Cyber Security Network of Competence Centres for Europe

Informations projet

CyberSec4Europe

N° de convention de subvention: 830929

DOI

10.3030/830929

Projet clôturé

Date de signature de la CE 27 Février 2019

Date de début 1 Février 2019

Date de fin 31 Decembre 2022

Financé au titre de

• INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)

Coût total

€ 15 999 981,25

Contribution de l’UE

€ 15 999 981,25

Coordonné par

JOHANN WOLFGANG GOETHE-UNIVERSITAET FRANKFURT AM MAIN
Germany

CORDIS fournit des liens vers les livrables publics et les publications des projets HORIZON.

Les liens vers les livrables et les publications des projets du 7e PC, ainsi que les liens vers certains types de résultats spécifiques tels que les jeux de données et les logiciels, sont récupérés dynamiquement sur OpenAIRE .

Livrables

Documents, reports (76)

Security requirements and risks conceptualization

Modelling and visualization techniques

Specification and set-up Demonstration case Phase 1
Common Framework Handbook 2

common framework versions

Definition of Privacy by Design and Privacy Preserving enablers
Validation and Certification Methodology

Evaluation of the methodology

Validation Demonstration case Phase 1
Design of Education and Professional Frame-work
Report on the outreach and dissemination activities 2
Requirements Analysis of Demonstration case Phase 2

will be produced as a documentation

Cross sectural cybersecurity building blocks
Exploitation strategy report 1
Framework to design and implement adaptive security systems

complete processing

Final educational and assessment Framework
Requirements Analysis of Demonstration case Phase 1
Standardisation Procedure Assessment Document

considering cybersecurity goals

Exploitation strategy report 2
CyberSec4Europe summer school 2
Website and Social media accounts 3
Clustering results and SU-ICT-03 project CONCERTATION conference year 1

proceedings and reporting of collaboration efforts results year 1 (including but not limited to ECSO (and Working Groups), cPPP, ENISA, DG CNECT, EUROPOL, EOS, CEN/CENELECT, ISO, international cooperation)

Exploitation strategy report 3
Roadmap of the Set-Up of the NCC

A report describing how governance model 20 compares to related models developed by other SUICT03 projects

Cybersecurity outlook 2

New trends monitoring versions

Final conference on the project results
Supply chain security recommendations 2
Website and Social media accounts 4
Evaluation report on integration demonstration
Usability requirements validation
Guidelines for enhancement of societal security awareness

Continuous societal impact

Internal Validation of Governance Structure
Usable security & privacy methods and rec-ommendations

Usable security & privacy methods and recommendations

Future Horizon Roadmap
Research and Development Roadmap 2
Evaluation of the Research and Innovation Roadmap

Final evaluation of roadmapprocess

Guidelines for GDPR compliant user experi-ence
Awareness effectiveness study 1
SME cybersecurity awareness program 1
Validation of Demonstration cases Phase 2

is the fully documented demonstration case

Policy recommendation report 3
Policy recommendation report 2
Policy recommendation report 1
Project Standards Matrix 2

updated document

Specification and set-up Demonstration case Phase 2

will be produced as a documentation

Common Framework Handbook 1
Research and Development Roadmap 1
Supply chain security recommendations 1
Project Standards Matrix 1
Website and Social media accounts 2
Analysis of interoperability and cross-border compliance issues

Evaluation and end results

Research challenges and requirements to man-age digital evidence
SU-ICT-03 project CONCERTATION conference year 3

Proceedings and reporting of collaboration efforts results year 3 including but not limited to ECSO and Working Groups cPPP ENISA DG CNECT EUROPOL EOS CENCENELECT ISO international cooperation due month 42 in order to include all project liaison results

Requirements Analysis from Vertical Stake-holders

Requirements Analysis from Vertical Stakeholders

Analysis of key research challenges for adaptive security
Research and Development Roadmap 3

Second update of the Roadmap

SME cybersecurity awareness program 2
Governance Structure 1
Research challenges and requirements for secure software development
CyberSec4Europe summer school 3
"Report ""The role of the certification and its implementations"""

Report The role of the certification and its implementations

Awareness effectiveness study 3
Report on existing cyber ranges, requirements
SME cybersecurity awareness program 3
Website and Social media accounts 5
CyberSec4Europe summer school 1
Awareness effectiveness study 2
Report on the outreach and dissemination activities 1
Cybersecurity outlook 1
Legal Framework
Case Pilot for WP2 Governance
Dissemination material: Brochures, poster
Education and Training Review
Final report on the outreach and dissemination activities
Cybersecurity Standardisation Engagement Plan 2

updated document

Cybersecurity Standardisation Engagement Plan 1
Dissemination and awareness plan
Governance Structure 2
SU-ICT-03 project CONCERTATION conference year 2

Proceedings and reporting of collaboration efforts results year 2 (including but not limited to ECSO (and Working Groups), cPPP, ENISA, DG CNECT, EUROPOL, EOS, CEN/CENELECT, ISO, international cooperation) – due month 24

