Program

Draft Program for 2017 Edition of CRiSIS Conference.

	Tuesday	Wednesday	Thursday
8 h 45 min	Registration 8 h 45 min - 9 h 00 min Registration to the conference

	Tuesday	Wednesday	Thursday
9 h 00 min	Welcome 9 h 00 min - 9 h 15 min

	Tuesday	Wednesday	Thursday
16 h 30 min			Conclusion and farewell 16 h 30 min - 16 h 40 min

Tuesday

Registration
8 h 45 min - 9 h 00 min

Registration to the conference
Welcome
9 h 00 min - 9 h 15 min
Invited speaker
9 h 15 min - 10 h 15 min

Thomas Jensen
Research Director, INRIA Rennes
- Title : Information flow analysis against web tracking
Coffee Break
10 h 15 min - 10 h 45 min
Session 1: Vulnerability analysis and classification
10 h 45 min - 12 h 15 min

- Automatic Vulnerability Classification using Machine Learning. Marian Gawron, Feng Cheng and Christoph Meinel.

- On semantic approach for detecting anomalous insider accesses to DBMS. Muhammad Imran Khan, Barry O’sullivan and Simon Foley.

- Towards a Security Event Data Classification. Gustavo Gonzalez, Jose Rubio Hernan and Joaquin Garcia-Alfaro.
Lunch
12 h 15 min - 13 h 45 min
Tutorial
13 h 45 min - 14 h 45 min

Ronan Lashermes
Fault Injection Attacks
Session 2: Apps security
14 h 45 min - 16 h 15 min

- Unraveling Reflection Induced Sensitive Leaks in Android Apps. Jyoti Gajrani, Vijay Laxmi, Meenakshi Tripathi, Manoj Gaur, Akka Zemmari, Mohamed Mosbah, Daya Ram Sharma and Mauro Conti.

- Remotely Assessing Integrity of Software Applications by Monitoring Invariants: Present Limitations and Future Directions. Alessio Viticchié, Cataldo Basile and Antonio Lioy.

- Using data integration to help design more secure applications. Sebastien Salva and Loukmen Regainia.
Coffee Break
16 h 15 min - 16 h 45 min
Session 3: Access Control and Filtering
16 h 45 min - 17 h 55 min

- MA-MOrBAC: A Distributed Access Control Model Based On Mobile Agent for Multi-Organizational, Collaborative and Heterogeneous Systems. Zeineb Ben Yahya.

- A formal approach for firewalls and IDS interoperability checking (short paper). Fakher Ben Ftima, Kamel Karoui and Henda Ben Ghezala.

- A Vehicle Collision-Warning System based on Multipeer Connectivity and Off-the-shelf Smart-Devices (short paper). Bogdan Groza and Cosmin Briceag.
Welcome Cocktail
18 h 00 min - 19 h 30 min

Wednesday

Invited speaker
9 h 00 min - 10 h 00 min

Chair: Joaquin Garcia Alfaro
- Gérard Le Comte
Strategic Security Leader, Societe Generale bank
- Title: A journey in banking information security
Coffee Break
10 h 00 min - 10 h 30 min
Technical session on Cybersecurity chairs
10 h 30 min - 11 h 30 min
Panel on Cybersecurity chairs
11 h 30 min - 12 h 30 min
- LCL Stéphane GRUNENWALD (Panel Chair - ETRS/DGF/GCYB)
- Simon Foley (IMT-Atlantique, Cyber Critical National Infrastructure)
- Patrick Hébrard (Naval Group/DCNS, Naval Cyberdefense)
- Yvon Kermarrec (Ecole Navale, Naval Cyberdefense)
- Paul Lajoie-Mazenc (EDF, Critical National Infrastructure)
- Gerard Le Comte (Société Génerale, Critical National Infrastructure)
- Axel Legay (INRIA - Threat Analysis)
- Stéphane TAILLAT (Ecoles Militaires de St Cyr-Coëtquidan, Saint-Cyr Cyberdefence)
Lunch
12 h 30 min - 14 h 00 min
Social Event
16 h 00 min - 18 h 00 min
Gala Dinner
19 h 30 min - 0 h 00 min

Thursday

Invited speaker
9 h 00 min - 10 h 00 min

Chair: Yvon Kermarrec
- Arnaud Tisserand
Research director, CNRS
- Title : Hardware support for physical security
Coffee Break
10 h 00 min - 10 h 30 min
Session 4: Cloud security
10 h 30 min - 11 h 30 min

- Design and Realization of a Fully Homomorphic Encryption Algorithm for Cloud Applications. Khalil Hariss, Hassan Noura and Abed Ellatif Samhat.

- A Study of Threat Detection Systems and Techniques in the Cloud. Pamela Carvallo, Ana R. Cavalli and Natalia Kushik.
Session 4: Cloud security
10 h 30 min - 11 h 30 min

- Design and Realization of a Fully Homomorphic Encryption Algorithm for Cloud Applications. Khalil Hariss, Hassan Noura and Abed Ellatif Samhat.

