CPS4CIP 2024 : The 5th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection (CPS4CIP 2024)

===========================================================================
The 5th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection (CPS4CIP 2024) https://st.fbk.eu/events/CPS4CIP2024/

Co-located with the 29th European Symposium on Research in Computer Security (ESORICS 2024) https://esorics2024.org/
Bydgoszcz, Poland September 16-20, 2024
===========================================================================

SCOPE & TOPICS
---------------------
CPS4CIP’24 is the fourth workshop dedicated to cyber-physical security for protecting critical infrastructures that support finance, energy, health, air transport, communication, gas, and water. The secure operation of these critical infrastructures is essential to the security of a nation, its economy, and the public's health and safety. Security incidents in critical infrastructures can directly lead to a violation of users’ safety and privacy, physical damages, significant economic impacts on individuals and companies, and threats to human life while decreasing trust in institutions and questioning their social value. Because of the increasing interconnection between the digital and physical worlds, these infrastructures and services are more critical, sophisticated, and interconnected than ever before. This makes them increasingly vulnerable to attacks, as confirmed by the steady rise of cyber-security incidents, such as phishing or ransomware, but also cyber-physical incidents, such as physical violation of devices or facilities in conjunction with malicious cyber activities.
To address all these challenges, the CPS4CIP workshop has the objective of bringing together security researchers and practitioners from the various verticals of critical infrastructures (such as the financial, energy, health, air transport, communication, gas and water domains) to rethink cyber-physical security in the light of latest technology developments, e.g., Cloud Computing, Blockchain, Big Data, Artificial Intelligence (AI), Internet-of-Things (IoT). Specifically, value will be given to contributions focusing on the interplay between the digital and physical aspects of security problems and capable of fostering new, intelligent, collaborative and more dynamic approaches to detect, prevent and mitigate security incidents, such as:
(i) intelligent monitoring and data collection of security-related information;
(ii) predictive analytics over the collected data based on AI techniques (such as machine learning) that enable the identification of complex attack patterns;
(iii) triggering of preventive and mitigation measures in advance of or shortly after the occurrence of an attack;
(iv) allowing all stakeholders to collaborate in vulnerability assessment, risk analysis, threat identification, threat mitigation, and compliance.

Topics of Interest
-----------------------
CPS4CIP invites submissions that present innovative ideas, proof of concepts, use cases, experience reports, and results from a variety of topics relevant to the security of critical infrastructures and services. Topics of interest include, but are not limited to:
- AI, machine learning for predictive security of critical infrastructures
- Integrated (cyber & physical) security
- Collaborative risk assessment/mitigation in supply chains
- Confronting complex threats and their cascading effects
- Adaptive anomaly detection
- Blockchain solutions for cyber and data security of critical infrastructures
- Risk Assessment and Management
- Identification, assessment, and mitigation of cyber-physical threats
- Automated vulnerability assessment and penetration testing services
- Privacy-preserving data collection and analytics
- Dynamic security knowledge base
- Measuring Security Levels in critical infrastructures
- Adaptive security-related data collection
- Critical infrastructure resilience
- AI CCTV analytics
- Security compliance services
- Automation for detection, prevention, and mitigation measures
- Privacy-enhancing technologies
- Cyberthreat intelligence and cyberdeception techniques
- Explainability/interpretability of AI - based security mechanisms and services
- Robust AI for CIP
- Adaptive threat hunting and intelligence

Important Dates
----------------------
Submission deadline: 03.06.2024
Notification to authors: 03.07.2024
Camera-ready versions: 20.07.2024

Paper Submission Guidelines
--------------------------------------
Submissions are to be made to the submission web site (https://st.fbk.eu/events/CPS4CIP2024/) in pdf format. At least one author of each accepted paper is required to register and present their work at the workshop; otherwise the paper will not be included in the proceedings.
Submitted papers must not substantially overlap with papers that have been published or that have been simultaneously submitted to a journal or a conference with proceedings. Submissions should be at most 16+ pages long (full paper), or 8+ pages (short paper) including the bibliography and appendices and should follow the LNCS style (http://www.springer.com/computer/lncs?SGWID=0-164-6-793341-0).
Pre-proceedings will be made available at the workshop. Accepted conference papers are planned to be published by Springer in the LNCS collection.


