PROKI - Prediction and protection against cyber incidents

The main objective of the project is to build an effective system for the detection, identification and prediction of cyber threats and Cyber ​​Threat Intelligence. This system operated by the CERT National Security Team (CSIRT.CZ) will be based on an analysis of data and traffic information on the Internet from a variety of sources to develop methods and procedures for assessing the vulnerability of critical information infrastructure.

The system created will allow these data to be correlated to provide a deeper insight into the relationship between each incident and its originator. Correlation of data and the ability to link them is a key aspect for identifying and resolving large-scale incidents, Advanced Persistent Threat Threats (APT), or tracking the activities of criminal groups operating in virtual space.

The second layer of the system will be the distribution of information on security incidents, both in the form of detected vulnerabilities and in the form of so-called gray-lists (lists of malicious IP addresses), to be taken over by critical information infrastructure operators (operators of major electronic communications networks, operators data centers). They will be able to take appropriate measures on the basis of this information.