Vol-2940
urn:nbn:de:0074-2940-2

Copyright © 2021 for the individual papers by the papers' authors. Copyright © 2021 for the volume as a collection by its editors. This volume and its papers are published under the Creative Commons License Attribution 4.0 International (CC BY 4.0).

ITASEC 2021
Italian Conference on Cybersecurity 2021

Proceedings of the Italian Conference on Cybersecurity (ITASEC 2021)

All Digital Event, April 7-9, 2021.

Edited by

Alessandro Armando *
Michele Colajanni **

* University of Genoa, Dipartimento di Informatica, Bioingegneria, Robotica e Ingegneria dei Sistemi, Genoa, Italy
** University of Bologna, Dipartimento di Informatica - Scienza e Ingegneria, Bologna, Italy

Table of Contents

Preface
Summary: There were 100 papers submitted for peer-review to the conference. Out of these, 70 papers have been selected for presention at the conference and 45 papers are included in this volume.

Punish and Perish: The Human Factor in Cybersecurity 1-8
Didier Danet
OT Cyber Security Frameworks Comparison Tool (CSFCTool) 9-22
Giuseppina Mùrino, Marina Ribaudo, Simon Pietro Romano, Armando Tacchella
On the Feasibility of Covert Channels through Short-Message-Service 23-34
Sara Narteni, Ivan Vaccari, Maurizio Mongelli, Maurizio Aiello, Enrico Cambiaso
Perpetrate Cyber-threats using IoT Devices as Attack Vector: The ESP8266 Use Case 35-46
Ivan Vaccari, Sara Narteni, Maurizio Mongelli, Maurizio Aiello, Enrico Cambiaso
A Multi-factor Assessment Mechanism to Define Priorities on Vulnerabilities affecting Healthcare Organizations 47-60
Gustavo Gonzalez-Granadillo, Rodrigo Diaz, Eleni Veroni, Christos Xenakis
A Topological Approach to Secure Key Exchange 61-71
Filippo Cerocchi, Gabriele Rizzo
Identifying Anomalous Places, Routes by GPS Feature: A System for Child Monitoring 72-79
Giacomo Abbattista, Donato Impedovo, Giuseppe Pirlo, Lucia Sarcinella, Nicola Stigliano
On-demand Deployment and Orchestration of Cyber Ranges in the Cloud 80-91
Alessandro Placido Luise, Gaetano Perrone, Claudio Perrotta, Simon Pietro Romano
Spoofing Detectability as a Property of Biometric Characteristics 92-105
Tommaso Zoppi, Enrico Schiavone, Irene Bicchierai, Francesco Brancati, Andrea Bondavalli
Detecting Phishing E-mails Using Text Mining and Features Analysis 106-119
Luisa Franchina, Serena Ferracci, Federico Palmaro
Security Testing Reuse Enhancing Active Cyber Defence in Public Administration 120-132
Christian Catalano, Paolo Afrune, Mario Angelelli, Giovanni Maglio, Fabrizio Striani, Francesco Tommasi
Detecting Covert Channels Through Code Augmentation 133-144
Marco Zuppelli, Luca Caviglione, Matteo Repetto
Cybersecurity Impacts of the Covid-19 Pandemic in Italy 145-155
Marco Bozzetti, Luca Olivieri, Fausto Spoto
A Time-series Classification Approach to Shallow Web Traffic De-anonymization 156-165
Axel De Nardin, Marino Miculan, Claudio Piciarelli, Gian Luca Foresti
Placing FaaS in the Fog, Securely 166-179
Alessandro Bocci, Stefano Forti, Gian-Luigi Ferrari, Antonio Brogi
Learning-based Intrusion Detection System for On-Board Vehicle Communication 180-192
Tobia Fiorese, Pietro Montino
An Accelerometer-based Privacy Attack on Smartphones 193-206
Roberto De Prisco, Alfredo De Santis, Rocco Zaccagnino
Security in IoT Pairing & Authentication protocols, a Threat Model, a Case Study Analysis 207-218
Daniele Granata, Massimiliano Rak, Giovanni Salzillo, Umberto Barbato
PowerDecode: A PowerShell Script Decoder Dedicated to Malware Analysis 219-232
Giuseppe Mario Malandrone, Giovanni Virdis, Giorgio Giacinto, Davide Maiorca
A Benchmark Framework for CAN IDS 233-245
Dario Stabili, Francesco Pollicino, Alessio Rota
Cyber Range for Industrial Control Systems (CR-ICS) for Simulating Attack Scenarios 246-259
Shaharyar Khan, Alberto Volpatto, Geet Kalra, Jonathan Esteban, Tommaso Pescanoce, Sabino Caporusso, Michael Siegel
