The 2nd Joint Workshop on
CPS & IoT Security and Privacy

In conjunction with the
ACM Conference on Computer and Communications Security 2021

Background

The Joint Workshop on CPS&IoT Security and Privacy (CPSIoTSec) is the result of the merger of the Workshop on Cyber-Physical Systems Security and Privacy (CPS-SPC) and Workshop on the Internet of Things Security and Privacy (IoTS&P) previously organized annually in conjunction with ACM Conference on Computer and Communications Security.

Announcements

• Shared Reality: Detecting Stealthy Attacks Against Autonomous Vehicles” by Raul Quinonez, Sleiman Safaoui,Tyler Summers, Bhavani Thuraisinghamand Alvaro A. Cardenas won the best paper award. Congratulations, authors!

• NEW (Sep. 23) WORKSHOP REGISTRATION IS ACTIVE.
  –> At least one presenter per accepted paper, poster or demo must register for the conference (or the full conference) as an author.
  –> At least one presenter per accepted workshop paper must register for the workshop as an author.
• NEW (Sep. 19) WORKSHOP PROGRAM AVAILABLE.
• ACCEPTANCE/REJECTION NOTIFICATIONS WILL BE GIVEN ON AUGUST 20th.
• SECOND SUBMISSION DEADLINE
  APPLICABLE ONLY TO PAPERS REJECTED FROM ACM CCS 2021
  (FIRM DEADLINE: JULY 30th, 2021)
• DEADLINE EXTENDED FOR 2 WEEKS (FIRM DEADLINE: JULY 13th, 2021)

Program

Note: The workshop will be VIRTUAL and held in KST (Korean Time).

Time				Topic
Seoul	NY	London	Brussels
7:00 AM	5:00 PM	10:00 PM	11:00 PM	Opening
7:15 AM	5:15 PM	10:15 PM	11:15 PM	Keynote #1 Speaker: Sanjay Chhillar & Dale Geach Talk: Digital Transformation and Emerging ICS/OT Cyber Attacks - Imminent Threats to Our Society
MORNING SESSION #1 Chair: Sibin Mohan, University of Illinois at Urbana-Champaign
8:15 AM	6:15 PM	11:15 PM	12:15 AM	"vBump: Securing Ethernet-based Industrial Control System Networks with VLAN-based Traffic" Nils Ole Tippenhauer, Binbin Chen, Daisuke Mashima and David M. Nicol.
8:45 AM	6:45 PM	11:45 PM	12:45 AM	"Shared Reality: Detecting Stealthy Attacks Against Autonomous Vehicles" Raul Quinonez, Sleiman Safaoui, Tyler Summers, Bhavani Thuraisingham and Alvaro A. Cardenas
9:15 AM	7:15 PM	12:15 AM	1:15 AM	SHORT BREAK
9:30 AM	7:30 PM	12:30 AM	1:30 AM	Keynote #2 Raymond Choo Talk: Internet of Things (IoT) Security and Forensics: Challenges and Opportunities
MORNING SESSION #2 Chair: Alvaro Cardenas, University of California Santa Cruz
10:30 AM	8:30 PM	1:30 AM	2:30 AM	"Balancing Security and Usability of Zero-interaction Pairing and Authentication for the Internet-of-Things" Kyuin Lee and Younghyun Kim
10:50 AM	8:50 PM	1:50 AM	2:50 AM	"Attack Rules: An Adversarial Approach to Generate Attacks for Industrial Control Systems using Machine Learning" Muhammad Azmi Umer, Chuadhry Mujeeb Ahmed, Muhammad Taha Jilani and Aditya Mathur.
11:10 AM	9:10 PM	2:10 AM	3:10 AM	"PEDRO: Secure Pedestrian Mobility Verification in V2P Communication using COTS Mobile Devices" Yucheng Yang, Kyuin Lee, Younghyun Kim and Kassem Fawaz.
LONG BREAK
EVENING SESSION Chair: Charalambos Konstantinou, KAUST
5:00 PM	3:00 AM	8:00 AM	9:00 AM	"CatchAll: A Robust Multivariate Intrusion Detection System for Cyber-Physical Systems using Low Rank Matrix" Aneet Kumar Dutta, Bhaskar Mukhoty and Sandeep Kumar Shukla.
5:30 PM	3:30 AM	8:30 AM	9:30 AM	"TooLate: Cryptographic Data Access Control for Offline Devices through Efficient Key Rotation" Lorenzo Bracciale, Pierpaolo Loreti, Emanuele Raso and Giuseppe Bianchi.
5:50 PM	3:50 AM	8:50 AM	9:50 AM	"Controller-in-the-Middle: Attacks on Software Defined Networks in Industrial Control Systems" Joseph Gardiner, Adam Eiffert, Peter Garraghan, Nicholas Race, Shishir Nagaraja and Awais Rashid.
6:10 PM	4:10 AM	9:10 AM	10:10 AM	Best Paper and Closing

Scope

The 2nd Workshop on CPS&IoT Security and Privacy (CPSIoTSec 2021) invites academia, industry, and governmental entities to submit:

• Original research papers on the security and privacy of CPS&IoT
• Systematization of Knowledge (SoK) papers on the security and privacy of CPS&IoT
• Demos (hands-on or videos) of testbeds/experiences of CPS&IoT security and privacy research