Workshop Organizers
----------------------------
General Chair(s)
Habtamu Abie, Norwegian Computing Center, Norway
Silvio Ranise, University of Trento and Fondazione Bruno Kessler (FBK), Italy

PC Chair(S)
Luca Verderame, University of Genoa, Italy
Enrico Cambiaso, National Research Council (CNR), Italy
Rita Ugarelli, SINTEF, Norway
Isabel Praça, GECAD/ISEP, Portugal

Program Committee
--------------------------
- Dieter Gollmann, Hamburg University of Technology, Germany
- Sokratis Katsikas, Norwegian University of Science and Technology, Norway
- Fabio Martinelli, IIT-CNR, Italy
- Einar Arthur Snekkenes, Norwegian University of Science and Technology, Norway
- Stamatis Karnouskos, SAP Research, Germany
- Reijo Savola, University of Jyväskylä, Finland
- Alessandro Armando, University of Genoa, Italy
- Federica Battisti, University of Padua, Italy
- Alessio Merlo, University of Genoa, Italy
- Cristina Alcaraz, University of Malaga, Spain
- Giovanni Livraga, University of Milan, Italy
- Shouhuai Xu, University of Colorado Colorado Springs, USA
- Christos Xenakis, University of Piraeus, Greece
- Mauro Conti, University of Padua, Italy
- Denis Čaleta, Institute for Corporate Security Studies, Slovenia
- Ali Dehghantanha, University of Guelph, Canada
- Dušan Gabrielčič, Institute Jožef Stefan, Slovenia
- Nikolaus Wirtz, RWTH Aachen University, Germany
- Theodore Zahariadis, The National and Kapodistrian University of Athens, Greece
- Harsha Ratnaweera, Norwegian University of Life Sciences, Norway
- Volodymyr V. Tarabara, Michigan State University, USA
- Christos Makropoulos, National Technical University of Athens, Greece
- David Tipping, DeftEdge, USA
- Dionysis Nikolopoulos, National Technical University of Athens, Greece
- Véronique Legrand, Cnam, France
- Ioan Constantin, Orange Romania, Romania
- Tim Stelkens-Kobsch, German Aerospace Center (DLR), Germany
- Matteo Mangini, Network Integration and Solutions S.r.l., Italy
- Corinna Köpke, Fraunhofer Institute for High-Speed Dynamics, Germany
- Vasileios Kazoukas, Center for Security Studies (KEMEA), Greece
- Georgios Spanoudakis, Sphynx Technology, Switzerland
- Haris Mouratidis, University of Brighton, UK
- Matthias Eckhart, SBA Research, Austria
- Sofia Tsekeridou, INTRASOFT International, Greece
- Johanna Ullrich, SBA Research, Austria
- Muhammad Taimoor Khan, University of Greenwich, UK
- Miguel Mira da Silva, INOV, Portugal
- Sandeep Pirbhulal, Norwegian Computing Center, Norway
- Ilias Gialampoukidis, Information Technologies Institute (ITI), Greece
- Ilias Gkotsis, Inlecom Innovation, Greece
- Simon Hacks, KTH Royal Institute of Technology, Sweden
- Andreas Kubis, PSI Software AG, Germany
- Audun Jøsang, University of Oslo, Norway
- Ariadni Michalitsi - Psarrou, National Technical University of Athens, Greece
- Anna Georgiadou, National Technical University of Athens, Greece
- Angelos Liapis, Κonnekt-able, Ireland
- Joaquin Garcia-Alfaro, IMT (Institut Mines-Telecom), France
- Päivi Mattila, Laurea University of Applied Sciences, Finland
- Israel Pérez Llopis, Polytechnic University of Valencia, Spain
- Sandra König, AIT Austrian Institute of Technology, Austria
- Stefan Schauer, AIT Austrian Institute of Technology, Austria
- Basel Katt, Norwegian University of Science and Technology, Norway
- Aida Omerovic, SINTEF, Norway
- Sotiris Ioannidis, Technical University of Crete, Greece
- Manos Athanatos, Foundation for Research and Technology Hellas, Crete
- Vasileios Mavroeidis, University of Oslo, Norway
- Rafael Palacios Hielscher, ICAI- Universidad Pontificia Comillas, Spain
- Luca Caviglione, IMATI-CNR, Italy
- Marco Zuppelli, IMATI-CNR, Italy
- Karin Bernsmed, SINTEF, Norway
- Martin Gilje Jaatun, SINTEF, Norway
- Stella Parisi, Information Technologies Institute, Greece
- Dimitrios Kavallieros, Information Technologies Institute, Greece
- Konstantinos Ioannidis, Information Technologies Institute, Greece

