ELASTIC Releases RP1 Results Presentation and Research Outputs

Following the publication of its mid-term success press release, the ELASTIC project is now sharing a consolidated overview of the work carried out during its first reporting period (M1–M18).

To present these results in a structured way, the consortium has released the ELASTIC RP1 Results Presentation, bringing together the main outcomes achieved during the first phase of the project. The presentation summarises progress across the project’s work packages, covering technological developments, demonstrator preparation, research outputs, and activities related to dissemination, exploitation, and standardisation.

Highlights from the First Reporting Period

Future 6G services will operate across a highly distributed cloud–edge–IoT continuum, spanning constrained IoT devices, industrial edge nodes, private infrastructures, and public clouds. Ensuring secure, portable, trustworthy, and efficient execution across such heterogeneous environments is a major challenge identified by the Smart Networks and Services Joint Undertaking (SNS JU).

The ELASTIC project addresses this challenge by introducing a framework that enables workloads to run seamlessly on-premise, at the edge, or in the cloud, without compromising security, confidentiality, or performance. By combining technologies such as WebAssembly, extended Berkeley Packet Filter (eBPF), and confidential computing, ELASTIC enables lightweight, isolated, and privacy-preserving execution, architecture-agnostic serverless orchestration, and secure IoT and edge services aligned with European 6G priorities.

During its first reporting period, the project consolidated its reference architecture, mapped 25 interoperable components to demonstrator requirements, and delivered initial implementations and prototypes supporting secure and efficient orchestration across distributed infrastructures.

Key achievements of the first phase include:

  • Development of the ELASTIC architecture and technology framework supporting orchestration across the cloud–edge continuum.
  • Progress in lightweight workload execution and serverless orchestration technologies based on WebAssembly.
  • Advances in confidential computing approaches, integrating Trusted Execution Environments (TEEs) and remote attestation mechanisms.
  • Implementation of monitoring and observability mechanisms using eBPF, enabling efficient security analysis and system monitoring.
  • Preparation of the ELASTIC demonstrators for validating technologies in real-world environments.
  • Contributions to scientific publications, open-source ecosystems, and standardisation initiatives.

Key ELASTIC Technologies Developed in RP1

During its first reporting period, ELASTIC delivered several core technologies forming the foundation of its secure orchestration framework across the cloud–edge–IoT continuum. These components demonstrate how lightweight execution environments, confidential computing, and advanced observability mechanisms can be combined to support trustworthy and efficient service deployment.

Among the technologies developed within the project are:

  • Propeller Orchestrator – A unified orchestration framework for managing and deploying WebAssembly workloads across heterogeneous infrastructures, from cloud environments to edge and IoT devices.
  • Wasm-operator – A framework enabling Kubernetes operators to run as event-driven serverless functions using WebAssembly, improving portability and resource efficiency.
  • WasmHAL-Trust – A hardware abstraction layer enabling WebAssembly workloads to run securely within Trusted Execution Environments, supporting confidential computing across different platforms.
  • Reliable Enclave Migration Protocols – Mechanisms enabling secure migration of workloads between trusted environments while ensuring continuity, accountability, and trust.
  • NETTO and eBPF-based Observability Frameworks – Technologies enabling real-time monitoring and analysis of distributed workloads with minimal performance overhead.
  • AI-based Intrusion Detection System (AI-IDS) – A hardware-accelerated intrusion detection framework integrating artificial intelligence techniques with eBPF-based monitoring to detect threats in distributed infrastructures.

These technologies contribute to the ELASTIC vision of enabling secure, portable, and efficient service execution across distributed infrastructures supporting future 6G systems.

Demonstrators and Validation Scenarios

To validate its technologies in realistic environments, ELASTIC is developing two demonstrators based on concrete operational scenarios.

Smart Connected Factory of the Future

The first demonstrator focuses on a secure IoT data fabric for industrial environments, showcasing how ELASTIC technologies can support orchestration across distributed factory infrastructures.

Three complementary scenarios are explored:

  • Predictive Maintenance, where sensor data is processed at the edge to detect anomalies in real time while protecting machine data and intellectual property.
  • Cross-Factory Data Sharing, enabling collaboration between manufacturing sites through federated learning while preserving data sovereignty.
  • Real-Time Robot Control, where control logic is executed close to robots to guarantee the ultra-low latency required for safety-critical automation.

Across these scenarios, workloads are dynamically orchestrated across the edge-cloud continuum, sensitive data is protected within Trusted Execution Environments, and execution integrity is verified through remote attestation mechanisms.

Privacy-Preserving Cloud Migration

The second demonstrator validates the secure migration of sensitive enterprise services to cloud environments. The demonstrator focuses on the Badge Request Tool (BRT), which manages personal and security-critical identity data.

Within this scenario, the service runs inside Trusted Execution Environments to protect data during processing, while remote attestation verifies the trustworthiness of the cloud infrastructure.

ELASTIC RP1 Results Presentation

The ELASTIC First Reporting Period Results Presentation provides a consolidated overview of the work carried out during the first phase of the project.

The presentation includes:

  • The ELASTIC vision and reference architecture
  • Progress across the technical work packages
  • Development of core technologies and prototypes
  • Preparation of industrial demonstrators
  • Scientific publications and open-source contributions
  • Activities related to dissemination, exploitation, and standardisation
View the ELASTIC RP1 Results Presentation

Explore ELASTIC RP1 Outputs

In addition to the results presentation, several outputs from the first phase of the project are available for the community:

  • Scientific publications presenting research results on WebAssembly security, eBPF technologies, confidential computing, and distributed orchestration.
  • Public deliverables describing the project architecture, technology design, and research findings.
  • Demonstration videos showcasing selected ELASTIC technologies and experimental results.
  • Open-source releases enabling researchers and developers to explore and build upon the technologies developed within the project.

These resources provide deeper insight into the work carried out by the ELASTIC consortium and reflect the project’s commitment to openness, collaboration, and knowledge sharing.

Looking Ahead

During its first reporting period, ELASTIC defined a consolidated architecture, identified 26 core components, and delivered initial implementations of 14 prototypes supporting secure orchestration across distributed infrastructures.

The project also established strong links with open-source ecosystems and international standardisation initiatives, including activities related to W3C/WASI and ETSI.

As the project progresses, ELASTIC will continue integrating its technologies into the demonstrators and expanding its contributions to research, open-source communities, and standardisation efforts, helping enable secure, efficient, and trustworthy 6G cloud–edge services.