Advanced Cooperative Security Operation Centres

ongoing

“ACSOC” (Advanced Cooperative SOC) goal is to introduce new enabling technologies and process innovations to empower SOCs operational capacity, including their ability to cooperate with CERTs and CSIRTs. Project introduced enhanced AI based cybersecurity tools and guidelines for policy and procedures accomplishing NIS2 and other EU directives, can give to SOCs relevant contribution to setup an ecosystem acting as a hub within the European SOC context, developing national and Cross-border cooperation. Enhanced platforms can strengthen SOC capacities to analyse, detect and prevent cyber threats and incidents supporting the production of high-quality intelligence on cyber threats. SOC operations deal with fast evolving threats demanding them to efficiently work and cooperate with other similar entities at national and international level in which Threat Intelligence and Anomaly Detection are key tools. These requirements must be taken into consideration to ensure for each SOC an adequate level of control over the information to be managed in relation to its criticality, confidentiality and aspects related to the GDPR. To keep pace with every day evolving threads, ACSOC will introduce advanced tools based on AI and other innovative technologies (e.g. Federated Machine Learning) for SOC operations without losing the control on managed information considering their criticality, confidentiality and GDPR connected aspects. Introduced tools will comprehend evolutions of existing ones, among which Joshua (for Threat Intelligence) and Sofia (for Anomaly Detection) which are parts of Almaviva CybeRiskVision framework. ACSOC will give end users’ organizations simple to use Indicators of Compromise about their security posture and information about general evolution of security area (such as evolving threats, vulnerabilities, etc.), which represent a fast and easy way to use services enabling SME cybersecurity capacities, since they do not require specialized security knowledge.