- AERAS - di.unimi.it

4th International workshop on Information & Operational Technology (IT & OT) Security 2023 (IOSEC2023)
by Athanatos Manos 23 Jan '23

23 Jan '23

Dear All, Please consider submitting your work to the following workshop: CALL FOR PAPERS =========================================================================== 4th International workshop on Information & Operational Technology (IT & OT) Security 2023 https://drcn2023.upc.edu/IOSEC2023.html Co-located with the International Conference on the Design of Reliable Communication Networks (DRCN 2023) https://drcn2023.upc.edu/ Vilanova, Spain 17-20 April 2023 =========================================================================== Description/Topics of interest: The recent advancements of ICT have given the opportunity to private and public entities, including Critical Infrastructures & other Operators of Essential Services (OES) to offer new and innovative services, while lowering their operational costs. These advancements were often, however, hastily adopted, without proper evaluation of their impact on security (i.e., expanding & complicating their attack surface), thus leaving current IT (Information Technology) and OT (Operation Technology) systems vulnerable to various kinds of cyberattacks. Motivated by this landscape, the International workshop on Information & Operational Technology (IT & OT) security systems aims to bring together viewpoints from diverse areas to explore the commonalities of security problems and solutions for advancing the collective science and practice of IT and OT security. This workshop is supported by the EU-funded projects JCOP (https://jcop.eu/), PHOENI2X (https://phoeni2x.eu/), FISHY (https://fishy-project.eu/) and IntellIoT (https://intelliot.eu/) and is expected to enable discussions of state-of-the-art and emerging topics in areas that include (but not limited to): • Security architectures and frameworks for enterprises, SMEs, public administration, or critical infrastructures • Threat models for systems and communication networks • Threat detection, analysis, classification and profiling • Incident management • Cyber ranges • AI/ML in cybersecurity • Risk assessment – safety and security • Security validation, testing platforms and developments • Hardware security • Cryptographic engineering • Intrusion Detection & Prevention • Secure software development • Malicious code analysis • Digital forensics • Identity and access management • Privacy enabling technologies SUBMISSION GUIDELINES Submissions of original unpublished papers are solicited. Papers will be reviewed on novelty, significance and contribution to the body of knowledge, correctness, and clarity. We expect all papers to provide adequate detail to enable reproducibility of their experimental results. They should be in pdf IEEE 2-column conference style, limited to five (5) pages. The DRCN 2023 conference is technically Co-Sponsored by the IEEE Communications Society. All accepted and presented papers will be included in the DRCN 2023 proceedings and will be subsequently submitted to IEEE Xplore for publication. At least one author is required to register, at the full rate, to present accepted papers at the conference and for the paper to appear in the conference proceedings and in IEEE Xplore. Authors must submit their papers electronically through EDAS using the link: https://edas.info/N30642 IMPORTANT DATES Papers submission deadline: March 6, 2023 Acceptance/rejection notification: March 13, 2023 Final papers due: March 20, 2023 KEYNOTE SPEAKER Jose Luis Sánchez Martíne (Senior Threat Researcher at BlackBerry Cylance) Presentation title: TBA WORKSHOP ORGANIZERS Manos Athanatos Manos Athanatos (Technical University of Crete, mathanatos(a)tuc.gr) Vasileios Mavroeidis (University of Oslo, vasileim(a)ifi.uio.no) Eva Marín Tordera (Universitat Politècnica de Catalunya, eva(a)ac.upc.edu) Kontantinos Fysarakis(Sphynx Analytics LTD, fysarakis(a)sphynx.ch) Kind Regards, Manos Athanatos (TUC/TSI)

