@inproceedings{delcombel2021cybercopter,

title = {CyberCopter: a 3D helical visualisation for periodic signals of cyber attacks},

author = {Nicolas Delcombel and Alexandre Kabil and Thierry Duval and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {VR4Sec 2021 (Security for XR and XR for Security)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kilger2021detecting,

title = {Detecting and Preventing Faked Mixed Reality},

author = {Fabian Kilger and Alexandre Kabil and Volker Tippmann and Gudrun Klinker and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE 4th International Conference on Multimedia Information Processing and Retrieval (MIPR)},

pages = {399\textendash405},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wustrich2021cyber,

title = {Cyber-physical anomaly detection for ICS},

author = {Lars W\"{u}strich and Lukas Schr\"{o}der and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IFIP/IEEE International Symposium on Integrated Network Management (IM)},

pages = {950\textendash955},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{smine2021priority,

title = {A priority-based domain type enforcement for exception management},

author = {Manel Smine and David Espes and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {Foundations and Practice of Security: 13th International Symposium, FPS 2020, Montreal, QC, Canada, December 1\textendash3, 2020, Revised Selected Papers 13},

pages = {65\textendash81},

organization = {Springer International Publishing},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{9565553,

title = {Detecting and Preventing Faked Mixed Reality},

author = {Fabian Kilger and Alexandre Kabil and Volker Tippmann and Gudrun Klinker and Marc-Oliver Pahl},

doi = {10.1109/MIPR51284.2021.00074},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE 4th International Conference on Multimedia Information Processing and Retrieval (MIPR)},

pages = {399-405},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{barbeau2021metrics,

title = {Metrics to enhance the resilience of cyber-physical systems},

author = {Michel Barbeau and Fr\'{e}d\'{e}ric Cuppens and Nora Cuppens and Romain Dagnas and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1109/TrustCom50675.2020.00156},

doi = {10.1109/TrustCom50675.2020.00156},

year  = {2021},

date = {2021-01-01},

booktitle = {2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)},

pages = {1167--1172},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Bourget2020b,

title = {PROS2E, a Probabilistic Representation of Safety and Security Events for Diagnosis},

author = {Edwin Bourget and Fr\'{e}d\'{e}ric Cuppens and Nora Cuppens-Boulahia},

url = {https://dl.acm.org/doi/10.1145/3384941.3409590},

doi = {10.1145/3384941.3409590},

isbn = {9781450376082},

year  = {2020},

date = {2020-10-01},

booktitle = {Proceedings of the 6th ACM on Cyber-Physical System Security Workshop},

pages = {30--41},

publisher = {ACM},

address = {New York, NY, USA},

abstract = {The recent and increasing interconnection of industrial systems with information technologies creates a new paradigm in which new challenges arise. Being able to provide an explanation when accidents and attacks strike the system is one of them. This article presents an event model designed to provide useful and relevant information for diagnosis of safety and security events. We provide a means for system experts to model elementary events that are automatically recombined in complex and complete scenarios. We specifically focus on the ability to represent countermeasures and sequences of events, recurrent problems in the literature. We also introduce a means to precisely measure the wear of components, an important feature for the model to obtain accurate values. We showcase the use of our model for diagnosis purposes on a cyber-physical system testbed.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{segovia2019cybericps,

title = {Reflective Attenuation of Cyber-Physical Attacks},

author = {Mariana Segovia and Ana Cavalli and Nora Cuppens and Jose Rubio-Hernan and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1007/978-3-030-42048-2_2},

doi = {10.1007/978-3-030-42048-2_2},

year  = {2020},

date = {2020-02-01},

booktitle = {5th Workshop on the Security of Industrial Control Systems \& of Cyber-Physical Systems (CyberICPS 2019), 24th European Symposium on Research in Computer Security (ESORICS 2019), vol 11980},

pages = {19--34},

publisher = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Piccoli2020,

title = {Group Key Management in constrained IoT Settings},

author = {A Piccoli and M-O Pahl and L W\"{u}strich},

doi = {10.1109/ISCC50000.2020.9219619},

issn = {15301346},

year  = {2020},

date = {2020-01-01},

booktitle = {Proceedings - IEEE Symposium on Computers and Communications},

volume = {2020-July},

abstract = {textcopyright 2020 IEEE. The Internet of Things (IoT) enables software to orchestrate physical spaces. Due to the increased impact, IoT communication in factories, households, or critical infrastructures has to be highly secured. Besides point-to-point communication, group communication is frequently used in the IoT. Securing it typically requires the exchange of cryptographic keys. Several protocols have been proposed for such Group Key Management (GKM). They vary in their targeted settings, in their Key Distribution Model, Architecture Model, Reliability Properties, and Protocol Overhead. This paper surveys existing GKM mechanisms, analyzes their suitability for constrained IoT settings, and identifies open issues that require further research.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{piccoli2020ensuring,