Demonstrators, pilots, prototypes (6)

Proactive approaches for secure software development

methodologies and tools

Final cybersecurity enablers and underlying technologies components

final version

Cooperation with Threat Intelligence Services for deploying adaptive honeypots

Proof-of-concept implementation

Framework and Toolset for conformity
Updated version of enablers and components

second released based on feedback

Integration to demonstration cases

final development

Other (5)

CyberSec4Europe, 1st flagship challenge
Collection of agreements, guidance documentation and dissemination materials

Collection of agreements, guidance documentation, and dissemination materials

Common virtual lab with open-source tools for research and development
Virtual lab for open-source tools education and research

Virtual lab for opensource tools education and research

CyberSec4Europe, 2nd flagship challenge

Websites, patent fillings, videos etc. (2)

Open tool portal
Website and Social media accounts 1

Publications

Peer reviewed articles (47)

Sharing Machine Learning Models as Indicators of Compromise for Cyber Threat Intelligence

Auteurs: Davy Preuveneers, Wouter Joosen
Publié dans: Journal of Cybersecurity and Privacy, Numéro 1/1, 2021, Page(s) 140-163, ISSN 2624-800X
Éditeur: MDPI
DOI: 10.3390/jcp1010008

SoK: Machine vs. machine – A systematic classification of automated machine learning-based CAPTCHA solvers

Auteurs: Antreas Dionysiou, Elias Athanasopoulos
Publié dans: Computers & Security, Numéro 97, 2020, Page(s) 101947, ISSN 0167-4048
Éditeur: Pergamon Press Ltd.
DOI: 10.1016/j.cose.2020.101947

An automated framework for continuous development and testing of access control systems

Auteurs: Said Daoudagh, Francesca Lonetti, Eda Marchetti
Publié dans: Journal of Software: Evolution and Process, Numéro 27 August 2020, 2020, Page(s) e2306, ISSN 2047-7481
Éditeur: John Wiley and Sons Ltd
DOI: 10.1002/smr.2306

Becoming JUDAS: Correlating Users and Devices During a Digital Investigation

Auteurs: Ana Nieto
Publié dans: IEEE Transactions on Information Forensics and Security, Numéro 15, 2020, Page(s) 3325-3334, ISSN 1556-6013
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tifs.2020.2988602

Fundamental privacy rights in a pandemic state

Auteurs: Tânia Carvalho, Pedro Faria, Luís Antunes, Nuno Moniz
Publié dans: PLOS ONE, Numéro 16/6, 2021, Page(s) e0252169, ISSN 1932-6203
Éditeur: Public Library of Science
DOI: 10.1371/journal.pone.0252169

Towards Blockchain-Based Software-Defined Networking: Security Challenges and Solutions

Auteurs: Wenjuan LI, Weizhi MENG, Zhiqiang LIU, Man-Ho AU
Publié dans: IEICE Transactions on Information and Systems, Numéro E103.D/2, 2020, Page(s) 196-203, ISSN 0916-8532
Éditeur: Oxford University Press
DOI: 10.1587/transinf.2019ini0002

PoTS: A Secure Proof of TEE-Stake for Permissionless Blockchains

Auteurs: Sebastien Andreina, Jens-Matthias Bohli, G. Karame, Wenting Li, Giorgia Azzurra Marson
Publié dans: IEEE Transactions on Services Computing, 2020, Page(s) 1-1, ISSN 1939-1374
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tsc.2020.3038950

Resurrecting anti-virtualization and anti-debugging: Unhooking your hooks

Auteurs: Theodoros Apostolopoulos, Vasilios Katos, Kim-Kwang Raymond Choo, Constantinos Patsakis
Publié dans: Future Generation Computer Systems, Numéro 116, 2021, Page(s) 393-405, ISSN 0167-739X
Éditeur: Elsevier BV
DOI: 10.1016/j.future.2020.11.004

Delegated content erasure in IPFS

Auteurs: Eugenia Politou, Efthimios Alepis, Constantinos Patsakis, Fran Casino, Mamoun Alazab
Publié dans: Future Generation Computer Systems, Numéro 112, 2020, Page(s) 956-964, ISSN 0167-739X
Éditeur: Elsevier BV
DOI: 10.1016/j.future.2020.06.037

Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies

Auteurs: Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Publié dans: IEEE Transactions on Software Engineering, Numéro 21 September 2020, 2020, Page(s) 1-1, ISSN 0098-5589
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tse.2020.3025443

Incidents Are Meant for Learning, Not Repeating: Sharing Knowledge About Security Incidents in Cyber-Physical Systems

Auteurs: Faeq Alrimawi, Liliana Pasquale, Deepak Mehta, Nobukazu Yoshioka, Bashar Nuseibeh
Publié dans: IEEE Transactions on Software Engineering, Numéro Monthly, 2020, Page(s) 1-1, ISSN 0098-5589
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tse.2020.2981310