- A Study of Threat Detection Systems and Techniques in the Cloud. Pamela Carvallo, Ana R. Cavalli and Natalia Kushik.
Session 5: Cyber-Insurance & Cyber Threat Intelligence
11 h 30 min - 12 h 20 min

- Preventing the drop in security investments for non-competitive cyber-insurance market? Artsiom Yautsiukhin, Albina Orlando, Ganbayar Uuganbayar and Fabio Martinelli.

-Towards an Anonymity Supported Platform for Shared Cyber Threat Intelligence (short paper). Thomas Wagner, Esther Palomar, Khaled Mahbub and Ali Abdallah.
Lunch
12 h 20 min - 13 h 45 min
Session 6: Human-Centric Security and Trust
13 h 45 min - 15 h 05 min

- Phishing Attacks Root Causes. Hossein Abroshan, Jan Devos, Geert Poels and Eric Laermans.

- Domain Name System without Root Servers. Matthäus Wander, Christopher Boelmann and Torben Weis.

- Data Hiding on Social Media Communications Using Text Steganography (short paper). Hung-Jr Shiu, Bor-Shing Lin, Bor-Shyh Lin, Po-Yang Huang, Chien-Hung Huang and Chin-Laung Lei.
Session 7: Risk Analysis
15 h 05 min - 16 h 25 min

- Privacy Scoring of Social Network User Profiles through Risk Analysis. Sourya Joyee De and Abdessamad Imine.
- A Method for Developing Qualitative Security Risk Assessment Algorithms. Gencer Erdogan and Atle Refsdal.
- An empirical analysis of risk aversion in malware infections (short paper). Jude Jacob Nsiempba, Fanny Lalonde Lévesque, Nathalie De Marcellis-Warin and José M. Fernandez.
Conclusion and farewell
16 h 30 min - 16 h 40 min

