Computer Security

This book constitutes the refereed post-conference proceedings of the Second International Workshop on Information & Operational Technology (IT & OT) security systems, IOSec 2019 , the First International Workshop on Model-driven Simulation and Training Environments, MSTEC 2019, and the First International Workshop on Security for Financial Critical Infrastructures and Services, FINSEC 2019, held in Luxembourg City, Luxembourg, in September 2019, in conjunction with the 24th European Symposium on Research in Computer Security, ESORICS 2019.
The IOSec Workshop received 17 submissions from which 7 full papers were selected for presentation. They cover topics related to security architectures and frameworks for enterprises, SMEs, public administration or critical infrastructures, threat models for IT & OT systems and communication networks, cyber-threat detection, classification and pro ling, incident management, security training and awareness, risk assessment safety and security,hardware security, cryptographic engineering, secure software development, malicious code analysis as well as security testing platforms.
From the MSTEC Workshop 7 full papers out of 15 submissions are included. The selected papers deal focus on the verification and validation (V&V) process, which provides the operational community with confidence in knowing that cyber models represent the real world, and discuss how defense training may benefit from cyber models.
The FINSEC Workshop received 8 submissions from which 3 full papers and 1 short paper were accepted for publication. The papers reflect the objective to rethink cyber-security in the light of latest technology developments (e.g., FinTech, cloud computing, blockchain, BigData, AI, Internet-of-Things (IoT), mobile-first services, mobile payments).

• hardware security
• embedded systems security
• intrusion detection
• malware mitigation
• domain-specific security
• privacy architectures
• human and societal aspects of security
• security requirements
• authentication vulnerability management
• file system security
• critical infrastructure security
• critical financial infrastructure security
• digital forensics
• training and security
• interactive learning environments
• virtual worlds training simulations
• simulation and emulation
• interactive games
• empirical studies
• model verification

• Industrial Systems Institute/Research Center ATHENA, Patras, Greece

  Apostolos P. Fournaris

• Foundation for Research and Technology - Hellas (FORTH), Heraklion, Greece

  Manos Athanatos, Sotiris Ioannidis, George Hatzivasilis

• University of Patras, Patras, Greece

  Konstantinos Lampropoulos

• University of Milan, Milan, Italy

  Ernesto Damiani

• Norwegian Computing Center, Oslo, Norway

  Habtamu Abie

• Fondazione Bruno Kessler, Trento, Italy

  Silvio Ranise, Alberto Siena

• University of Genoa, Genoa, Italy

  Luca Verderame

• Télécom SudParis, Evry, France

  Joaquin Garcia-Alfaro

Policies and ethics