Cyber Security and Critical Infrastructure Protection
Short description
The team has as a constant concern the identification of the latest trends in security, technology transfer activities and the capitalization of research results - concerns that are transposed both in terms of updating policies in the field and in developing response capabilities. Its interests are also visible in the development of new products and services for the analysis of vulnerabilities and proposals for risk limitation, as well as in the provision of higher-level training activities for specialists in the field.
CYBER SECURITY
This service aims to promote cybersecurity initiatives to respond to national and European policies, strategies and requirements, as well as increase the capacity to respond to cyber incidents and reduce their impact on cyber infrastructure resources and services, through profile research, proposal of minimum cyber security requirements.
Main activities
- conducting advanced studies and research in the field of cyber security;
- developing IT applications and systems to support the development of citizens' digital skills in order to increase the population's access to the information society and risk awareness by training users;
- identification of emerging technologies and development of applications and systems in order to improve the quality of life of citizens;
- proposals to improve the management of vulnerabilities and cyber security alerts;
- providing expertise and consulting in cyber security;
- optimization of information resources management systems in public administration;
- optimizing the cyber security culture in public administration.
PROTECTION OF CRITICAL INFRASTRUCTURES
The team actively promotes and implements initiatives aimed at safeguarding critical infrastructures, aligned with national, European, and NATO security policies and strategic objectives. Its mission is to strengthen the capacity to prevent and respond to cyber incidents affecting critical infrastructures through dedicated research, the definition of minimum cybersecurity requirements, and practical recommendations to enhance resilience.
Through research projects, cybersecurity standards development, and actionable guidance, the team actively addresses the evolving landscape of cyber threats and strengthens the security posture of essential infrastructures.
Key activities:
Researchers and experts engage in a wide range of activities to enhance the protection of critical infrastructure and promote a secure digital society. These activities include:
- Conducting advanced research and developing applications and IT systems to enhance the digital capabilities of infrastructure operators;
- Raising awareness of cyber risks through comprehensive user training programs;
- Proposing and implementing concrete solutions for vulnerability and security alert management;
- Providing specialized consultancy and expertise;
- Optimizing IT resource management systems and analyzing digital innovation frameworks to ensure greater efficiency and adaptability.
The department also focuses on research and development in disruptive technologies, creating customized, integrated, and scalable solutions to protect critical infrastructures.
Moreover, the Critical Infrastructure Protection Service is actively involved in department-wide and cross-institutional research programs to expand human resource expertise in key areas, such as cloud computing, cybersecurity, blockchain, 5G communications, high-performance computing, and virtual and augmented reality.
Relevant RDI Projects
- Cyber Polygon: A Cyber Range Platform Specialized for the Energy Sector with Automated Generation of Virtual Scenarios
- Strengthening Synergies in Cybersecurity for Defense and Civil Sectors – ECYBRIDGE
- Resilience Networks for Cyber Ranges – CYRESRANGE
- Digital Credentials for Europe – DC4EU
- Identity Attributes Matrix Initiative - IAMI
- Development of the National Spatial Information Infrastructure, CDI Component (INIS - CDI) – INFRAINIS
- Resilient and Interoperable Communication Systems Based on Distributed Technologies and Self-Sovereign Digital Identity (RoDID)
- Institutional Capacities and Services for the Research, Monitoring, and Forecasting of Space Weather Risks – SAFESPACE
- Cyber Range for Industrial Control Systems – ROCYRAN
- The Once-Only Principle Project – TOOP
- EuroHPC-04-2019 – High Performance Computing Competence Centre – EUROCC
- High Performance Computing Competence Centre – EUROCC – Phase 2
- National Competence Centers within EuroHPC, CCX (PN III) 413/2021
- Study on the Identification of Indicators and Establishment of Threshold Values for Significant Cybersecurity Incidents, Required for the Transposition of EU Directive 1148/2016 in Romania
- Research on Policies and Advanced Solutions for Securing Critical Infrastructures Against Cyberattacks – Study on SCADA-Type Network Topologies
- Study on the Security of Data Communications in Smart Environments, Definition of Communication Systems and Network Security Functions, Focusing on Data Integrity and Authenticity
- Study on Establishing Cybersecurity Indicators for Measuring the National Cybersecurity Level
- Cybersecurity – Network and Information Systems Security: “Scenarios and Solutions for Incident Resolution – Management of National-Level Incidents with Potential Large-Scale Impact”
- Study on Adaptive Systems for Early Detection of Cyberattacks on State Resources