2010

2009

2008

2007

2006

2005

2004

Portefølje Naturvitenskap og teknologi ikon

The research system

Portefølje Humaniora og samfunnsvitenskap ikon

Ground-breaking research

Portefølje Samisk ikon

Sámi society and culture

Portefølje Demokrati, styring og fornyelse ikon

Democracy and global development

Portefølje Velferd, kultur og samfunn ikon

Welfare, culture and society

Portefølje Helse ikon

Health

Portefølje Klima- og polarforskning ikon

Climate and environment

Portefølje Landbasert mat, miljø og bioressurser ikon

Land-based food, the environment and bioresources

Portefølje Energi, transport og lavutslipp ikon

Energy and transport

Portefølje Muliggjørende teknologier ikon

Enabling technologies

Portefølje Industri og tjenestenæringer ikon

Innovation

LTP Climate, environment and environmentally friendly energy

Climate and loss of natural diversity

Internationalization

Societal security and civil preparedness

Renewal in the public sector

Velferdstjenester

Frontpage Image

Marine icon

Petroleum og mineraler

LTP Hav ikon

Oceans and coastal areas

LTP2 Muliggjørende og industrielle teknologier ikon

Enabling and industrial technologies

Trust and community

Professional environment

High quality and accessibility

LTP Climate

Strengthened competitiveness and innovation capacity

LPT Health

 An innovative business community

LTP3 Helse

Portefolje Petroleum Ikon

Portefølje Hav ikon

Portefølje Utdanning og kompetanse ikon

Portefølje Global utvikling og internasjonale relasjoner ikon

Portefølje Livsvitenskap ikon

LTP2 Styrket konkurransekraft og innovasjonsevne ikon

LTP2 Utvikle fagmiljøer av fremragende kvalitet

LTP2 Samfunnssikkerhet og samhørighet ikon

LTP2 Fornyelse i offentlig sektor ikon

LTP2 Klima, miljø og miljøvennlig energi ikon

Forsidebilde optimalisert

project-bank-technical

Et innovativt næringsliv ikon

Muliggjørende teknologier bakgrunn

Marin bakgrunnsbilde

Marin ikon

Forsidebilde

Statistics

Prosjektbanken presenterer statistikk og informasjon om prosjekter med finansiering fra Forskningsrådet fra 2004. Statistikken er fordelt på blant annet tema, år, geografi og organisasjon. Prosjektbanken gir også detaljert informasjon om de enkelte prosjektene.

...or see the summary and other information about the projects you have selected

Portfolios

En god beskrivelse av denne siden for søkemotoroptimalisering

Forside

How the grants are distributed between organisations, counties, subject areas etc....

Here are some examples of searches you can perform in the Project Databank

All long term plan objectives

About Text Queries

No thematic area or topic related to the project

has received funding in the programme period

No popular science description is available

have received funding in the programme period

The project with project number {{project number}} was not found

Technical description

Woops, something went wrong. Please refresh the page. If the error persists, please contact us.

We could not find what you were looking for

See statistics related to this LTP objective

See projects related to this LTP objective

related to this LTP objective have received grants

has been granted to projects related to this LTP objective

has been granted to projects related to this portfolio

related to this portfolio have received grants

About Prosjektbanken

Fornyings-, administ

Ukjent

Diverse

Samfunnsvitenskap

Teknologi

Matematikk og naturvitenskap

Trøndelag - Trööndelage

Vestland

Innlandet

Oslo

Agder

Akershus

Troms - Romsa - Tromssa

Østfold

LTP3 Muliggjørende og industrielle teknologier

LTP3 IKT og digital transformasjon

UoH-sektor

Instituttsektor

Helseforetak

Offentlig sektor

Portefølje Banebrytende forskning

Portefølje Muliggjørende teknologier

Grunnforskningsprogrammer

Programmer

Frittstående prosjekter

Nettverkstiltak

Infrastruktur og institusjonelle tiltak

Forvaltning

Diverse FoU-relaterte aktiviteter

Felleskostnader

Forskerprosjekt

Ingen søknadstype

Annen prosjektstøtte (t.o.m. 2014)

Politikk- og forvaltningsområder

Etiske, juridiske og samfunnsmessige aspekter

Grunnforskning

Utviklingsarbeid

From the SEA to the SOLution. An integrative assessment of marine pollution in a changing Arctic

