Digital Sovereignty in Cyber Security: New Challenges in Future Vision : First International Workshop, CyberSec4Europe 2022, Venice, Italy, April 17–21, 2022, Revised Selected Papers

This book constitutes papers presented during the workshop session titled “CyberSec4Europe - Research to Innovation: Common Research Framework on Security and Privacy” during the Privacy Symposium hosted by Università Ca’ Foscari in Venice, Italy, in April 2022. The 11 peer-reviewed selected papers present findings, conclusions, research, and recommendations in various security-related areas, from highly technical ones (e.g., software and network security) to law and human-centric ones (e.g., governance and cybersecurity awareness). Preface Organization Contents Software Security Computer-Aided Reverse Engineering of Protected Software 1 Introduction 2 Protected Region Identification 2.1 Security Assessment 2.2 Malware Analysis 3 Code Understanding 3.1 Automated Identification of Information Leakage Vulnerabilities 3.2 Malware Analysis with Symbolic and Concolic Execution 4 Protection Removal or Bypass 5 Conclusions References Using Statistical Model Checking for Cybersecurity Analysis 1 Introduction 1.1 Uneducated Mob 1.2 Fifty Shades of Cybersecurity 2 Related Work 3 Model Checking and Cybersecurity 3.1 Model Checking 3.2 Semantic Basis 4 Statistical Model Checking for Cybersecurity 4.1 Monte Carlo Simulation: An Informal Primer 4.2 Modelling Considerations and Guidelines 4.3 Computational Considerations 4.4 Rare Event Simulation 5 The FIG tool 5.1 Main Characteristics 5.2 IOSA Models 5.3 Demonstration 6 Conclusions References Network Security and Privacy A Need for Privacy-Assistive Technology in Notice and Consent Paradigm in IoT 1 Introduction 2 Background 2.1 Privacy and Data Protection 2.2 Privacy Principles (GDPR) 3 Notice and Consent 3.1 Privacy Policy and Privacy Notice 3.2 Consent 3.3 Discussion: Notice and Consent 4 Privacy-Assistive Technology 5 Conclusion References Privacy-Preserving Cyber Threat Information Sharing Leveraging FL-Based Intrusion Detection in the Financial Sector 1 Introduction 2 Background 2.1 Cyber Threat Information Sharing 2.2 Federated Learning 2.3 Related Work 3 Proposal 4 Experimentation 4.1 Dataset 4.2 Model Setup 4.3 FL Setup 4.4 Data Preparation 4.5 Anonymization of Sensitive Attributes 4.6 Training Results 5 Conclusion and Future Work References Generative Methods for Out-of-distribution Prediction and Applications for Threat Detection and Analysis: A Short Review 1 Introduction 2 State-of-the-Art Approaches for Outlier Detection and Generation in Cyber-Security Scenarios 2.1 Deep Learning Models for Outlier Detection 2.2 Anomaly Generation via Deep Learning 3 Applications in Cyber-security Domain 4 Challenges and Opportunities 5 Conclusions References Distributed Filtering in Industrial Networks 1 Introduction 2 Security of Communication Network 3 State of the Art 4 Distributed Firewall Configurations 5 Conclusion and Future Work References 6G Technologies: Key Features, Challenges, Security and Privacy Issues 1 Introduction 2 Key Features and Use-Cases for Future 6G Networks 2.1 Key Features for Future 6G 3 Top Challenges of 6G Network 3.1 Security and Privacy 3.2 Standardization in Security and Privacy 3.3 High Bandwidth Demands and Accessibility 4 Discussion and Conclusion References Cybersecurity and Society Building Cross-language Corpora for Human Understanding of Privacy Policies 1 Introduction 2 Related Work 3 A Reference Corpus in English 4 Methodology 5 Comparison Indicators 6 Reconstruction of Policy Corpus 7 Results and Comparison 8 Open Problems: Technical Terms May Not Match 9 Conclusion and Future Works References Governance Foundations for the European Cybersecurity Community 1 Introduction 2 Legislative Framework–Regulation (EU) 2021/887 2.1 Categories of Actors 2.2 The Cybersecurity Competence Community 3 Organising the Community 3.1 Our Use-Case 3.2 Needs and Expectations 3.3 Main Findings 4 Recommendations 4.1 The Review of the Cybersecurity Regulation 4.2 Governance of CHECKs 4.3 Funding and Sustainability 5 Conclusion References Building a Cybersecurity Awareness Program: Present and Prospective Aspects 1 Meaning of Cybersecurity Awareness 2 Stages of Cybersecurity Awareness Initiatives 2.1 Pre-implementation Phase 2.2 Implementation Phase 2.3 Post-implementation Phase 3 Artificial Intelligence/Machine Learning Assisted Cybersecurity Awareness 3.1 Identification of Vulnerable Audience Groups 3.2 Personalization and Customization of CSA Training 3.3 Projection of Future Threats 4 Conclusions References Building European Cybersecurity Ecosystems: Lessons from the Past 1 Introduction 2 Related Work 3 Stakeholder Analysis 4 Governance Model 5 Strategic Directions, Gaps, and Challenges 6 Conclusions References Author Index