1 0

SCENE 2023 - Call for papers
by Konstantinos Fysarakis 23 Jan '23

23 Jan '23

Dear all, I am pleased to invite you to submit a paper for the upcoming workshop on Safeguarding CybersEcurity iN hEalthcare (SCENE 2023) (https://drcn2023.upc.edu/SCENE2023.html) that will be held in conjunction with the International Conference on the Design of Reliable Communication Networks (DRCN 2023). The workshop will take place between the 17th to 20th of April in Vilanova, Spain and will bring together experts in the field to discuss the latest research and developments in cybersecurity in the healthcare domain. --------------------------------------- Call for papers The healthcare sector is facing an increasing number of cyber threats, as the digitization of healthcare and the use of connected medical devices continue to grow. These threats can come from a variety of sources, including malicious hackers, nation-state actors, and even insiders. Cybersecurity incidents in healthcare can have serious consequences, including the loss or theft of sensitive patient data, disruption of vital services, and damage to an organization's reputation. Safeguarding CybersEcurity iN hEalthcare aims to bring together viewpoints from diverse areas to explore the commonalities of cybersecurity issues and solutions in the healthcare sector. The workshop is supported by the EU-funded projects AI4HealthSec (https://www.ai4healthsec.eu/), HEIR (https://heir2020.eu/) and SMART-BEAR (https://www.smart-bear.eu/). We welcome submissions on a wide range of topics, including but not limited to: * Best practices for data protection in healthcare: GDPR compliance, HIPAA compliance, encryption, and access controls * The role of artificial intelligence and machine learning in healthcare cybersecurity * Legal and ethical considerations in healthcare cybersecurity: patient privacy, consent, and data governance * Emerging threats and trends in healthcare cybersecurity: IoT, 5G, and cloud computing * Strategies for promoting a culture of cybersecurity in healthcare organizations * Best practices for training and educating healthcare professionals on cybersecurity * Responding to and recovering from cyber incidents: developing a cybersecurity incident response plan for healthcare organisations * Designing and proposing treatment strategies and measures as a result of risk assessment activities SUBMISSION GUIDELINES Submissions of original unpublished papers are solicited. Papers will be reviewed on novelty, significance and contribution to the body of knowledge, correctness, and clarity. We expect all papers to provide adequate detail to enable reproducibility of their experimental results. They should be in PDF IEEE 2-column conference style, limited to five (5) pages. The DRCN 2023 conference is technically Co-Sponsored by the IEEE Communications Society. All accepted and presented papers will be included in the DRCN 2023 proceedings and will be subsequently submitted to IEEE Xplore for publication. At least one author is required to register, at the full rate, to present accepted papers at the conference and for the paper to appear in the conference proceedings and in IEEE Xplore. Authors must submit their papers electronically through EDAS using the link: https://edas.info/newPaper.php?c=30643. IMPORTANT DATES * Papers submission deadline: March 6, 2023 * Acceptance/rejection notification: March 13, 2023 * Final papers due: March 20, 2023 WORKSHOP ORGANIZERS * Mario Ciampi (Institute for High Performance Computing and Networking National Research Council of Italy (ICAR-CNR), mario.ciampi(a)icar.cnr.it) * Herve Debar (Télécom SudParis, herve.debar(a)telecom-sudparis.eu) * Michail Smyrlis (SPHYNX Technology Solutions AG, smyrlis(a)sphynx.ch) USEFUL LINKS * DRCN 2023: https://drcn2023.upc.edu/index.html * SCENE 2023: https://drcn2023.upc.edu/SCENE2023.html Best, K --- Dr. Konstantinos Fysarakis Chief Technology Officer [cid:05e8760b-3219-4f34-9673-2181e2e802b9] Sphynx Analytics Ltd Cyprus: 108, Nicosia Business Centre, 33 Neas Engomis, Nicosia, 2409 Phone: +35722269512<tel:+35722269512> Mobile: +306947899480, +35797638684<tel:+306947899480> Email: fysarakis(a)sphynx.ch<mailto:fysarakis@sphynx.ch> Website: www.sphynx.ch<https://www.sphynx.ch> Skype: k.fysar LinkedIn: kfysarakis<https://www.linkedin.com/in/kfysarakis/>

1 0

new version of the agenda
by fulvio.frati＠unimi.it 18 Jan '23

18 Jan '23

Dear all, please find attached the new version of the MTM agenda. I have reserved a full slot for the presentation of the secondees after WP2-6 presentations, in order to make it smoother as we said in the last call. Do not hesitate to send me your amendments. Best, Fulvio ____________________________________________ SESAR Lab - Computer Science Department Università degli Studi di Milano Via Celoria, 18 20133 Milano ITALY Tel. +39-02-503 16381 <http://sesar.di.unimi.it/> http://sesar.di.unimi.it ____________________________________________

