TUCCR: new research centre aims to increase cybersecurity knowledge

SIDN partners applied cybersecurity research initiative

Illuminated digital padlock on a futuristic digital circuit background

News stories about major cyber-attacks on universities, local authorities and companies are increasingly common. Recent high-profile incidents include the hacking of two universities in Amsterdam and a cyber-attack on a municipality in the east of the Netherlands. Unfortunately, not enough is currently known about cybersecurity to effectively prevent such attacks and defend our digital autonomy. And the knowledge that does exist isn't widely shared. Now, with a view to changing that landscape, several prominent players have joined forces in the Twente University Centre for Cybersecurity Research (TUCCR). Launched on 5 March, TUCCR is a vehicle for businesses, professionals, researchers and doctoral students to collaborate and share expertise. SIDN is one of the Centre's co-founders.

What is TUCCR?

Portrait of Aiko Pras
Aiko Pras, professor University of Twente

TUCCR is the brainchild of two professors, Willem Jonker and Aiko Pras. They've been concerned for some years that cybersecurity problems are increasing, while understanding of such problems is in decline. Central to the TUCCR project are two vital technical fields within cybersecurity: network security and data security. As well as excelling in both of those fields, the University of Twente has a strong reputation for considering the human and social aspects of cybersecurity. Those aspects are important because, as Aiko explains, the problems caused by cybersecurity incidents are not exclusively technical. "When an organisation gets hacked, you need a picture of the impact. What are the economic, ethical and psychological consequences? What's behind a young person's urge to take a bank off line? Often, incidents aren't so much about technology failing as about people using technology inappropriately." As a hub for direct contact between the academic, business and governmental communities, TUCCR will address cybersecurity problems from multiple angles. The aim is to produce research results suitable for application in new cybersecurity products, services and policies, and to undertake applied research with tangible benefits to society.

Collaboration with SIDN

In order to promote collaboration, Aiko and Willem have been inviting organisations that are active in network and data security and want to make a structural contribution to become TUCCR partners. SIDN is one of those to accept the invitation. As a TUCCR partner, SIDN will be contributing to the initiative both practically and financially. Cristian Hesselman, Director of SIDN Labs, explains the rationale for involvement: "SIDN is committed to tackling internet-related social problems. Data and network security, the field that TUCCR will be working in, is closely related to our own sphere of activity. The initiative's social dimension and the fact that a wide range of influential actors with various forms of expertise are involved are also very important from our viewpoint. You need that breadth of support to create something viable." "Value exchange is a crucial aspect for us as well. On the one hand, we can support TUCCR's research financially, provide data and contribute operational expertise," says Cristian. "On the other, the university can critically and independently review our activities, offer cutting-edge scientific knowledge and direct students our way who can help us with projects." Other TUCCR partners include Surf, Thales, TNO, the Dutch Payments Association, Better Be, Cisco, NDIX, Northwave and the NCSC.

Value exchange in practice

A good example of successful value exchange is the DDoS clearing house project. "The clearing house is a system for exchanging information about DDoS attacks," says Cristian. "A DDoS attack involves deliberately swamping a computer with so much information that it can't function properly. The clearing house records details of the traffic aimed at the target and shares it with potential victims. They then know what to look out for and are able to configure their equipment to minimise the impact if they do get attacked." The clearing house project began with a thesis by a student at the University of Twente and grew into an initiative with national and European impact. Last month, it was added to the European Commission's Innovation Radar Platform. "The clearing house is a textbook example of how I envisage TUCCR collaboration working," confirms Aiko. "The idea is to have teams working on research themes, each led by someone from the university and someone from a partner organisation." TUCCR can itself serve as a blueprint for collaboration on cybersecurity. Other universities and organisations will hopefully be encouraged to address the technical and socio-economic aspects of cybersecurity problems, and to develop and share relevant expertise.

What next?

In the weeks ahead, TUCCR's founders and partners will be discussing the best way to proceed. Together, they'll define the themes that TUCCR is to focus on, with a view to delivering a cohesive activity portfolio. Want to keep abreast of how the initiative is progressing? You'll find all the latest TUCCR news on the University of Twente website.