In-silico generation of random bit streams

Auteurs: M. Caccia, L. Malinverno, L. Paolucci, C. Corridori, E. Proserpio, A. Abba, A. Cusimano, W. Kucewicz, P. Dorosz, M. Baszczyk, M. Esposito, P. Svenda
Publié dans: Nuclear Instruments and Methods in Physics Research Section A: Accelerators, Spectrometers, Detectors and Associated Equipment, Numéro 980, 2020, Page(s) 164480, ISSN 0168-9002
Éditeur: Elsevier BV
DOI: 10.1016/j.nima.2020.164480

Explaining the Technology Use Behavior of Privacy-Enhancing Technologies: The Case of Tor and JonDonym

Auteurs: David Harborth, Sebastian Pape, Kai Rannenberg
Publié dans: Proceedings on Privacy Enhancing Technologies, Numéro 2020/2, 2020, Page(s) 111-128, ISSN 2299-0984
Éditeur: Sciendo
DOI: 10.2478/popets-2020-0020

On the Automated Management of Security Incidents in Smart Spaces

Auteurs: Faeq Alrimawi, Liliana Pasquale, Bashar Nuseibeh
Publié dans: IEEE Access, Numéro 7, 2019, Page(s) 111513-111527, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2019.2934221

Semantic-Aware Security Orchestration in SDN/NFV-Enabled IoT Systems

Auteurs: Alejandro Molina Zarca, Miloud Bagaa, Jorge Bernal Bernabe, Tarik Taleb, Antonio F. Skarmeta
Publié dans: Sensors, Numéro 20/13, 2020, Page(s) 3622, ISSN 1424-8220
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s20133622

Technical Leverage: Dependencies Are a Mixed Blessing

Auteurs: Fabio Massacci, Ivan Pashchenko
Publié dans: IEEE Security & Privacy, Numéro 19/3, 2021, Page(s) 58-62, ISSN 1540-7993
Éditeur: IEEE Computer Society
DOI: 10.1109/msec.2021.3065627

On the unbearable lightness of FIPS 140-2 randomness tests

Auteurs: Darren Hurley-Smith, Constantinos Patsakis, Julio Hernandez-Castro
Publié dans: IEEE Transactions on Information Forensics and Security, 2020, Page(s) 1-1, ISSN 1556-6013
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tifs.2020.2988505

Handling of advanced persistent threats and complex incidents in healthcare, transportation and energy ICT infrastructures

Auteurs: Spyridon Papastergiou, Haralambos Mouratidis, Eleni-Maria Kalogeraki
Publié dans: Evolving Systems, Numéro 12/1, 2021, Page(s) 91-108, ISSN 1868-6478
Éditeur: Springer Verlag
DOI: 10.1007/s12530-020-09335-4

A model-driven approach to ensure trust in the IoT

Auteurs: Davide Ferraris, Carmen Fernandez-Gago, Javier Lopez
Publié dans: Human-centric Computing and Information Sciences, Numéro 10/1, 2020, ISSN 2192-1962
Éditeur: Springer Science + Business Media
DOI: 10.1186/s13673-020-00257-3

Security Orchestration and Enforcement in NFV/SDN-Aware UAV Deployments

Auteurs: Ana Hermosilla, Alejandro Molina Zarca, Jorge Bernal Bernabe, Jordi Ortiz, Antonio Skarmeta
Publié dans: IEEE Access, Numéro 8, 2020, Page(s) 131779-131795, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2020.3010209

A Systematic Mapping Study on Cyber Security Indicator Data

Auteurs: Per Meland, Shukun Tokas, Gencer Erdogan, Karin Bernsmed, Aida Omerovic
Publié dans: Electronics, Numéro 10/9, 2021, Page(s) 1092, ISSN 2079-9292
Éditeur: MDPI
DOI: 10.3390/electronics10091092

Selecting a Secure Cloud Provider—An Empirical Study and Multi Criteria Approach

Auteurs: Sebastian Pape, Federica Paci, Jan Jürjens, Fabio Massacci
Publié dans: Information, Numéro 11/5, 2020, Page(s) 261, ISSN 2078-2489
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/info11050261

Distributed Security Framework for Reliable Threat Intelligence Sharing

Auteurs: Davy Preuveneers, Wouter Joosen, Jorge Bernal Bernabe, Antonio Skarmeta
Publié dans: Security and Communication Networks, Numéro 2020, 2020, Page(s) 1-15, ISSN 1939-0122
Éditeur: John Wiley & Sons Ltd.
DOI: 10.1155/2020/8833765

A Formal Model and Technique to Redistribute the Packet Filtering Load in Multiple Firewall Networks

Auteurs: Luca Durante, Lucia Seno, Adriano Valenzano
Publié dans: IEEE Transactions on Information Forensics and Security, Numéro 16, 2021, Page(s) 2637-2651, ISSN 1556-6013
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tifs.2021.3057552

Are We Preparing Students to Build Security In? A Survey of European Cybersecurity in Higher Education Programs [Education]

