SCIFER

SIEM Solutions for Critical Infrastructures sEcurity & Resilience
Project ID
Funding Organization:
European Cybersecurity Industrial, Technology and Research Competence Centre
Funding Programme:
HORIZON-CL3-2025-02-CS-ECCC
Funding Instrument:
HORIZON-CL3-2025-02-CS-ECCC-02 /HORIZON Innovation Actions
Start Date:
01/10/2026
Duration:
36 months
Total Budget:
5,998,062 EUR
ITI Budget:
722,900 EUR
Scientific Responsible:

SCIFER introduces a federated, AI-native Security Information and Event Management (SIEM) ecosystem that strengthens the protection, resilience, and digital forensic readiness of European Critical Infrastructures (CIs). Addressing the growing interconnectivity and exposure of critical systems to sophisticated cyber threats, SCIFER integrates situational awareness, dynamic risk and vulnerability assessment, and AI-driven digital forensic readiness within a secure-by-design, modular architecture. The system advances beyond traditional SIEMs by incorporating node criticality analysis, federated threat intelligence sharing, and agentic AI for proactive evidence identification, prioritization, and secure preservation using Distributed Ledger Technologies (DLT) and Merkle hash trees. This ensures trustworthy, tamper-proof, and legally admissible digital evidence, fully aligned with NIS2, DORA, GDPR, and the forthcoming AI Act. SCIFER’s architecture operates through three synergistic layers: (i) a federated SIEM platform for cross-domain data aggregation and correlation; (ii) a component layer featuring a Dynamic Risk Engine, Node Criticality Assessment, and Digital Forensic Readiness Framework (DFRF); and (iii) a cross-sector validation layer spanning energy, healthcare, telecommunications, and transportation. A transversal Legal, Ethical, and Socio-technical Governance Framework ensures compliance, transparency, and accountability. By validating interoperable components across these pilots, SCIFER transforms SIEM operations from reactive monitoring into proactive, forensic-ready resilience, enabling collaborative situational awareness and trusted cyber defense across Europe’s critical infrastructure ecosystem.

Consortium

ETHNIKO KENTRO EREVNAS KAI TECHNOLOGIKIS ANAPTYXIS (CERTH), GR
BOURNEMOUTH UNIVERSITY (BU), UK
TRUSTILIO BV (TRUSTILIO BV), NL
AEGIS IT RESEARCH GMBH (AEGIS) DE
TELEFONICA INNOVACION DIGITAL SL (TID) ESP
PLURIBUS ONE SRL (PLURIBUS), IT
KATHOLIEKE UNIVERSITEIT LEUVEN (KU Leuven), BE
GNOMON PLIROPHORIKIS AE (GNOMON SA), GR
ETHNIKI ARCHI KYVERNOASFALEIAS (NCSA), GR
ADRIAFER RAIL SERVICES SRL (ARS), IT
INSTITUT DE RECHERCHE TECHNOLOGIQUE SYSTEM X (IRT SYSTEMX), F
STOWARZYSZENIE POLSKA PLATFORMA BEZPIECZENSTWA WEWNETRZNEGO (PPHS), PL
ISOLUTIONS LLC (iSolutions Labs), UA
MAGGIOLI S.P.A. (MAG), IT

Contact

Dr. Konstantinos Votis
(Scientific Responsible)
Building A - Office 2.8

Information Technologies Institute
Centre of Research & Technology - Hellas
6th km Harilaou - Thermis, 57001, Thermi - Thessaloniki
Tel.: +30 2311 257722
Fax: +30 2310 474128
Email: kvotis@iti.gr