2 | 25 Fraunhofer magazine the issue. Unclear responsibilities are a risk factor, too,” explains Martin Serror, who works as a cybersecurity in- structor himself. “Knowing that, we put communication and coordination front and center in our training courses. We offer a true-to-life simulation environment tailored to the specific customer. Typically, we have participants go about routine tasks before facing a sudden cyberattack.” → See Project 8 | page 23 “In many cases, we see that communication and coordination are the issue. The HERAKLION project, which is being supported by the German Federal Ministry of Research, Technology and Space (BMFTR), aims to develop heuristic resilience analyses for municipalities using data space function- alities. It might sound like an abstract scientific study, but this can actually save lives. “Take catastrophic flooding, for exam- ple. Thanks to HERAKLION, first responders know ahead of time which detours to take because other roads are washed out, how many people, buildings and crit- ical infrastructure points are affected and which gyms and similar facilities are accessible for evacuees,” says Kai Fischer, man- ager of the Robustness and Resil- ience Analysis group at Fraun- hofer EMI. To gather the information needed for this, HERAKLION ef- ficiently combines data from different sources: population structure, weather, forest fire risk, maps of areas at risk of flooding or heavy precipitation and much more. For maximum real-world utility in the way the information from the data analyses is displayed on the dashboard, the devel- opers worked with disaster preparedness groups and first response planners right from the start. → See Project 9 | page 23 Smart system against smart system When smart defensive systems go toe to toe against smart drones or drone swarms, there are certain positives as well. After all, no one gets hurt at first when machines fight machines. However, in the world of AI, software and autonomous systems, threat scenarios are growing more complex. Meaning that hybrid threats are on the rise. Hans Peter Stuch, who leads a research group at the Fraunhofer Institute for Communication, Information Processing and Ergonomics FKIE, does not like the word “hybrid.” “It’s overused. True hybrid attacks are coordinated attacks originating from different do- mains.” For example, there might be a wave of social media posts criticizing the railway operator. Meanwhile, a cyberattack targets a signal box. And unknown par- ties attack a power line. Each of these attacks seems to be a minor annoyance in its specific domain, like a bee sting, but together, they add up to a significant threat or do huge amounts of damage. To counter threats of this kind, the team at Fraunhofer FKIE is working on a system that collects information from different do- mains, including data from phys- ical sensors such as surveillance cameras or radio receivers and from software tools that log mal- ware attacks in the network. There are also structures in place to monitor social media for patterns such as a sudden spike in certain keywords. All of this information is combined to produce a visualization of the situation. This big-picture view makes it possible to see that the different events taking place in different domains are in fact connected, even if they occur with long gaps in between. → See Project 7 | page 23 Unclear responsi- bilities are a risk factor, too.” Martin Serror, Fraunhofer FKIE Misunderstandings and poor management as security risks To help those responsible for security respond appropri- ately when faced with a cyberattack, the experts at Fraun- hofer FKIE offer regular security training sessions. Their main customers are energy suppliers and grid operators, and interest has been growing in recent years. “In many cases, we see that communication and coordination are Riedel, an expert in this field, sees the lines between civil defense and defense technology becoming increasingly blurred: “The distinction was always a bit artificial. Resil- ient infrastructure, protecting the civilian populace and defense ultimately deal with many of the same topics, structures and capabilities.” Schweitzer, the managing director of Fraunhofer VVS, adds: “Handled responsibly, civil and defense research both benefit society as a whole. At the same time, they both help with efficient use of financial resources.” 17