2 2

Ethics D7.1: ACTION NEEDED
by fulvio.frati＠unimi.it 18 Jan '23

18 Jan '23

Dear all, I kindly remind you to complete the section related to your Institution in D7.1 about the Ethics requirement n. 3. You can find the working version in the Sharepoint under the folder WP7/Deliverables/D7.1. At the moment, only UMIL, AEGIS, and TSI have filled it, and we must report it during the review. Best, Fulvio ____________________________________________ SESAR Lab - Computer Science Department Università degli Studi di Milano Via Celoria, 18 20133 Milano ITALY Tel. +39-02-503 16381 <http://sesar.di.unimi.it/> http://sesar.di.unimi.it ____________________________________________

1 0

next MTM preparation meeting
by fulvio.frati＠unimi.it 18 Jan '23

18 Jan '23

Dear all, we were wondering if it is ok for all have the next MTM meeting on Tuesday 24 instead of Monday, together with the WP2-WP4 meeting if confirmed. In this meeting, we expect to see a pre-final version of the WPs presentation and the secondment presentation that still are missing. If ok for everybody, I think we can use the link already sent by Nikos. Best, Fulvio ____________________________________________ SESAR Lab - Computer Science Department Università degli Studi di Milano Via Celoria, 18 20133 Milano ITALY Tel. +39-02-503 16381 <http://sesar.di.unimi.it/> http://sesar.di.unimi.it ____________________________________________

6 5

WP2&4 Meeting Minutes 10/01/2023
by Pantelitsa Leonidou 18 Jan '23

18 Jan '23

Dear AERAS partners, I would like first to thank SPYNX and UMIL for the demonstrations of the tools; I think it was very helpful for all of us to see some examples of cyber range tools. Thanks for all the partners' participation in this week's WP2&4 meeting. *Important points of the meeting:* *TO DO -- **The sooner, the better; deadline: Wednesday, 18/01 EOB* 1. UPAT and PAGNI will bring any input related to *Cybersecurity Service Level Agreements (CSLAs)*. It can be paragraphs from contracts with companies that provide third-party services to their organization where they mention: - any cybersecurity or privacy notes, - availability of the software or hardware, - responsibility sharing in the case of cyber threats incidents - any privacy notice, internal privacy regulations (i.e., listed in personnel contracts) - or anything else you consider related to AERAS. 2. PAGNI (and UPAT, if possible) to complete the table with the standards and certificates following the MoSCoW method, as we discussed during the meeting. 3. Deliverable 2.1. deadline for internal review -- *22/01/2023. * *Notes from our discussion:* The implementation of the AERAS platform will be based on the SPHYNX CR tools - There must be an Intellectual Property agreement among the consortium - All the new elements of the AERAS platform will be developed as individual modules that will communicate with the SPHYNX CR tools REST APIs. - The visualization tools must be implemented based on the AEGIS visualization tools. Best, Pantelitsa Leonidou CUT

1 1

new version of WP5 presentation with KPIs and secondees breakdown
by fulvio.frati＠unimi.it 16 Jan '23

16 Jan '23

Dear all, I have uploaded a new version of the WP5 presentation in the folder MidTerm Review of the Sharepoint. In this new version I have included the KPIs (the list of all KPIs per Objective are available in the Introduction presentation), as in the last call we decided to include KPIs status in all WP presentation. I the same presentation, I have also put my proposal for a breakdown schema of secondees activities. Please take a look if you deem it interesting. My goal id to give an idea to POs that we have a strategy on how to coordinate secondees activities within tasks. See you all tomorrow! Fulvio ____________________________________________ SESAR Lab - Computer Science Department Università degli Studi di Milano Via Celoria, 18 20133 Milano ITALY Tel. +39-02-503 16381 <http://sesar.di.unimi.it/> http://sesar.di.unimi.it ____________________________________________

