- The IDUNN project introduces AMORA, HEIMDAL, THOR, ODIN, and FRIGG, tools designed to enhance cybersecurity through innovative features like real-time threat detection, predictive analysis, and automated response actions.
- Comprehensive Approach to Cybersecurity: These modules integrate advanced technologies such as machine learning, distributed ledger technology, and AI-driven web crawling to provide robust, dynamic, and automated cybersecurity solutions across diverse industrial sectors.
June 20, 2024.- The IDUNN project is proud to announce the latest advancements in cybersecurity tools with the introduction of five cutting-edge modules designed to address the evolving challenges in the digital landscape. These modules, AMORA, HEIMDAL, THOR, ODIN, and FRIGG, represent a significant leap forward in ensuring robust, comprehensive cybersecurity measures.
AMORA: The Key Testing Tool: AMORA is an interoperability-testing tool within the IDUNN project, ensuring seamless integration between various components and evaluating traceability solutions. It simulates cyber-attack behavior by running attack scripts to identify vulnerability points, producing valuable simulation outputs and predictive security analysis to train AI-based models.
AMORA focuses on:
- Audit Information: Enhancing transparency, security, and privacy in ICT systems.
- Secure Data Infrastructure for Conformance Testing: Simulating communications and testing scenarios to analyze attacks and failure scenarios.
- Distributed Ledger and Interfaces for Value Chain Data: Evaluating DLT technologies for forensics and AI training.
- Automatic Auditing Before and After Operation: Using traceability to improve analysis and documentation of blueprints.
- Task Verification Platform for Data Elicitation: Running communication tests and mapping incidents to the MITRE ATT&CK Framework.
HEIMDAL: Real-Time Threat Detection: HEIMDAL processes real-time events in OT environments to detect incidents or threats. It monitors traffic, identifies vulnerabilities, and analyzes source code while incorporating human factors in threat detection.
Features of HEIMDAL:
- Communication and System Monitoring: Monitors traffic, system status, and device updates.
- Vulnerability Intelligence: Searches for vulnerabilities and exploits to mitigate potential attacks.
- Source Code Analysis: Analyzes code for security issues and license compliance.
- Human in the Loop: Detects human misuse or suspicious actions.
THOR: Threat Prediction and Real-Time Analysis: THOR collects real-time data from various sources, including sensors and social networks, to predict and analyze threats using AI-driven techniques.
Features of THOR:
- Data Collection and Training: Utilizes real-time and historical data for training and analysis.
- Vulnerability Intelligence: Gathers information from the Surface, Deep, and Dark Web.
- Threat Analysis: Transforms data into actionable insights for intrusion detection and threat analysis.
ODIN: Enhanced Decision-Making for Resilience: ODIN ingests security alerts, transforms them into actionable insights, and manages these alerts through critical tasks such as case escalation and alert enrichment.
Features of ODIN:
- Alert Ingestion: Collects alerts from various cybersecurity providers.
- Custom Field Configuration: Adapts to different alert formats.
- Comprehensive Alert and Case Management: Manages alerts from inception to resolution.
- Observables Management: Analyzes observables to improve incident response.
- Alert Enrichment: Enriches alerts with additional threat intelligence.
- Response Action Management: Automates response actions and integrates with other platforms.
FRIGG: The New Mutation Step: FRIGG represents a new step in the cybersecurity framework, supervising defense methods to ensure expected results through defined metrics, analysis, and adjustments.
Work Carried Out for FRIGG:
- Simulator for Incidents: Developed generative models for simulating cyber-attacks.
- Define KPIs and KRIs: Created a catalogue of cybersecurity risks and visualization tools.
- Implementation of Dynamic Visualization Dashboard: Developed interactive widgets and automation rules for comprehensive visualization.
Modules of FRIGG:
- Mutation Logic: Connects and integrates alert sources for analysis and response.
- Adversarial Intelligence and Machine Learning Models: Automates actions to enhance alert research and enrichment.
- Interactive Visualization Widgets: Manages and reports actions for detected threats.
About IDUNN
The IDUNN project aims to create a validated technological security framework comprising tools and microservices to enable automatic and dynamic cybersecurity operations. Utilizing innovative tools—AMORA, HEIMDAL, THOR, ODIN, and FRIGG—validated across diverse industrial sectors, IDUNN ensures a comprehensive approach to cybersecurity.
For more information about the IDUNN project and its tools, visit our website.
Stay tuned for further updates as we continue to enhance cybersecurity measures and protect digital infrastructures against evolving threats.
For further information, please contact: mitxelena@gaia.es