Comparative Analysis of Cyber Intelligence: The Italian Case 260-269
Alessia Boi
An Artificial Intelligence Cyberattack Detection System to Improve Threat Reaction in e-Health 270-283
Carmelo Ardito, Tommaso Di Noia, Eugenio Di Sciascio, Domenico Lofù, Andrea Pazienza, Felice Vitulano
PAIDEUSIS: A Remote Hybrid Cyber Range for Hardware, Network, IoT Security Training 284-297
Giulio Berra, Gaspare Ferraro, Matteo Fornero, Nicolò Maunero, Paolo Prinetto, Gianluca Roascio
Facing the Blockchain Endpoint Vulnerability, an SGX-based Solution for Secure eHealth Auditing 298-308
Luigi Coppolino, Salvatore D'Antonio, Giovanni Mazzeo, Luigi Romano, Paolo Campegiani
Ensemble Consensus: An Unsupervised Algorithm for Anomaly Detection in Network Security data 309-318
Vincenzo Dentamaro, Vito Nicola Convertini, Stefano Galantucci, Paolo Giglio, Tonino Palmisano, Giuseppe Pirlo
A Systematic Approach for the definition of countermeasures in industrial IoT: An Automotive Case 319-330
Massimiliano Masi, Tanja Pavleska, Simone Pezzoli
Exploiting the Blockchain to Guarantee GDPR Compliance while Consents Evolve under Data Owners’ Control 331-343
Massimiliano Calani, Giovanni Denaro, Alberto Leporati
An Algorithm for Security Policy Migration in Multiple Firewall Networks 344-359
Manuel Cheminod, Luca Durante, Lucia Seno, Adriano Valenzano
A Blockchain-based Smart Contract System Architecture for Dependable Health Processes 360-373
Mario Ciampi, Fabrizio Marangio, Giovanni Schmid, Mario Sicuranza
Sanitization of Images Containing Stegomalware via Machine Learning Approaches 374-386
Marco Zuppelli, Giuseppe Manco, Luca Caviglione, Massimo Guarascio
Overcoming Complexity of (Cyber)War: The Logic of Useful Fiction in Cyber Exercises Scenarios 387-393
Marzio Di Feo
Beyond SolarWinds: The Systemic Risks of Critical Infrastructures, State of Play, Future Directions 394-405
Simone Raponi, Maurantonio Caprolu, Roberto Di Pietro
Adversarial Evolution: Competing Dynamics and Reactive Institutional Forms in Financial Services Ecosystem 406-413
Paolo Spagnoletti, Federica Ceci, Andrea Salvi
Robustness Evaluation of Convolutional Neural Networks for Malware Classification 414-423
Vincenzo Carletti, Antonio Greco, Alessia Saggese, Mario Vento
Damn Vulnerable Application Scanner 424-435
Gabriele Costa, Enrico Russo, Andrea Valenza
A Service Architecture for an Enhanced Cyber Threat Intelligence Capability 436-446
Giuseppe Amato, Simone Ciccarone, Pasquale Digregorio, Giuseppe Natalucci
Capture the Flag competitions for Higher Education 447-460
Giovanni Lagorio, Marina Ribaudo, Alessandro Armando
Firmware Extraction from Real IoT Devices through Power Analysis of AES 461-474
Francesco Benvenuto, Francesco Palmarini, Riccardo Focardi, Flaminia Luccio
Security Assessment of Common Open Source MQTT Brokers and Clients 475-487
Edoardo Di Paolo, Enrico Bassetti, Angelo Spognardi
Critical Information Infrastructure Protection: Between Cybersecurity and Policymaking 488-498
Anna Pagnacco
An Overview on the Security Technological Levels in the Italian Smart Cities 499-508
Vita Santa Barletta, Paolo Buono, Danilo Caivano, Giovanni Dimauro, Antonio Pontrelli
Enhancing Malware Classification with Symbolic Features 509-522
Chinmay Siwach, Gabriele Costa, Rocco De Nicola
Revisiting Security Threat on Smart Grids: Accurate and Interpretable Fault Location Prediction and Type Classification 523-533
Carmelo Ardito, Yashar Deldjoo, Eugenio Di Sciascio, Fatemeh Nazary
A Study on Misclassification of Software Vulnerabilities when using Deep Learning and Machine Learning Algorithms 534-545
Vishnu Ramesh, Sara Abraham, Vinod P, Isham Mohamed, Corrado A. Visaggio, Sonia Laudanna

2021-09-01: submitted by Alessandro Armando, metadata incl. bibliographic data published under Creative Commons CC0
2021-09-03: published on CEUR Workshop Proceedings (CEUR-WS.org, ISSN 1613-0073) |valid HTML5|