certMILS has three technical activity lines and one management activity structured into ten work packages (WP) in order to increase efficient information exchange. They are processed within 48 months and every WP has its objectives and interfaces aligned with the certMILS concept and objectives.

Activity 1: Compositional Methodology for Security Certification

  • WP1 "Baseline for compositional evaluation"

The first WP defines the baseline for compositional security certification and the methodology and it identifies the list of existing supporting tools.

  • WP2 "Standardisation of MILS integration methodology"

WP2 develops the modular MILS Platform Protection Profile (PP) and supports the compositional security evaluation described in the PP.

Activity 2: MILS Platform Certification

Activity 2 is split into the following three WPs:

  • WP3 "MILS platform definition" 

This WP defines the scope for the certification of the MILS platform and develops the CC Security target for the MILS platform.

  • WP4 "MILS platform enhancement"

WP4 prepares the implementation of the MILS platform for certification and develops the security testing approach. It develops security testing approach suitable for MILS platform and reusable for pilots.

  • WP5 "MILS platform certification"

This WP is responsible for the security evaluation and certification of the MILS platform.

Activity 3: Certification Pilots

The third Activity is divided into the three pilot WPs:

    • WP6 "Pilot: Smart Grid"

    • WP7 "Pilot Railway"

    • WP8 "Pilot Subway"

This three specify pilots define its security architecture and security requirements. Activity 3 integrates the pilots from existing and COTS components on the MILS platform and it provides the evaluation and certification results for Activity 1.

Activity 4: Programme Management, Dissemination/Exploitation wraps the project by focusing on dissemination, communication, standardisation, exploitation and management activities

There are two WPs: 

  • WP9 “Communication, standardisation, dissemination, and exploitation”

WP9 obtains inputs from all other WPs and ensures the communication/ dissemination of results to the outside parties and participating entities. WP9 supports the partners to exploit the achieved results and impacts the European and international market. Results within each other WP will lead to contributions to standardisation activities, coordinated by this WP.

  • WP10 “Project, risk, and innovation management”

The last WP draws from the input of all other WPs to ensure a successful project lifetime with respect to risk and innovation management. The management WP shows dependencies to all other WPs as it coordinates and ensures that the tasks are in line with the project work plan in order to reach the common goals of certMILS.