Support
-----------
The workshop is supported by the projects of the European Cluster for Securing Critical Infrastructures (ECSCI - https://www.finsec-project.eu/ecsci), namely
ECSCI Running projects:
- AI4CYBER (https://ai4cyber.eu)
- ATLANTIS (https://www.atlantis-horizon.eu)
- CyberSEAS (https://cyberseas.eu)
- DYNABIC (https://dynabic.eu)
- eFORT (https://efort-project.eu)
- EU-HYBNET (https://euhybnet.eu)
- HARPOCRATES (https://harpocrates-project.eu)
- HERON (https://www.heron-h2020.eu)
- IRIS (https://www.iris-h2020.eu)
- LAZARUS (https://lazarus-he.eu)
- R2D2 (https://r2d2project.eu)
- ResilMesh (https://www.resilmesh.eu)
- SECANT (https://secant-project.eu)
- SUNRISE (https://sunrise-europe.eu)
- CyberSecDome (https://cybersecdome.eu)
- NEMECYS (https://nemecys.eu)
- TESTUDO (https://testudo-project.eu)

ECSCI ended projects supported by coordinators:
- FINSEC (https://www.finsec-project.eu)
- ANASTACIA (http://www.anastacia-h2020.eu/)
- CyberSANE (https://www.cybersane-project.eu/)
- DEFENDER (https://defender-project.eu/)
- EnergyShield (https://energy-shield.eu/)
- ENSURESEC (http://www.ensuresec.eu/)
- FeatureCloud (https://featurecloud.eu/)
- IMPETUS (https://www.impetus-project.eu/)
- InfraStress (https://www.infrastress.eu/)
- PHOENIX (https://phoenix-h2020.eu/)
- PRAETORIAN (https://praetorian-h2020.eu/)
- PRECINCT (https://www.precinct.info/en/)
- RESISTO (http://www.resistoproject.eu/)
- SAFECARE (https://www.safecare-project.eu/)
- SAFETY4RAILS (https://safety4rails.eu/)
- SATIE (http://satie-h2020.eu)
- SealedGRID (https://www.sgrid.eu/)
- SecureGas (https://www.securegas-project.eu/)
- SmartResilience (http://www.smartresilience.eu-vri.eu)
- SOTER (https://soterproject.eu/)
- SPHINX (https://sphinx-project.eu/)
- STOP-IT (https://stop-it-project.eu/)
- 7SHIELD (https://www.7shield.eu/)

Horizon Europe project based on ECSCI:
- EU-CIP (European Knowledge Hub and Policy Testbed for Critical Infrastructure Protection)
And three national projects:
- NORCICS (Norwegian Center for Cybersecurity in Critical Sectors) project funded by the Research Council of Norway under the Center for Research-based Innovation (SFI)
- RESTABILISE4.0 (Restabilise and Energy: Specialization of Enabling Technologies for Balancing Energy Infrastructures and Systems) project Co-funded by START4.0 - Competence Center for security and optimization of strategic infrastructures
- CybAlliance (International Alliance for Strengthening Cybersecurity and Privacy in Healthcare) project funded by the Research Council of Norway under the INTPART International Partnerships for Excellent Education, Research and Innovation program