title = {Ensuring consistency for asynchronous Group-Key management in the industrial IoT},

author = {Alessandro Piccoli and Marc-Oliver Pahl and Steffen Fries and Tolga Sel},

year  = {2020},

date = {2020-01-01},

booktitle = {2020 16th International Conference on Network and Service Management (CNSM)},

pages = {1\textendash5},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{perez2020lockdown,

title = {Lockdown: Balance availability attack against lightning network channels},

author = {Cristina P\'{e}rez-Sol`a and Alejandro Ranchal-Pedrosa and Jordi Herrera-Joancomart'i and Guillermo Navarro-Arribas and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1007/978-3-030-51280-4_14},

doi = {10.1007/978-3-030-51280-4_14},

year  = {2020},

date = {2020-01-01},

booktitle = {International Conference on Financial Cryptography and Data Security},

pages = {245--263},

organization = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{faraj2020taxonomy,

title = {Taxonomy and challenges in machine learning-based approaches to detect attacks in the internet of things},

author = {Omair Faraj and David Meg'ias and Abdel-Mehsen Ahmad and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1145/3407023.3407048},

doi = {10.1145/3407023.3407048},

year  = {2020},

date = {2020-01-01},

booktitle = {Proceedings of the 15th International Conference on Availability, Reliability and Security},

pages = {1--10},

publisher = {ACM},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{barbeau2020geocaching,

title = {Geocaching-Inspired Navigation for Micro Aerial Vehicles with Fallible Place Recognition},

author = {Michel Barbeau and Joaquin Garcia-Alfaro and Evangelos Kranakis},

url = {https://doi.org/10.1007/978-3-030-61746-2_5},

doi = {10.1007/978-3-030-61746-2_5},

year  = {2020},

date = {2020-01-01},

booktitle = {International Conference on Ad-Hoc Networks and Wireless},

pages = {55--70},

organization = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{segovia2020nca,

title = {Cyber-Resilience Evaluation of Cyber-Physical Systems},

author = {Mariana Segovia and Jose Rubio-Hernan and Ana R Cavalli and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1109/NCA51143.2020.9306741},

doi = {10.1109/NCA51143.2020.9306741},

year  = {2020},

date = {2020-01-01},

booktitle = {2020 IEEE 19th International Symposium on Network Computing and Applications (NCA)},

pages = {1--8},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sharma2020anonymous,

title = {Anonymous Proof-of-Asset Transactions Using Designated Blind Signatures},

author = {Neetu Sharma and Rajeev Anand Sahu and Vishal Saraswat and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1007/978-3-030-70881-8_9},

doi = {10.1007/978-3-030-70881-8_9},

year  = {2020},

date = {2020-01-01},

booktitle = {Foundations and Practice of Security - 13th International Symposium, 

 FPS 2020, Montreal, QC, Canada, December 1-3, 2020, Revised Selected 

 Papers},

volume = {12637},

pages = {137--146},

publisher = {Springer},

series = {Lecture Notes in Computer Science},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{dernaika2020accountability,

title = {Accountability in the A Posteriori Access Control: A Requirement and a Mechanism},

author = {Farah Dernaika and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Olivier Raynaud},

year  = {2020},

date = {2020-01-01},

booktitle = {International Conference on the Quality of Information and Communications Technology},

pages = {332--342},

organization = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Kabil2020b,

title = {Alert characterization by non-expert users in a cybersecurity virtual environment: A usability study},

