ABC of cybersecurity for SMEs

In our digitalized business environment, cyber threats and attacks are on the rise. In general, companies and organizations have relatively limited knowledge of various threats and countermeasures. At the same time, research efforts are mainly carried out in large companies and organizations that have completely different conditions than small and medium-sized enterprises. Modern technologies, in this case blockchain and artificial intelligence, have the potential to make cybersecurity more effective and less resource-intensive. The technologies themselves have challenges related to small-scale operations that are being investigated in collaboration with IT companies in the project.

About

Researchers at Luleå University of Technology's campuses in Skellefteå and Luleå collaborate together to raise awareness, find a balance of appropriate interventions to support SMEs with systematic cybersecurity, i.e. Attentiveness, Balance and Contingency, ABC. Few research efforts focus on cybersecurity within the unique conditions of SME operations, for example with few employees, digitized and connected manufacturing of products and services. Generally, SMEs purchase their systems from IT service providers, many of which are themselves SMEs. When procuring and purchasing systems, basic knowledge of cybersecurity is needed to order systems, as well as an understanding of the unique business needs to deliver customized security solutions.

The project's goals

The goal of the project is to lay the foundation for research efforts that address SME operations and inspire developing IT companies to meet SME needs for ready-made business-relevant security solutions. The researchers contribute with test and learning environments where prototypes that include modern technology for more effective cybersecurity can be evaluated in realistic case studies.

Ahmed Afif Monrat, project leader and postdoctoral researcher in cybersecurity, explains that technologies such as blockchains have great potential to help protect data and information, and that traceability helps ensure that information has not been manipulated or handled by outsiders. However, it can be difficult to determine which type of blockchain is best suited to meet the cybersecurity requirements that businesses may have. Prototypes for realistic scenarios have been developed, demonstrated and discussed with the project's target groups.

How we can help SMEs

The project's activities to disseminate knowledge to a wider audience are central, therefore various types of workshops and events are organized. Collaboration and cooperation are guiding principles for ensuring national cybersecurity, which is why the project takes advantage of synergies with other research projects. One example is a simulation exercise with AI-generated realistic scenarios with more than 80 participants from SMEs, municipalities and critical infrastructure organizations. Another is a knowledge dissemination workshop with actors from Västerbotten's hinterland, which will be carried out in Lycksele in the winter of 2025. The project will also be a co-organizer in CyberNorth, an annual cybersecurity event, which is planned for late spring 2025.