Marine chemical pollution poses known threats to human health and to biodiversity, ecosystem and societal services. The Arctic is a major sink of global mercury (Hg) pollution. Arctic sediments, sea and glacial ice constitute vast Hg reservoirs. Recent studies raise concerns about their increasing role as local Hg sources. In a rapidly warming Arctic, the consequences of potentially increased environmental Hg on marine biota remain unknown. The objective of SEASOL is to identify the pathway(s) of Hg bioaccumulation in marine food webs of the High Arctic Kongsfjorden (Svalbard). This changing glacial fjord is recognised as a ‘natural laboratory’ of climate change in the Arctic. The fellow’s earlier research has shown the sole measurement of Hg levels as insufficient to connect biotic Hg dynamics to environmental change, whereas the analysis of Hg stable isotopes proved to be a promising tool for source discrimination and biotic transfer. SEASOL will build on the novel application of stable isotope analysis to identify the sources of Hg within the fjord system and the pathways to Hg accumulation within sentinel marine species. On the short-term, the study will provide fundamental knowledge to help understand how emerging sources of Hg from rapid environmental change will impact Arctic marine predators. On the long-term, SEASOL will contribute to the development of early-warning, adaptive management strategies, including modelling, for mitigating the cumulative impact of pollutants and climate change on Arctic marine species. This multidisciplinary approach and the central position of the host institution (Norwegian Polar Institute) in the field of Polar Research will equip the Fellow with a broad set of new skills and lay the foundation for building her specific niche as a future leader in marine pollution science.

Optimization of Free Space Optical Communication Link based Drones for Search and Rescue Operations in the Arctic Region

The Arctic region is witnessing more frequent shipping accidents than ever which require accurate search and rescue operations. The existing communication systems use drones with radio frequency (RF) technology, which has limited bandwidth and cannot offer 4G/5G connectivity due to harsh weather constraints. It further limits the capacity of drones and affects the resolution of images and videos. The current research proposes to design free space optical communication (FSOC) link-based drones that can enhance connectivity between multiple drones and rescue ships as well as the capacity of drones to produce high resolution images and videos. The proposed FSOC-based drones can provide highspeed connectivity than the existing RF technology. The research will collect atmospheric turbulences data from the Arctic region and use it for designing the FSOC link. Furthermore, to enhance the capacity of FSOC-based drones, the research will design advanced multiplexing schemes (Mode Division Multiplexing and Orthogonal Code Division Multiple Access) and to ensure link stability, omnidirectional receiver will be designed. The research will further evaluate the performance of proposed FSOC link under the impact of various atmospheric turbulences. The expected outcomes of this research will lead to the optimisation of FSOC-based drones in expanding search areas and improving communication systems for SAR operations in the Arctic region.

AQUASERV – RESEARCH INFRASTRUCTURE SERVICES FOR SUSTAINABLE AQUACULTURE, FISHERIES AND THE BLUE ECONOMY

The overarching objectives of AQUASERV are to bring together, enhance, integrate and customise RI capacities (including facilities, instruments and expertise) and through the provision of transnational access (on-site or remote) and/or virtual access, to significantly further scientific advance and promote and facilitate the implementation of European Common Fisheries Policy, the Farm to Fork Strategy, the Sustainable Blue Economy and the European Green Deal. 

AQUASERV will achieve these objectives by offering scientists from academia and business remote and on-site transnational (TA) and virtual (VA) access to an advanced set of European research infrastructures and its nodes related to research and management of marine and freshwater biological resources, food and biotechnology. These include the European Marine Biological Resource Centre ERIC (EMBRC), the Analysis and Experimentation on Ecosystems ERIC, The Aquaculture for Excellence for Aquaculture in Fish (Aquaexcel), and the Infrastructure for Promoting Metrology in Food and Nutrition (METROFOOD), as well as the International Council for Exploration of the Sea, both a service provider and stakeholder. It also includes the Research Infrastructure for Science and Innovation Policy Studies (RISIS) to bring contributions from the social sciences and to bring results nearer to policy makers ensuring societal impact. 

To enhance, integrate and customise RI capacities, collaboration between partners and new pipelines to meet the objectives of the project will be developed during the first 3 years and will make available  to users.  To ensure these capacities will not be lost, a sustainability work package involving stakeholders will address the project legacy.  

To maximize impact, AQUASERV will build a communication network among the partnership and develop a dissemination and outreach programme. Furthermore, an advanced training programme will be developed to capture future users and will be updated during the p

Aqua Research Infrastructure Services for the health and protection of our unique, oceans, seas and freshwater ecosystems

