Critical Information Infrastructures Security: 10th International Conference, CRITIS 2015, Berlin, Germany, October 5-7, 2015, Revised Selected Papers PDF
Preview Critical Information Infrastructures Security: 10th International Conference, CRITIS 2015, Berlin, Germany, October 5-7, 2015, Revised Selected Papers
Erich Rome · Marianthi Theocharidou Stephen Wolthusen (Eds.) 8 7 Critical Information 5 9 S C Infrastructures Security N L 10th International Conference, CRITIS 2015 Berlin, Germany, October 5–7, 2015 Revised Selected Papers 123 Lecture Notes in Computer Science 9578 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, Lancaster, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Friedemann Mattern ETH Zurich, Zürich, Switzerland John C. Mitchell Stanford University, Stanford, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen TU Dortmund University, Dortmund, Germany Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max Planck Institute for Informatics, Saarbrücken, Germany More information about this series at http://www.springer.com/series/7410 Erich Rome Marianthi Theocharidou (cid:129) Stephen Wolthusen (Eds.) Critical Information Infrastructures Security 10th International Conference, CRITIS 2015 – Berlin, Germany, October 5 7, 2015 Revised Selected Papers 123 Editors ErichRome StephenWolthusen AutonomusIntelligent Systems University of London Fraunhofer Institute London SanktAugustin UK Germany Marianthi Theocharidou Institute for the Protection andSecurity of the Citizen European Commission -Joint Research Centre Ispra Italy ISSN 0302-9743 ISSN 1611-3349 (electronic) Lecture Notesin Computer Science ISBN 978-3-319-33330-4 ISBN978-3-319-33331-1 (eBook) DOI 10.1007/978-3-319-33331-1 LibraryofCongressControlNumber:2016934196 LNCSSublibrary:SL4–SecurityandCryptology ©SpringerInternationalPublishingSwitzerland2016 Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow knownorhereafterdeveloped. Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant protectivelawsandregulationsandthereforefreeforgeneraluse. Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors give a warranty, express or implied, with respect to the material contained herein or for any errors or omissionsthatmayhavebeenmade. Printedonacid-freepaper ThisSpringerimprintispublishedbySpringerNature TheregisteredcompanyisSpringerInternationalPublishingAGSwitzerland Preface The 2015 International Conference on Critical Information Infrastructures Security (CRITIS 2015) was the tenth conference in the series, which has accompanied and in manycasesanticipatedthedevelopmentsininformationinfrastructuresecurityandthe increasingly tight integration of information systems with the physical infrastructure and cyber-physical systems in general. The conference not only provides a forum for theresearchcommunityfromacademiabutalsoofferslinkstotheapplicationdomains, government, and supranational entities. The present volume contains the carefully reviewed proceedings of the 10th CRI- TIS, held October 5–7 at the Fraunhofer Forum in Berlin, Germany. As the field expands, the conference still retains its concentrated single-track character to ensure that discussion and analysis are possible. As a result of this, we were able to accept 18papers outofatotalof53submissions, eachofwhichwas carefully peer reviewed anonymously by at least three expert reviewers, resulting in an acceptance rate of approximately 34 %. In addition, six short papers with work in progress were also selected for oral presentation. The topics covered by the research papers range from the abstract analysis of resilience and robustness in individual and interconnected infrastructure networks employing a number of distinct approaches to analyses of cyber-physical and partic- ularlycontrolsystemssecuritywithanemphasisontheenergysector.Anotherareaof continuedinteresttothecommunityalsoreflectedinthepapersistheconstructionand validationofmodelsorexercises,whichareaccompaniedbycasestudiesallowingthe validation and sharing of experiences. As in previous years, while CRITIS is proudly international in its scope, it also serves as an informal forum for the European research community in the critical infrastructures area. By offering a space for poster presentations and discussions, researchers are made aware of on-going developments that are perhaps not yet or not fullyreflectedinpublicationsandaregivenanopportunitytoexchangeviewsonthem and not only on the oral presentations offinalized research. This continuation of the series of successful CRITIS workshops has once again allowed the research andstakeholder communityfrom academia,researchinstitutions, industry, and government entities to meet and exchange views covering the key areas facingcriticalinfrastructureprotection.Thiswasreflectedinthecarefullyselectedfull research papers as well as in discussions and the poster talks. Theresearchpapersinthisvolumefurtherreflectthefeedbackanddiscussionsatthe workshop. Similar care was also applied to demonstrations and poster presentations. ENEA demonstrated a decision support system for CI operators that is in use by CI operators in Italy, showing that it is possible to transfer CIP research results into practical application. The posters displayed a representative sample of current C(I)IP research. VI Preface Incontinuationofaninitiativefirsttakenupatthe2014CRITIS,theconferencealso includedanawardforyoungresearchersinthearea(the2ndCIPRNetYoungCRITIS Award), seeking to recognize and encourage the integration of talented younger researchersintothecommunity.Thethreecandidatepapersarefeaturedinadedicated section of this volume. This year’s CYCA award was bestowed to Varun Badrinath Krishnaforthepapertitled“ARIMA-BasedModelingandValidationofConsumption Readings in Power Grids.” A number of keynote talks rounded off the conference program, covering govern- ment, academia, industry, and supranational entities. Cyrill Brunschwiler (Compass