Detection of and Reaction to Cyber Attacks in a Critical Infrastructures Scenario: the CockpitCI Approach

The protection of the national infrastructures is one of the main issues for national and international security. The FP7 MICIE project has achieved promising results by developing a secure online software architecture and by sharing information on a real time basis among local risk predictors, in order to obtain accurate and synchronized predictions using shared interdependency models. However, results of MICIE project are not enough in order to quickly and effectively react to all adverse events that may occur over the System of Systems and, in particular, to face cyber attacks. The EC FP7 CockpitCI project aims to improve the resilience and the dependability of CIs through the design and the implementation of an Alerting System that provides to CI operators an efficient tool to support them: (i) in the prevention of cyber attacks and (ii) in the implementation of consequence containment strategies in case of attack.