OSCRAT – Łukasiewicz – Instytut Sztucznej Inteligencji i Cyberbezpieczeństwa

OSCRAT – Supporting European SMEs in Enhancing Cyber Resilience

Łukasiewicz – AI: Expertise in Cybersecurity and Artificial Intelligence

The Łukasiewicz Research Network – Institute of Artificial Intelligence and Cybersecurity (Łukasiewicz – AI) conducts projects with a real impact on digital security. We carry out research, develop tools, and support businesses in increasing their resilience to cyber threats. Our activities help make products and systems across Europe more secure and resistant to attacks.

The OSCRAT Project in Practice

Since 2024, Łukasiewicz – AI has been participating in the international OSCRAT project (Open-Source Cyber Resilience Act Tools), co-funded by the European Union under the Digital Europe Programme. The project aims to develop open, free tools to assist small and medium-sized enterprises (SMEs) in implementing the requirements of the Cyber Resilience Act (CRA) in practice.

The project focuses on increasing the real-world resilience of digital products throughout their entire lifecycle — from design and deployment to incident response.

Activities So Far

Throughout the project, the Łukasiewicz – AI team has presented the OSCRAT tool at numerous international conferences and meetings to gather feedback. A survey was also conducted among SMEs to collect opinions and needs, ensuring that the platform aligns with actual market challenges.
(See information about the OSCRAT survey)

What OSCRAT Offers

CRA Self-Assessment – interactive checklists, role and product category assignments, and reports supporting EU compliance declarations.
SBOM and Supply Chain Security – automatic and manual component lists with vulnerability analysis.
Vulnerability and Incident Management – policy creation, reporting to ENISA and CSIRT teams, improving response capabilities.
Centralized Documentation Repository – all reports, policies, certificates, and security patches in one location.
SME Support – ready-to-use tools and guidelines for quickly implementing cyber resilience principles without building solutions from scratch.

OSCRAT in the European Context

The project is aligned with the CRA, which defines digital product security requirements throughout their lifecycle. OSCRAT fits into the EU’s broader strategy to strengthen digital security and enhance enterprise resilience against cyber threats.

Collaboration and Consultations

OSCRAT is implemented by an international consortium: PMF Research (Italy), Oves Enterprise and ENERSEC (Romania), EDIH Trakia (Bulgaria), Unicis.Tech OÜ (Estonia), and Łukasiewicz – AI (Poland).

Consultations and surveys of SMEs, experts, and business support centers ensure the tools are tailored to real market needs.

Role of Łukasiewicz – AI

As the leader of the WP2 Requirements Gathering and Analysis work package, Łukasiewicz – AI defines the scope and requirements for OSCRAT tools, develops interaction models, the graphical user interface, and cybersecurity specifications.

Summary

OSCRAT provides practical, open support for European SMEs in enhancing the cyber resilience of digital products and preparing for CRA requirements. The platform enables enterprises to efficiently implement digital security principles in their daily operations.

Łukasiewicz – AI in 2025

The year 2025 was a period of intensive research, institutional partnerships, and impactful projects for Łukasiewicz – AI, with both technological and societal significance. The Institute operates in the fields of artificial intelligence, cybersecurity, digital technologies, solutions addressing social exclusion, and Industry 4.0 — combining scientific knowledge with the needs of society and the public sector.

At the beginning of 2025, the EMC Laboratory (Electromagnetic Compatibility Testing Laboratory) celebrated its 20th anniversary. For two decades, it has supported the national industry in electromagnetic compatibility testing and safety assessments of electronic devices.

A symbolic milestone in branding and organization was the renaming of the Institute to Łukasiewicz Research Network – Institute of Artificial Intelligence and Cybersecurity (Łukasiewicz – AI). The new identity highlighted the Institute’s competencies in AI, data analytics, cybersecurity, decision support systems, industrial technologies, and technologies that improve quality of life.

In 2025, we initiated cooperation with the Katowice Special Economic Zone S.A. to support regional enterprises in adopting AI and modern technologies. The first joint initiative included pilot workshops for members of the Innovator Club focused on machine learning and cybersecurity, laying the groundwork for future educational and implementation projects.

In the field of digital infrastructure, we launched EdgePL — a national network of edge computing nodes developed together with partners from Poznan University of Technology, the National Information Processing Institute, and the Institute of Bioorganic Chemistry PAS. Funded by the Ministry of Science and Higher Education, the project aims to accelerate data processing, expand modern digital services, and strengthen independent technological infrastructure in Poland.

Throughout 2025, Łukasiewicz – AI participated in numerous national and international projects. Notably, OSCRAT (Open-Source Cyber Resilience Act Tools) supports organizations in complying with the EU Cyber Resilience Act. This solution was presented at international conferences, promoting Polish expertise in cybersecurity and technology compliance.

In the area of social and digital accessibility solutions, we organized multiple meetings, presentations, and workshops showcasing technologies that support people with diverse needs. A key initiative is Accessible Book — designed for Deaf people and users of Polish Sign Language (PJM). Books are translated into PJM by professional interpreters and made publicly available on the Institute’s YouTube channel. In parallel, a database of recordings is being developed as a dataset for machine learning — although still at an early stage, it provides a foundation for future work on models that better understand sign language.

In 2025, we showcased technological and expert solutions at numerous events — from the Silesian Science Festival to the Horizons of Science at the Silesian Planetarium, as well as film festivals and open-air cinemas, highlighting technologies that enhance cultural and educational accessibility.

Another recognition emphasizing the practical impact of our work was the award for the AudioMovie project in the “We Did It in Poland” competition, confirming that Łukasiewicz – AI innovations are recognized in communities promoting high-impact Polish technological solutions.

Beyond these initiatives, many other research projects and activities were carried out — our experts participated in industry conferences, panel discussions, and expert meetings, contributing to the development of knowledge and competencies in key areas of AI and cybersecurity.

These examples represent just a selection of events from the rich calendar of Łukasiewicz – AI in 2025, reflecting an active institute that combines scientific research with tangible benefits for the community, economy, and technological advancement.

Wyszukiwarka