Resilmesh Open Call 1
The first call will be open to cybersecurity application and software developers to provide new platform components e.g. new anomaly detection or correlation algorithms.
Resilmesh aims at addressing major challenges for security teams, namely an increase in digital infrastructure attack surfaces and their complexity and sophistication, combined with a slow adaptation of organisations’ security systems regarding their security architectures, practices and infrastructure.
Funding
The programme will select four proposals, each addressing one of the challenges defined providing a maximum contribution of 90K€.
Eligibility criteria
- Legal entities or consortia of legal entities, which can be either mid-caps, SMEs or research organisations (RTOs or academia).
- In the case of consortium-type applications, the leading partner will be responsible for the technical developments, the other member will be an end user responsible to validate the technical developments.
- All legal entities established and based in one of the EU Member or a Horizon Europe Associated country are eligible.
Challenges
1. Extension to new domains and systems
This is concerned with extending i) the detection capabilities of Resilmesh to new OT domains – other than the three addressed directly within the project already or new OT protocols and device types and/or ii) the interoperability of Resilmesh third party security controls and tools.
2. New Analytic Algorithms and Architectures
User and Entity Behaviour Analytics (UEBA) shifts the focus of detection from Indicator of Compromise (IoC) approaches to focus on higher level Indicators of Behaviour (IoB). UEBA can apply to both endpoint and network traffic behaviours. One approach here could be to extend the Resilmesh NDR functional component with network behaviour analytics such as those identified in the Network Traffic Analysis
category in the Mitre D3FEND taxonomy. UEBA analytics for IIoT/OT infrastructure in particular are of interest.
3. Stream Processing of Security Events
This involves the real-time handling of data, where computation occurs directly as data is generated or received.
Guide for applicants
More information
This information is disseminated through the DIGIS3 project, supported by EU. DIHBU, as a member of DIGIS3 EDIH, can help you to submit a proposal for this funding opportunity, through its specific services, free of charge for SMEs.