Auteurs: Nicola Dragoni, Alberto Lluch Lafuente, Fabio Massacci, Anders Schlichtkrull
Publié dans: IEEE Security & Privacy, Numéro 19/1, 2021, Page(s) 81-88, ISSN 1540-7993
Éditeur: IEEE Computer Society
DOI: 10.1109/msec.2020.3037446

A Survey of Cybersecurity Certification for the Internet of Things

Auteurs: Sara N. Matheu, José L. Hernández-Ramos, Antonio F. Skarmeta, Gianmarco Baldini
Publié dans: ACM Computing Surveys, Numéro 53/6, 2021, Page(s) 1-36, ISSN 0360-0300
Éditeur: Association for Computing Machinary, Inc.
DOI: 10.1145/3410160

Precise subtyping for asynchronous multiparty sessions

Auteurs: Silvia Ghilezan, Jovanka Pantović, Ivan Prokić, Alceste Scalas, Nobuko Yoshida
Publié dans: Proceedings of the ACM on Programming Languages, Numéro 5/POPL, 2021, Page(s) 1-28, ISSN 2475-1421
Éditeur: Association for Computing Machinery
DOI: 10.1145/3434297

Minerva: The curse of ECDSA nonces; Systematic analysis of lattice attacks on noisy leakage of bit-length of ECDSA nonces

Auteurs: Jan Jancar and Vladimir Sedlacek and Petr Svenda and Marek Sys
Publié dans: IACR Transactions on Cryptographic Hardware and Embedded Systems, Volume 2020, Numéro 4, 2020, Page(s) 281-308, ISSN 2569-2925
Éditeur: IACR
DOI: 10.13154/tches.v2020.i4.281-308

Provisioning, Authentication and Secure Communications for IoT Devices on FIWARE

Auteurs: Patrícia Sousa, Luís Magalhães, João Resende, Rolando Martins, Luís Antunes
Publié dans: Sensors, Numéro 21/17, 2021, Page(s) 5898, ISSN 1424-8220
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s21175898

Unravelling Ariadne’s Thread: Exploring the Threats of Decentralised DNS

Auteurs: Constantinos Patsakis, Fran Casino, Nikolaos Lykousas, Vasilios Katos
Publié dans: IEEE Access, Numéro 8, 2020, Page(s) 118559-118571, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2020.3004727

Who Should Pay for Interdependent Risk? Policy Implications for Security Interdependence Among Airports

Auteurs: Gabriel Kuper, Fabio Massacci, Woohyun Shim, Julian Williams
Publié dans: Risk Analysis, Numéro 20 February 2020, 2020, ISSN 0272-4332
Éditeur: Blackwell Publishing Inc.
DOI: 10.1111/risa.13454

Governance Challenges for European Cybersecurity Policies: Stakeholder Views

Auteurs: Pierantonia Sterlini, Fabio Massacci, Natalia Kadenko, Tobias Fiebig, Michel van Eeten
Publié dans: IEEE Security & Privacy, Numéro 18/1, 2020, Page(s) 46-54, ISSN 1540-7993
Éditeur: IEEE Computer Society
DOI: 10.1109/msec.2019.2945309

Measuring the accuracy of software vulnerability assessments: experiments with students and professionals

Auteurs: Luca Allodi, Marco Cremonini, Fabio Massacci, Woohyun Shim
Publié dans: Empirical Software Engineering, Numéro 25/2, 2020, Page(s) 1063-1094, ISSN 1382-3256
Éditeur: Kluwer Academic Publishers
DOI: 10.1007/s10664-019-09797-4

Enforcing Behavioral Profiles through Software-Defined Networks in the Industrial Internet of Things

Auteurs: Sara Nieves Matheu García, Alejandro Molina Zarca, José Luis Hernández-Ramos, Jorge Bernal Bernabé, Antonio Skarmeta Gómez
Publié dans: Applied Sciences, Numéro 9/21, 2019, Page(s) 4576, ISSN 2076-3417
Éditeur: MDPI
DOI: 10.3390/app9214576

Fully invisible protean signatures schemes

Auteurs: Stephan Krenn, Henrich C. Pöhls, Kai Samelin, Daniel Slamanig
Publié dans: IET Information Security, Numéro 2020, 2020, ISSN 1751-8709
Éditeur: Institution of Engineering and Technology
DOI: 10.1049/iet-ifs.2019.0141

"Is ""Deny Access"" a Valid ""Fail-Safe Default"" Principle for Building Security in Cyberphysical Systems?"

