DEFRAUDify aims to develop tools that help private businesses to detect fraudulent behaviour on the internet. These tools are partly based on existing tools that have been developed for Law Enforcement. They will be adapted to become relevant for private businesses as well. DEFRAUDify aims at businesses that encounter negative impacts from internet organised fraudulent behaviour. The tools will consist of a set of interoperable tools that jointly analyse suspicious behaviour and provide situational awareness.
Phases and activities
Phase 1 Analysis of the current stage and definition of the working framework – 16/08/2021 – 31/12/2021
Act 1.1 – Defining requirements and market analysis, correlated with T1.1
Act 1.2 – Analysis of the GDPR legislative framework, correlated with T1.2
Act 1.3 – Development of methods for measurements and tests, correlated with T1.3
Results
The analysis of the current stage and the definition of the working framework for DEFRAUDIFY4ALL during the specified period have yielded valuable insights. A1.1 focused on project coordination, revealing successful collaboration among partners and adherence to timelines. The legal and ethical considerations (A1.2) underscored the project’s commitment to data protection and privacy within the complex landscape of cryptocurrency and public data. A1.3 introduced a robust testing methodology, aligning with project objectives and emphasizing the importance of both code-level and usability assessments. These initial stages demonstrate a well-structured foundation, showcasing the project’s dedication to legal, ethical, and technical excellence. As DEFRAUDIFY4ALL moves forward, these early achievements position it well for the development of effective tools to combat online fraud while adhering to legal and ethical standards.
Dissemination activities
ITEA Cyber Security Day 2021 –https://itea4.org/itea-cyber-security-day-2021.html. The ITEA Cyber Security Day gathers Cyber Security customers and Cyber Security-relevant project (partner)s to share challenges, innovative ideas and experiences to improve cyber security and overcome challenges in the industry.
Phase 2 Analysis of Use cases and Data sources – 01/01/2022 – 31/12/2022
Act 2.1 – Definition of use cases and data sources, correlated with T2.1
Act 2.2 – Defining the functional requirements for the tools used in fraud analysis, correlated with T2.2
Act 2.3 – Defining the experimentation framework for tool evaluation, correlated with T2.3
Results
In this phase has been described the modules and necessary requirements for developing the application that analyzes financial frauds in the virtual space.
Several use cases were analyzed, case studies related to the analysis of the current state of technologies, problems in the field of financial fraud from the point of view of the digital cryptocurrency field. The main tools used in this stage are the following: Grafana for data visualization, Node-Red for data transmission via the MQTT protocol. Based on these tools, a testbed was built, being a platform for viewing cryptocurrencies (bitcoin, etherium, shiba).
Dissemination activities
- ITEA Consortium Meeting
BEIA participated today 4th April 2022 in ITEA DEFRAUDify consortium meeting. The meeting took place in UTRECHT – UTRECHT CASTEL, Netherlands.
- ARES 2022 Conference
BEIA had the opportunity to present the “Fraudulent Activities in the Cyber Realm: A DEFRAUDify Project Domain” paper in ARES 2022 Conference on 23th – 26th August in Vienna, Austria.
Find out more here.
- Bucharest Cybersecurity Conference 2022
BEIA participated in Bucharest Cybersecurity Conference on 27th-28th of October 2022. It was a great opportunity for our company to disseminate the Defraudify project. Check the event here.
- Romania Info Day – Innoveit Weeks 2022 – HYBRID event
BEIA participated in Romania Info Day – Innoveit Weeks 2022 on 21st of October 2022. Our company had an interview on Cyber Security – hybrid roundtable talk – moderated by: Prof. Anca Andreica, dean of Faculty of Mathematics and Computer Science, Babeș-Bolyai University. The Defraudify project was mentioned and disseminated during the discussion.
- SmartBlock4Health Conference 2022
BEIA participated in SmartBlock4Health Conference 2022on the 24th and 25th of October. Our company had a presentation “An InnovativeBlockchain system for Smart Grids” about Defraudify project and its benefits.
- SCEWC 2022
Our company participated in SCEWC (Smart City Expo World Congress) 2022 on 15-17 November 2022 in Barcelona, Spain.
Held in Barcelona since 2011, Smart City Expo World Congress is the international leading event for cities. Our mission is to empower cities and collectivize urban innovation across the globe. Through promoting social innovation and identifying collaboration opportunities, the event is dedicated to creating a better future for cities and their citizens. Find out more.
- GoTech World 2022
Another year, another chance to be part of GoTech World 2022 event, the largest B2B conference & expo in Central and Eastern Europe. The event took place on 3-4 November 2022 in Bucharest, Romania.
