Communication Middleware for Monitoring Financial Critical Infrastructure
-- CoMiFin-ICA Launch --

Starting from June 1st 2010 CoMiFin is cooperating with SANDIA Laboratory as part of the CoMiFin-ICA (International Cooperation Aspects) project. The objective of the joint work is to show the added value of cooperation in the management of Financial Critical Infrastructure through formal modelling. Activities in CoMiFin-ICA involve public workshops and internal working sessions to disseminate the results of the CoMiFin project and NISAC/Sandia (www.sandia.gov). A high level of dissemination will be guaranteed through the participation of representative members of the US and EU financial institutions. FAB members have also provided assistance in developing an agenda for an upcoming EU-US workshop that will be held between the CoMiFin project and Sandia National Laboratories. To be held in October 2010

 
-- U.S. Plans Cyber Shield for Critical Infrastructure --
A recent article from the WSJ about U.S. plans for monitoring Critical infrastructures (CI). It highlights the value of collaborative approaches to identifying threats in distributed systems.

http://online.wsj.com/article/SB10001424052748704545004575352983850463108.html?mod=WSJ_hpp_MIDDLETopStories

From the article:
'The federal government is launching an expansive program dubbed "Perfect Citizen" to detect cyber assaults on private companies and government agencies running such critical infrastructure as the electricity grid and nuclear-power plants'

A follow-up article on Wired:
http://www.wired.com/threatlevel/2010/07/nsa-2/

We're doing some similar work in the CoMiFin project to protect Financial CI. Our system facilitates information exchange between participants with distributed event processing for identifying emerging threats.
 
-- FAB Meeting In Rome June 2010 --

On 17th June 2010, there was a CoMiFin Financial Advisory Board meeting held in Rome. The meeting concentrated on the dissemination of the status of the CoMiFin prototype 1 including a demonstration of a storyboard based development of a Semantic Room (SR) for both Intrusion Detection and Man in the Middle attacks. The following elements were shown in the demonstration:

- SR Management functions that can be activated from the CoMiFin portal;

- SR Service provisioning and related interactions;

- SR service monitoring through the Dashboard that shows metrics and alerts;

- Data gathering and event processing.

In addition to providing valuable feedback on the demonstrations, the FAB members also provided assistance in developing an agenda for an upcoming EU-US workshop that will be held between the CoMiFin project and Sandia National Laboratories (www.sandia.gov). In addition, the PARSIFAL project key recommendations and outcomes were presented to the FAB members.

 
-- Inco-Trust workshop in New York City --

The DG-INFSO F5 Trust and Security project INCO-TRUST held a workshop on 4-5th May 2010 in New York City.  The workshop was co-organised by the National Science Foundation, Rutgers University and the INCO-TRUST project. The main focus of the workshop was International Data Exchange with Security and Privacy: Applications, Policy, Technology, and Use. There were delegates from EU, US, Korea, Japan, Australia, Canada, South Africa and Brazil.

The workshop slides will be available shortly at the workshop web site.

 
-- CoMiFin in Irish Financial Services Directory --
The Irish Third Level Financial Services Directory is an easy to use guide for financial services companies who wish to identify and access specific expertise within the Irish third level sector with a view to entering into collaborative projects. CoMiFin has been listed as one of the projects of interest in this commercial research directory, actively promoting the CoMiFin project to a wide range of business and research stakeholders in the financial area.
 
-- Parsifal Results --

Parsifal (Protection And tRuSt In FinanciAL infrastructures) is a Coordination Action project, funded by the FP7 Programme under the Strategic Objective: ICT-SEC-2007.1.7 (Critical Infrastructure Protection).

The project began in September 2008 and completed in February 2010. Close ties between CoMiFin and Parsifal have led to a number of successful events and a shared stakeholder group.

  • Parsifal examined how to better protect Critical Financial Infrastructures (CFIs) and, to this end, returned eight specific recommendations. These recommendations relate to research topics which require attention in order to reduce the risk of CFI attack/degradation. The recommendations are divided amongst three areas: Controlling instant on-demand business; Entitlement management and securing content in a perimeter-less environment; and, Continuity and control in an interdependent service landscape.
  • Deliverables for the project can be found here.