Auteurs: Fabio Massacci
Publié dans: IEEE Security & Privacy, Numéro 17/5, 2019, Page(s) 90-93, ISSN 1540-7993
Éditeur: IEEE Computer Society
DOI: 10.1109/msec.2019.2918820

Integration of a Threat Traceability Solution in the Industrial Internet of Things

Auteurs: Juan E. Rubio, Rodrigo Roman, Javier Lopez
Publié dans: IEEE Transactions on Industrial Informatics, Numéro In press, 2020, Page(s) 1-1, ISSN 1551-3203
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tii.2020.2976747

Encrypted and covert DNS queries for botnets: Challenges and countermeasures

Auteurs: Constantinos Patsakis, Fran Casino, Vasilios Katos
Publié dans: Computers & Security, Numéro 88, 2020, Page(s) 101614, ISSN 0167-4048
Éditeur: Pergamon Press Ltd.
DOI: 10.1016/j.cose.2019.101614

Blockchain Mutability: Challenges and Proposed Solutions

Auteurs: Eugenia Politou, Fran Casino, Efthymios Alepis, Constantinos Patsakis
Publié dans: IEEE Transactions on Emerging Topics in Computing, Numéro 1 (VOL .X) (Frequency: 4), 2019, Page(s) 1-1, ISSN 2168-6750
Éditeur: IEEE Computer Society
DOI: 10.1109/tetc.2019.2949510

A Calculus of Tracking: Theory and Practice

Auteurs: Giorgio Di Tizio, Fabio Massacci
Publié dans: Proceedings on Privacy Enhancing Technologies, Numéro 2021/2, 2021, Page(s) 259-281, ISSN 2299-0984
Éditeur: Sciendo
DOI: 10.2478/popets-2021-0027

Security Architecture for Defining and Enforcing Security Profiles in DLT/SDN-Based IoT Systems

Auteurs: Sara N. Matheu, Alberto Robles Enciso, Alejandro Molina Zarca, Dan Garcia-Carrillo, José Luis Hernández-Ramos, Jorge Bernal Bernabe, Antonio F. Skarmeta
Publié dans: Sensors, Numéro 20/7, 2020, Page(s) 1882, ISSN 1424-8220
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s20071882

Exploiting Mixed Binaries

Auteurs: Michalis Papaevripides, Elias Athanasopoulos
Publié dans: ACM Transactions on Privacy and Security, Numéro 24/2, 2021, Page(s) 1-29, ISSN 2471-2566
Éditeur: ACM
DOI: 10.1145/3418898

Towards a Modular On-Premise Approach for Data Sharing

Auteurs: João S. Resende, Luís Magalhães, André Brandão, Rolando Martins, Luís Antunes
Publié dans: Sensors, Numéro 21/17, 2021, Page(s) 5805, ISSN 1424-8220
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s21175805

Controlled Functional Encryption Revisited: Multi-Authority Extensions and Efficient Schemes for Quadratic Functions

Auteurs: Miguel Ambrona, Dario Fiore, Claudio Soriente
Publié dans: Proceedings on Privacy Enhancing Technologies, Numéro 2021/1, 2020, Page(s) 21-42, ISSN 2299-0984
Éditeur: Sciendo
DOI: 10.2478/popets-2021-0003

XACMET: XACML Testing & Modeling

Auteurs: Said Daoudagh, Francesca Lonetti, Eda Marchetti
Publié dans: Software Quality Journal, Numéro 28/1, 2020, Page(s) 249-282, ISSN 0963-9314
Éditeur: Kluwer Academic Publishers
DOI: 10.1007/s11219-019-09470-5

Immutability and Decentralized Storage: An Analysis of Emerging Threats

Auteurs: Fran Casino, Eugenia Politou, Efthimios Alepis, Constantinos Patsakis
Publié dans: IEEE Access, Numéro 8, 2020, Page(s) 4737-4744, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2019.2962017

Review of the use of human senses and capabilities in cryptography

Auteurs: Kimmo Halunen, Outi-Marja Latvala
Publié dans: Computer Science Review, Numéro 39, 2021, Page(s) 100340, ISSN 1574-0137
Éditeur: Elsevier BV
DOI: 10.1016/j.cosrev.2020.100340

Conference proceedings (23)

Please hold on: more time = more patches?Automated program repair as anytime algorithms

Auteurs: Duc Ly Vu, Ivan Pashchenko, Fabio Massacci
Publié dans: ICSE '21: Proceedings of the ACM/IEEE 43nd International Conference on Software Engineering Workshops, Numéro 21-28 May 2021, 2021
Éditeur: IEEE/ACM

ReplicaTEE: Enabling Seamless Replication of SGX Enclaves in the Cloud

Auteurs: Claudio Soriente, Ghassan Karame, Wenting Li, Sergey Fedorov
Publié dans: 2019 IEEE European Symposium on Security and Privacy (EuroS&P), 2019, Page(s) 158-171, ISBN 978-1-7281-1148-3
Éditeur: IEEE
DOI: 10.1109/eurosp.2019.00021

Performing Security Proofs of Stateful Protocols

Auteurs: Andreas V. Hess, Sebastian Modersheim, Achim D. Brucker, Anders Schlichtkrull
Publié dans: 2021 IEEE 34th Computer Security Foundations Symposium (CSF), 2021, Page(s) 1-16, ISBN 978-1-7281-7607-9
Éditeur: IEEE
DOI: 10.1109/csf51468.2021.00006