BEIA participated as exhibitor and had the opportunity to disseminate the Defraudify project.
- TAFIE 2022 & ROMAT 2022
On 23 November 20233, at University Politehnica of Bucharest – UPB – Inginerie Electrica took place the TAFIE 2022 event, and on 24th of November at UPB – Rectorat took place the ROMAT 2022 event. Beia Consult Intl.’s had the opportunity to present the benefits of Defraudify project and our internship programs for students.
Papers and presentations
“AI-Empowered Attack Detection and Prevention Scheme for Smart Grid System”
MDPI Mathematics: Blockchain and Double Auction-Based Trustful EVs Energy Trading Scheme for Optimum Pricing. Check the paper here.
SIITME 2022 – 26th-29th October 2022 – Poster presentation – System for detecting and preventing cyber attacks in small businesses
Phase 3 Development of architecture and services – 01/01/2023 – 31/12/2023
Act 3.1 – Analysis of platform support tools
Act 3.2 – Definition of structure and standards for data interoperability
Act 3.3 – Development of infrastructure
Results
In this phase are presented the details regarding the development of the architecture and services within the project.
It begins with a continuation of the definition of the experimentation framework for the evaluation of the tools, which describes the concepts of containerization of applications and infrastructure as code, which were used in the definition of the architecture and the development of a first prototype. The report continues with an analysis of support tools for the platform, which looks at using Docker for application containerization and Terraform for infrastructure as code.
A second part of the phase is dedicated to the definition of the structure and standards for data interoperability, which begins with the description of the data interoperability infrastructure, based on the use of a central database as a data hub and continues with the mention of the information exchange standards used and detailing visual of some main fields of the data model.
The last part of the phase presents details regarding the development of the infrastructure, mentioning Dark Web Monitor, GraphSense and Terraform, as well as a prototype for card fraud detection based on Docker and Terraform, the use of which is illustrated in Annex A.1.
Dissemination activities
WEBINAR: Fighting Cybercrime in Port Supply Chains
On March 22, Beia and Lupasafe held a joint webinar for decision makers and IT directors in critical industries. The CEOs of Beia and Lupasafe gave a demo of some related projects and Defraudify and explained more about the challenges critical infrastructure face.
Cybersec Europe 2023
BEIA participated in Cybersec Europe 2023 on 19 & 20 April 2023 in Brussels.
Cybersec Europe 2023 is the platform for experienced cyber security experts as well as next-gen start-ups to share knowledge with peers for jointly coping with the cybersecurity challenges. Businesses and institutions of all sectors learn how to enhance cyber resilience and protect their core.
Hannover Messe 2023
The time has come for one of the most eagerly awaited industrial events of the year – Hannover Messe 2023. BEIA, a renowned European technology company, is actively participating in the event organized on 17-21 April 2023 in Germany with the aim of showcasing its involvement in European projects and fostering meaningful connections with stakeholders in real time.
TechExpo 2023
BEIA participated in TechExpo 2023 on 26-28 May 2023 in Bucharest, Romania.
For a whole week, the biggest technology festival in Romania brought together all tech enthusiasts, from entrepreneurs, business people, students and any lover of innovation and technology.
Xth edition of the International Conference on Cybersecurity and Cybercrime (IC3)
Beia participated in Xth edition of the International Conference on Cybersecurity and Cybercrime (IC3) on 22-27 may 2023 with the following paper: An overview of RPL networks from the viewpoint of cybersecurity based on STACK.
EuCNC & 6G Summit 2023
Our company participated in EuCNC & 6G Summit 2023 on 6-9 June 2023 in Gothenburg, Sweden. It was a great opportunity to disseminate the Defraudify project.
ENISA 2023
BEIA participated in ENISA 2023 Conference on 25 May 2023. ENISA, the EU Agency for Cybersecurity, is pleased to welcome you to its annual Cybersecurity Certification Conference: ‘European Certification in support of the EU Legislation & Emerging Technologies’.
Phase 4
Introducere
Proiectul DEFRAUDIFY4ALL își propune să dezvolte instrumente avansate pentru a ajuta întreprinderile private să identifice și să prevină fraudele online. Obiectivul principal este crearea de instrumente care să alerteze întreprinderile asupra comportamentelor suspecte și să contribuie astfel la reducerea impactului negativ al activităților frauduloase pe internet.