Security,Germany)spokeon“UrgencyandKeySuccessFactorsofSecurityAuditsin Critical Energy Infrastructure,” continuing the informal emphasis on energy infras- tructure security. The cyber aspect was presented by Andy Mühlheim (SwissGrid, Switzerland) in his keynote “Critical Systems Protection in a Connected World.” Resilience was the main theme of the keynote talks by Evangelos Ouzounis (ENISA, Greece; “Enhancing the Security of Critical Infrastructures — ENISA’s Approach”) and Margot Weijnen (TU Delft, The Netherlands; “Shaping Resilient Critical Infras- tructures in a Fragmented World”), while the keynote by Timo Hauschild (Federal Office for Information Security, Germany) investigated the balance between govern- ment–industry cooperation and regulation in his talk (“Cooperative and Regulation ApproachesinaChangingITThreatLandscape”).Wewouldliketousethisprefaceto once again express our gratitude to these keynote speakers. A year that has seen the security of control systems and particularly their use in cyber-warfare move from a somewhat theoretical approach only recently to a com- monplaceaspectofconflictthatisalsoreflectedinmainstreammediaandthenational security strategies of many nations continues to emphasize the importance of the CRITIS conference while a number of related, specialized events pick up on some of the themes originating over the past decade at CRITIS. As the research community asawholegrowsitmaynolongerbepossibletohaveasingleintegratingevent,butwe believe that the role of CRITIS will continue to evolve as a nucleus for such lines of enquiry. As always, the realization of a conference does not happen in a vacuum, and it is first and foremost the authors and conference participants with their original research contributions and interactions with speakers and panelists that shape the character and successoftheCRITISconference.WewouldalsoliketothanktheTechnicalProgram Committee members whose timely and thorough reviews helped ensure not only the high quality of the research contributions, but also provided valuable insights to authors. We look forward to the second decade of the CRITIS conference. February 2015 Erich Rome Marianthi Theocharidou Stephen Wolthusen Organization CRITIS 2015 was organized by Fraunhofer Institute for Intelligent Analysis and Information Systems (IAIS) and hosted by the Fraunhofer Forum Berlin, Germany. Executive Committee General and Local Chair Erich Rome Fraunhofer IAIS, Germany Program Co-chairs Marianthi Theocharidou European Commission Joint Research Centre, Italy Stephen Wolthusen Royal Holloway, University of London, UK and Gjøvik University College, Norway Publicity Chair Cristina Alcaraz University of Málaga, Spain Conference Series Chairs Bernhard Hämmerli ACRIS and HSLU, Switzerland Javier Lopez University of Málaga, Spain Steering Committee Bernhard Hämmerli ACRIS and HSLU, Switzerland Javier Lopez University of Málaga, Spain Stephen Wolthusen Royal Holloway, University of London, UK and Gjøvik University College, Norway Erich Rome Fraunhofer IAIS, Germany Marianthi Theocharidou European Commission Joint Research Centre, Italy Eric Luiijf TNO, The Netherlands Sandro Bologna AIIC, Italy Cristina Alcaraz University of Málaga, Spain International Program Committee Cristina Alcaraz University of Málaga, Spain Fabrizio Baiardi Università di Pisa, Italy Yohan Barbarin CEA, France Robin Bloomfield City University London, UK Sandro Bologna AIIC, Italy Stefan Brem Federal Office for Civil Protection, Switzerland VIII Organization Emiliano Casalicchio Università di Tor Vergata, Italy Michael Choras University of Technology and Life Sciences, Poland Jacques Colliard Union Internationale des Chemins de Fer, France Jorge Cuellar Siemens, Germany Gregorio d’Agostino ENEA and AIIC, Italy Geert Deconinck K.U. Leuven, Belgium Claudia Eckert TU Munich and Fraunhofer SIT, Germany Mohamed Eid CEA, France Katrin Franke Gjøvik University College, Norway Georgios Giannopoulos European Commission Joint Research Centre, Italy Stefanos Gritzalis University of the Aegean, Greece Bernhard Hämmerli ACRIS and HSLU, Switzerland Chris Hankin Imperial College, UK Pieter Hartel University of Twente, The Netherlands Leon Hempel TU Berlin, Germany Panayiotis University of Piraeus, Greece Kotzanikolaou Rafal Kozik University of Technology and Life Sciences, Poland Elias Kyriakides University of Cyprus Javier Lopez University of Málaga, Spain Eric Luiijf TNO, The Netherlands José Marti University of British Columbia, Canada Fabio Martinelli IIT-CNR, Italy Antonello Monti RWTH Aachen, Germany Igor Nai Fovino European Commission Joint Research Centre, Italy Eiji Okamoto University of Tsukuba, Japan Evangelos Ouzonis ENISA, Greece Stefano Panzieri Università di Roma Tre, Italy Erich Rome Fraunhofer IAIS, Germany Vittorio Rosato ENEA, Italy Andre Samberg Sec-Control, Finland Antonio Scala CNR, Italy Dominique Sérafin CEA, France Roberto Setola Università CAMPUS Bio-Medico, Italy Marianthi Theocharidou European Commission Joint Research Centre, Italy Paul Theron Thales, France Alberto Tofani ENEA, Italy Simona Louise Voronca Transelectrica, Romania Stephen Wolthusen Royal Holloway, University of London, UK and Gjøvik University College, Norway Christos Xenakis University of Piraeus, Greece Annette Zijderveld Deltares, The Netherlands Organization IX Additional Reviewers Abbasi, Ali Kokolakis, Spyros Salako, Kizito Caselli, Marco Levy-Bencheton, Cedric Samberg, Andre Cazorla, Lorena Liveri, Dimitra Tonelli, Federico Di Pietro, Antonio Mattioli, Rossella Tsohou, Aggeliki Flourentzou, Nikolas McEvoy, Richard Klaoudatou, Eleni Paterson, Kenny Supporting Institutions Fraunhofer IAIS Fraunhofer Institute for Intelligent Analysis and Information Systems CIPRNet EU FP7 project AIIC Italian Association of Critical Infrastructures’ Experts JRC European Commission Joint Research Centre Sponsoring Institutions Compass Security Deutschland GmbH
The list of books you might like
