The MaSiBA project serves as a basis for providing targeted support in the context of IT security in the context of the wide variety of educational platforms and solutions that can be connected to the National Education Platform. For this purpose, a total of up to five platforms are to be

be subjected to a vulnerability analysis. The results are to be incorporated into a guideline as well as into the TR NBP in order to be able to offer platform developers possible assistance.

Within the framework of the project for market and vulnerability analysis, security of learning platforms and educational offers, up to 6 products from the field of learning platforms and educational offers (applications with online access or online applications) are to be selected from a pre-selection of products together with the client. Selected products or test installations that are necessary for the implementation of the project are to be procured on behalf of the BSI. In order to be able to test the products, an attack and implementation catalog must be drawn up, and then the corresponding vulnerability analyses in the form of web checks/penetration tests must be carried out for each product. The Contractor must contact the manufacturers of the products for quality assurance and within the framework of a CVD. The results are to be presented in a report/report for each product, as well as bundled in a guideline and final report. The project period is planned from October 2023 to September 2024.