author = {Alexandre Kabil and Thierry Duval and Nora Cuppens},

doi = {10.1007/978-3-030-58465-8_6},

issn = {16113349},

year  = {2020},

date = {2020-01-01},

booktitle = {Lecture Notes in Computer Science},

volume = {12242 LNCS},

pages = {82--101},

abstract = {Although cybersecurity is a domain where data analysis and training are considered of the highest importance, few virtual environments for cybersecurity are specifically developed, while they are used efficiently in other domains to tackle these issues. By taking into account cyber analysts' practices and tasks, we have proposed the 3D Cyber Common Operational Picture model (3D CyberCOP), that aims at mediating analysts' activities into a Collaborative Virtual Environment (CVE), in which users can perform alert analysis scenarios. In this article, we present a usability study we have performed with non-expert users. We have proposed three virtual environments (a graph-based, an office-based, and the coupling of the two previous ones) in which users should perform a simplified alert analysis scenario based on the WannaCry ransomware. In these environments, users must switch between three views (alert, cyber and physical ones) which all contain different kinds of data sources. These data have to be used to perform the investigations and to determine if alerts are due to malicious activities or if they are caused by false positives. We have had 30 users, with no prior knowledge in cybersecurity. They have performed very well at the cybersecurity task and they have managed to interact and navigate easily. SUS usability scores were above 70 for the three environments and users have shown a preference towards the coupled environment, which was considered more practical and useful.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wustrich2020extensible,

title = {An extensible IoT Security Taxonomy},

author = {Lars W\"{u}strich and Marc-Oliver Pahl and Stefan Liebald},

doi = {10.1109/ISCC50000.2020.9219584},

year  = {2020},

date = {2020-01-01},

booktitle = {IEEE ISCC 2020},

abstract = {Security is essential in the Internet of Things (IoT). IoT threat classifications are often non-intuitive to use. Identifying relevant properties of an attack is difficult and requires reading details of the attack. We therefore propose a simple-to-use naming scheme for IoT threat classification. It is based on the affected layers and the affected security goals. We evaluate the usefulness of the chosen approach by applying it to common IoT threats.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{muhlbauer2020open,

title = {Open-source OPC UA security and scalability},

author = {Nikolas M\"{u}hlbauer and Erkin Kirdan and Marc-Oliver Pahl and Georg Carle},

year  = {2020},

date = {2020-01-01},

booktitle = {2020 25th IEEE International Conference on Emerging Technologies and Factory Automation (ETFA)},

volume = {1},

pages = {262\textendash269},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wustrich2020towards,

title = {Towards an extensible IoT security taxonomy},

author = {Lars W\"{u}strich and Marc-Oliver Pahl and Stefan Liebald},

year  = {2020},

date = {2020-01-01},

booktitle = {2020 IEEE Symposium on Computers and Communications (ISCC)},

pages = {1\textendash6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{piccoli2020group,

title = {Group key management in constrained IoT settings},

author = {Alessandro Piccoli and Marc-Oliver Pahl and Lars W\"{u}strich},

year  = {2020},

date = {2020-01-01},

booktitle = {2020 IEEE Symposium on Computers and Communications (ISCC)},

pages = {1\textendash6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lubben2020using,

title = {Using deep learning to replace domain knowledge},

author = {Christian L\"{u}bben and Marc-Oliver Pahl and Mohammad Irfan Khan},

year  = {2020},

date = {2020-01-01},

booktitle = {2020 IEEE Symposium on Computers and Communications (ISCC)},

pages = {1\textendash6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pahl2020ilab,

title = {iLab@ Home: Hands-On Networking Classes without Lab Access},

author = {Marc-Oliver Pahl},

year  = {2020},

date = {2020-01-01},

booktitle = {Sigcomm 2020 Education},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Pahl,

title = {Multi-Tenant IoT Service Management towards an IoT App Economy},

author = {Marc-Oliver Pahl},

year  = {2019},

date = {2019-04-08},

booktitle = {2019 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)},

pages = {1--4},

publisher = {IFIP/IEEE},

organization = {IFIP/IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{segovia2018fps,

title = {A Study on Mitigation Techniques for SCADA-driven Cyber-Physical Systems},

author = {Mariana Segovia and Anna R. Cavalli and Nora Cuppens and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1007/978-3-030-18419-3_17},

doi = {10.1007/978-3-030-18419-3_17},

year  = {2019},

date = {2019-04-01},

booktitle = {Foundations and Practice of Security (FPS 2018)},

pages = {257--264},

publisher = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{BarbeauInfocom2019,

title = {Geocaching-inspired Resilient Path Planning for Drone Swarms},

author = {M. Barbeau and J. Garcia-Alfaro and E. Kranakis},

url = {https://doi.org/10.1109/INFCOMW.2019.8845318},

doi = {10.1109/INFCOMW.2019.8845318},

issn = {null},

year  = {2019},

date = {2019-04-01},

booktitle = {IEEE Conference on Computer Communications (IEEE INFOCOM 2019) Workshops},

pages = {620-625},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}