1 0

- Request for AERAS social media content and reminder for Impact Creation Tracker file
by Pantelitsa Leonidou 16 Jan '23

16 Jan '23

Dear AERAS partners, We ask for your contribution to AERAS dissemination through the project's social media accounts. *ALL the AERAS partners* are involved in WP6, so we should all contribute to this effort. *Here are situations where content should be provided:* - New task: Partner’s role in the tasks - Project milestone reached / project activity/deliverables - Publications (AERAS papers or related publications from partners) - Events - Generic posts about Healthcare & cybersecurity and topics of interest - And others… *Pictures/Videos should be provided whenever possible. *Attached you can find the template for your input. Send your input by Friday as a reply to this email.* We plan to have *at least 2 posts per week (8 per month). *We expect that *each partner* will contribute to this *with content for one or two posts per month*. **Important* please do not forget to report any activities, any event where you presented AERAS, publication, etc. in the following link: https://unimi2013.sharepoint.com/:x:/r/sites/AERAS/_layouts/15/Doc.aspx?sou… ----------------------- *Please don't forget to follow and share with your network the AERAS social media accounts:* Facebook: https://www.facebook.com/aeras.eu.H2020 LinkedIn: https://www.linkedin.com/company/aeras-eu/about/ Twitter: https://twitter.com/EuAeras Best, Pantelitsa Leonidou CUT

1 0

- WP6 - Partners' Social Media Profiles and Websites
by Pantelitsa Leonidou 12 Jan '23

12 Jan '23

Dear AERAS partners, I kindly ask you to add the links to your social media profiles and websites of your organization to the following excel file: Partners_Social_media_profiles_websites.xlsx <https://unimi2013.sharepoint.com/:x:/r/sites/AERAS/Documenti%20condivisi/Ge…> We need this information to ensure that we tag the correct entity in our AERAS posts and where ever we need to mention the links. **Additionally, this email is a reminder to request the following action of ALL the partners:* *By the end of this month, we will need to report to the MTM review the number of followers, likes, and shares as an indication of AERAS impact.* Please, all the partners,* follow, like, and interact with the AERAS social media profiles. * It will take only a few minutes of your time! I am listing here the profiles for your convenience: - *Facebook: *https://www.facebook.com/aeras.eu.H2020 - *Twitter:* https://twitter.com/EuAeras - *LinkedIn: *https://www.linkedin.com/company/aeras-eu Best, Pantelitsa Leonidou CUT

1 0

meeting minutes 09/1/2023
by fulvio.frati＠unimi.it 11 Jan '23

11 Jan '23

Dear all, Thanks for your participation today and tomorrow to the call. MINUTE call Monday 09/01/2023 * We discussed the format of the WP presentation for the MTM. All WP leaders presented the draft of the presentations and secondees the draft of their work. Next meeting will be focused on secondees presentations and how to include them in general WP one * All secondees have to upload the presentation (even if in draft) in sharepoint * Each secondees will have the presentation organize in a first introductory part and then research results. The first part will be presented only in the first WP they have been involved, then results for each WP in specific WP slots * In each WP presentation we must include a breakdown of the contribution of secondees with respect to task and deliverable * Fulvio to share deliverables about THREAT ARREST Architecture. They are available for download here https://cordis.europa.eu/project/id/786890/results/it, in particular see Final Prototype of Integrated THREATARREST platform and specific deliverables for tools * It is important to show cross-WP contributions of secondees in presentations * The list of KPIs will be included in the main presentation, then each WP can report the progress of their specific KPIs * The link of Sphinx must be substitute with the Sphynx Analytics logo. Konstantinos will circulate it * Next meeting Tuesday 17 at 1pm CET THREAT ARREST Youtube page https://www.youtube.com/@threatarrest3852 * Sphynx will circulate video of the cyber range infrastructure. Kind regards Fulvio ____________________________________________ SESAR Lab - Computer Science Department Università degli Studi di Milano Via Celoria, 18 20133 Milano ITALY Tel. +39-02-503 16381 <http://sesar.di.unimi.it/> http://sesar.di.unimi.it ____________________________________________

2 1