Stiki places a heavy emphasis on research and development in the development of IT security solutions, particularly for the health sector. There has been excellent co-operation between Stiki, the University of Iceland, the Ministry of Health and Social Security and health-care organisations. Stiki has taken part in various projects of masters students at the University of Iceland by providing the students with work facilities, access to computer equipment and network connections.

Stiki is constantly developing integrated software solutions for risk management in the processing of data. A project named Stiki Risk Management Framework has been defined, the goal of which is to develop software units for as many aspects of risk management as possible. See RM STUDIO for further details. Some components of the project have been defined as masters projects at the Department of Electrical and Computer Engineering at the University of Iceland.

The following are short descriptions of two of Stiki's current research projects:

The Icelandic Health Network

Stiki has for the past few years been collaborating with the University of Iceland and the Ministry of Health and Social Security on developing the Icelandic Health Network.

The Icelandic Health Network is a project launched by the Ministry in 1996. The Health Network is intended to interconnect health-sector organisations and as a secure transmission channel for electronic data. The Network has many applications. It wil be used as a transmission channel for existing information systems as well as a basis for developing new systems. Security is a primary focus for the Health Network, which will channel highly sensitive health and personal information. Stringent information security requirements are imposed on those connecting to the Health Network. They must, among other things, meet minimum security requrements based on the security standards ISO/IEC 27002 and ISO/IEC 27001 in accordance with the Network's defined security targets.

The objective of undertaking the project management for the Network is not to engage in telecommunications operations, but to utilise public transmission channels in building up the Network. The Health Network will thus be a Virtual Private Network (VPN) operated over public telecommunications networks using stringent data encryption, identification services and personalised use of electronic ID.

Simulation Model for Telecommunications Networks

The project includes the development of software for the modelling and simulation of network traffic in a public telecommunications network. The simulation has the following purpose:

1. Needs analysis and planning for the necessary equipment in networks, including hardware and network connections
2. Testing and comparison of various types of remote connections
3. Security testing, e.g. operational security and the identification of users of computer systems
4. Facilitates the development of new systems and other services intended to use a computer system

The simulation model can be used to map the need for remote connections, estimate operating cost, as part of a prospectus for the purchase of telecommunications services and in order to ensure information security in telecommunications systems. Through using the simulation model, it is possible to design and test networks, e.g. VPNs based on a remote connection in a public telecommunications network. Such a model can be used in, for example, health care services for planning and implementing a health network.

Solutions to defined design parameters can be found through iteration. The software is connected to a database, and an emphasis is placed on a user-friendly interface. Various variables can be entered in the model, such as connected locations, types of remote connection and the costs thereof.