Assessing Testing Strategies for Access Control Systems: A Controlled Experiment

Auteurs: Said Daoudagh, Francesca Lonetti, Eda Marchetti
Publié dans: Proceedings of the 6th International Conference on Information Systems Security and Privacy, Numéro 25 February 2020, 2020, Page(s) 107-118, ISBN 978-989-758-399-5
Éditeur: SCITEPRESS - Science and Technology Publications
DOI: 10.5220/0008974201070118

User Tracking in the Post-cookie Era: How Websites Bypass GDPR Consent to Track Users

Auteurs: Emmanouil Papadogiannakis, Panagiotis Papadopoulos, Nicolas Kourtellis, Evangelos P. Markatos
Publié dans: Proceedings of the Web Conference 2021, Numéro 2021, 2021, Page(s) 2130-2141, ISBN 9781450383127
Éditeur: ACM
DOI: 10.1145/3442381.3450056

A Kolmogorov Complexity for multidisciplinary domains

Auteurs: João S. Resende, Marco Almeida, Rolando Martins, Luís Antunes
Publié dans: Proceedings of Entropy 2021: The Scientific Tool of the 21st Century, 2021, Page(s) 9755
Éditeur: MDPI
DOI: 10.3390/entropy2021-09755

Privacy-Preserving Incentive Systems with Highly Efficient Point-Collection

Auteurs: Jan Bobolz, Fabian Eidens, Stephan Krenn, Daniel Slamanig, Christoph Striecks
Publié dans: Proceedings of the 15th ACM Asia Conference on Computer and Communications Security, Numéro 2020, 2020, Page(s) 319-333, ISBN 9781450367509
Éditeur: ACM
DOI: 10.1145/3320269.3384769

Towards Privacy in Geographic Message Dissemination for Connected Vehicles

Auteurs: Stefan Ruehrup, Stephan Krenn
Publié dans: 2019 IEEE International Conference on Connected Vehicles and Expo (ICCVE), Numéro 2019, 2019, Page(s) 1-6, ISBN 978-1-7281-0142-2
Éditeur: IEEE
DOI: 10.1109/iccve45908.2019.8965198

A Life Cycle for Authorization Systems Development in the GDPR Perspective

Auteurs: Said Daoudagh, Eda Machetti
Publié dans: Proceedings of the Fourth Italian Conference on Cyber Security, Numéro 4 February 2020, 2020, Page(s) 128-140
Éditeur: CEUR-WS.org

Regulating Storage Overhead in Existing PoW-based Blockchains

Auteurs: Frederik Armknecht, Jens-Matthias Bohli, Ghassan O. Karame, Wenting Li
Publié dans: Proceedings of the 26th ACM Symposium on Access Control Models and Technologies, 2021, Page(s) 131-142, ISBN 9781450383653
Éditeur: ACM
DOI: 10.1145/3450569.3463564

Lift-and-Shift - Obtaining Simulation Extractable Subversion and Updatable SNARKs Generically

Auteurs: Behzad Abdolmaleki, Sebastian Ramacher, Daniel Slamanig
Publié dans: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, Numéro 2020, 2020, Page(s) 1987-2005, ISBN 9781450370899
Éditeur: ACM
DOI: 10.1145/3372297.3417228

Defining Controlled Experiments Inside the Access Control Environment

Auteurs: Said Daoudagh, Eda Marchetti
Publié dans: Proceedings of the 8th International Conference on Model-Driven Engineering and Software Development, Numéro 25 February 2020, 2020, Page(s) 167-176, ISBN 978-989-758-400-8
Éditeur: SCITEPRESS - Science and Technology Publications
DOI: 10.5220/0009358201670176

On the Monitorability of Session Types, in Theory and Practice

Auteurs: Christian Bartolo Burlò, Adrian Francalanza, Alceste Scalas
Publié dans: 35th European Conference on Object-Oriented Programming (ECOOP 2021), 2021, Page(s) 22:1–22:27, ISSN 1868-8969
Éditeur: Schloss Dagstuhl -- Leibniz-Zentrum für Informatik
DOI: 10.4230/lipics.ecoop.2021.22

MicroGuard: Securing Bare-Metal Microcontrollers against Code-Reuse Attacks

Auteurs: Majid Salehi, Danny Hughes, Bruno Crispo
Publié dans: 2019 IEEE Conference on Dependable and Secure Computing (DSC), Numéro 23/Dec/19, 2019, Page(s) 1-8, ISBN 978-1-7281-2319-6
Éditeur: IEEE
DOI: 10.1109/dsc47296.2019.8937667

TATIS: Trustworthy APIs for Threat Intelligence Sharing with UMA and CP-ABE

Auteurs: Davy Preuveneers, Wouter Joosen
Publié dans: Foundations and Practice of Security. 12th International Symposium, FPS 2019, Toulouse, France, November 5–7, 2019, Revised Selected Papers, Numéro 8 June 2020, 2020, ISBN 978-3-030-45370-1
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-45371-8_11

