Proactive Risk Management through Improved Situational Awareness

12th April 2016


Brian Lee

Principal Investigator, Cloud Security Theme Lead

10:00  -  10:30
DCU Business School, Q303

PROTECTIVE is a three-year H2020 project designed to improve an organisations ongoing awareness of the risk posed to its business by cyber security attacks.

PROTECTIVE makes two key contributions to achieve enhanced situational awareness. Firstly, it increases the computer security incident response team’s (CSIRT) threat awareness through improved security monitoring and increased sharing of threat intelligence between organisations within a community. Secondly, it ranks critical alerts based on the potential damage the attack can inflict on the threatened assets and hence to the organisations business. High impact alerts that target important hosts will have a higher priority than other alerts.

The PROTECTIVE system is designed to provide solutions for public domain CSIRTs and SME’s who both have needs outside the mainstream of cyber security solution provision. Two pilots will be conducted to evaluate and validate the PROTECTIVE outcomes with CSIRTs from 3 National Research and Educational Networks (NRENs) and with SMEs via a managed security service provider (MSSP).
Protective is a research project primarily funded by the European Union H2020 programme (Grant Agreement 700071).

Session Category :  Cloud Security