Risks and Security of Internet and Systems

1. Front Matter

   Pages i-xii

   PDF

2. CPS and Hardware Security

   1. Front Matter

      Pages 1-1

      PDF

   2. Threat Modeling of Cyber-Physical Systems in Practice

      • Ameerah-Muhsinah Jamil, Lotfi Ben Othmane, Altaz Valani

      Pages 3-19

   3. AVSDA: Autonomous Vehicle Security Decay Assessment

      • Lama Moukahal, Mohammad Zulkernine, Martin Soukup

      Pages 20-37

   4. A TSX-Based KASLR Break: Bypassing UMIP and Descriptor-Table Exiting

      • Mohammad Sina Karvandi, Saleh Khalaj Monfared, Mohammad Sina Kiarostami, Dara Rahmati, Saeid Gorgin

      Pages 38-54

3. Attacks, Responses, and Security Management

   1. Front Matter

      Pages 55-55

      PDF

   2. A Stakeholder-Centric Approach for Defining Metrics for Information Security Management Systems

      • Anirban Sengupta

      Pages 57-73

   3. A Novel Approach for Attack Tree to Attack Graph Transformation

      • Nathan Daniel Schiele, Olga Gadyatskaya

      Pages 74-90

   4. Intelligent Decision Support for Cybersecurity Incident Response Teams: Autonomic Architecture and Mitigation Search

      • Camilo Correa, Jacques Robin, Raul Mazo, Salvador Abreu

      Pages 91-107

   5. Using Garbled Circuit for Secure Brokering

      • Lotfi Ben Othmane, Noor Ahmed

      Pages 108-117

4. Network and Data Security

   1. Front Matter

      Pages 119-119

      PDF

   2. Path-Preserving Anonymization for Inter-domain Routing Policies

      • Xiaozhe Shao, Hossein Pishro-Nik, Lixin Gao

      Pages 121-136

   3. Policy Modeling and Anomaly Detection in ABAC Policies

      • Maryam Davari, Mohammad Zulkernine

      Pages 137-152

5. Short Papers

   1. Front Matter

      Pages 153-153

      PDF

   2. Designing a Service for Compliant Sharing of Sensitive Research Data

      • Aakash Sharma, Thomas Bye Nilsen, Sivert Johansen, Dag Johansen, Håvard D. Johansen

      Pages 155-161

   3. Authenticated Multi-proxy Accumulation Schemes for Delegated Membership Proofs

      • Hannes Salin, Dennis Fokin, Alexander Johansson

      Pages 162-171

   4. Extending the Exposure Score of Web Browsers by Incorporating CVSS

      • Fadi Mohsen, Adel Shtayyeh, Riham Naser, Lena Mohammad, Marten Struijk

      Pages 172-182

6. Back Matter

   Pages 183-183

   PDF

This book constitutes the proceedings of the 17^th International Conference on Risks and Security of Internet and Systems, CRiSIS 2021, which took place during November 11-13, 2021. The conference was originally planned to take place in Ames, IA, USA, but had to change to an online format due to the COVID-19 pandemic.

The 9 full and 3 short papers included in this volume were carefully reviewed and selected from 23 submissions. The papers were organized in topical sections named: CPS and hardware security; attacks, responses, and security management; network and data security.

• authentication
• computer hardware
• computer networks
• computer science
• computer security
• computer systems
• cryptography
• data security
• databases
• engineering
• information technology
• internet
• network protocols
• network security
• privacy
• security issues
• security systems
• software engineering
• telecommunication networks
• telecommunication systems

• University of Kansas, Lawrence, USA

  Bo Luo

• University of Bordeaux, Bordeaux, France

  Mohamed Mosbah

• Polytechnique Montréal, Montréal, Canada

  Frédéric Cuppens, Nora Cuppens

• Iowa State University, Iowa Ciy, USA

  Lotfi Ben Othmane

• University of Sfax, Sfax, Tunisia

  Slim Kallel