The sec-certs project (sec-certs.org) aims to be the comprehensive platform to explore the security certification ecosystem (specifically, Common Criteria and FIPS 140 schemes). It aggregates and annotates certification data, enabling unified search, vulnerability investigation, trend analyses, side-by-side comparisons, notifications and other features.

This thesis aims to extend the sec-certs project with support for processing European Cybersecurity Certifications (EUCC) from back-end scraping and data storage to the web-based user interface. To meet the thesis requirements, the student should undertake the following tasks:

• Analyze the context of EUCC and the sec-certs project.
• Analyze the differences between EUCC and Common Criteria certification schemes.
• Based on the analysis, propose an approach for integrating and managing EUCC metadata within sec-certs.
• Implement the necessary back-end changes to automatically scrape, parse and store all available EUCC certificate data in sec-certs.
• Design and implement an appropriate front-end (website) interface to present the EUCC metadata.
• Propose a pull request to integrate the new code directly into the upstream pipeline of sec-certs, ideally targeting a successful merge and deployment prior to the thesis defense.
• All code produced should be publicly available in the thesis archive and the project's upstream repository under the MIT licence.

The thesis is part of a long-term research project in cooperation between the Centre for Research on Cryptography and Security (CRoCS) at FI MUNI and Red Hat.