CyberSANE

Description

CyberSANE aims to enhance the security and resilience of Critical Information Infrastructures (CIIs) by providing a dynamic collaborative, warning and response system supporting and guiding security officers and operators (e.g. Incident Response professionals) to recognize, identify, dynamically analyze, forecast, treat and respond to advanced persistent threats (APTs) and handle their daily cyber incidents utilizing and combining both structured data (e.g. logs and network traffic) and unstructured data (e.g. data coming from social networks and dark web).

To achieve this, CyberSANE will introduce a holistic and privacy-aware approach in handling security incidents, addressing the complexity of these nets consisting of cyber assets hosted in cross-border, heterogeneous Critical Information Infrastructures (CIs). Moreover, CyberSANE is fully in-line with relevant regulations (such as the GDPR and NIS directive), which requires organizations to increase their preparedness, improve their cooperation with each other, and adopt appropriate steps to manage security risks, report and handle security incidents.