SCRIN:
Secure Certified Resources in IoT Networks
Internet of Things (IoT)-based devices and networks are currently penetrating multiple fields, such as industry (known as industrial IoT or IIoT), agriculture, energy, health, heritage, home automation and smart cities, among others. However, these technologies also potentially represent access points and vectors for possible cyber-attacks, some of which could compromise critical infrastructures such as power plants or distribution networks, food supply chains, health monitoring devices, etc. Securing communications - both between IoT devices and over the communication infrastructure that connects them - is therefore essential to maximise the added value that these technologies offer in all productive sectors and aspects of everyday life.
The SCRIN project focuses on improving cybersecurity for the Internet of Things (IoT). It aims to strengthen the resistance and resilience of IoT devices, infrastructures, and networks against cyber-attacks. Throughout the project, a methodological framework for IoT cybersecurity will be created and attack simulation techniques will be investigated in a prototype laboratory. In addition, monitoring and protection mechanisms based on Artificial Intelligence will be implemented. The project will conclude with the experimental validation of the SCRIN framework through demonstrators in a controlled environment, equivalent to TRL4.
Start date: January 2024
End date: December 2025
Budget: 1.180.000,00€
INCIBE contribution: 885.000,00 €
USAL contribution: 295.000,00 €
The following image summarises the concept of the SCRIN project for cybersecurity in IoT environments.
The SCRIN project has five objectives
To investigate the normative reference certification framework for building a cybersecurity-based IoT ecosystem architecture.
To investigate the most frequent threats, attacks, and patterns in IoT and IIoT ecosystems, together with the most effective protection mechanisms in each layer of IoT systems (physical, communication, etc.), in order to create a methodology for action to guarantee the security of these solutions.
To research and design the IoT pilot lab and stress test security mechanisms.
To research, test, and evaluate simulation, artificial intelligence, and deep learning techniques to identify an anomaly and generate an immediate and automatic response to a cyber-attack.
To create a methodological and technological framework for the capture and analysis of cybersecurity events in IoT devices and networks.
Methodology
The Strategic Cybersecurity Project SCRIN (Secure Certified Resources in IoT Networks) is based on a Co-Creative Action-Research Type 1 Methodology approach, based on specific objectives, defined in conjunction with the relevant stakeholders for IoT technologies and cybersecurity (including both economic actors and sectorial companies applying IoT, such as Industry, Energy, Health, Agriculture, etc.; as well as public institutions and regulatory bodies, IoT and communication infrastructure providers, and social agents). The action-research methodology in technological innovation projects is focused on the research of new methods and their application in new areas and contexts through an ecosystem based on actions. Action is generally associated with a transformation in a given community, organisation or project, while the concept of research is understood more broadly in terms of the change it brings about for the research community, the client or both.
All research phases will be accompanied by technical monitoring and coordination for the proper implementation of the project and of the communication plan, as well as for the dissemination of the project results.
Information
on project results
The SCRIN project is a strategic collaboration project between the University of Salamanca and INCIBE. The results obtained throughout the different research phases will be appropriately disseminated.
A collection of articles and reports related to the project will be made available here soon.