Specificațiile Serviciilor Platformei
Detectarea și Notificarea Tranzacțiilor Suspecte
Serviciul de detectare și notificare a tranzacțiilor suspecte este destinat băncilor și altor instituții financiare. Acesta utilizează arhitecturi modulare și scalabile, împreună cu tehnologiile de containerizare și infrastructură ca și cod (IaC). Sistemul monitorizează tranzacțiile financiare pentru a detecta și alerta în cazul identificării tranzacțiilor suspecte. Algoritmii de machine learning, precum regresia liniară și Random Forest, sunt folosiți pentru a antrena modele care identifică comportamentele anormale. Arhitectura sistemului este construită folosind Flutterflow pentru interfața utilizatorului și Python pentru logica backend, cu datele stocate și gestionate prin Firebase.
Detectarea și Notificarea Fraudelor în Domeniul Asigurărilor
Serviciul de detectare a fraudelor în domeniul asigurărilor este realizat pe o arhitectură similară celei utilizate pentru detectarea fraudelor cu carduri bancare. Datele privind polițele de asigurare și cererile de despăgubire sunt colectate și procesate în timp real folosind Amazon Kinesis și Amazon S3. Amazon Glue este utilizat pentru procesarea datelor, iar modelul de machine learning bazat pe Random Forest este antrenat pentru a identifica fraudele. Notificările sunt trimise prin Amazon SNS către clienți sau agenții de asigurare, iar toate operațiunile sunt gestionate prin Terraform în mediul Cloud.
Identificarea și Neutralizarea Vulnerabilităților legate de E-mail-uri
Serviciul de identificare și neutralizare a vulnerabilităților legate de e-mail-uri este crucial pentru protejarea organizațiilor împotriva amenințărilor cibernetice. Acesta include scanarea atașamentelor și linkurilor din e-mailuri, filtrarea și blocarea e-mailurilor periculoase, analiza antetului e-mailurilor pentru detectarea spoofing-ului și multe altele. Serviciul oferă un dashboard centralizat pentru vizualizarea statisticilor, generarea de rapoarte detaliate, și alertare în timp real. Sunt implementate măsuri automate de răspuns și remediere, iar serviciul asigură protecție continuă și îmbunătățiri constante pentru a face față noilor amenințări.
Dezvoltarea Uneltelor conform Specificațiilor Tehnice
Dezvoltarea serviciului de detectare și notificare a tranzacțiilor suspecte implică clasificarea tranzacțiilor în două tipuri principale: tranzacții de intrare și tranzacții de ieșire. Fiecărei tranzacții i se atribuie diverse atribute și field-uri obligatorii pentru a asigura trasabilitatea, analiza financiară, și detectarea anomaliilor. Algoritmii de machine learning sunt integrați pentru a modela comportamentele suspecte și a genera alerte automate care sunt revizuite manual de echipele de conformitate.
Serviciul de detectare și notificare a fraudelor în domeniul asigurărilor folosește un sistem de ingestie a datelor în timp real, stocare scalabilă în Amazon S3, și procesare distribuită cu Apache Spark. Algoritmii de machine learning sunt antrenați pentru a identifica fraudele, iar modelul este stocat și aplicat pentru detectarea automată a cazurilor de fraudă.
Serviciul de identificare și neutralizare a vulnerabilităților legate de e-mail-uri utilizează algoritmi precum TF-IDF pentru analiza textului și detectarea amenințărilor. Sistemul include componente pentru scanarea e-mailurilor, filtrarea spamului, și blocarea malware-ului, cu un flux de detecție și remediere bine definit.
Testarea Componentelor și a Platformei Integrate
Testarea serviciului de detectare și notificare a tranzacțiilor suspecte implică preprocesarea datelor, aplicarea modelului de machine learning, și generarea de notificări SMS pentru tranzacțiile suspecte. Testarea serviciului de detectare a fraudelor în domeniul asigurărilor urmează un proces similar, asigurând precizia și eficiența detectării fraudelor. Serviciul de identificare a vulnerabilităților legate de e-mail-uri este testat pentru a asigura protecția continuă și răspunsul rapid la amenințările cibernetice.
Concluzii
Raportul detaliază dezvoltarea arhitecturii și serviciilor în cadrul proiectului DEFRAUDIFY4ALL. Se descriu conceptele de containerizare a aplicațiilor și infrastructura ca și cod, utilizarea Docker și Terraform, precum și structura și standardele pentru interoperabilitatea datelor. De asemenea, sunt prezentate detalii despre dezvoltarea infrastructurii și a prototipurilor pentru detectarea fraudelor, cu accent pe utilizarea algoritmilor de machine learning pentru analiza datelor. Proiectul continuă să dezvolte unelte pentru platforma interoperabilă, vizând extinderea domeniilor de aplicare și îmbunătățirea detectării și prevenirii fraudelor.
Website
ITEA4 website.
Project website