Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference最新文献_第3页

Ontology-based Framework for Boundary Verification of Safety and Security Properties in Industrial Control Systems 基于本体的工业控制系统安全属性边界验证框架

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590785

Chibuzo Ukegbu, Ramesh Neupane, Hoda Mehrpouyan

引用次数: 0

Cybersecurity and Digital Privacy Aspects of V2X in the EV Charging Structure 电动汽车充电结构中V2X的网络安全和数字隐私方面

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3591406

U. Cali, M. Kuzlu, O. Elma, Osman Gazi Gucluturk, A. Kilic, Ferhat Ozgur Catak

{"title":"Cybersecurity and Digital Privacy Aspects of V2X in the EV Charging Structure","authors":"U. Cali, M. Kuzlu, O. Elma, Osman Gazi Gucluturk, A. Kilic, Ferhat Ozgur Catak","doi":"10.1145/3590777.3591406","DOIUrl":"https://doi.org/10.1145/3590777.3591406","url":null,"abstract":"With the advancement of green energy technology and rising public and political acceptance, electric vehicles (EVs) have grown in popularity. Electric motors, batteries, and charging systems are considered major components of EVs. The electric power infrastructure has been designed to accommodate the needs of EVs, with an emphasis on bidirectional power flow to facilitate power exchange. Furthermore, the communication infrastructure has been enhanced to enable cars to communicate and exchange information with one another, also known as Vehicle-to-Everything (V2X) technology. V2X is positioned to become a bigger and smarter system in the future of transportation, thanks to upcoming digital technologies like Artificial Intelligence (AI), Distributed Ledger Technology, and the Internet of Things. However, like with any technology that includes data collection and sharing, there are issues with digital privacy and cybersecurity. This paper addresses these concerns by creating a multi-layer Cyber-Physical-Social Systems (CPSS) architecture to investigate possible privacy and cybersecurity risks associated with V2X. Using the CPSS paradigm, this research explores the interaction of EV infrastructure as a very critical part of the V2X ecosystem, digital privacy, and cybersecurity concerns.","PeriodicalId":231403,"journal":{"name":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","volume":"101 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115635507","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

In Alice and Bob, I trust? 我相信爱丽丝和鲍勃?

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590808

Allison Wylde

引用次数: 0

An Evaluation of Information Flows in Digital Euro Transactions Using Contextual Integrity Theory 基于上下文完整性理论的数字欧元交易信息流评估

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590779

Frédéric Tronnier, Patrick Biker, Erik Baur, Sascha Löbner

{"title":"An Evaluation of Information Flows in Digital Euro Transactions Using Contextual Integrity Theory","authors":"Frédéric Tronnier, Patrick Biker, Erik Baur, Sascha Löbner","doi":"10.1145/3590777.3590779","DOIUrl":"https://doi.org/10.1145/3590777.3590779","url":null,"abstract":"Privacy is regarded as a crucial factor in the development of Central Bank Digital Currency (CBDC), particularly for the digital euro in Europe. Currently, research on privacy in CBDC is scarce and focuses largely on its technical implementation or its influence on technology adoption. This work aims to act as a first step towards uncovering privacy norms in digital euro transactions for German citizens. To this end, we investigate privacy parameters and acceptable flows of information for digital euro transactions using an exploratory mixed-method approach based and contextual integrity theory. The privacy parameters, derived through the analysis of 21 qualitative interviews of experts and non-experts, are used to measure acceptability of various information flows in digital euro transactions for 129 respondents in a first quantitative evaluation. The results demonstrate the importance of acceptable and unacceptable recipients of transaction- and identity-related information as well as different transmission principles. The contributions of this work, the creation of a contextual integrity framework and the evaluation of first privacy norms in digital euro transactions, can be used by central banks and policy makers to design and implement CBDC that does not violate individuals’ privacy norms.","PeriodicalId":231403,"journal":{"name":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","volume":"44 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130635503","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Towards Detecting Anomalies in Log-Event Sequences with Deep Learning: Open Research Challenges 用深度学习检测日志事件序列中的异常:开放的研究挑战

