessitates cooperation of privately owned infrastructure operators and public bodies between sectors and across borders. The ECOSSIAN project, funded by the EU under the 7th framework program for research and development, develops a prototype of such a holistic system based on use cases from the sectors energy, transportation, and finance. The system uses a multi-tiered architecture and incorporates advanced technologies, including fast data aggregation, situational visualization, planning and decision support, and flexible information sharing and coordination support networks. The technical solutions will be complemented by an organizational concept, corresponding rules and regulations, as well as factors of societal perception and appreciation. This positional paper gives an overview of the ECOSSIAN concept and architecture.
Zusammenfassung
Der Schutz kritischer Infrastrukturen verlangt zunehmend nach europaweiten Lösungen in allen zusammenhängenden Infrastrukturbereichen, welche das Erkennen und das Management von Störungen unterstützen. Dies erfordert die grenz- und sektorübergreifende Zusammenarbeit zwischen den in Privateigentum stehenden Infrastrukturbetreibern und den öffentlichen Einrichtungen. Das unter dem 7. Rahmenprogramm der EU für Forschung und Entwicklung geförderte Projekt ECOSSIAN (European Control System Security Incident Analysis Network) entwickelt derzeit einen Prototypen für ein derartiges holistisches System basierend auf Anwendungsfällen in den Bereichen Energie, Transportwesen und Finanz. Das System verwendet eine mehrstufige Architektur und umfasst die modernsten Technologien, inklusive schnelle Datenaggregation, Lagebildvisualisierung, Planung und Entscheidungsunterstützung sowie flexible Informationsaustausch- und koordinationsunterstützende Netzwerke.
Die technischen Lösungen werden darüber hinaus durch ein Organisationskonzept, entsprechende Richtlinien und Regelungen sowie andere Faktoren wie gesellschaftliche Wahrnehmung und Wertschätzung ergänzt. Dieser Beitrag bietet einen Überblick über das Konzept ECOSSIAN und dessen Architektur.
This is a preview of subscription content, log in via an institution to check access.
Similar content being viewed by others
Notes
EU FP7-SEC-2013-1, grant agreement 607577; web: http://www.ecossian.eu.
Preparatory Action on Security Research.
References
2008/114/EC-Council Directive on the Identification and designation of European Critical Infrastructures and the assessment of the need to improve their protection, 2008.
Dudenhoeffer, D. D., Permann, M. R., Manic, M. (2006): Cims: a framework for infrastructure interdependency modeling and analysis. In Proceedings of the 38th conference on winter simulation. Winter Simulation Conference (pp. 478–485).
ENISA (2009): Good practice guide on information sharing.
Helmbrecht, U., Purser, S., Cooper, G., Ikonomou, D., Marinos, L., Ouzounis, E., Thorbruegge, M., Mitrakas, A., Capogrossi, S. (2013): ENISA: cybersecurity cooperation: defending the digital frontline.
ISO (2012): Iso/iec27010: information technology—security techniques—information security management for inter-sector and inter-organizational communications, 2012-03-20.
Liu, Y., Guan, Y. (2012): Distributed network and system monitoring for cyber-physical infrastructure. In Handbook on securing cyber-physical infrastructure. San Mateo: Morgan Kaufmann. Chap. 18.
NIST (2014): Framework for improving critical infrastructure cybersecurity, 2014-02-12.
Rutkowski, A., Kadobayashi, Y., Furey, I., Rajnovic, D., Martin, R., Takahashi, T., Schultz, C., Reid, G., Schudel, G., Hird, M., Adegbite, S. (2010): CYBEX: the cybersecurity information exchange framework (X.1500). In ACM SIGCOMM CCR.
Schoo, P., Schaefer, M., Egners, A., Hofinger, H., Wessel, S., Kuehnel, M., Todt, S., Montag, M. (2012): Collaboration between competing mobile network operators to improve CIIP. In Proceedings of the 7th international conference on critical infrastructure security (CRITIS).
Acknowledgements
This work was partly funded by the European Union FP7 project ECOSSIAN (607577).
Author information
Authors and Affiliations
Corresponding author
Rights and permissions
About this article
Cite this article
Kaufmann, H., Hutter, R., Skopik, F. et al. A structural design for a pan-European early warning system for critical infrastructures. Elektrotech. Inftech. 132, 117–121 (2015). https://doi.org/10.1007/s00502-015-0286-5
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s00502-015-0286-5
Keywords
- pan-European critical infrastructure protection
- cross-organizational security information sharing
- early warning system
- cyber incident management
- architectural design