AQUARIUS will provide a highly comprehensive suite of integrated research infrastructures appropriate to addressing significant challenges for the long-term sustainability of our unique oceans, seas and freshwater ecosystems. For the first time, diverse research infrastructures will be combined to facilitate the work of researchers and key stakeholders focused on challenges and opportunities for both marine and freshwater systems. An impressive range of 57 research infrastructure services will be made available to include research vessels, mobile marine observation platforms, aircraft,  drones, satellite, sensors, fixed freshwater and marine observatories and test sites, experimental facilities, and sophisticated data infrastructures. AQUARIUS will support the development phase of the EU Mission to Restore our Ocean and waters by 2030, the Sustainable Blue Economy Partnership, the European Green Deal, and international climate initiatives. It will also be an essential component in achieving the European Digital Twin of the Ocean and the UN Decade for Ocean Sciences. The needs of researchers will be met through a robust and transparent system of transnational access funding Calls, facilitated by centralised user-friendly access portal. The Call programme will be informed through stakeholder engagement and brokerage events. Projects to be selected for Access must convincingly integrate multiple infrastructures and contribute to the core policy objectives of Mission Ocean, that is, to protect and restore marine and freshwater ecosystems and biodiversity; to prevent and eliminate pollution of our oceans, seas and waters; and to ensure a sustainable, carbon-neutral and circular blue economy. A thematic and geographic focus will be the hallmark of the proposed transnational Calls, aligning with the Lighthouse Regions, that is, the Baltic and the North Sea Basins, Black Sea, Atlantic/Arctic, and Mediterranean Sea along with their associated rivers.

Advance Marine Research Infrastructures Together

The European Ocean Observing System (EOOS) is the foundation of European ocean knowledge. The core Marine Research Infrastructures (MRIs) focused on ocean observing (EMSO, EURO-ARGO and ICOS ERICs; EuroFleets+, EuroGoShip, GROOM RI, JERICO RI and MINKE as INFRA projects) are the main providers of in situ ocean data for the EOOS and Copernicus, and the primary managers of instrumental capacity supporting fundamental research.
These MRIs are aware that the lack of effective cross coordination prevents them from fully supporting frontier research, while the lack of integration makes it difficult to reach a critical mass for EOOS and results in significant cost duplication. Accordingly, AMRIT gathers these MRIs together with OceanOPS/WMO international coordination experience with the objective to:
- ensure seamless operation of marine observation platforms ;
- ensure the full nominal use of sensors and accelerate their evolution ;
- exploit the complementarity of the various observation platforms ;
- ensure the overall coherence of the ocean data value chain.
To achieve these objectives, AMRIT will design and implement an EOOS Technical Support Center (EOOS TSC) for
- a fully integrated information service across the data value chain from early planning stages to final delivery to users;
- a cross-platform fully standardised data acquisition methodology for Essential Ocean Variables;
- a collaborative federal structure to operate these services, relying on the ERIs and their members.
The EOOS TSC will be the cornerstone in establishing and maintaining the EOOS, upon which European ocean observing can be strengthened in the coming decades. AMRIT will provide a catalyst for the development and consolidation of MRIs throughout Europe, providing a benchmark for operational coordination and collaboration. AMRIT will advance EOOS in line with its 2023-2027 Strategy and beyond, and the European Commission's ambitions for sharing responsibility in ocean observing across Europe.

Improve offshore infrastructure resilience against geohazards towards a changing climate

POSEIDON brings together an interdisciplinary and intersectoral team to deliver a professionally trained next-generation network of Doctoral Candidates to develop a step change in our capacity to identify, map, assess and predict offshore geohazards and in turn produce ground-breaking methods to prevent, mitigate and boost the resilience of current offshore infrastructure under a changing climate. The consortium is formed by experts across EU countries with universities, research institutions, industry partners and a government body to cover a full training programme on scientific and transferable skills. 

The programme will undertake critical research across scales (from micro to macro) for seeking the inner links and differences, with an eventual aim to ascertain the pathways and grow our capacity for the enhancement of the existing and the robust development of new offshore infrastructure in the frame of safety and resiliency. In addition to the informed design and implementation of the novel physical/numerical modelling and lab studies, our approach is unique in the solid integration and utilisation of state-of-the-art data science technologies (e.g., data mining, machine learning, etc.) to their full potential. Only through this systematic approach, we can achieve the objectives of understanding the impact of offshore geohazards on our offshore critical infrastructures (OCIs) and developing novel models, tools and designs for future OCIs, such as, wind turbines, pipelines and cables. 

The Doctoral Candidates will enjoy a highly integrated, interdisciplinary and intersector training environment, enriched through secondments with the network of non-academics. POSEIDON enables critical learning across all training aspects to ensure that comprehensive, robust and implementable solutions are obtained and validated to face the OCIs climate-resilient building.

