THE ROAD AHEAD FOR A COGNITIVE COMPUTING PLATFORM
SUPPORTING A UNIFIED APPROACH TOWARDS PRIVACY, SECURITY AND SAFETY (PSS) OF IOT SYSTEMS

DATE: 9^th MAY 2019 - 09:00-17:00

VENUE: IBM TECHNOLOGY CAMPUS, BUILDING 6 , HAMILTON AUDITORIUM
DAMASTOWN INDUSTRIAL PARK, MULHUDDART, DUBLIN 15, IRELAND. EIRCODE D15 HN66

INSIGHTS

As IOT is becoming more and more pervasive in everyday life, aspects connected with security, safety and privacy are elements that will become key in order to have a secure and wider diffusion of solutions based in this type of technology. Researchers, industries and final users are more and more interested in the integration of IOT solutions in innovative services but in order to be able to deliver them it is important that trust in users is built and compliance to data safety and privacy, is in place. In this area CHARIOT, the consortium is leading innovation actually driven by industrial needs. In VESSEDIA, innovation is mostly driven by research.

This workshop will be co-organized by CHARIOT and VESSEDIA H2020 projects and take place on the 9th May 2019, in Dublin Ireland, hosted by IBM. During the workshop the evolution of both projects will be presented, including the experience from the users and the first lessons learned on the different tasks. In addition to that a preliminary training on verification tools capabilities will take place. The actions of cooperation with the other IOT project under the H2020 program as well as the dissemination and standardization activities will be analyzed. A specific focus will be in the Living Lab driven from IBM Ireland.

The “Cognitive Heterogeneous Architecture for Industrial IoT” (CHARIOT) three-year project, started its activities on the 1st of January 2018 with the objective to provide the overall design method and cognitive computing platform towards privacy, security and safety (PSS) over IoT Systems including elements of innovations like:

• A Privacy and security protection method building on state of the art Public Key Infrastructure (PKI) technologies to enable the coupling of a pre-programmed private key deployed to IoT devices with a corresponding private key on Blockchain system.
• A Blockchain ledger in which categories of IoT physical, operational and functional changes are both recorded and affirmed/approved by a combination of a cognitive engine and private key hashing between the cognitive engine and IoT devices to authorize change and, likewise, invalidating any and all other changes be they malicious or otherwise.
• A fog-based decentralized infrastructure for Firmware Security integrity checking that leverages a Blockchain ledger to enhance physical, operational and functional security of IoT systems, including actuation and deactivation.
• An accompanying IoT Safety Supervision Engine providing a novel solution to the challenges of securing IoT data, devices and functionality in new and existing industry-specific safety critical systems.
• A Cognitive System and Method with accompanying supervision, analytics and prediction models enabling high security and integrity of Industrials IoT.
• New methods and tools for static code analysis of IoT devices, resulting in more efficient secure and safer IoT software development and V&V.

The “Verification Engineering of Safety and SEcurity critical Dynamic Industrial Applications” (VESSEDIA) three-year project, started on the 1st of January 2017 with the objective to design and implement Safety and Security analysis technologies for IoT software, capable of improving dramatically the trustworthiness of such connected applications. For this aim, VESSEDIA enhances and scales up modern software analysis tools, in particular the open-source Frama-C analysis platform, to make them useful and accessible to a wider audience of developers of connected applications. VESSEDIA will tackle this challenge by:

• Developing a methodology that makes it possible to adopt and use source code analysis tools as efficiently and with similar benefits as it is already possible in the case of highly-critical applications, 
• Enhancing the Frama-C toolbox to enable efficient and fast implementation, 
• Demonstrating the capabilities of the new toolbox on typical IoT applications, including an IoT Operating System (Contiki), 
• Developing an ISO standard for classifying V&V tools and generalising the use of the toolbox, 
• Contributing to the Common Criteria certification process, and 
• Defining a “Verified in Europe” label for validating software products with European technologies.

Agenda