Legal and technical aspects of cybersecurity situational awareness, APVV-23-0137

Legal and technical aspects of cybersecurity situational awareness, APVV-23-0137

Responsible solver: doc. JUDr. Jozef Andraško, PhD.

Research Department: 50599 - Other disciplines related to legal sciences 

Implementation: 2024-2027

Situational awareness of cybersecurity, which includes the collection, storage, analysis and sharing of security data, as well as their prediction, brings with it many legal, but also technical challenges that need to be explored in mutual synergy. A sufficient level of situational awareness of cybersecurity helps economic entities to prevent cyber threats from becoming incidents and allows to better limit the impact of incidents and recover from them more effectively. Situational awareness of cybersecurity is an essential aspect for the correct application of existing and upcoming regulation in the field of cybersecurity. The research team, composed of experts from selected areas of law and technical fields, aims to analyse the current legal regulation regarding situational awareness of cybersecurity with regard to the collection, storage and sharing of security data, as well as the analysis of the legal regulation regarding to cybersecurity situational awareness with regard to the use of individual machine learning methods for security data analysis and situational awareness prediction. The unique output of the project will be recommendations for regulated entities in terms of cybersecurity legislation, following the current and upcoming legislation. Other unique outputs of the project include the creation of a technical way of collecting security data with regard to legal aspects, the design and implementation of machine learning methods for the identification of relevant and important security data with regard to the proposed legislation (especially personal data protection and liability of artificial intelligence), as also the design and implementation of machine learning methods for the prediction of situational awareness with regard to the proposed legal regulation (especially personal data protection and the responsibility of artificial intelligence