INFRASTRESS

Securing Sensitive Industrial Plants and Sites from cyber-physical attacks

Business Period Project Coordinator Funding scheme
T&I June 2019 -31 May 2021 INGEGNERIA INFORMATICA SPA H2020

Challenge

“Sensitive Industrial Plants and Sites” (SIPS) are exposed to major hazards due to the high risk of accidents associated to the presence of dangerous substances. Moreover, security breaches may well result in safety incidents and, in particular, in the current emerging safety-security landscape of Europe, SIPS are increasingly becoming the targets of new categories of attacks, which could be defined “hybrid”, i.e. they are of a cyber-physical nature.

InfraStress has received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement n°833088 to:

  • improve the resilience and the protection capabilities of SIPS through an adaptive, flexible, and customizable set of inno-vative and configurable security measures and tools;
  • guarantee the continuity of operations, while minimizing cascading effects in the infrastructure itself, the environment, the other CIs, and the citizens in vicinity, at reasonable cost.
  • Deliver an open framework that allows future evolution to easily integrate additional detection technologies, data feeds and analysis services, decision-support services, etc. and most importantly to effectively integrate exist-ing solutions already deployed at the SIPS CI side.

The InfraStress project addresses both sensitive industrial production plants (such as refineries, chemicals, pharma, gas, etc.) and sensitive storage sites (SIPS), along with ICT infrastructures supporting them.

The project solutions will be deployed and tested in 5 SIPS pilots:

  1. Motoroil, Greece - One of the largest South-eastern Europe refineries
  2. DePuy Synthes, Ireland – Medical device manufacturing & supply
  3. Attilio Carmagnani "AC" SpA, Italy – Coastal chemical storage terminal
  4. Petrol Luka Koper, Slovenia – Petrol storage
  5. Fisipe, Portugal – Sensitive fiber production plant

Approach

In the framework of InfraStress, RINA is mainly in charge of the physical/cyber risk assessment for industrial sensitive sites and plants.

Therefore, we are going to collect and make available the relevant knowledge on Critical Infrastructure protection and resilience of SIPS, especially regarding emerging threads and trends, to inform the other project activities and to start creating an EU wide body of knowledge on SIPS CIP, in terms of:

  • Relevant, critical, sensitive assets that can be affected by vulnerabilities and C/P attacks;
  • C/P risk scenarios, threat and vulnerabilities in industrial sensitive sites and plants;
  • Current detection/protection technologies and state of practice in SIPS;
  • Identification and analysis of cascading effects.

Moreover, we are involved in the activities for the comparison of InfraStress methodology with
other risk assessment methodologies and InfraStress pilot execution and evaluation. 

Last but not least, we are also contributing to the project operational procedures and knowledge on InfraStress SIPS CIP. 

Conclusion

In conclusion, InfraStress will imply the following advantages for the EU community:

  • Assess and model SIPS assets, vulnerabilities, combined cyber-physical-social risks and threats, thus generating a state-of-the-art knowledge for SIPS CIP in general with focus on SIPS partners
  • Drive business innovations in critical and sensitive industry and security sector by setting ups and coordinating a Sensitive Industry Protection Stakeholder Group (SIP-SG), involving a number of relevant external user stakeholders beyond the project consortium, and a roadmap for SIPS CIP created by stakeholders
  • Accelerate the growth of EU security companies in the rapidly growing industrial C/P security markets with our research and innovation results, many of which are applicable to wide range of security applications
  • Create a culture of security and training on our novel approaches to SIPS CIP in MSc and free Massive Open Online Course (MOOC) course.  

Project Consortium

1. INGEGNERIA INFORMATICA SPA - Italy 2. MOTOR OIL (HELLAS) DIILISTIRIA KORINTHOU AE - Greece 3. ATTILIO CARMAGNANI AC - SOCIETA PER AZIONI - Italy 4. SGL COMPOSITES, S.A. - Portugal 5. PETROL SLOVENSKA ENERGETSKA DRUZBA DD LJUBLJANA - Slovenia 6. DEPUY (IRELAND) UNLIMITED - Ireland 7. LUKA KOPER, PORT AND LOGISTIC SYSTEM, D.D. - Slovenia 8.MUNICIPIO DO BARREIRO - Portugal 9. EUROPEAN VIRTUAL INSTITUTE FOR INTEGRATED RISK MANAGEMENT EU VRI EWIV - Germany 10. CONSORZIO INTERUNIVERSITARIO NAZIONALE PER L'INFORMATICA - Italy 11. RINA CONSULTING SPA - Italy 12. STEINBEIS ADVANCED RISK TECHNOLOGIES GMBH - Germany 13. INOV INESC INOVACAO - INSTITUTO DE NOVAS TECNOLOGIAS- Portugal 14.ETHNIKO KENTRO EREVNAS KAI TECHNOLOGIKIS ANAPTYXIS - Greece 15.DR FRUCHT SYSTEMS LTD - Israel 16.UNITED TECHNOLOGIES RESEARCH CENTRE IRELAND, LIMITED - Ireland 17.SATWAYS - PROIONTA KAI YPIRESIES TILEMATIKIS DIKTYAKON KAI TILEPIKINONIAKON EFARMOGON ETAIRIA PERIORISMENIS EFTHINIS EPE - Greece 18. ETHNIKO ASTEROSKOPEIO ATHINON - Greece 19.HOLO-INDUSTRIE 4.0 SOFTWARE GMBH - Germany 20. G & N SILENSEC LTD - Cyprus 21.INSTITUT JOZEF STEFAN Slovenia 22.STAM SRL - Italy 23. UNIWERSYTET TECHNOLOGICZNO PRZYRODNICZY IM JANA I JEDRZEJA SNIADECKICH W BYDGOSZCZ ì- Poland 24. INSTITUT ZA KORPORATIVNE VARNOSTNE STUDIJE LJUBLJANA - Slovenia 25. ATRISC - France 26.DIN DEUTSCHES INSTITUT FUER NORMUNG E.V. - Germany 27. KATHOLIEKE UNIVERSITEIT LEUVEN - Belgium

Clemente Fuggini