Modern digital systems are increasingly complex and built from many software, hardware, and AI components, often sourced from third parties. At the same time, organisations face growing cybersecurity threats, stricter regulations, and strong pressure to shorten time-to-market. Traditional, one-time security checks are no longer sufficient. SECASSURED addresses this challenge by enabling continuous security and compliance assurance throughout the entire system lifecycle, from development to operation.
The project develops an assurance-driven security engineering framework that combines AI-based security services, federated digital twins, and SecDevOps/MLOps practices. This allows organisations to model, test, validate, and monitor systems in secure virtual environments before and after deployment. The solution supports automated compliance interpretation, vulnerability discovery and repair, anomaly detection, advanced security orchestration, and AI security and trustworthiness assessment, helping organisations reduce cyber risks and build trustworthy, certifiable systems.
SINTEF’s Role and Contribution
SINTEF is the project coordinator and plays a key role in defining the overall concept, architecture, and the core secure virtual environments called SecDevTwin and SecOpsTwin, as well as in project management and scientific dissemination. SINTEF leads the development of digital twin-based security engineering and contributes to AI-supported assurance services, and validation of the solutions in realistic industrial use cases.
SECASSURED is carried out by a strong European consortium of 19 partners from 10 countries, including research institutes, universities, large industrial companies, and SMEs, covering the full software and hardware supply chain. SECASSURED can contribute to more resilient digital infrastructures, systems and processes by engineering increased software, hardware and supply chain security, secured disruptive technologies. It can also contribute to smart and quantifiable security assurance and certification shared across the EU, and strengthen EU & Norway cybersecurity capacities and sovereignty in digital technologies.
Header photo: Shutterstock