About the Project
What Do We Do?
Safe Horizon aims to tackle the emerging threat of Crime-as-a-Service (CaaS) by harnessing intelligence from various sources including the clear web, deep web, dark web, public dumps, and law enforcement datasets. By integrating these data streams with machine learning technologies, the project seeks to extract actionable evidence for legal use.
Safe Horizon will provide LEAs, emergency response teams (CERTs), and computer security incident response teams (CSIRTs) with a comprehensive toolbox of underdevelopment and enhanced open-source solutions that are designed to be user-friendly and easily adaptable.
Project Objectives
Monitor CaaS platforms, associated services and malicious actors’ arsenal and methods
SafeHorizon will monitor CaaS platforms from various threat actors to understand their modus operandi (arsenal, methods, motivation, strategies, and monetisation mechanisms).
1
Enable seamless collection of digital evidence, unique identifiers, and actionable intelligence from various sources, considering novel services, platforms, and technologies
SafeHorizon will combine the collected information from the crawlers with malware samples, phishing emails, intelligence feeds, and private and proprietary datasets in order to extract features that will be used by ML and AI algorithms to generate actionable intelligence.
2
Correlation, attribution, & disruption aligned with EU norms and value
By monitoring the infrastructure, cryptocurrency transactions, and online presence and using various intelligence feeds beyond attribution, SafeHorizon will provide LEAs with actionable intelligence to facilitate the disruption of malicious campaigns and bring the perpetrators before the court.
3
Real time threat modelling and exposure assessment
By developing dynamic and stochastic models, SafeHorizon will provide suitable tools for real-time monitoring of threats, better-anticipating changes in risk and optimising risk management policies.
4
EU resilience and cyber sovereignty
By building technology made in the EU, SafeHorizon will reduce European dependency on allies and other third parties while also reducing the time until a vulnerability or an attack on EU infrastructures or critical services is notified to national authorities.
5
Guide responsible and replicable research in FCT, while creating targeted awareness campaigns (for victims) and dedicated training material for practitioners
SafeHorizon aims to create a research FCT hub that would allow vetted researchers to access curated datasets and trained models, allowing them to extend and improve results without the need to start from scratch or face legal constraints.
6
Innovations
The SafeHorizon will collect data from various sources, aggregate them and use machine learning and artificial intelligence to analyse and correlate it, enabling LEAs to gain insights into emerging threats and criminal activities that may not be apparent through traditional investigative methods and their tooling.
Moreover, SafeHorizon will detect threats in real-time or even before they materialise. This early warning system will allow LEAs to take proactive measures to prevent or mitigate potential attacks.
Impact
For LEAs, CSIRTs, CERTs and ISACs
SafeHorizon will develop tools to strengthen the capacity of LEAs, CSIRTs, CERTs and ISACs to tackle local and global criminal activity by identifying transnational criminal networks and marketplaces that enable the operation and monetization of CaaS.
For EU cybersecurity and security providers
SafeHorizon enhances the European Union’s sovereignty in digital technologies by developing tools and technologies within its jurisdiction, enabling EU security providers to access reusable technology and actionable threat intelligence without reliance on external entities.
For service providers
SafeHorizon will provide an integrated dashboard showing to the service providers the potential risks and offering threat intelligence capabilities stemming from an in-depth view of the modus operandi of threat actors.
For policy makers
SafeHorizon research results will support policy makers, organisations and institutions to design and/or improve policies related to online crime and cybercrime prevention.
For end-users and society
SafeHorizon tools and research results will help lay people and LEAs fight online crime and cybercrime, and respond to a pressing public demand from families increasingly concerned about the risks of the internet for young people.
By disrupting malicious online campaigns, SafeHorizon will limit the cyber attacks on critical infrastructures, preventing access to necessary services (energy, communication, transportation, etc.), and thus, increase trust in using the cyber-physical services.