POLARIN: POLAR RESEARCH INFRASTRUCTURE NETWORK

The polar regions play a key role in the Earth’s system. They are essential for our climate and are sentinels of climate change, human expansion, and the hunt of new resources. The polar regions are losing ice, and their oceans and land are changing rapidly. The consequences of this polar transition extend to the whole planet and are affecting people in multiple ways. Evidence-based policy recommendations are needed, but the polar regions are difficult to reach, and research infrastructures able to operate in these regions are scarce. To understand and predict key processes in the polar regions and provide evidence-based information, the polar research community needs access to world-class research infrastructure operating in these regions.
POLARIN is an international network of polar research infrastructures and their services, aiming at addressing the scientific challenges of the polar regions. The network includes a wide array of complementary and interdisciplinary top level research infrastructures: Arctic and Antarctic research stations, research vessels and icebreakers operating at both poles, observatories, data infrastructures and ice and sediment core repositories. POLARIN will provide integrated, challenge-driven, and combined access to these infrastructures to facilitate interdisciplinary research on complex processes. 
POLARIN will:
1.	Provide challenge-driven transnational access to a large portfolio of research infrastructures. 
2.	Improve the access to data by improving data availability and interoperability between data infrastructures. 
3.	Provide virtual access to data and data services. 
4.	Provide data products for the scientific community and decision makers.
5.	Train the young generation of polar researchers in optimally exploiting the infrastructures for their research.
6.	Duly advertise the services offered by POLARIN and engage the infrastructure users to share their research outcomes with society.


Land-Sea interface: Let’s observe together!

LandSeaLot will link together in situ, model and earth observations (EO) and connect related communities, citizens and initiatives such as Copernicus, ESA, EEA, GEOSS, EMODnet and the European Digital Twin of the Ocean. These observations will be used in a gap analysis to co-design a common land-sea interface observation strategy and an implementation plan. LandSeaLot participants will simultaneously work on improving: in situ and EO capabilities, models to reduce the model/observations gap and the integration of model, in situ and satellite data. Observation capacity will be increased through tested, improved and guided use of low-cost technology by citizens, facilitated by the network of European marinas. The technologies selected will be piloted in Integration Labs (ILs) together with improved and integrated in situ and EO observation techniques and model outputs. LandSeaLot ILs will cover selected areas in the Black, Aegean, Mediterranean, Atlantic, North and Baltic Seas, with a range of catchment, tidal and meteorological regimes. Experts and citizen science leaders will work in the ILs together with JERICO-RI, DANUBIUS-RI and ICOS-ERIC, and with regional policy makers and managers to tailor integrated observations that will provide them with information to manage societal challenges. These will include assessment of the lateral carbon flux and stock, plastics transfer, nutrients impact on primary production and eutrophication, supporting biodiversity conservation, improving modeling capability and supporting climate change adaptation (storm surge, floods, heat waves, coastal erosion, saltwater intrusion). Data generated in the ILs will be made FAIR available via EMODnet and interoperability, and semantic solutions for existing, international data flows will be developed. Relevant communities will be engaged by workshops, conferences, training, a high-tech summit and by a communication strategy including videos and policy briefs to ensure LandSeaLot’s legacy.

Material Science Innovation for Accelerated, Sustainable and Safe Implementation of Carbon Capture and Storage

MISSION-CCS presents a timely and unique doctoral network designed to deliver the next generation of highly trained researchers and entrepreneurs in the field of material science, specifically focused towards accelerating implementation of carbon capture and storage CCS technologies worldwide and ensuring the sustainable and safe operation of existing and future CCS systems.

The training network combines unique experimental system design and modelling approaches, state-of-the-art analytical technologies and techno-economic analysis to deliver a new generation of researchers and entrepreneurs. The programme of research training centres of delivering Doctoral Candidate Researchers (DCRs) with world-leading technical expertise in material science and engineering relevant to the entire CCS process. MISSION-CCS ensures that the subject-specific technical knowledge of each DCRs is under-pinned by inter-sectorial knowledge whilst also promoting wider innovation skills and relevant training on the techno-economics of CCS, developing experts with breadth of knowledge.

A central aim of the network is to forge a strong cohort culture, by ensuring that peer-to-peer learning and mutual support become the norm, in order to enhance experience. Research-led training activities are strengthened through a dynamic and interactive education based programme delivered by an internationally renowned consortium of academics and industrialists with complementary skills. As part of the training programme, subsequent to an introduction to CCS systems and the specific material science challenges, DCRs will gain knowledge of system design and optimisation, state-of-the-art analytical methods, theoretical modelling, techno-economics, and understand the challenges of exploiting their research. They will also acquire proficiency in project management, communication, entrepreneurship, and innovation; all essential attributes for any modern technical professional.