 

 
-- ESRIF Report --

The ESRIF (European Security Research and Innovation Forum) final report was recently released and it is now available here. The ESRIF strategy group was setup by the European Commission with the support of the European community to examine the civil security of Europe. Of particular interest to CoMiFin was Working Group 2: Security of Critical Infrastructures. The consideration of financial infrastructure as a key critical infrastructure for Europe was again highlighted (in Topic 8). The level of importantance of financial infrastructure was reflected by finance being included in WG2 sub-groups and WG2 panels.

From the report: "critical infrastructures protection research should place emphasis on risk management, including prediction, prevention, ensuring service continuity and rapid recovery in the event of an incident. Security characteristics therefore should be designed to increase systemic and inherent resilience."

This ethos is summed up nicely: "In three words, what critical infrastructures in Europe need is a culture of resilience". The role of the CoMiFin project in protecting Financial Critical Infrastructure places it at the heart of a resiliant and survivable Europe.

 

 

 

 
-- Haifa Workshop --

From the 11th to the 13th of January 2010 the 5th plenary meeting for CoMFin was held. The event was hosted by IBM R&D Labs Haifa, Isreal. The agenda included technical and management discussions as well as general information sharing. Below is a picture of the CoMiFin Consortium.

p1010002small.jpg  

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

From Left to Right

Standing: Roberto Baldoni, Abdelmajid Khelil, Mirco Marchetti, Eliezer Dekel,  Michele Colajanni, Massimo Santelli, Barry Mulcahy, Atle Dingsor, Giorgia Lodi, György Csertán,  László Gönczy.

Front: Gábor Urbanics,  Enrico Angori,  Gregory Chockler, Gennady Laventman.

 

 
-- RISPETIS Report nears the 5,000 mark --

The RISEPTIS report , ‘Trust in the Information Society’, which makes recommendations on future trust and security research challenges, was published in November, 2009. To date, over 1,500 hard copies of the report have been disseminated to various interested parties, both across Europe and globally. Additionally, the Report has been downloaded from the Think-Trust website 3,332 times, giving a total distribution of over 4,800 copies of ‘Trust in the Information Society’.

To provide an accessibility point for its high-level recommendations, the Report tells six interwoven short-stories about a young couple – Jorge and Theresa – and their (mostly) electronic interactions with the surrounding environment as they go on their merry way.The six main RISEPTIS recommendations formed the basis for the recent Trustworthy ICT conference in Leon, Spain.

 
-- Eliezer Dekel appointed Editor in Chief of ICST Transactions on Financial Systems --
Dr. Eliezer Dekel (IBM Research - Haifa Research Laboratory, Israel) was recently appointed Editor in Chief of ICST Transactions on Financial Systems.
 
-- CoMiFin in the ECN --

An article introducing CoMiFin to the European research community was accepted for publication in the European CIIP Newsletter (ECN), Volume 5, Number 2 (August/September 2009).

From the Article: "The goal of the FP7 STREP project CoMiFin is to create a federated, distributed and collaborative network of agents for enhancing trustworthiness and dependability of financial infrastructures."

The full article is available online

 

 
-- Future Internet Assembly in Stockholm --

In conjunction with the Swedish Presidency of the European Union the next Future Internet Assembly conference will be held in Stockholm and Kista Science City on November 23-24, 2009. The conference is hosted by KTH Royal Institute of Technology.

Learn more here .

 
-- CoMiFin Launch --

The EU FP7 project CoMiFin (Communication Middleware for Monitoring Financial CI) launched on the 1st of September 2008. The collaborative project has 9 partners from across Europe, the project will run for a duration of 30 months.

 
-- CoMiFin Kick-Off --

The first CoMiFin meeting was hosted by ElsagDatamat S.p.A. in Rome on September 25th-26th2008.