Cached and Confused: Web Cache Deception in the Wild

Auteurs: S. Ali Mirheidari, S. Arshad , K. Onarlioglu, B. Crispo, E. Kirda, W. Robertson
Publié dans: Usenix Security 2020 conference., Numéro 12/Aug/20, 2020, Page(s) all
Éditeur: Usenix

Practical Group-Signatures with Privacy-Friendly Openings

Auteurs: Stephan Krenn, Kai Samelin, Christoph Striecks
Publié dans: Proceedings of the 14th International Conference on Availability, Reliability and Security - ARES '19, Numéro 2019, 2019, Page(s) 1-10, ISBN 9781-450371643
Éditeur: ACM Press
DOI: 10.1145/3339252.3339256

A Systematic Analysis of User Evaluations in Security Research

Auteurs: Peter Hamm, David Harborth, Sebastian Pape
Publié dans: Proceedings of the 14th International Conference on Availability, Reliability and Security - ARES '19, Numéro 14th, 2019, Page(s) 1-7, ISBN 9781-450371643
Éditeur: ACM Press
DOI: 10.1145/3339252.3340339

Variability meets security - qantitative security modeling and analysis of highly customizable attack scenarios

Auteurs: Maurice H. ter Beek, Axel Legay, Alberto Lluch Lafuente, Andrea Vandin
Publié dans: Proceedings of the 14th International Working Conference on Variability Modelling of Software-Intensive Systems, 2020, Page(s) 1-9, ISBN 9781-450375016
Éditeur: ACM
DOI: 10.1145/3377024.3377041

A Decentralized Solution for Combinatorial Testing of Access Control Engine

Auteurs: Said Daoudagh, Francesca Lonetti, Eda Marchetti
Publié dans: Proceedings of the 5th International Conference on Information Systems Security and Privacy, Numéro February 23, 2019, Page(s) 126-135, ISBN 978-989-758-359-9
Éditeur: SCITEPRESS - Science and Technology Publications
DOI: 10.5220/0007379401260135

Towards a Lawful Authorized Access: A Preliminary GDPR-based Authorized Access

Auteurs: Cesare Bartolini, Said Daoudagh, Gabriele Lenzini, Eda Marchetti
Publié dans: Proceedings of the 14th International Conference on Software Technologies, Numéro July 26, 2019, Page(s) 331-338, ISBN 978-989-758-379-7
Éditeur: SCITEPRESS - Science and Technology Publications
DOI: 10.5220/0007978703310338

Integrating Access Control and Business Process for GDPR Compliance: A Preliminary Study

Auteurs: Antonello Calabrò, Said Daoudagh, Eda Marchetti
Publié dans: Proceedings of the Third Italian Conference on Cyber Security,, Numéro February 13, 2019
Éditeur: CEUR-WS.org

Accountable Trust Decisions: A Semantic Approach

Auteurs: Anders Schlichtkrull, Sebastian Mödersheim
Publié dans: Open Identity Summit 2020, 2020, Page(s) 71-82, ISBN 978-3-88579-699-2
Éditeur: Gesellschaft für Informatik e.V.
DOI: 10.18420/ois2020_06

Book chapters (14)

A Privacy-By-Design Architecture for Indoor Localization Systems

Auteurs: Paolo Barsocchi, Antonello Calabrò, Antonino Crivello, Said Daoudagh, Francesco Furfari, Michele Girolami, Eda Marchetti
Publié dans: Quality of Information and Communications Technology - 13th International Conference, QUATIC 2020, Faro, Portugal, September 9–11, 2020, Proceedings, Numéro 1266, 2020, Page(s) 358-366, ISBN 978-3-030-58792-5
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-58793-2_29

Data Privatizer for Biometric Applications and Online Identity Management

Auteurs: Giuseppe Garofalo, Davy Preuveneers, Wouter Joosen
Publié dans: Privacy and Identity Management. Data for Better Living: AI and Privacy - 14th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School, Windisch, Switzerland, August 19–23, 2019, Revised Selected Papers, Numéro 576, 2020, Page(s) 209-225, ISBN 978-3-030-42503-6
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-42504-3_14

Breaking and Fixing Anonymous Credentials for the Cloud

Auteurs: Ulrich Haböck, Stephan Krenn
Publié dans: Cryptology and Network Security - 18th International Conference, CANS 2019, Fuzhou, China, October 25–27, 2019, Proceedings, Numéro 11829, 2019, Page(s) 249-269, ISBN 978-3-030-31577-1
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-31578-8_14

iUC: Flexible Universal Composability Made Simple

Auteurs: Jan Camenisch, Stephan Krenn, Ralf Küsters, Daniel Rausch
Publié dans: Advances in Cryptology – ASIACRYPT 2019 - 25th International Conference on the Theory and Application of Cryptology and Information Security, Kobe, Japan, December 8–12, 2019, Proceedings, Part III, Numéro 11923, 2019, Page(s) 191-221, ISBN 978-3-030-34617-1
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-34618-8_7

