eBOS RnD

analySis softwAre scheme of uNiform statistiCal sampling, aUdit and defence proceSses

Duration: 01/09/2020 – 31/08/2023
Total Funding: € 4,999,731

Overview

The deployment of 5G and the widespread use of IoT devices introduce new and unpredictable cybersecurity threats. With the growing complexity and interconnectivity of ICT networks, even a single compromised device, such as an IoT camera, can jeopardise an entire system. As firms increasingly rely on shared cloud infrastructures and virtualised environments, the risks multiply, potentially affecting public health, energy, financial systems, and the environment. Current approaches lack the capacity to assess these dynamically evolving threats. The key challenge lies in protecting diverse network components, including potentially insecure but necessary technologies, within ever-changing, high-speed, and data-intensive communication systems.

SANCUS developed a pioneering software framework for cybersecurity that formalised digital security and privacy as quantifiable, optimisable network attributes, and balancing critical factors dynamically. The architecture integrated six advanced engines, including automated firmware and software validation, IoT component modelling, and AI-driven game techniques for real-time risk analysis and defence optimisation. Evaluations were conducted by developing a new contemporary network testbed built on latest 5G and cloud-native system setting, and running pilot use cases across firmware, virtualisation, and management layers. SANCUS delivered an integrated software suite designed to enhance resilience and trust in next-generation digital ecosystems.

Objectives

1

Identify and classify the technical requirements and the EU SELP policy aspects for designing, developing and integrating the proposed system platform and the intended engines, mechanisms and tools.

2

Design and implement methods of automated firmware security validation (FiV) and testing based on wide‐ranging pipeline of analysers and samplers for maximising the surface of vulnerability and risk discovery.

3

Design and develop new method of automated code integrity verification (CiV) by combining taint, fuzzing and symbolic execution analysis for improving security assessment accuracy, efficiency and searching speed.

4

Design and develop new method of automated network security validation and verification (SiD) focusing on open‐source network development environments based on Docker and Kubernetes technologies

5

Design and develop new network attack configuration and emulation tool (AcE) using state‐of‐the‐ art AI/ML techniques for emulating complex cyber‐attacks and generating traffic in container environments.

6

Propose revolutionary MiU modelling of the IoT unit for expressing the trade‐off between cyber security, digital privacy and Quality of Service (QoS) reliability by means of final formulas based on fundamental mathematical theories.

7

Design game implicit optimisation (GiO) approach for maximising the security‐vs‐privacy‐vs‐ reliability efficiency subject to the outcomes of Objectives #2‐#6 using effective duality‐free solution methods.

8

Design and establish an operational cloud‐native network testbed prototype platform that integrates the enabling 5G technologies and the engines, mechanisms, tools, and solutions developed in Objectives #2 to #7.

9

Test and demonstrate the effectiveness, efficiency and complexity of the developed system network and each of its engines, mechanisms and tools by performing thorough testing using specific use case scenarios.

10

Communicate and disseminate the project outcomes, exploit the business planning of the outcomes, and contribute specific project outcomes to relevant standardisation bodies.

eBOS Role in the Project

In the SANCUS project, eBOS advanced its research and development capabilities in cybersecurity, 5G, and IoT technologies, aiming to integrate the project’s outcomes into its product portfolio and develop new, innovative applications. It actively participated in key technical areas including identifying and classifying security concerns within the Original Equipment Manufacturer supply chain, and contributing to the integration, validation, and demonstration of the SANCUS system.

eBOS also played a central role in developing a strong, evidence-based business plan to support the exploitation of the project’s innovations. Additionally, eBOS led the project’s Dissemination and Communication activities. In this role, eBOS designed, implemented, and maintained the project website, produced press releases, web articles, and social media content, and worked to raise awareness and visibility of the project across Europe. eBOS also engaged with key stakeholders through its participation in major pan-European platforms such as 5G-PPP, ECSO, NESSI, and NGI. To further enhance impact, eBOS also represented SANCUS at multiple industrial exhibitions and conferences, promoting the project’s innovation and ensuring that its results reached relevant communities and potential users.

This project has received funding from the European Union’s Horizon 2020 Research and Innovation programme under grant agreement No. 952672.