Stakeholder space

The Stakeholder Space shall include selected distinguished:

• Keynotes Speeches
• Invited Talks
• Vision Speeches from Platinun Sponsors
• Panels
• Special Sessions, aimed at providing a “stage” for cybersecurity stakeholders

Scientific & Technical Track

The Scientific/Technical Space shall include several kinds of sessions:

• Scientific sessions: aimed at presenting scientific/technical papers;
• Demo sessions: aimed at presenting prototypes developed by industries, research centers, and universities.

Demo Track

Demo - 13 February 2019

• Cybersecurity Language and Education
• Vulnerability Assessment and Analysis
• Low-Level and Physical Attacks
• Defensive and Maintainance Tools
• Quantum Security

Innovation Start-up - Day

Commercializzazione della ricerca, Innovazione, Start ups

Il ruolo del Cini -Laboratorio Nazionale Cyber security come possibile facilitatore della commercializzazione della ricerca e dello sviluppo tecnologico a beneficio della competitività delle aziende nazionali: Dialogo tra stakeholder nell’ ecosistema innovazione in ambito cyber security research.

• Iniziale mappatura dell’ecosistema nazionale innovazione in ambito cybersecurity research. Overview delle principali iniziative e programmi relative al sostegno del ‘proof of concept’ alla accelerazione impresa
• Primo tentativo di censimento start up/ spin off in ambito cyber da parte del CINI National Cyber security Lab
• Mach making tra aziende ( start up, azienda innovativa, spin off ) verso stakeholder finanziari o corporate Innovation
• La dimensione competitiva del sistema paese in ambito cyber a garanzia della solidità del sistema economico italiano: dalla ricerca alla creazione di impresa.
• Iniziale raccolta di fabbisogni degli Stakeholders da parte Cini -Laboratorio Nazionale Cyber security e ipotesi di lavoro congiunto (mappatura capacità interne, valorizzazione asset, internazionalizzazione, definizione di un piano strategico, elaborazione di un piano operativo,governance delle operazioni)

Chairs:

• Marco Baldi
• Giulio Busulini
• Gabriele Costa
• Luigi Martino

Program (click here)
Per visualizzare il programma complessivo, sezionare il giorno "14 febbraio" (nel menu in alto), quindi nel menu "Tracks" a destra selezionare solo "Innovation - Start up day".

Registration (click here)

Tutorial program

Framework 2.0 for Cybersecurity & Data Protection and a Contextualization for GDPR

Chairs:

• Marco Angelini
• Claudio Ciccotelli
• Leonardo Querzoni

Cybersecurity per la Pubblica Amministrazione

Chairs:

• Carlo Blengino
• Andrea Valenza
• Massimo Bartoletti

Recent improvements in biometric spoofing/antispoofing methods and adversarial attacks

Chair:

• Fabio Scotti

Hiding access patterns (obliviousness and differential privacy)

Chairs:

• Carlo Blundo
• Pino Persiano

Building an Emulation Environment for Supporting Security Training and Testing Activities on Complex Networked Systems

Chairs:

• Mara Sorella
• Florin Tanasache
• Silvia Bonomi

Hacking with Metasploit

Chair:

• Federico Lombardi

La "cura" del dato personale nell'azione delle pubbliche amministrazioni

La normativa a protezione dei dati personali costituisce uno dei cardini della sicurezza informatica. La sicurezza e la "cura" del dato equivalgono oggi alla sicurezza ed alla cura delle persone nell'ambiente digitale ed i principi dettati dal GDPR tutelano molteplici diritti fondamentali della persona.

Nella prima parte della sessione esamineremo i principi cardine della normativa a tutela del dato personale, per comprendere non tanto il "come" quanto il "perché" è necessario adottare questo principio di "accountability" che è adesso alla base del "GDPR".

Nella seconda parte affronteremo il tema dei trattamenti nell'ambito delle Pubbliche Autorità. I principi di efficienza e imparzialità, unitamente al principio di trasparenza, impongono da un lato alle Pubbliche Amministrazioni di sfruttare appieno i vantaggi della digitalizzazione, ma nel contempo sono la linfa dell'azione della PA, ma i dati personali non rappresentano utenti, ma persone. La tutela del dato, il suo lecito e corretto trattamento sono la base per un ambiente digitale sicuro e sono il presupposto necessario e indispensabile nell'ambito dei trattamenti delle pubbliche amministrazioni per la corretta attuazione dei diritti fondamentali dei cittadini.

