** Apologies for multiple copies **

C a l l F o r P a p e r s

8th International Workshop on Critical Information Infrastructures Security (CRITIS 2013)

Amsterdam, The Netherlands

September 16-18, 2013

http://www.critis2013.nl

The annually held CRITIS conference is devoted to Critical (Information) Infrastructure security, protection and resilience. The 8th edition will be held from 16-18 September 2013 in Amsterdam, The Netherlands. The CRITIS 2013 Call for Papers is addressed to all researchers and critical infrastructure stakeholders who wish to present their papers at the conference. More information can be found at: www.critis2013.nl.

Modern societies increasingly depend on critical infrastructures. Those themselves increasingly depend on and are entangled with Information and Communication Technologies (ICT). Disruption or loss of (ICT-based) critical infrastructures may result in serious consequences for the functioning of the society, the economy, the functioning of governments, the ecology and social well-being of people, and in the most unfortunate cases loss of human lives, livestock and other animals. As a consequence, the security, reliability and resilience of these infrastructures are critical for the society. Critical (Information) Infrastructure Protection (C(I)IP) is therefore a major objective for governments, companies, operators of these infrastructures and the worldwide research community.

CRITIS 2013 is set to continue a well-established tradition of presenting innovative research and exploring new challenges for the protection of critical information-based infrastructures (CIP/CIIP). CRITIS brings together stakeholders from industry, operators and governments as well as researchers and professionals from academia, applied research organisations and industry interested in all different aspects of C(I)IP. One focus of CRITIS 2013 is on the new challenges of cyber resilience of smart cities and smart mobility, a topic that will be highlighted by thought provoking and visionary keynote speeches and by conference papers.

The second day of CRITIS 2013 will be a meeting place between the diverse set of C(I)IP stakeholders with their short, medium and long term needs and the academic and applied research communities. CRITIS2013 intends to foster collaboration, to find common, collaborative approaches towards solutions and to boost R&D to address the identified needs. On the third day, the focus will be on the (academic) advances in C(I)IP R&D. A (virtual) multi-disciplinary community of new talented PhD students and junior researchers in the field of C(I)IP will be build: YOUNG CRITIS. Young CRITIS appeals to the scientific C(I)IP communities at national, European and global level.

Given the focus areas above, the programme committee will select papers per topic category (or track) mentioned below. Therefore, authors need to state which topic category they address. Researchers are solicited to contribute to the conference by submitting research papers, work-in-progress reports, R&D project results, surveying works and industrial experiences describing significant advances in C(I)IP. Stakeholders from governments, Critical Infrastructure operators, and industry are encouraged to submit papers which describe their current and future challenges to be engaged by researchers and multidisciplinary research teams.

Important Dates

Deadline for submission of papers: May 10, 2013 Notification to authors: June 30, 2013 Camera-ready papers: August 16, 2013

The CRITIS 2013 Scientific Committee invites papers for the following four topic categories:

Topic category 1: Resilience of Smart Cities and Smart Mobility

Topic category 2: Requirements for C(I)IP by C(I)I stakeholders

(e.g., Industry, CI operators, government agencies, EU Directorates) and integrated solution directions by CIP/CIIP-related R&D communities and disciplines. Topics of interest for category 2 include:

C(I)IP requirements for Resilient Smart Cities C(I)IP requirements for Resilient Smart Mobility C(I)IP requirements posed as future (near, mid and long term) challenges Requirements for Resilient (Information) Infrastructures C(I)I Survivability requirements The use of clouds for C(I)I operations Economics, Investments and Incentives of C(I)IP C(I)I Exercises & Contingency Plans Trust Models in Normal Situations and During Escalation C(I)IP Polices at National and Cross-border levels C(I)IP R&D Agenda at National and International levels

Papers submitted for category 2 that do not fit the focus of the second conference day, may be reassigned by the conference organizers to the selection process of categories 3 and 4.

Topic category 3: Advances in C(I)IP

Topic category 4: YOUNG CRITIS

Topics of interest for categories 3 and 4 include all topics mentioned under category 2 as well as topics like:

Resilient C(I)I and C(I)I Survivability Resilience of interacting C(I)I Cyber Defense of C(I)I Self-healing, Self-protection, and Self-management Architectures C(I)I dependency Modeling, Simulation, Analysis and Validation Protection of Complex Cyber - Physical Systems Cyber security related threats & vulnerabilities, modeling and analysis Cyber Security of Smart Grids, Process Control and SCADA Advanced Forensic Methodologies for C(I)I Public - Private Partnership for C(I)I Resilience

Instructions for Paper Submission

All submissions will be subjected to a thorough blind review by at least three reviewers. Papers should be in English and no longer than 12 pages, including bibliography and well-marked appendices. As in previous years, it is planned that post-proceedings are published by Springer-Verlag in the Lecture Notes in Computer Science series. Pre-proceedings will appear at the time of the conference. At least one author of each accepted paper is required to register with the Workshop and present the paper. Paper submission will be done via EasyChair. The submitted paper (in PDF or PostScript format) should follow the respective template offered by Springer.

