who may not have the indept knowledge to be able to understand the tools and its operational aspect. Is there a need for a security consulting business model to aid such a process. Regarding Tool integration, formal models don’t know how to connect. Nessos project has the idea of creation of a set of repository of tools, so it might be an idea to embed some of the projects tools in this repository. Presentation Link : http://www.effectsplus.eu/files/2012/09/spacios-exploitation201209-effectsplus-no_backup.pdf Massif - Pedro Soria-Rodriguez Mr Soria Rodriguez provided a summary of the consortium partners (industry and academic partners). Massif addresses the problem statement Management of Security Information and Security-related events (SIEM). With growing ICT infrastructures and service orientation, MASSIF will provide a new generation SIEM framework for service infrastructures covering features and challenges such as • • • • • • • • •
Multi-domain capabilities Cross-layer correlation High interoperability High scalability High elasticity Predictive security monitoring. Reaction capabilities Distributed operation Resilient operation
Example markets where there is potential to apply MASSIF include for example Finance, energy & utilities and health and many more. MASSIF will be demonstrated in various scenarios. Mr Soria Rodriguez gave examples of current SIEM solutions, and such industries were interested in advancing their products. MASSIF have identified the following items as exploitable items 1. MASSIF system - involves components form all the partners 2. MASSIF components: Complex Event Processing, Resilient Event Bus 3. SIEM enhancements/concepts: Resilience, predictive security MASSIF has two workshop commitments, the 1st workshop they already held at the CSP EU Forum 2012 event with the main goal here being to attract industry in the SIEM sector and market to present the results of the project and to explore how such results can fit into the solutions of industry today. The first workshop was successful in getting in touch with an initial industry base in this area.