Modern critical infrastructures are becoming increasingly complex, turning into distributed, large-scale cyber-physical systems. Cyber-physical attacks are increasing in number, scope, and sophistication, making it difficult to predict their total impact. Thus, addressing cyber security and physical security separately is no longer effective, but more integrated approaches, that consider both physical security risks and cyber-security risks, along with their interrelationships, interactions and cascading effects, are needed to face the challenge of combined cyber-physical attacks. 

​

This workshop will present the different approaches on integrated (i.e. cyber and physical) security in seven different industrial sectors, such as finance, healthcare, energy, air transport  communications, gas, and water. The peculiarities of critical infrastructure protection in each one of these sectors will be discussed and addressed by the different projects of the ECSCI cluster that will present their outcomes, discussing the technical, ethical and societal aspects and the underlying technologies.

Specifically, novel techniques will be presented for integrated security modelling, IoT security, artificial intelligence for securing critical infrastructures, distributed ledger technologies for security information sharing and increased automation for detection, prevention and mitigation measures.

​

The workshop will include keynote speeches, project presentations, roundtable and panel discussions and thematic presentations. It is intended for scientists and experts in the field of critical infrastructure protection, CISOs, CIOs, CERTs, CSIRTs, CSOs, cyber and physical security experts representing different sector and policy makers for Critical Infrastructure protection.

​

The workshop will foresee several thematic presentations on:

• Physical and Cyber-Security integration and modelling

• Cyber and Physical Detection

• Predictive Analytics 

• Anomaly detection

• Collaborative Risk Assessment and impacts

• Incident response

• Security information sharing

• Repository to exchange knowledge and sharing rules

• Increased automation for detection, prevention and mitigation measures

• Ethical and legal aspects of cybersecurity