Computer Security : ESORICS 2018 International Workshops, CyberICPS 2018 and SECPRE 2018, Barcelona, Spain, September 6{u2013}7, 2018, Revised Selected Papers

This book constitutes the thoroughly refereed post-conference proceedings of the 4th International Workshop on the Security of Industrial Control Systems and Cyber-Physical Systems, CyberICPS 2018, and the Second International Workshop on Security and Privacy Requirements Engineering, SECPRE 2018, held in Barcelona, Spain, in September 2018, in conjunction with the 23rd European Symposium on Research in Computer Security, ESORICS 2018. The CyberICPS Workshop received 15 submissions from which 8 full papers were selected for presentation. They cover topics related to threats, vulnerabilities and risks that cyber-physical systems and industrial control systems face; cyber attacks that may be launched against such systems; and ways of detecting and responding to such attacks. From the SECPRE Workshop 5 full papers out of 11 submissions are included. The selected papers deal with aspects of security and privacy requirements assurance and evaluation; and security requirements elicitation and modelling. Front Matter ....Pages I-X Front Matter ....Pages 1-1 Improving SIEM for Critical SCADA Water Infrastructures Using Machine Learning (Hanan Hindy, David Brosset, Ethan Bayne, Amar Seeam, Xavier Bellekens)....Pages 3-19 Cyber-Attacks Against the Autonomous Ship (Georgios Kavallieratos, Sokratis Katsikas, Vasileios Gkioulos)....Pages 20-36 EPIC: An Electric Power Testbed for Research and Training in Cyber Physical Systems Security (Sridhar Adepu, Nandha Kumar Kandasamy, Aditya Mathur)....Pages 37-52 A Hardware Based Solution for Freshness of Secure Onboard Communication in Vehicles (Sigrid Gürgens, Daniel Zelle)....Pages 53-68 Enhancing Usage Control for Performance: An Architecture for Systems of Systems (Vasileios Gkioulos, Athanasios Rizos, Christina Michailidou, Paolo Mori, Andrea Saracino)....Pages 69-84 Comparative Study of Machine Learning Methods for In-Vehicle Intrusion Detection (Ivo Berger, Roland Rieke, Maxim Kolomeets, Andrey Chechulin, Igor Kotenko)....Pages 85-101 SDN-Enabled Virtual Data Diode (Miguel Borges de Freitas, Luis Rosa, Tiago Cruz, Paulo Simões)....Pages 102-118 Realistic Data Generation for Anomaly Detection in Industrial Settings Using Simulations (Peter Schneider, Alexander Giehl)....Pages 119-134 Front Matter ....Pages 135-135 Sealed Computation: Abstract Requirements for Mechanisms to Support Trustworthy Cloud Computing (Lamya Abdullah, Felix Freiling, Juan Quintero, Zinaida Benenson)....Pages 137-152 Understanding Challenges to Adoption of the Protection Poker Software Security Game (Inger Anne Tøndel, Martin Gilje Jaatun, Daniela Cruzes, Tosin Daniel Oyetoyan)....Pages 153-172 An Experimental Evaluation of Bow-Tie Analysis for Cybersecurity Requirements (Per Håkon Meland, Karin Bernsmed, Christian Frøystad, Jingyue Li, Guttorm Sindre)....Pages 173-191 Towards General Scheme for Data Sharing Agreements Empowering Privacy-Preserving Data Analysis of Structured CTI (Fabio Martinelli, Oleksii Osliak, Andrea Saracino)....Pages 192-212 Run-Time Monitoring of Data-Handling Violations (Jassim Happa, Nick Moffat, Michael Goldsmith, Sadie Creese)....Pages 213-232 Back Matter ....Pages 233-233