We seek submissions from multiple interdisciplinary backgrounds tackling security and privacy issues in CPS&IoT, including but not limited to:

• Mathematical foundations for secure CPS/IoT
• Control-theoretic approaches
• High assurance security architectures
• Security and resilience metrics
• Metrics and risk assessment approaches
• Identity and access management
• Privacy and trust
• Network security
• Game theory applied to CPS/IoT security
• Human factors, humans in the loop, and usable security
• Understanding dependencies among security, reliability and safety in CPS/IoT
• Economics of security and privacy
• Intrusion and anomaly detection
• Model-based security systems engineering
• Sensor and actuator attacks
• CPS/IoT malware analysis
• CPS/IoT firmware analysis
• Hardware-assisted CPS/IoT security

Also of interest will be papers that can point the research community to new research directions, and those that can set research agendas and priorities in CPS/IoT security and privacy. There will be a best paper award.

Submission Guidelines

Submissions include long papers (12 pages), short papers (6 pages), or 1-page abstracts:

• Long papers include a) Original research on a CPS/IoT security and privacy topic, b) Systematization of Knowledge of CPS/IoT security and privacy;
• Short papers include original work-in-progress research on a CPS/IoT security and privacy topic;
• 1-page abstracts include demos/interesting findings/insights on CPS/IoT security and privacy, which will be accompanied by a hands-on demo during the workshop.

Submitted papers can be up to 12 or 6 pages including appendices and references (except for SoK papers where references are excluded). Submissions must use the ACM SIG Proceedings Templates (see https://www.acm.org/publications/proceedings-template, with a simpler version here: https://github.com/acmccs/format. Only PDF files will be accepted.

Accepted papers will be published by the ACM Press and/or the ACM Digital Library. Submissions must not substantially overlap with papers that have been published or that are simultaneously submitted to a journal or a conference with proceedings. Each accepted paper must be presented by a registered author. Submissions not meeting these guidelines risk immediate rejection. For questions about these policies, please contact the chairs.

NEW FOR 2021: The workshop will feature a second paper submission deadline for papers that have been submitted but not accepted to the main conference. The deadline will be 10 days after the paper notification is out. Authors are not required to upload CCS reviews; verification of CCS submission status will be done by informing the program chairs of the paper ID of the CCS submission.

Paper Submission Site: https://easychair.org/conferences/?conf=cpsiotsec2021

Important Dates

• Submission deadline: June 25, 2021 (23:59 Anywhere on Earth) July 13, 2021 (23:59 Anywhere on Earth) [FIRM DEADLINE]
• Submission deadline applicable only to papers rejected from ACM CCS 2021: July 30, 2021 (23:59 Anywhere on Earth)
• Notification of acceptance/rejection (tentative): August 13, 2021
• Deadline for submission of camera-ready papers (hard deadline): September 6, 2021

Program Chairs

• Cristina Alcaraz, University of Malaga, Spain
• Michail Maniatakos, New York University Abu Dhabi, UAE

Technical Program Committee

• Magnus Almgren, Chalmers University, Sweden
• Rakesh Bobba, Oregon State University, USA
• Gedare Bloom, University of Colorado Colorado Springs, USA
• Alvaro Cardenas, UC Santa Cruz, USA
• Mauro Conti, University of Padua, Italy
• Yongkai Fan, Communication University of China, China
• Vasileios Gkioulos, Norwegian University of Science and Technology, Norway
• Dawu Gu, Shanghai Jiao Tong University, China
• Le Guan, University of Georgia, USA
• Gerhard Hancke, City University of Hong Kong
• Monowar Hasan, Wichita State University, USA
• Sokratis Katsikas, Open University of Cyprus, Cyprus
• Charalambos Konstantinou, KAUST, Saudi Arabia
• Marina Krotofil, Honeywell Industrial Cyber Security Lab, USA
• Peng Liu, Pennsylvania State University, USA
• Xiaofeng Lu, Beijing University of Posts and Telecommunications, China
• Emil Lupu, Imperial College, UK
• Weizhi Meng, Technical Universtiy of Denmark, Denmark
• Sibin Mohan, University of Illinois at Urbana-Champaign, USA
• Awais Rashid, University of Bristol, UK
• George Stergiopoulos, University of the Aegean, Greece
• Habeeb Olufowobi, Howard University, USA
• Gang Tan, Pennsylvania State University, USA
• Nils Ole Tippenhauer, CISPA Helmholtz Center for Information Security, Germany
• Nektarios Georgios Tsoutsos, University of Delaware, USA
• Avishai Wool, Tel Aviv University, Israel
• Min Yang, Fudan Fudan University
• Stefano Zanero, Politecnico di Milano, Italy China
• Yuqing Zhang, University of CAS
• Jianying Zhou, Singapore University of Technology and Design, Singapore

Steering Committee

• Rakesh Bobba, Oregon State University
• Alvaro Cardenas, University of California, Santa Cruz
• Peng Liu, Penn State University
• Sibin Mohan, University of Illinois at Urbana-Champaign
• Awais Rashid, University of Bristol
• Gang Tan, Penn State University
• Nils Ole Tippenhauer, CISPA
• Roshan Thomas, MITRE
• Yuqing Zhang, University of CAS

Publicity Chair

• Sergio Gonzalez, University of Malaga, Spain

Web Chair

• Monowar Hasan, Wichita State University

Past Workshop

• CPSIoTSec 2020