Wide-area Cyber-security Analytics Solution for Critical Infrastructures

On-line sharing of cyber-security information is necessary to effectively counter cyber-attacks. An online cyber-security analytics system for detecting and mitigating cyber-attacks and sharing information between Critical Infrastructure operators and regional and national authorities and also internationally is presented. The system contains one part which acts as a Security Operations Centre at Critical Infrastructure-level, with the capability to automatically mitigate attacks, and a part on meta- Critical Infrastructure level which, on a pan-European scale, gathers and analyses cyber-security information provided by the Critical Infrastructure operators and provides the results of the wide-area cyber-security analytics to authorities and back to the Critical Infrastructure operators. A use case of the system detecting and mitigating an attack is presented.