EPS-ACCT 2017 Abstracts

Full Papers
Full Papers
Paper Nr: 3
Title:

PREventivE Methodology and Tools to protect utilitIEs
Authors:

Steffen Pfrang and Joerg Kippe
Abstract: In recent years, we have witnessed an increase in the number and impact of cyber attacks. A successful attack might affect, or even endanger, daily human activities. Multiple countermeasures have been put in place to prevent Advanced Persistent Threat (APT) attacks, but they failed, allowing the latest generation of APT. The goal of PREEMPTIVE is to provide an innovative solution for enhancing existing methods and conceiving tools to prevent against cyber attacks, that target utility networks. PREEMPTIVE addresses the prevention of cyber attacks against hardware and software systems such as DCS, SCADA, PLC, networked electronic sensing, and monitoring and diagnostic systems used by the utilities networks. Moreover, the research aims to implement detection tools based on a dual approach comprising low direct detection and process misbehavior detection PREEMPTIVE proposes to: - Enhance existing methodological security and prevention frameworks with the aim of harmonizing Risk and Vulnerability Assessment methods, standard policies, procedures and applicable regulations or recommendations to prevent cyber attacks. - Design and develop prevention and detection tools complaint to the dual approach that takes into account both the industrial process misbehavior analysis (physical domain) and the communication & software anomalies (cyber domain). - Define a taxonomy for classifying the utilities networks taking into account the utility network type and communication technology used, its exposure to cyber threat, and the impact to the citizens of services disruption caused by a cyber attack through the utility network. - Define guidelines for improving Critical Infrastructure (CI) surveillance. - Validate the PREEMPTIVE framework and innovative technologies in real scenarios with the support of the utility companies involved. Utility companies will take advantage of PREEMPTIVE results to demonstrate compliance with high-level security requirements that originate from mandates, standards, and guidelines.
Paper Nr: 5
Title:

Participatory Architectural Change Management in ATM Systems (PACAS)
Authors:

Erlend Andreas Gjære
Abstract: The PACAS project's main objective is to better understand, model and analyse changes at different layers of the Air Traffic Management (ATM) system to support change management, while capturing how architectural and design choices influence the overall system. The project aims at developing an innovative participatory change management process wherein heterogeneous stakeholders actively participate in the architectural evolution of the ATM system. The novelty and expected impact of PACAS relies on three main pillars: 1. Impact propagation techniques, 2. Gamified platform, 3. Domain-specific modelling languages. These are key components of the participatory design process wherein multiple, heterogeneous ATM domain stakeholders participate, each having a different view of the system (e.g. security, safety, economic, organisational), bi-directional relationships are in place between the strategic layers and the architecture layer, and the PACAS platform is crucial to establish and maintain consistency among the different layers and views. The project started in March 2016, and will go on until February 2018.
Paper Nr: 6
Title:

NEXES - NEXt generation Emergency Services
Authors:

Marco Manso
Abstract: The NEXES Research and Innovation Action aims to research, test and validate the promising integration of IP-based communication technologies and interoperability into the next generation emergency services, so that they attain increased effectiveness and performance. Empowered by smartphones with cameras, messaging and internet-based applications connecting to social media, citizens expect emergency services to use the same technologies. However, this is not the case. NEXES innovates the approach to the dynamics between emergency services and citizens, allowing (i) the use of total conversation capabilities in emergencies, including social media, to the benefit of citizens, including those with disability or special needs (ii) the exploitation of improved location information (including the use of the Galileo constellation) to rapidly and effectively identify and locate the caller and the incident site and (iii) the leverage of Internet-enabled connectivity to enhance interoperability and shared awareness among emergency services, to the benefit of a more secure society. The NEXES Consortium gathers world-class European entities, well experienced in the research and development of innovative solutions for communications and emergency products and solutions. The NEXES Team presents extensive background knowledge and in-house solutions to adapt, test and validate in NEXES’s open Testing Regime and Validation Framework, ensuring solid results are achieved to produce relevant Recommendations and contributions to Europe’s standardisation effort on emergency services. To leverage related dissemination and market exploitation activities, the NEXES System, Apps and its operational benefits are demonstrated in three realistic pilots to end- users and stakeholders. In fact, end-users’ involvement, directly ensured by NEXES Partners and indirectly by invited Advisors, is a key contributor to guarantee NEXES’s operational validity as a reference implementation system for next generation emergency services.
Paper Nr: 7
Title:

iCARE: MobIle health-Care system for monitoring toxicity and symptoms in cAncer patients Receiving diseasEoriented therapy
Authors:

Antinisca Di Marco, Ivan Letteri, Stefano Pace, Sandra Curini, Federica Aielli and Dajana Cassioli
Abstract: iCARE aims at creating a technology-aided framework to enable a reliable implementation of cancer targeted therapy at home, addressing underlying challenges, and to make available the monitoring data to enable studies for therapy refinements and reduction of symptoms and side effects.The fight against metastatic cancer nowadays knows a new era with the introduction of new generation drugs designated to hit therapeutic targets expressed by the tumor cells, the so-called targeted therapy. Since tumour cells play a critical role in tumor growth and development of distant metastases, this kind of therapy achieves a greater anti-tumor specificity, with reduced toxicity w.r.t. traditional chemotherapy, and allows physicians to individualize the treatment according to the biological characteristics of the tumor. Targeted therapies quickly became the preferred choice of most physicians and patients, due to the significant measured benefits they provide in terms of therapy’s effectiveness and survival rate, and to the great improvement of the quality of life of patients, thanks to home treatment. Due to the lack of reliable statistics, being these drugs introduced quite recently, symptoms and duration of side effects are highly varying and still not fully predictable. The management of these side effects and symptoms related to both the treatment and the disease in non-traditional settings, i.e. at home, relying on the patient’s selfadministration without supervision, may affect patient’s adherence. Therefore, it is mandatory to implement protocols to monitor compliance, side effects and treatment or disease related symptoms. The assessment of adherence is nowadays made by obtaining prescription refill histories and performing pill counts; compliance is promoted by counseling patients, asking patients to keep a diary of doses and side effects, and following up with patients at clinic visits or through telephone contacts. To date, side effects of treatments and symptoms of patients treated at home are evaluated at hospital in an outpatient or ambulatory basis. This approach has several drawbacks: mostly, this evaluation it is not timely and reliable in many cases, because it is based on data reported by the patient and/or caregivers periodically, once per month, typically. The ICT technologies may offer methods to evaluate patients treated at home timely, with more objective and validated instruments. Few studies evaluated the positive impact of new technologies to measure and rapidly manage chemotherapy side effects. iCARE will propose new organizational models to strengthen the cooperation and interaction between health professionals, social carers, informal caregivers and patients to support new patient pathways emerging from the increased application of cancer targeted therapies at home. The complexity of the management of side effects of oral chemotherapy drugs in non-conventional settings (i.e., at home) is mainly due to the drugs specificity, to the administration mode, and to the difficulty of the patient to correlate temporally the assumption of the drug with the onset of side effects, which may lead to poor adherence to therapy. The necessity of guaranteeing the adherence to the therapy and providing the close monitoring of possible toxicity stems from the fact that while the possible toxicity of conventional chemotherapies can be predicted, within certain limits, those of new therapies based on biological target are not yet known, especially over the long-term, and are much more variable. According to expert opinion, the type of activity carried out within the existing structures of dayhospital is not sufficient to control the above criticalities, due to the turnover of patients and the distribution of workloads to the medical staff. Thus, the development of new patient pathways is required to respond adequately to the expected increase of the number of patients in treatment with target therapies in the future, as well as new organizational models to improve the coordination of care services. Home cancer targeted therapies treatments will be enabled only if new models for cooperation and interaction between health professionals, social carers, informal caregivers and patients will be provided. Starting from Weaver’s research, the ICT technologies seem to offer methods to evaluate patients treated at home timely and with more objective and validated instruments. iCARE project aims at developing a new cost-effective mobile system for home monitoring of patients in treatment with oral drugs. The key device is the medical smart box. It will be designed and prototyped within the project to constantly monitor the compliance to the therapy and will be interfaced to the patient’s smartphone and smart gear. Authentication procedures will ensure the correct monitoring of patient’s compliance. The patient’s smartphone establishes a connection to the medical unit periodically, to record relevant data about compliance and side effects. Feedbacks from the patients about side effects will be collected by means of daily questionnaires that the patient will fill in through the smartphone’s novel APP, specifically designed according to the relevant cancer medical protocols. A Server with web interface will host the database of gathered data. A Notification System will prevent the non-compliant behaviors, sending alarms to the patients and the oncologists. Personalization of care management and a timely evaluation of side-effects of treatment and disease-related symptoms will be constantly provided through the comparison between relevant feedbacks of patients, i.e. the daily questionnaires, and data from face-to-face periodical meetings. Relevant data will be collected for further analysis by the Clinical Collection Interface.
Paper Nr: 8
Title:

SOSIVIO: Sea Observation with Sensor Intelligence for Vessel IntrusiOn
Authors:

Evangelos Spyrou
Abstract: We are in the middle of a refugee crisis. More than 172,000 people have arrived from Turkey to Greece through its sea border. More than 4,000 people drowned in the Mediterranean during their journey in 2016. This requires imminent actions due to the fact that NATO vessels and the Greek coastguard cannot secure the sea border to their whole extent. This results to refugees losing their lives. Furthermore, the humanitarian crises that Greece suffers from does not allow the islands to accept a vast number of refugees. Hence, there is a need to stop the trafficking done by the refugee-traders at their places of action. This will have a major impact to the EU in general, since the refugee flows will be minimised. To this end, a system is essential to emerge that will assist the NATO forces and Greek coastguard to their heavy duties of rescuing lives. Since the origins of the flows are usually opposite the nearest Greek islands, we propose a system that will be installed on the Greek sea border that will detect any unauthorized vessel and report it to the authorities to act immediately. This system will consist of different state-of-the-art sensors that will perform the monitoring and tracking tasks. Our objective is the installation of a Wireless Sensor Network at specific places where maximum flows have been observed, in order to prevent other refugees from drowning and the traders to attempt such a journey.
Paper Nr: 9
Title:

OPERANDO
Authors:

Constantinos Patsakis and Efthimios Alepis
Abstract: OPERANDO is an EU project funded by the European Commission under the Horizon 2020 Programme, DS Privacy call of 2014, Grant Agreement 653704. The goal of the OPERANDO project is to specify, implement, field-test, validate and exploit an innovative privacy enforcement platform that will enable the Privacy as a Service (PaS) business paradigm and the market for online privacy services. OPERANDO integrates and extends the current state of the art in security and data processing to create a platform that will used by independent Privacy Service Providers (PSPs) to provide comprehensive user privacy enforcement in the form of a dedicated online service, called ``Privacy Authority''. A key aspect addressed by OPERANDO is the need to simplify privacy for end users therefore, OPERANDO supports a simple Privacy Dashboard that allows users to specify their preferences which will be automatically compared with Online Service Provider's (OSP) privacy policies and translated into personal data access control decisions by the PSP.
Paper Nr: 10
Title:

The NECOMA Project: Nippon-European European Cyberdefense-Oriented Cyberdefense Oriented Multilayer threat Analysis
Authors:

Gregory Blanc
Abstract: The NECOMA project addresses objective (c), Cybersecurity for improved resilience against cyber threats, of the ICT-EU Japan Coordinated call FP7-ICT-2013-EU-Japan. It aims at providing new means to understand cyberthreats and to mitigate their effect on infrastructure and endpoints. First, it addresses the issue of data collection, in order to share within the project data collected by the individual participants, integrate publicly available data sources, and create an application programming interface to access the data. Second, it addresses the issue of data analysis, in order to make sense of the information collected from the perspective of understanding the threat, evaluating its impact, and proposing actions to reduce the activity of the threat or its impact. Third, it addresses the definition of new mechanisms that can be deployed to perform these defensive or mitigation actions. With respect to data collection (WP1), the activities of the first period were highly focused on the production of high quality datasets. More than 20 datasets of very different characteristics are available to the project’s partners, and are shared through the use of a common API. This data gathering activity must thus be considered extremely successful. As usual with this kind of activity, many of these datasets are private for the consortium. The datasets have been maintained during the whole lifetime of the project, and the project is concluding with three categories of datasets: fully private ones, public datasets, and datasets whose existence is public but access is upon request. Data analysis (WP2) has been performed on the datasets during the entire duration of the project. The project has implemented the implementing data analysis mechanisms (task 2.3) specified in tasks 2.1 (data aggregation) and 2.2 (rating and classification mechanisms). The work has focused on developing new mechanisms to reduce the amount of processing required by prioritization techniques, and developing advanced anomaly detection algorithms. The modules are integrated in a platform offering the combined analytical power of multiple methods and algorithms. Several papers on the subject have been published on this topic by consortium members. With respect to cyber-defense (WP3), the state of the art on analysis of existing mechanisms (D3.1) has been extremely successful in the community, with many downloads. With respect to infrastructure protection, work-package 3 has specified and implemented a collaborative and distributed security information exchange (also active in standardization through IETF, ITU and ETSI). The project has also proposed several defence mechanisms for networks. With respect to endpoints, the project has specified and implemented personalized mechanisms for cyber-defense applicable to browsers, smartphones and hosts. The project has addressed the following four use-cases (WP4), mitigation of network-borne DDOS attacks, botnet traffic introspection, smart-phone user protection and malware campaign mitigation. Partners have brought in different aspects of each use case in order to further validate the proposed designs of WP3. Use cases have enabled the definition of evaluation metrics to evaluate the performance of the proposed solutions. It is particularly noteworthy to highlight the fact that the consortium has been able to work efficiently together despite the distance and the difficulty in organizing physical meetings. The small number of physical meetings (2 per year) has been offset by a very solid attendance of all the partners (25 to 30 people on all occasions) and completed by a large number of focused and efficient teleconferences.
Paper Nr: 11
Title:

AMASS: Architecture-driven, Multi-concern and Seamless Assurance and Certification of Cyber-Physical Systems
Authors:

Jose Luis de la Vara
Abstract: AMASS is a H2020-ECSEL project that will create and consolidate the de-facto European-wide open tool platform, ecosystem, and self-sustainable community for assurance and certification of cyber-physical systems (CPS) in the largest industrial vertical markets. The AMASS consortium includes the main stakeholders for CPS assurance and certification: OEMs, system integrators, component suppliers, system assessors, certification authorities, tool vendors, research institutes, and universities. The main application domains on which AMASS will work are aerospace, automotive, industrial automation, space, and railway. The AMASS project coordinator is TECNALIA Research & Innovation and the named Project Manager is Dr. Huascar Espinoza from the ICT Division. The ultimate goal of AMASS is to lower certification costs for CPS in face of rapidly changing features and market needs. This will be achieved by establishing a novel holistic and reuse-oriented approach for architecture-driven assurance (fully compatible with standards such as AUTOSAR and IMA), multi-concern assurance (for co-analysis and co-assurance of e.g. security and safety aspects), and for seamless interoperability between assurance and engineering activities along with third-party activities (e.g. external assessments and supplier assurance). Society will benefit from the use of CPS with a higher confidence in their dependability, for a wide range of applications in transport, manufacturing, healthcare, energy, defence, and communications. AMASS work will build on the results from previous successful EU projects such as OPENCOSS, SafeCer, CRYSTAL, and CHESS. The Eclipse Foundation, via the PolarSys initiative, will play a major role towards the creation of the AMASS community.