Optimisation of digital catch monitoring and reporting in European Fisheries

 OptiFish will strive to provide technological solutions that will simultaneously improve the sustainability of fisher’s operations, enhance control processes and strengthen society’s trust in their products.
OptiFish will develop, test and recommend a set of innovative technologies and tools supported by artificial intelligence (AI) to provide the management, the fishing sector and the scientist with data on catch volumes, catch compositions and the fishing environment. 
The goal is to unlock the full potential of technologies such as electronic and genetic monitoring for automated species recognition based on AI and computer vision to reduce discards, unreported landings and unreported fishing activities, ultimately establishing  a fisheries control and enforcement system fit for the digital age. The technologies are not enough alone, it is also critical to consider the combination of technologies and the integration of computer vision models, the wide range of data sources and their subsequent formats, while also addressing stakeholders needs and acceptance. 
This goal cannot be achieved by a single project, which is why the aim of OptiFish is to lay a solid foundation for full technological development from which other projects and initiatives can be built. The project will place a strong focus on species recognition in different fisheries equipped with distinctly different catch handling facilities and in different European sea basins. 
To ensure that these innovations are relevant to fisheries management, OptiFish has participation from the Norwegian Directorate of Fisheries, and has received written support from the European Fisheries Control Agency (EFCA), the Basque, Danish and Belgian Fisheries authorities.



Midlene fra STIM-OA-Stimuleringstiltak for åpen tilgang fordelt på år

Midlene fra STIM-OA-Stimuleringstiltak for åpen tilgang fordelt på fylker

Midlene fra STIM-OA-Stimuleringstiltak for åpen tilgang fordelt på fagområde

Bibliotekar

Støtte til åpen publisering for regnskapsåret 2020.

Støtte til åpen publisering for regnskapsåret 2020

*	Building Network.
Certain aspects of DESDIFOR are very relevant to ongoing international activities and a constructive dialogue with international groups and organizations can be maintained and strengthened through this project. The project plans to sha re experience, best practices and procedures internationally.
*	Dissemination of knowledge. 
In order to increase knowledge and awareness in forensics readiness and electronic evidence in the industry and academia this project plans to disseminate results  through papers presented at international scientific forums and conference, e.g. the conference on IT-Incident Management & IT-Forensics (http://www.imf-conference.org/) and an invited Cybex newsletter publication. The dissemination will also include wor kshops with chosen academics and company representatives (see next bullet), feature articles for the general public where appropriate and scientific discussions through the international network.
*	Organizing workshops. 
The project will organize workshop s with invited representatives from organizations like Justisdep, Domstolsadministrasjonen, Advokatforeningen, Dommerforeningen, Datatilsynet, Norsis, UiO, Telenor, etc. both to disseminate/share knowledge and strengthen cooperation in this field.
*	Writi ng feature articles.
We should be aware that preparing an organization to do this may entail the enhanced monitoring of systems and staff; techniques, procedures and the equipment to secure data in a way that makes it admissible as evidence, processes and  procedures that make staff realize the importance of evidence and its admissibility, and the obtaining of correct legal counseling and communicating usefully with law enforcement agencies. In order to highlight this, increase knowledge and raise awarenes s in the industry the project plans to write feature articles where appropriate, e.g. inn newspapers and other non-scientific publications.

Forensics Readiness and Electronic Evidence

The purpose of this project is to plan and arrange a (one-day) international workshop in conjunction with the annual international telemedicine and e-health conference in Tromsø 11-13 June 2007 (TTeC 2007). The 2007 conference has its main focus on servic es and systems for elderly people and people with chronic diseases (conference title: "Elderly - who cares?").
The workshop will focus on legal and security issues related to information services and systems for people/patients living either in their own homes or in institutions and receiving caring services.
The available technological solutions are not necessarily adapted to the way the nursing and caring sector is organised, to the need for role-based and context-based access to patient information, an d to the cooperation between communication systems and health record systems for the nursing sector. The workshop should propose some actions that could help to improve technological solutions.
The workshop should show examples of relevant legal and secur ity issues based on experience from projects and services worldwide. The workshop should aim at having a practical approach and focus on ways of overcoming barriers and solving problems.
The workshop will have a combination of invited keynote speakers wor king with similar topics, and presentations based on submitted abstracts to the workshop. A part of the planning process will be to find relevant keynote speakers. Another part will be to receive and evaluate abstracts. - The purpose of asking for submitt ed abstracts is to cover a broader group of similar projects and activities.  
Presentations and discussions will be documented in a summary report. The report will also list the main challenges with respect to security and legal issues, and propose some actions that could help to make progress in this area.
The work will have three main phases:
I. The planning phase
II. The workshop 
III. Summary documentation

Workshop TTeC 2007: Legal and security issues - who cares?

Section for Information Technology and Administrative Systems (SITAS) is currently working on the one year project &#8220;Mapping statutory regulations of information security&#8221;. Although not completed, some tentative conclusions regarding major tren ds in contemporary security lawmaking are identified: 1) the legal information security regulation is expanding in number and volume, 2) the lawmaking process is internationalized, 3) the legal responsibility is fragmented, 4) the selected regulatory stra tegy is extensive and diverse, 5) the regulations are poorly coordinated and 6) we lack empirical based research.