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590789

Patrick Himler, Max Landauer, Florian Skopik, Markus Wurzenberger

{"title":"Towards Detecting Anomalies in Log-Event Sequences with Deep Learning: Open Research Challenges","authors":"Patrick Himler, Max Landauer, Florian Skopik, Markus Wurzenberger","doi":"10.1145/3590777.3590789","DOIUrl":"https://doi.org/10.1145/3590777.3590789","url":null,"abstract":"Anomaly Detection (AD) is an important area to reliably detect malicious behavior and attacks on computer systems. Log data is a rich source of information about systems and thus provides a suitable input for AD. With the sheer amount of log data available today, Machine Learning (ML) and its further development Deep Learning (DL) have been applied for years to create models for AD. Especially when processing complex log data, DL is often able to achieve better performance than ML. To detect anomalous patterns that span over multiple log lines, it is necessary to group these log lines into log-event sequences. This work uses a Long Short-Term Memory (LSTM) model for AD which is one of the most important approaches to represent long-range temporal dependencies in log-event sequences of arbitrary length. This means that we use past information to predict whether future events are normal or anomalous. For the LSTM model we adapt a state of the art open source implementation called LogDeep. For the evaluation, we use a Hadoop Distributed File System (HDFS) data set, which is well studied in current research, and an open source Audit data set provided by the Austrian Institute of Technology (AIT). In this paper we show that without padding, a common preprocessing step used that strongly influences the AD process and artificially improves detection results and thus accuracy in lab testing, it is not possible to achieve the same high quality of results shown in literature. Furthermore, we analyze limitations of DL approaches applied for AD and list future research priorities and design challenges.","PeriodicalId":231403,"journal":{"name":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","volume":"17 6","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121016764","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

A Framework for Advanced Persistent Threat Attribution using Zachman Ontology 基于Zachman本体的高级持续威胁归因框架

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590783

Venkata Sai Charan Putrevu, Hrushikesh Chunduri, Mohan Anand Putrevu, S. Shukla

{"title":"A Framework for Advanced Persistent Threat Attribution using Zachman Ontology","authors":"Venkata Sai Charan Putrevu, Hrushikesh Chunduri, Mohan Anand Putrevu, S. Shukla","doi":"10.1145/3590777.3590783","DOIUrl":"https://doi.org/10.1145/3590777.3590783","url":null,"abstract":"Advanced Persistent Threat (APT) is a type of cyber attack that infiltrates a targeted organization and exfiltrates sensitive data over an extended period of time or to cause sabotage. Recently, there has been a trend of nation states backing APT groups in order to further their political and financial interests, making the APT attribution process increasingly important. The APT attribution process involves identifying the actors behind an attack and their motivations, using a method of logical inference called abductive reasoning to determine the most likely explanation for a set of observations. While various attribution methods and frameworks have been proposed by the security community, many of them lack granularity and are dependent on the skills of practitioners rather than a standardized process. This can hinder both the understandability and reproducibility of attribution efforts as this process is practiced but not engineered. To address these issues, we propose a new framework for the APT attribution process based on the Zachman ontology, which offers greater granularity by posing specific primitive questions at various levels of the attribution process. This allows for more accurate conclusions about the attackers and their motivations, helping organizations to better protect themselves against future attacks.","PeriodicalId":231403,"journal":{"name":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122786647","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Digital Energy Platforms Considering Digital Privacy and Security by Design Principles 从设计原则考虑数字隐私和安全的数字能源平台

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3591405

U. Cali, Marthe Fogstad Dynge, Ahmed Idries, Sambeet Mishra, I. Dmytro, Naser Hashemipour, M. Kuzlu

{"title":"Digital Energy Platforms Considering Digital Privacy and Security by Design Principles","authors":"U. Cali, Marthe Fogstad Dynge, Ahmed Idries, Sambeet Mishra, I. Dmytro, Naser Hashemipour, M. Kuzlu","doi":"10.1145/3590777.3591405","DOIUrl":"https://doi.org/10.1145/3590777.3591405","url":null,"abstract":"The power system and markets have become increasingly complex, along with efforts to digitalize the energy sector. Accessing flexibility services, in particular, through digital energy platforms, has enabled communication between multiple entities within the energy system and streamlined flexibility market operations. However, digitalizing these vast and complex systems introduces new cybersecurity and privacy concerns, which must be properly addressed during the design of the digital energy platform ecosystems. More specifically, both privacy and cybersecurity measures should be embedded into all phases of the platform design and operation, based on the privacy and security by design principles. In this study, these principles are used to propose a holistic but generic architecture for digital energy platforms that are able to facilitate multiple use cases for flexibility services in the energy sector. A hybrid framework using both DLT and non-DLT solutions ensures trust throughout the layers of the platform architecture. Furthermore, an evaluation of numerous energy flexibility service use cases operating at various stages of the energy value chain is shown and graded in terms of digital energy platform technical maturity, privacy, and cybersecurity issues.","PeriodicalId":231403,"journal":{"name":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","volume":"88 5","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"113969697","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Towards detecting device fingerprinting on iOS with API function hooking 在iOS上用API函数挂钩检测设备指纹

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590790

Kris Heid, Vincent Andrae, J. Heider

引用次数: 1

DGA Detection Using Similarity-Preserving Bloom Encodings 基于保持相似性布隆编码的DGA检测

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590795

Lasse Nitz, Avikarsha Mandal

引用次数: 0

Usability, Security, and Privacy Recommendations for Mobile Parental Control 手机家长控制的可用性、安全性和隐私建议

Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference Pub Date : 2023-06-14 DOI: 10.1145/3590777.3590800

Vahiny Gnanasekaran, K. De Moor

引用次数: 0