JultikaUniversity of Oulu repository

Cybersecurity is one of today's most challenging security problems for commercial companies, NGOs, governmental institutions as well as individuals. Reaching beyond the technology focused boundaries of classical information technology (IT) security, cybersecurity includes organizational and behavioural aspects of IT systems and also needs to comply to the currently actively developing legal and regulatory framework for cybersecurity. For example, the European Union recently passed the Network and Information Security (NIS) directive that obliges member states to get in line with the EU strategy. While large corporations might have the resources to follow those developments and bring their IT infrastructure and services in line with the requirements, the burden for smaller organizations like local public administration will be substantial and the required resources might not be available. New and innovative solutions that will help local public administration to ease the burden of being in line with cybersecurity requirements are needed. For example, cooperation and coordination is one of the major aspects of the NIS and EU cybersecurity strategy. An enabling technology for cooperation and coordination is cyber situational awareness and information sharing of cyber incidents. In this project we propose a cybersecurity situational awareness solution for local public administrations that, based on an analysis of the context provides automatic incident detection and visualization, and enables information exchange with relevant national and EU level NIS authorities like CERTs. Advanced features like system self-healing based on the situational awareness technologies, and multi-lingual semantics support to account for language barriers in the EU context, are part of the solution.