DOSS EU

The DOSS - Secure-By-Design IoT Operation with Supply Chain Control - project aims to improve the security and reliability of IoT operations by introducing to IoT Supply Chains an integrated monitoring and validation framework that includes all the relevant stakeholders. DOSS elaborates on a secure-by-design methodology and implements related technology based on formalized data exchange, component testing, and architecture modelling. The DOSS project establishes a “Supply Trust Chain” by integrating key stages of the IoT supply chain into a digital communication loop to facilitate security-related information exchange. The technology includes security verification of all hardware and software components of the modelled architecture. A new “Device Security Passport” will be defined, containing security-relevant information for hardware devices and their components. 3rd party software, open-source applications, as well as in-house developments will be tested and assessed. The centrepiece of the proposed solution is a flexibly configurable Digital Cybersecurity Twin, able to simulate diverse IoT architectures. It will employ AI for modelling complex attack scenarios, discovering attack surfaces, and elaborating the necessary protective measures. The digital twin will provide input for a configurable, automated Architecture Security Validator module which will assess and provide pre-certification for the modelled IoT architecture with respect to relevant, selectable security standards and KPIs. The operation of the architecture will also be protected by secure device onboarding, diverse security and monitoring technologies and a feedback loop to the digital twin and actors of the supply chain. The procedures and technology will be validated in three IoT domains: automotive, energy and smart home. The project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No. 101120270 – DOSS.