The purpose of this document, building on D4.1, is to define, propose a design and develop a core set of security measures that will be part of the COMPOSITION Security Framework, whose task will be to guarantee security, confidentiality, integrity and availability of managed information for all authorized stakeholders in the supply chain. Some of the components and technologies reported in this deliverable ensure trusted and secure collaboration; and at the same time they guarantee confidentiality and integrity of the information transmitted by addressing end-to-end security across all layers of the system integrating in a seamless manner three major groups of security mechanisms: authentication, access control and transport security. Other components ensure protection against cyber-attacks and provide security monitoring.
The architecture is based on well established guidelines and best practices, as well as proven technologies; but also includes innovative and experimental solutions that will guard the COMPOSITION system against unknown threats. The first prototype of the COMPOSITION Security Framework will be based on the architecture, components and technologies proposed on this deliverable and will be reported in D4.4 Prototype of the Security Framework I.
- Not specified