Chair:

• Carlo Blengino

Web Exploitation

Chair:

• Andrea Valenza

Workshop program

DLT 2019: 2nd Distributed Ledger Technology Workshop

This workshop is a forum for researchers, developers, and users to discuss issues related to Distributed Ledger Technology and its adoption in research and business scenarios. The primary goal is to foster discussion and cross-fertilisation of ideas among experts in different fields related to DLTs, and thus advance the national and international state-of-the-art. Research, applications, case studies, and experiences concerning DLT are all encouraged.

Chairs:

• Stefano Bistarelli (Direttore Italian Distributed Ledger Technology Working Group - Università degli Studi Perugia)
• Paolo Mori (Istituto di Informatica e Telematica del CNR)

Program (click here)

Registration (click here)

First Italian Workshop on CTF Competitions (Capture.IT)

The first Italian workshop on CTF competitions (Capture.IT 2019) aims at gathering practitioners and experts that want to share their experience about the organization of and participation to Capture The Flag (CTF) competitions. The purpose of the workshop is to provide a forum for exchanging opinions, presenting ideas, and lesson learned about the CTF. In particular, Capture.IT aims at attracting the CTF community as well as students and young researchers that are active CTF players or organizers. Another goal is to favour the exchange of ideas and experiences in an interactive and informal atmosphere.

Chair:

• Gabriele Costa

Program (click here)

Registration

Quantum Secure Communication

Worldwide communications are growing exponentially. A huge and rapidly growing amount of information travels every day through optical fibre networks, to which billions of people have indirect access. From its use in everyday life, such as for making online purchases with credit cards or for internet banking, to more critical scenarios, such as the transmission of sensitive data between partner countries under emergency conditions, the need for absolutely secure communications is unquestioned, all the more so in view of cyber-attacks that are rapidly increasing in scope and complexity.
Quantum Key Distribution (QKD) promises a leap forward. It promises nothing less than the ability to achieve unconditional security in communications, guaranteed by the laws of the universe as opposed to assumptions about available computational power and the rules of computational complexity. Because of this, QKD is currently considered the only technology able to guarantee an absolutely secure solution for the key exchange problem. QKD achieves this by providing a means to distribute an unconditionally-secure key that is used as a one-time pad. Secure keys distributed by QKD can subsequently be used for various applications including secure communications and message authentication over any standard communication channels.

Chair:

• Francesco Saverio Cataliotti

Collaborative Cyber Threat Management and the CNR cybersecurity observatory

Chair:

• Gianpiero Costantino

The European Strategy of ECSO: from innovation to access to the marke

Chair:

• Fabio Martinelli

Comunicare Cybersecurity

Il seminario è specificamente rivolto ai giornalisti, ai blogger, agli studenti che hanno necessità di comprendere i concetti, le idee e la terminologia relativi alle tematiche della sicurezza informatica e della privacy delle comunicazioni. Obiettivo del seminario è favorire l'acquisizione del lessico specialistico e dei concetti relativi alla sfera della Cybersecurity attraverso l’esposizione di fatti di cronaca e delle nozioni informatiche collegate.

Chair:

• Arturo Di Corinto

Influence Operations in the Cyberspace: Linking Prevention, Response and Resilience

The workshop deals with the issue of “cyber-influence operations”, i.e. the illegitimate or illegal use of information and communication technologies (ICTs) and networked systems to affect an audience’s choices, ideas, opinions, emotions or motivations, and interfere with decision making processes. The workshop consists of two integrated discussion panels, each of which focuses on specific features of “cyber-influence” operations.
The first panel discusses the political and legal implications that these operations raise at the national and international level. It will also feature the presentation of a case study on cyber and information warfare during elections.
The second panel investigates approaches and measures that could be adopted to counter cyber influence operations via social and other online media at the informational, technical/technological, policy and other levels.
The workshop further aims at outlining the actions that governments and other relevant stakeholders could take to prepare, prevent, respond and recover from threats posed by illegitimate or illegal cyber influence operations or campaigns.

Chair:

• Matteo E. Bonfanti

Program (click here)

Registration (click here)

Vendor sessions

Vendor Sessions are aimed at providing Sponsors with the opportunity to present in a parallel track, product descriptions, case studies, best practices, and user testimonials. Attendance to the Vendor Sections is open to all symposium attendees.