Research, development and innovation

Usable TRUST in the Internet of Things
The uTRUSTit project focuses on addressing the complex security and privacy implications of the rapidly growing Internet of Things (IoT). Recognizing that users often find the security aspects of IoT difficult to comprehend, the project aims to enhance transparency in IoT security and reliability properties by directly involving users in the trust chain. This approach will enable manufacturers and integrators to express underlying security concepts to users in a more understandable manner, enabling them to assess the trustworthiness of IoT systems. The project will result in guidelines for implementing a developed trust-feedback toolkit and will further develop a cognitive model of user trust perception, to be evaluated through simulation and user trials. The interdisciplinary project brings together a consortium of experienced security researchers, practitioners, and simulation and usability laboratories from across Europe.

Secure and Trustworthy Composite Services
The Future Internet will offer a range of services from various suppliers, with users unknowingly using different services. These services will change based on several factors, including security, with no guarantee for the claimed security level. The ANIKETOS project aims to ensure trustworthiness and security in this fluid service environment. It will develop methods, tools, and security services to support the creation and dynamic behavior of composite services. It will also offer ways to counter new threats. An integral part of the project will be promoting specifications, best practices, and standards regarding security and trust. The consortium consists of leading industrial and research entities, including end-user partners relevant to the project's case studies.

The SecFutur project aims to enhance the security of embedded systems, which can no longer rely on physical protection due to increased connectivity. It plans to develop a security engineering process using resource-efficient security building blocks, each catering to a specific non-functional requirement. A security engineering framework will assist developers in incorporating these blocks into the main engineering process. The project's outcomes will allow for an application-driven security engineering approach, boosting system security. Real-world scenarios from various security-related areas will be used to assess and showcase the progress towards more secure embedded systems.

Detecting known security vulnerabilities from within design and development tools
The SHIELDS project aims to bolster software security by connecting security experts with software developers. Through the creation of an internet-based Security Vulnerabilities Repository Service (SVRS), known vulnerabilities will be quickly communicated. Additionally, the project introduces up-to-date security methods and tools continuously fed by data from the SVRS. A certification for tools and a logo program for software developers will help fight common security vulnerabilities. The consortium includes two universities, three research institutes, a large software developer, and two SMEs specializing in security. Commercial benefits will come from these programs, tools, and SVRS subscriptions.