| Vol-2940 urn:nbn:de:0074-2940-2 Copyright © 2021 for the individual papers by the papers' authors. Copyright © 2021 for the volume as a collection by its editors. This volume and its papers are published under the Creative Commons License Attribution 4.0 International (CC BY 4.0).

# ITASEC 2021
Italian Conference on Cybersecurity 2021

### Proceedings of the Italian Conference on Cybersecurity (ITASEC 2021)

### All Digital Event, April 7-9, 2021.

Edited by

### Alessandro Armando *
Michele Colajanni **

* University of Genoa, Dipartimento di Informatica, Bioingegneria, Robotica e Ingegneria dei Sistemi, Genoa, Italy
** University of Bologna, Dipartimento di Informatica - Scienza e Ingegneria, Bologna, Italy

## Table of Contents

- Preface
  Summary: There were 100 papers submitted for peer-review to the conference. Out of these, 70 papers have been selected for presention at the conference and 45 papers are included in this volume.

- Punish and Perish: The Human Factor in Cybersecurity 1-8
  Didier Danet
- OT Cyber Security Frameworks Comparison Tool (CSFCTool) 9-22
  Giuseppina Mùrino, Marina Ribaudo, Simon Pietro Romano, Armando Tacchella
- On the Feasibility of Covert Channels through Short-Message-Service 23-34
  Sara Narteni, Ivan Vaccari, Maurizio Mongelli, Maurizio Aiello, Enrico Cambiaso
- Perpetrate Cyber-threats using IoT Devices as Attack Vector: The ESP8266 Use Case 35-46
  Ivan Vaccari, Sara Narteni, Maurizio Mongelli, Maurizio Aiello, Enrico Cambiaso
- A Multi-factor Assessment Mechanism to Define Priorities on Vulnerabilities affecting Healthcare Organizations 47-60
  Gustavo Gonzalez-Granadillo, Rodrigo Diaz, Eleni Veroni, Christos Xenakis
- A Topological Approach to Secure Key Exchange 61-71
  Filippo Cerocchi, Gabriele Rizzo
- Identifying Anomalous Places, Routes by GPS Feature: A System for Child Monitoring 72-79
  Giacomo Abbattista, Donato Impedovo, Giuseppe Pirlo, Lucia Sarcinella, Nicola Stigliano
- On-demand Deployment and Orchestration of Cyber Ranges in the Cloud 80-91
  Alessandro Placido Luise, Gaetano Perrone, Claudio Perrotta, Simon Pietro Romano
- Spoofing Detectability as a Property of Biometric Characteristics 92-105
  Tommaso Zoppi, Enrico Schiavone, Irene Bicchierai, Francesco Brancati, Andrea Bondavalli
- Detecting Phishing E-mails Using Text Mining and Features Analysis 106-119
  Luisa Franchina, Serena Ferracci, Federico Palmaro
- Security Testing Reuse Enhancing Active Cyber Defence in Public Administration 120-132
  Christian Catalano, Paolo Afrune, Mario Angelelli, Giovanni Maglio, Fabrizio Striani, Francesco Tommasi
- Detecting Covert Channels Through Code Augmentation 133-144
  Marco Zuppelli, Luca Caviglione, Matteo Repetto
- Cybersecurity Impacts of the Covid-19 Pandemic in Italy 145-155
  Marco Bozzetti, Luca Olivieri, Fausto Spoto
- A Time-series Classification Approach to Shallow Web Traffic De-anonymization 156-165
  Axel De Nardin, Marino Miculan, Claudio Piciarelli, Gian Luca Foresti
- Placing FaaS in the Fog, Securely 166-179
  Alessandro Bocci, Stefano Forti, Gian-Luigi Ferrari, Antonio Brogi
- Learning-based Intrusion Detection System for On-Board Vehicle Communication 180-192
  Tobia Fiorese, Pietro Montino
- An Accelerometer-based Privacy Attack on Smartphones 193-206
  Roberto De Prisco, Alfredo De Santis, Rocco Zaccagnino
- Security in IoT Pairing & Authentication protocols, a Threat Model, a Case Study Analysis 207-218
  Daniele Granata, Massimiliano Rak, Giovanni Salzillo, Umberto Barbato
- PowerDecode: A PowerShell Script Decoder Dedicated to Malware Analysis 219-232
  Giuseppe Mario Malandrone, Giovanni Virdis, Giorgio Giacinto, Davide Maiorca
- A Benchmark Framework for CAN IDS 233-245
  Dario Stabili, Francesco Pollicino, Alessio Rota
- Cyber Range for Industrial Control Systems (CR-ICS) for Simulating Attack Scenarios 246-259
  Shaharyar Khan, Alberto Volpatto, Geet Kalra, Jonathan Esteban, Tommaso Pescanoce, Sabino Caporusso, Michael Siegel
