ABSTRACT
This chapter analyzes the processes necessary to efficiently manage the information sharing network and the technologies required to implement it. It presents the technical requirements and the overall architecture designed for the ECOSSIAN ecosystem. The ECOSSIAN system must consist of three layers: operator, national, and European. The chapter outlines the main technical components employed on each level of such a hierarchical cross-national incident analysis network. It discusses organizational and procedural facets, as proposed in the Cyber Intelligence Centre (CIC) framework, which would complement the technical features in a possible real-world implementation of such a sharing network. The chapter also discusses the applicability of such a framework to the ECOSSIAN system. It illustrates different application scenarios, demonstrated in the ECOSSIAN project, highlighting the benefits of adopting the proposed approach in different domains. The chapter finally presents the lessons learned in the ECOSSIAN project and provides relevant recommendations for a large-scale rollout.
