NECOMA · Nippon-European Cyberdefense-Oriented Multilayer threat Analysis

The NECOMA project addresses objective (c), Cybersecurity for improved resilience against cyber threats, of the ICT-EU Japan Coordinated call FP7-ICT-2013-EU-Japan. It aims at providing new means to understand cyberthreats and to mitigate their effect on infrastructure and endpoints. First, it adresses the aspect of data collection, leveraging past and current work on the topic with the goal to expand these existing mechanisms and orient them towards threat data analysis. Second, it adresses threat data analysis not only from the perspective of understanding attackers and vulnerabilities, but also from the point of view of the target and victim, needing to protect itself in real-time and in the most efficient manner possible; this will be achieved through the development of metrics that allow to measure the impact of attacks on the protected infrastructure or endpoint. Third, it addresses cyber-defense mechanisms, with the goal to develop and demonstrate new cyberdefense mechanisms that leverage these metrics for deployment and evaluation. These three aspects will be analyzed both from an infrastructure perspective (networks and large computing infrastructures) and endpoints (smartphones and browsers). The results of the NECOMA project will be showcased in demonstrators that will highlight the innovations of the project and prepare exploitation.