Artificial Intelligence Threat Reporting and Incident Response System - IRIS

The overall objective of the project is to create a framework that will support European CERTs/CSIRTs for detecting, sharing, responding to and recovering from cyber security threats and vulnerabilities in IoT and AI-based ICT systems, in order to minimize the impact of the risks related to cyber security and data confidentiality. To achieve this, IRIS brings together experts in cybersecurity, IoT, AI, automatic threat detection, response and recovery.

The specific objectives of the project are as follows:

- the IRIS project is designed as a integrated services platform (Platform as a Service - PaaS) against AI and IoT cyber threats, involving three core technology components:

    - Collaborative Threat Intelligence (CTI) module;

    - Automated Threat Analytics (ATA) module;

    - Virtual Cyber Range (VCR) module.

- the IRIS platform will be tested and validated in three different scenarios which simulate real-world environments, with the involvement of three cities (Helsinki, Barcelona and Tallinn), which have adopted the concept of "smart city":

- Scenario 1 aims to detect vulnerabilities of the IoT systems, to report breaches of confidentiality and integrity of data and to mitigate the potential effects generated by their propagation in the interconnected systems (Barcelona, Spain);

- Scenario 2 aims to validate the platform`s capabilities to be exploited as a learning tool of collaborative response to cyber security incidents within the AI infrastructure of autonomous transport systems (Tallinn, Estonia);

- Scenario 3 aims to assess the platform’s capabilities to eliminate cross-border cyber-attacks on “smart” entities in the energy sector and to validate the virtual polygon developed within IRIS through coordinated exercises, which prevent and remove threats against the compromised networks and IT components, by involving CSIRT teams and relevant energy actors (Helsinki, Finland).

The activities of the project are the following:

WP1: Project Management;

WP2: System Co-Design;

WP3: Autonomous Threat Analytics;

WP4: Collaborative Secure and Trusted Cyber-Threat Intelligence Sharing;

WP5: Virtual Cyber Range and Training Environment;

WP6: IRIS Platform Integration and Testing;

WP7: Large-Scale Pilot Demonstration and Evaluation;

WP8: Dissemination, Communication and Exploitation of Results;

WP9: Ethics requirements.