The preliminary research has required attention to four important areas: First, we need to continue mapping legal aspects of Information Sec urity. Second, we need to study empirically to what extent information security is realized in practice. Moreover to conduct analyses describing various independent variables, not merely existing &#8220;legal variables&#8221;, that possible explains the a ctual realized information security level. Third, we need to investigate possible correlations (if any) between statutory information security regulations and realized security level in society. Finally, we have to analyse potential steering variables inc luded or excluded in modern information security regulations. 

The recommended study aims at contributing to the ongoing legal policy debates concerning the overall regulatory process, e.g. coordination demands, financial and administrative consequences,  legal simplification, etc. Each of these subjects areas are given top priority in the current National Strategy on Information Security (e-Norge 2003).

Legal Information Security Regulations - an Instrumental Perspective

Norsk Kryptoseminar er et årlig arrangement som arrangeres i samarbeid mellom universitetsmiljøene, Etterretningstjenesten, Nasjonal sikkerhetsmyndighet og kryptoindustrien.

Norsk Kryptoseminar 2005

The complexity related to information and communication technology (ICT) vulnerability poses serious challenges to system operators. Unless these challenges are met, the vulnerabilities may lead to a serious disruption in for instance energy supply, provi sion of telecommunication services, traffic management, money transfer or emergency services. This will cause severe problems for society as a whole.

The principal objective of the project is to develop methodology and analyse the vulnerabilities in thos e infrastructures that depend on information and communication technology (ICT). The focus will be on systems and infrastructures critical to modern society. The project will also recommend a wide range of measures to reduce vulnerabilities, based on a ra nking of their cost effectiveness.

Developing a methodology to analyse these vulnerabilities is a daunting task. Two aspects are especially important. First, there is a need to analyse the current status of vulnerabilities and existing protection measure s. This includes a wide range of problems related to organisational, human and technological issues, and must be related to future technology trends in various sectors. Second, measures to reduce vulnerabilities must be identified, and their potential con tribution to increasing robustness must be calculated. The project’s main R&D challenge is to develop a methodology and address these problems in a comprehensive way, taking into account a wide variety of potential threats and directing particular focus o n potential high impact threats.

The target audience for the results of the project consists of national authorities who must identify their role in the protection of critical ICT-systems, and of system owners and operators for use in their planning and operations.

BAS5-Critical Information Infrastructure Protection

In this project, principles, models and methods for integrated access control for health care information systems will be studied. Integrated access control means that the access control mechanisms are an integral part of the ICT health care systems, and that access can be controlled in a well-defined, consistent and compatible manner in interoperable health care systems The models need to be specifically tailored for access to information in integrated, distributed and user-centred ICT systems, and will take into consideration security requirements from the users, administration and management alike, such as privacy, integrity and availability. The future all-encompassing ICT systems for the health care sector will be large, complex structures with stric t technical and managerial requirements, and the implemented security solutions, in particualr the access control architectures, should be introduced without unduly complicating the technical structure of the ICT systems, or reduce the user-friendliness a nd efficiency of the systems in any significant manner. Some security requirements, e.g. privacy, will as a minimum have to adhere to exteranl requirements in accordance with appropriate standards established by existing laws and regulations, others, e.g.  integrity and availability, will be dictated by the superset of the minimum quality requirements posed on a per-organization basis for the information processed in the integrated ICT systems.
The research methods employed will span a considerable scale, from theoretical and formal modelling of access control policies and principles to performing simulation and tests of access control models and methods in a laboratory setting and in close co-operation with user-centred environments of developed prototype  systems, in which the security and efficiency of the designs can be demonstrated.

Integrated Access Control for Health Care Information Systems

ENFORCE aims to develop novel vehicles for the formalization, analysis and enforcement of policies to ensure well-funded trust. ENFORCE addresses security and trust from a broad perspective including laws and regulations for privacy, data protection as we ll as more general ethical norms. In order to ensure the practicality of the approach, real cases in the area of virtual organizations built on state-of-the-art technology for interoperability and communication will be addressed. ENFORCE will deliver: 1.	Conceptual framework for trust management 2.	Policy specification language with formal semantics 3.	Methodology for the capture and analysis of policies within trust management 4.	Methodology for legal risk analysis to ensure trust 5.	Prototype tool supporting the above 6.	Documentation of empiric experiences and results from using the above in large case studies 7.	Methodology handbook 8.	Dissemination of results in the form of 3 PhD theses, 18 conference articles, 5 periodical artic les, 4 popular scientific articles, and 3 public seminars The project will focus on combining the experience of three principal researchers -- a lawyer, a philosopher and a computer scientist -- with strong international academic and industrial reputation, with the initiatives and creativity of three doctoral st udents, and three visiting researchers.

