it-sa 2024

With its Cyber Resilience Act (CRA), the EU will in future require manufacturers to guarantee the IT security of products with digital elements. Once the CRA comes into force, which is expected to be in 2024, they will have a maximum of 36 months to demonstrate that their products comply with the new standard. However, due to complex architecture designs and the use of third-party components, assessing the need for action in concrete terms is a challenge.

The Fraunhofer AISEC is conducting research into automated compliance testing of software components with Confirmate. The tool will help to automatically assess compliance with the CRA and determine the individual need for action. Confirmate compares the security settings with the CRA specifications and helps to quickly identify specific vulnerabilities in the product. The analysis therefore saves valuable time for planning and implementing security measures.

See it in action

At this year’s it-sa Expo&Congress, the scientists from Fraunhofer AISEC will provide insights into the functionality of the AISEC solution for CRA compliance testing using security-critical sample software that is subject to the Cyber Resilience Act.

Find out more about the advantages and functional scope of “Confirmate”:

• at the joint Fraunhofer booth in Hall 6, Booth 6-314
• in a private discussion with Christian Banse
• at the presentation by Immanuel Kunz on October 22, 2024 from 12:15 to 12:30 am in Forum 6-A.