- Comparative Analysis of Cyber Intelligence: The Italian Case 260-269
  Alessia Boi
- An Artificial Intelligence Cyberattack Detection System to Improve Threat Reaction in e-Health 270-283
  Carmelo Ardito, Tommaso Di Noia, Eugenio Di Sciascio, Domenico Lofù, Andrea Pazienza, Felice Vitulano
- PAIDEUSIS: A Remote Hybrid Cyber Range for Hardware, Network, IoT Security Training 284-297
  Giulio Berra, Gaspare Ferraro, Matteo Fornero, Nicolò Maunero, Paolo Prinetto, Gianluca Roascio
- Facing the Blockchain Endpoint Vulnerability, an SGX-based Solution for Secure eHealth Auditing 298-308
  Luigi Coppolino, Salvatore D'Antonio, Giovanni Mazzeo, Luigi Romano, Paolo Campegiani
- Ensemble Consensus: An Unsupervised Algorithm for Anomaly Detection in Network Security data 309-318
  Vincenzo Dentamaro, Vito Nicola Convertini, Stefano Galantucci, Paolo Giglio, Tonino Palmisano, Giuseppe Pirlo
- A Systematic Approach for the definition of countermeasures in industrial IoT: An Automotive Case 319-330
  Massimiliano Masi, Tanja Pavleska, Simone Pezzoli
- Exploiting the Blockchain to Guarantee GDPR Compliance while Consents Evolve under Data Owners’ Control 331-343
  Massimiliano Calani, Giovanni Denaro, Alberto Leporati
- An Algorithm for Security Policy Migration in Multiple Firewall Networks 344-359
  Manuel Cheminod, Luca Durante, Lucia Seno, Adriano Valenzano
- A Blockchain-based Smart Contract System Architecture for Dependable Health Processes 360-373
  Mario Ciampi, Fabrizio Marangio, Giovanni Schmid, Mario Sicuranza
- Sanitization of Images Containing Stegomalware via Machine Learning Approaches 374-386
  Marco Zuppelli, Giuseppe Manco, Luca Caviglione, Massimo Guarascio
- Overcoming Complexity of (Cyber)War: The Logic of Useful Fiction in Cyber Exercises Scenarios 387-393
  Marzio Di Feo
- Beyond SolarWinds: The Systemic Risks of Critical Infrastructures, State of Play, Future Directions 394-405
  Simone Raponi, Maurantonio Caprolu, Roberto Di Pietro
- Adversarial Evolution: Competing Dynamics and Reactive Institutional Forms in Financial Services Ecosystem 406-413
  Paolo Spagnoletti, Federica Ceci, Andrea Salvi
- Robustness Evaluation of Convolutional Neural Networks for Malware Classification 414-423
  Vincenzo Carletti, Antonio Greco, Alessia Saggese, Mario Vento
- Damn Vulnerable Application Scanner 424-435
  Gabriele Costa, Enrico Russo, Andrea Valenza
- A Service Architecture for an Enhanced Cyber Threat Intelligence Capability 436-446
  Giuseppe Amato, Simone Ciccarone, Pasquale Digregorio, Giuseppe Natalucci
- Capture the Flag competitions for Higher Education 447-460
  Giovanni Lagorio, Marina Ribaudo, Alessandro Armando
- Firmware Extraction from Real IoT Devices through Power Analysis of AES 461-474
  Francesco Benvenuto, Francesco Palmarini, Riccardo Focardi, Flaminia Luccio
- Security Assessment of Common Open Source MQTT Brokers and Clients 475-487
  Edoardo Di Paolo, Enrico Bassetti, Angelo Spognardi
- Critical Information Infrastructure Protection: Between Cybersecurity and Policymaking 488-498
  Anna Pagnacco
- An Overview on the Security Technological Levels in the Italian Smart Cities 499-508
  Vita Santa Barletta, Paolo Buono, Danilo Caivano, Giovanni Dimauro, Antonio Pontrelli
- Enhancing Malware Classification with Symbolic Features 509-522
  Chinmay Siwach, Gabriele Costa, Rocco De Nicola
- Revisiting Security Threat on Smart Grids: Accurate and Interpretable Fault Location Prediction and Type Classification 523-533
  Carmelo Ardito, Yashar Deldjoo, Eugenio Di Sciascio, Fatemeh Nazary
- A Study on Misclassification of Software Vulnerabilities when using Deep Learning and Machine Learning Algorithms 534-545
  Vishnu Ramesh, Sara Abraham, Vinod P, Isham Mohamed, Corrado A. Visaggio, Sonia Laudanna

2021-09-01: submitted by Alessandro Armando, metadata incl. bibliographic data published under Creative Commons CC0
2021-09-03: published on CEUR Workshop Proceedings (CEUR-WS.org, ISSN 1613-0073) |valid HTML5|