Tool supported methodology for the formalization, analysis and enforcement of policies within trust managment

The SWAP project aims to develop and implement a ligthweight set of protocols for secure communications over wireless links. This SWAP framework should offer message privacy, integrity, access control, and key management services to client/server applicat ions communicating over Bluetooth, Wi-Fi, and GSM links. Typical clients are handheld devices such as smartphones, PDAs, and laptops, while typical servers are stationary PCs and workstations.

The client portions of the SWAP framework are to be based on available Java technologies such as Java 2 Micro Edition (J2ME), the upcoming JSR-177 Security and Trust Services API, and the new Java JSR-82 API for Bluetooth communications. The framework portions for laptop clients and stationary servers will be based  on Java 2 Standard Edition (J2SE) and Java 2 Enterprise Edition (J2EE), as well as the existing Java Security framework for JSE and J2EE.

To develop an efficient SWAP framework, it is important to determine the limitations handheld devices and wireless network technologies impose on the application layer. During phase one of the project the project members will therefore develop small programs to test different aspects of wireless Java programming on real phones and laptops supporting wireless communica tions. The SWAP framework will then be designed during phase two. The framework will be based on cryptographic techniques and protocols where most of the computation-intensive processing and storage demanding operations can be carried out by the server. T he SWAP framework is to be implemented during phase three. Releases of the framework will be made available on the web.

Since experience has shown that it is difficult to design a good security framework, the project members will use existing technology and cryptographic protocols whenever possible. In addition, the members will work closely with researchers in the areas of cryptography, network security, and program development.

Secure Wireless Application Programming (SWAP) for laptops and handheld devices

Supervisory control and data acquisition (SCADA) networks contain computers and applications that perform key functions in providing essential services and commodities (e.g., electricity, natural gas, gasoline, water, waste treatment, transportation). As such, they are part of the nation’s critical infrastructure and require protection from a variety of threats that exist in cyber space today. SCADA networks were initially designed to maximize functionality, with little attention paid to security. As a re sult, performance, reliability, flexibility and safety of distributed control/SCADA systems are robust, while the security of these systems is often weak. This makes some SCADA networks potentially vulnerable to disruption of service, process redirection,  or manipulation of operational data that could result in public safety concerns and/or serious disruptions to the nation’s critical infrastructure. Cyber attacks or even worse, insider attacks on SCADA systems in energy production and distribution system s could endanger public health and safety as well as invoke serious environmental damage. The introduction of enterprise integration strategies coupled with lack of IT security knowledge has left process control systems vulnerable. The objective is to ide ntify steps companies can take to reduce IT vulnerability in process control systems and create an effective information security strategy and to become more reliant and robust. The research questions is: Is it possible to set up a security metrics Balanc ed Scorecard for security reporting to “continuously” validate the security level? Regarding to electrical infrastructure the aim of this thesis is in contribution to “Beredskapsforskriften” to describe a model or prototype of scorecard for security metri cs in a SCADA network. The intention is though to create at toolkit of security metrics yielded an appropriate for information security risk management in various types of critical infrastructure.

Security reporting

The oil and gas sector in Norway, as well internationally, is on the brink of a development where ICT will be used as a basis for more extensive use of remote operation of equipment and complex systems. At the same time, there has been a large increase of  ICT security related incidents in such systems, from internal as well as external sources. 

Incident response (IR) is the process of handling ICT security related incidents involving infrastructure and data. ICT security encompasses many different aspec ts including technology, human resources and organisation. So far, emphasis has been put on technical system issues.
There is a need for a more holistic view, a method for incident response management. 

IRMA will encompass security culture, technology, a nd organisation in a complete learning cycle. The project will run for three years in cooperation between SINTEF, AUC, and NTNU as research partners and Statoil and OLF as industrial partners. IRMA will rely on a number of workshops with participants from  the partners as well as external resources.

IRMA will produce intermediate results during the whole project period for use at the partners. System Dynamics Maps will be used for modelling of incident response processes and CORAS will be used as a tool f or risk analysis.

The results will be in the form of:
- a complete and full-cycle method for structured incident response management including assessment and improvement of security culture
- implementations at the industrial partners
- a System Dynamics  based virtual world with dual use as Interactive Learning Environment and auditing instruments
- scientific publications and doctoral thesis

From Incident Response to Incident Response Management: Case studies from the oil and gas industry

The scientific understanding of digital evidence is currently weak. In order to improve the evidential quality of digital evidence it is of vital importance to increase the scientific understanding of digital evidence. Digital time information is one of t he most important evidence items currently not scientifically understood.

