Energy, transport, telecommunications and healthcare increasingly depend on interconnected digital systems. This creates new opportunities, but also means that a failure or cyberattack affecting one part of the infrastructure can have consequences for other systems and services.
Organisations responsible for critical infrastructure use systems that collect information about events occurring across their networks and help identify potential threats. One example is SIEM (Security Information and Event Management). However, existing solutions often focus on analysing incidents that have already happened, while the large volume of generated data can make it difficult to identify what requires attention first.
The SCIFER – SIEM Solutions for Critical Infrastructures sEcurity & Resilience project aims to change this approach. Its goal is to develop a new generation of tools for protecting critical infrastructure that will not only detect incidents, but also identify the most important risks earlier and help organisations respond to them more effectively.
SCIFER will use artificial intelligence to analyse information about threats and system vulnerabilities. The solution will help specialists understand which parts of an infrastructure are most important for its operation and which problems should be addressed first. At the same time, the system will explain the basis for AI-generated recommendations, helping people remain in control of decision-making.
Another important part of the project will be secure information sharing on cyber threats between organisations and sectors. This will be possible without requiring all sensitive data to be transferred to one central system. Organisations will therefore be able to benefit from shared knowledge about threats while maintaining control over their own information.
SCIFER will also connect cybersecurity with digital forensics. The system will support the protection of information that may later be needed to analyse an incident or conduct an investigation. This means that important digital evidence can be identified and preserved while an incident is taking place, rather than searched for only after an attack has ended.
The solutions developed in SCIFER will be tested in conditions close to real-life operations across four critical infrastructure areas: energy, healthcare, telecommunications and transport. Project demonstrations will take place in several European countries, including Italy, Spain, Greece and Ukraine.
The Polish Platform for Homeland Security is responsible for activities related to the communication and dissemination of project results. PPHS will, among other tasks, develop the project's communication materials and visual identity, manage its website and social media channels, and support the presentation of SCIFER results to communities working in cybersecurity and critical infrastructure protection.
An important part of PPHS's role will also be cooperation with potential users of the project's results, public authorities, industry representatives, researchers and other organisations active in cybersecurity. These activities will help ensure that SCIFER's results respond to real needs and can be used beyond the project itself.
PPHS will also coordinate work related to cybersecurity standards. This will include monitoring existing and emerging standards, engaging with relevant organisations and preparing a plan showing how SCIFER's developments can contribute to future good practices and standards in this field.
The SCIFER project aims to develop a solution that will help organisations responsible for critical infrastructure to:
Coordinator:
Partners:
Funded by
European Union
Get in touch with us at projekty@ppbw.pl
