Cloud CERT

Project Description

CloudCERT project aims to create a platform for content and security services based on cloud computing paradigm, which act as secure testing environment for exchanging information in order to exercise the functions of coordination and cooperation, making use of certain common communication protocols to improve the visibility and awareness of threats, vulnerabilities, security warnings and alerts specific to the agents (Authorities, Operators, CSIRTS, etc.) involved in the Critical Infrastructure Protection (CIP).
To achieve this goal, it is necessary to make a major effort based on conceptual modeling of information and CSIRTs communication architecture, the definition of secure information sharing, information standards and protocols definition, design and development of the test environment platform and finally, the simulation of scenario-based pilot use cases.

Collaborating Companies or Organisations

Indra's Role

Indra will perform developing and integration activities. Those are the task to be developed by Indra:

• Definition of the content and format of the information to be exchanged. Definition of the protocol for exchange of information.
• To develop a secure sharing of sensitive information exchanges, catalogue and database of CIP vulnerabilities.
• To develop tool workflow: getting risk indicators values, sending, aggregation, synchronisation and scorecard generation.
• To assess existing techniques and tools for information gathering, aggregation and synchronisation.

Technologies used

• Java Platform, Enterprise Edition (J2EE)
• Spring (Spring Framework, Spring Security, Spring MVC, Spring LDAP)
• Hibernate
• Struts
• Direct Web Remoting (DWR)
• Quartz Scheduler
• Axis
• Central Authentication Service (CAS)
• OpenLDAP
• MySQL

More information

This Project has been financed by the European Commission within the CIPS 2012 AG program.