Since digital forensics relies heavily on the ability to produce timeline of events, it is of outmost importance to improve the understanding of time stamps on computer systems in an evidential context. It is desirable to:

- Produce documentation on different time stamp formats and storage areas.
- Produce documentation on time reference systems and timezone systems
- Conduct research on how system operations affect time stamps in  a file system
- Conduct research on how timestamps may become erroneous and how this may happen.
- Find methods for the discovery of erroneous time stamps. One or several methods should be found which can indicate or make sure that timestamps are wrong d ue to error, inaccuracy or manipulation. Such methods will most likely be based on analysis of all time stamps on a medium using statistical and/or data mining methods.

Based on such research a methodology for treatment of time stamps in digital evidence  can be established. With such a methodlogy, it will be possible to conclude with greater certainty when constructing a timeline of events based on digital evidence

The project will be realized in collaboration between the research institutions NTNU and PURDUE, the law enforcement unit ØKOKRIM and the private companies Ibas ASA and FAST ASA. This project is associated with the cross-faculty Research Programme in Information Security organized within the strategic focus area of ICT established at NTNU, an d run by five NTNU Departments: Telematics, Computer and Information Science, Mathematical Sciences, Industrial Economics and Technology Management, and Electronics and Telecommunication.

Time Stamps, Digital Traces and Forensic Evidence - TID

During the last twelve months we have established an interdisciplinary collaboration with highly ranked US institutions (CERT/CC at Carnegie Mellon, Center of Excellence Software Assurance Institute and School of Information Studies at Syracuse University , Rockefeller College of Public Affairs and Policy, University at Albany), a leading Spanish university and the largest independent Scandinavian R&D institute SINTEF. An essential component of the collaboration is our discipline – system dynamics (SD). We  have jointly identified research challenges that are far from a satisfactory solution. A major one – identifying and suppressing dynamic triggers that escalate to create organizational vulnerabilities – is the theme of a joint grant proposal to the Natio nal Science Foundation (NSF). 

Another important one – central for  this project AMBASEC – is advancing the quality of reporting and use of ICT security incident data. SD group modelling is a promising methodology to employ in this respect because of its  ability to capture and combine different types of knowledge (both formal/explicit and informal/tacit expert knowledge) into dynamic models that yield robust behaviour modes – quantitative results do depend on data quality but the BEHAVIOUR MODES or PATTE RNS are much more stable and create a sense of direction from the near beginning of the model-building. We aim at one PhD thesis and a post-doctoral contribution applied to CSIRT and consisting of dynamic models with user-oriented add-ons (maps, archetype s, policy analysis & recommendations, Interactive Learning Environments, audit instruments, user materials) thoroughly validated and evaluated. Using and extending methods developed in previous work we will also evaluate mental models in relation security  culture. Our methodology is a double-loop learning research approach.

The project will involve industrial partners and SINTEF. Depending on funding, we will exploit synergies with the proposed NSF project.

A Model-Based Approach to Security Culture

Since it was established in 1979, by The European Workshop on Industrial Computer Since it was established in 1979, by The European Workshop on Industrial Computer Systems, Technical Committee 7 on Reliability, Safety and Security (EWICS TC7), Safecomp ha s contributed to the progress of the state-of-the-art in dependable applications of computer systems. Safecomp is an annual event covering the state-of-the-art, experience and new trends in the areas of computer safety, reliability and security regarding dependable applications of computer systems. Safecomp provides ample opportunity to exchange insights and experience on emerging methods and practical applications across the borders of different disciplines.
28 - 30 September 2005 Safecomp 2005 is to be hosted in Halden/Fredrikstad, organised by Institutt for energiteknikk (IFE) and Østfold University College (Høgskolen i Østfold, HiØ). In addition to the Safecomp conference, IFE and HiØ intend to combine Safecomp 2005 with the one-day NONSTOPP seminar ( organised by IFE/HiØ), the CSDUML Workshop (organised by NTNU) and additional meetings. Altogether, making it attractive for participation both for industry and academia in Norway and internationally. The activities are also supported by Halden IT-Forum. IFE will have the economical/administrative responsibility.
The main objective of the Safecomp 2005 is to host an international conference on safety, security and reliability, by providing high quality on invited talks and submissions. Another objective i s to contribute to Norwegian research within safety, security and reliability by providing a meeting-place between Norwegian and international researchers.
The objective of this application is to apply for funding for hosting high quality international ke ynote speakers, doing a good marketing, and organise the conference.

STIM-OA-Stimuleringstiltak for åpen tilgang

Støtte til åpen publisering for regnskapsåret 2020

Awarded: NOK 10,000

Summary

Funding scheme:

STIM-OA-Stimuleringstiltak for åpen tilgang

Funding Sources

Thematic Areas and Topics