Truth in Web Mining: Measuring the Profitability and the Imposed Overheads of Cryptojacking

Auteurs: Panagiotis Papadopoulos, Panagiotis Ilia, Evangelos Markatos
Publié dans: Information Security - 22nd International Conference, ISC 2019, New York City, NY, USA, September 16–18, 2019, Proceedings, Numéro 11723, 2019, Page(s) 277-296, ISBN 978-3-030-30214-6
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-30215-3_14

Practical Password Hardening Based on TLS

Auteurs: Constantinos Diomedous, Elias Athanasopoulos
Publié dans: Detection of Intrusions and Malware, and Vulnerability Assessment - 16th International Conference, DIMVA 2019, Gothenburg, Sweden, June 19–20, 2019, Proceedings, Numéro 11543, 2019, Page(s) 441-460, ISBN 978-3-030-22037-2
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-22038-9_21

A Framework for Provenance-Preserving History Distribution and Incremental Reduction

Auteurs: Alberto Lluch Lafuente
Publié dans: Models, Languages, and Tools for Concurrent and Distributed Programming - Essays Dedicated to Rocco De Nicola on the Occasion of His 65th Birthday, Numéro 11665, 2019, Page(s) 471-486, ISBN 978-3-030-21484-5
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-21485-2_26

GDPR-Based User Stories in the Access Control Perspective

Auteurs: Cesare Bartolini, Said Daoudagh, Gabriele Lenzini, Eda Marchetti
Publié dans: Quality of Information and Communications Technology - 12th International Conference, QUATIC 2019, Ciudad Real, Spain, September 11–13, 2019, Proceedings, Numéro 1010, 2019, Page(s) 3-17, ISBN 978-3-030-29237-9
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-29238-6_1

A Framework for the Validation of Access Control Systems

Auteurs: Said Daoudagh, Francesca Lonetti, Eda Marchetti
Publié dans: Emerging Technologies for Authorization and Authentication - Second International Workshop, ETAA 2019, Luxembourg City, Luxembourg, September 27, 2019, Proceedings, Numéro 11967, 2020, Page(s) 35-51, ISBN 978-3-030-39748-7
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-39749-4_3

Cyber Security Incident Handling, Warning and Response System for the European Critical Information Infrastructures (CyberSANE)

Auteurs: Spyridon Papastergiou, Haralambos Mouratidis, Eleni-Maria Kalogeraki
Publié dans: Engineering Applications of Neural Networks - 20th International Conference, EANN 2019, Xersonisos, Crete, Greece, May 24-26, 2019, Proceedings, Numéro 1000, 2019, Page(s) 476-487, ISBN 978-3-030-20256-9
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-20257-6_41

auth.js: Advanced Authentication for the Web

Auteurs: Neophytos Christou, Elias Athanasopoulos
Publié dans: Emerging Technologies for Authorization and Authentication - Third International Workshop, ETAA 2020, Guildford, UK, September 18, 2020, Proceedings, Numéro 12515, 2020, Page(s) 33-49, ISBN 978-3-030-64454-3
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-64455-0_3

Fully Collision-Resistant Chameleon-Hashes from Simpler and Post-quantum Assumptions

Auteurs: David Derler, Stephan Krenn, Kai Samelin, Daniel Slamanig
Publié dans: Security and Cryptography for Networks - 12th International Conference, SCN 2020, Amalfi, Italy, September 14–16, 2020, Proceedings, Numéro 12238, 2020, Page(s) 427-447, ISBN 978-3-030-57989-0
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-57990-6_21

10. Cybersecurity Certification in IoT Environments

Auteurs: Sara N. Matheu, Antonio F. Skarmeta
Publié dans: Security Risk Management for the Internet of Things: Technologies and Techniques for IoT Security, Privacy and Data Protection, 2020, ISBN 978-1-68083-682-0
Éditeur: Now Publishers
DOI: 10.1561/9781680836837.ch10

Towards Probabilistic Session-Type Monitoring

Auteurs: Christian Bartolo Burlò, Adrian Francalanza, Alceste Scalas, Catia Trubiani, Emilio Tuosto
Publié dans: Coordination Models and Languages - 23rd IFIP WG 6.1 International Conference, COORDINATION 2021, Held as Part of the 16th International Federated Conference on Distributed Computing Techniques, DisCoTec 2021, Valletta, Malta, June 14–18, 2021, Proceedings, Numéro 12717, 2021, Page(s) 106-120, ISBN 978-3-030-78141-5
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-78142-2_7

Thesis and dissertations (2)

Julkisessa tilassa olevan epäluotetun laitteen käyttöä suojaava järjestelmä (A system that protects the use of an untrusted device in a public space)

Auteurs: Hekkala Julius
Publié dans: 2019
Éditeur: University of Oulu

Lohkoketjuavaimen varmistettu ja suojattu hallintaympäristö (Secured and protected management environment for blockchain keys)

Auteurs: Lehto Niko
Publié dans: 2019
Éditeur: University of Oulu