The paper must start with a title, a short abstract, and a list of keywords. However, the submission should be anonymised and all author names, affiliations, acknowledgements, and obvious traceable references should be eliminated.

Extended and fully revised versions of the best papers accepted for CRITIS 2013, after a further peer-reviewed process, will be published in a special issue of the International Journal of Critical Infrastructures (Inderscience).

Programme Committee Co-Chairs

Pieter Hartel (TU Twente & TNO, Netherlands) Eric Luiijf (TNO, The Netherlands)

Programme Committee (Invitations are sent out, confirmations partly pending)

Reinhard Posch (Technical Univ. Graz, Austria) Geert Deconinck (K. U. Leuven, Belgium) Paulo Maciel (Federal University of Pernambuco, Brazil) Andre Samberg (Sec-Control, Finland and IMG-S TA2, European Union) Arslan Brömme (Vattenfall, Germany) Jurge Cuellar (Siemens, Germany) Christoph Krauss (Fraunhofer AISEC, Germany) Stefan Pickl (Bunderswehruniversität München, Germany) Erich Rome (Fraunhofer IAIS, Germany) Neeraj Suri (TU Darmstadt, Germany) Stelios Dritsas (Athens Univ. of Economics & Business, Greece) Stefanos Gritzalis (University of the Aegean, Greece) Sokratis Katsikas (University of the Aegean, Greece) Panos Kotzanikolaou (Univ. of Piraeus, Greece) Evangelos Ouzounis (European Network and Information Security Agency, Greece) Christos Xenakis (University of Piraeus, Greece) Marianthi Theoharidou (Athens Univ. of Economics & Business, Greece) Gregorio D'Agostino (ENEA, Italy) Sandro Bologna (AIIC, Italy) Emiliano Casalicchio (Università di Tor Vergata, Italy) Giovanna Dondossola (RSE, Italy) Fabio Martinelli (CNR, Italy) Stefano Panzieri (University Roma Tre, Italy) Roberto Setola (Università CAMPUS Bio-Medico, Italy) Eiji Okamoto (University of Tsukuba, Japan) Janne Hagen (Proactima, Norway) Katrin Franke (Gjøvik University Collage, Norway) Margrete Raaum (CERT University of Oslo, Norway) Ketil Stølen (SINTEF and University of Oslo, Norway) Nils Kalstad Svendsen (Gjøvik University College, Norway) Stephen Wolthusen (Gjøvik University College, Norway and Royal Holloway, U. of London, UK) Janusz Gorski (Gdansk University of Technology, Poland) Paolo Verissimo (Universidad de Lisboa, Portugal) Christina Alcaraz (University Malaga, Spain) Jorge L. Hernandez-Ardieta (INDRA, Spain) Javier Lopez (University of Malaga, Spain) Barend Taute (Council for Scientific and Industrial Research, South Africa) Stefan Brem (Federal Office for Civil Protection, Switzerland) Myriam Dunn (ETH Centre for Security Studies, Switzerland) Bernhard M. Hämmerli (University of Applied Sciences Lucerne, GUC Gjøvik and CEO Acris GmbH) Marcelo Masera (EU Joint Research Centre Petten, The Netherlands) Robin Bloomfield (City University London, UK) Chris Johnson (Glasgow University, UK) Adrian Gheorghe (Old Dominion University, USA) Saifur Rahman (Advanced Research Institute, Virginia Tech, USA) Steven M. Rinaldi (Sandia National Laboratories, USA) Angelos Stavrou (George Mason University, USA)

Steering Committee Chairs

Bernhard M. Hämmerli (University of Applied Sciences Lucerne, GUC Gjøvik and CEO Acris GmbH) Javier Lopez (University of Malaga, Spain) Nils Kalstad Svendsen (Gjøvik University College, Norway)

Steering Committee Members

Robin Bloomfield (City University London, UK) Sandro Bologna (AIIC, Italy) Sokratis Katsikas (University of the Aegean, Greece) Reinhard Posch (Technical Univ. Graz, Austria) Saifur Rahman (Advanced Research Institute, Virginia Tech, USA) Roberto Setola (Università CAMPUS Bio-Medico, Italy) Erich Rome (Fraunhofer IAIS, Germany) Stephen Wolthusen (Gjøvik University College, Norway and Royal Holloway, Univ. of London, UK)