Integrating an Existing Security Analysis Tool in the MEDINA Framework

by Immanuel Kunz (FhG) | May 6, 2022 | MEDINA Framework, MEDINA Solution

MEDINA integrates different types of evidence collection tools to enable a comprehensive assessment of a cloud service’s security level. This is important for several reasons: First, security certification catalogs cover different layers including the infrastructure,...

MEDINA deliverables published in April 2022

by TECNALIA | Apr 29, 2022 | Deliverables, MEDINA Solution, Standardization

MEDINA has published three new deliverables in April 2022. These documents are available on the Public Deliverables page: D4.4 Methodology and tools for risk-based assessment and security control reconfiguration-v1 is dedicated to the dynamic risk-based assessment and...

MEDINA Framework: a technical overview

by Anže Žitnik (XLAB) | Mar 16, 2022 | MEDINA Framework, MEDINA Solution

The goal of the MEDINA project is to design and develop a security framework for automated evaluation of cloud service compliance with security standards. This post aims to provide a high-level technical overview of the MEDINA framework’s contents and introduces the...

MEDINA Risk Assessment tool

by Artsiom Yautsiukhin (CNR) | Mar 15, 2022 | MEDINA Framework, MEDINA Solution

MEDINA aims to develop an innovative mechanism for supporting continuous monitoring of cyber security certification compliance for cloud services. Following a reputable standard is often considered as an approach for assuring high level of cyber security. At the same...

HOW TO ENABLE BETTER SECURITY POSTURE IN THE CLOUD ENVIRONMENT?

by Tatu Suhonen (Nixu) | Mar 8, 2022 | MEDINA Solution

The cloud is constantly changing and moves faster than traditional periodic auditing can cover. The solution to this problem is continuous auditing. To make this happen, EU Horizon 2020 funded the innovation program Medina to develop a novel solution hitting the...

Automated cybersecurity monitoring: the path to continuous compliance

by Björn Fanta (Fabasoft) | Oct 4, 2021 | MEDINA Solution

As part of a private call for EUCS (European Union Cybersecurity Certification Scheme on Cloud Services) experimentations organized by ENISA (European Union Agency for Cybersecurity), Bosch, Fabasoft and Nixu worked on an experimental environment to address this...