	Tuesday	Wednesday	Thursday
8 h 45 min	Registration 8 h 45 min - 9 h 00 min Registration to the conference
9 h 00 min	Welcome 9 h 00 min - 9 h 15 min	Invited speaker 9 h 00 min - 10 h 00 min Chair: Joaquin Garcia Alfaro - Gérard Le Comte Strategic Security Leader, Societe Generale bank - Title: A journey in banking information security	Invited speaker 9 h 00 min - 10 h 00 min Chair: Yvon Kermarrec - Arnaud Tisserand Research director, CNRS - Title : Hardware support for physical security
9 h 15 min	Invited speaker 9 h 15 min - 10 h 15 min Thomas Jensen Research Director, INRIA Rennes - Title : Information flow analysis against web tracking
9 h 30 min
9 h 45 min
10 h 00 min		Coffee Break 10 h 00 min - 10 h 30 min	Coffee Break 10 h 00 min - 10 h 30 min
10 h 15 min	Coffee Break 10 h 15 min - 10 h 45 min
10 h 30 min		Technical session on Cybersecurity chairs 10 h 30 min - 11 h 30 min Chair: Nora Cuppens	Session 4: Cloud security 10 h 30 min - 11 h 30 min Chair: Ronan Lashermes - Design and Realization of a Fully Homomorphic Encryption Algorithm for Cloud Applications. Khalil Hariss, Hassan Noura and Abed Ellatif Samhat. - A Study of Threat Detection Systems and Techniques in the Cloud. Pamela Carvallo, Ana R. Cavalli and Natalia Kushik.
10 h 45 min	Session 1: Vulnerability analysis and classification 10 h 45 min - 12 h 15 min Chair: Jean-Louis Lanet - Automatic Vulnerability Classification using Machine Learning. Marian Gawron, Feng Cheng and Christoph Meinel. - On semantic approach for detecting anomalous insider accesses to DBMS. Muhammad Imran Khan, Barry O’sullivan and Simon Foley. - Towards a Security Event Data Classification. Gustavo Gonzalez, Jose Rubio Hernan and Joaquin Garcia-Alfaro.
11 h 00 min
11 h 15 min
11 h 30 min		Panel on Cybersecurity chairs 11 h 30 min - 12 h 30 min Chair: Stéphane GRUNENWALD LCL Stéphane GRUNENWALD (Panel Chair - ETRS/DGF/GCYB) Simon Foley (IMT-Atlantique, Cyber Critical National Infrastructure) Patrick Hébrard (Naval Group/DCNS, Naval Cyberdefense) Yvon Kermarrec (Ecole Navale, Naval Cyberdefense) Paul Lajoie-Mazenc (EDF, Critical National Infrastructure) Gerard Le Comte (Société Génerale, Critical National Infrastructure) Axel Legay (INRIA - Threat Analysis) Stéphane TAILLAT (Ecoles Militaires de St Cyr-Coëtquidan, Saint-Cyr Cyberdefence)	Session 5: Cyber-Insurance & Cyber Threat Intelligence 11 h 30 min - 12 h 20 min Chair: Bogdan Groza - Preventing the drop in security investments for non-competitive cyber-insurance market? Artsiom Yautsiukhin, Albina Orlando, Ganbayar Uuganbayar and Fabio Martinelli. -Towards an Anonymity Supported Platform for Shared Cyber Threat Intelligence (short paper). Thomas Wagner, Esther Palomar, Khaled Mahbub and Ali Abdallah.
11 h 45 min
12 h 00 min
12 h 15 min	Lunch 12 h 15 min - 13 h 45 min		Lunch 12 h 20 min - 13 h 45 min
12 h 30 min		Lunch 12 h 30 min - 14 h 00 min
12 h 45 min
13 h 00 min
13 h 15 min
13 h 30 min
13 h 45 min	Tutorial 13 h 45 min - 14 h 45 min Chair: Thomas Jensen Ronan Lashermes Fault Injection Attacks		Session 6: Human-Centric Security and Trust 13 h 45 min - 15 h 05 min Chair: Simon Foley - Phishing Attacks Root Causes. Hossein Abroshan, Jan Devos, Geert Poels and Eric Laermans. - Domain Name System without Root Servers. Matthäus Wander, Christopher Boelmann and Torben Weis. - Data Hiding on Social Media Communications Using Text Steganography (short paper). Hung-Jr Shiu, Bor-Shing Lin, Bor-Shyh Lin, Po-Yang Huang, Chien-Hung Huang and Chin-Laung Lei.
14 h 00 min
14 h 15 min
14 h 30 min
14 h 45 min	Session 2: Apps security 14 h 45 min - 16 h 15 min Chair: Anis Bkakria - Unraveling Reflection Induced Sensitive Leaks in Android Apps. Jyoti Gajrani, Vijay Laxmi, Meenakshi Tripathi, Manoj Gaur, Akka Zemmari, Mohamed Mosbah, Daya Ram Sharma and Mauro Conti. - Remotely Assessing Integrity of Software Applications by Monitoring Invariants: Present Limitations and Future Directions. Alessio Viticchié, Cataldo Basile and Antonio Lioy. - Using data integration to help design more secure applications. Sebastien Salva and Loukmen Regainia.
15 h 00 min			Session 7: Risk Analysis 15 h 05 min - 16 h 25 min Chair: Ana Cavalli - Privacy Scoring of Social Network User Profiles through Risk Analysis. Sourya Joyee De and Abdessamad Imine. - A Method for Developing Qualitative Security Risk Assessment Algorithms. Gencer Erdogan and Atle Refsdal. - An empirical analysis of risk aversion in malware infections (short paper). Jude Jacob Nsiempba, Fanny Lalonde Lévesque, Nathalie De Marcellis-Warin and José M. Fernandez.
15 h 15 min
15 h 30 min
15 h 45 min
16 h 00 min		Social Event 16 h 00 min - 18 h 00 min
16 h 15 min	Coffee Break 16 h 15 min - 16 h 45 min
16 h 30 min			Conclusion and farewell 16 h 30 min - 16 h 40 min
16 h 45 min	Session 3: Access Control and Filtering 16 h 45 min - 17 h 55 min Chair: Reda Yaich - MA-MOrBAC: A Distributed Access Control Model Based On Mobile Agent for Multi-Organizational, Collaborative and Heterogeneous Systems. Zeineb Ben Yahya. - A formal approach for firewalls and IDS interoperability checking (short paper). Fakher Ben Ftima, Kamel Karoui and Henda Ben Ghezala. - A Vehicle Collision-Warning System based on Multipeer Connectivity and Off-the-shelf Smart-Devices (short paper). Bogdan Groza and Cosmin Briceag.
17 h 00 min
17 h 15 min
17 h 30 min
17 h 45 min
18 h 00 min	Welcome Cocktail 18 h 00 min - 19 h 30 min
18 h 15 min
18 h 30 min
18 h 45 min
19 h 00 min
19 h 15 min
19 h 30 min		Gala Dinner 19 h 30 min - 0 h 00 min Best Paper Awards
19 h 45 min
20 h 00 min
20 h 15 min
20 h 30 min
20 h 45 min
21 h 00 min
21 h 15 min
21 h 30 min
21 h 45 min
22 h 00 min
22 h 15 min
22 h 30 min
22 h 45 min
23 h 00 min
23 h 15 min
23 h 30 min
23 h 45 min

	Tuesday	Wednesday	Thursday
16 h 45 min	Session 3: Access Control and Filtering 16 h 45 min - 17 h 55 min Chair: Reda Yaich - MA-MOrBAC: A Distributed Access Control Model Based On Mobile Agent for Multi-Organizational, Collaborative and Heterogeneous Systems. Zeineb Ben Yahya. - A formal approach for firewalls and IDS interoperability checking (short paper). Fakher Ben Ftima, Kamel Karoui and Henda Ben Ghezala. - A Vehicle Collision-Warning System based on Multipeer Connectivity and Off-the-shelf Smart-Devices (short paper). Bogdan Groza and Cosmin Briceag.
17 h 00 min
17 h 15 min
17 h 30 min
17 h 45 min

	Tuesday	Wednesday	Thursday
19 h 30 min		Gala Dinner 19 h 30 min - 0 h 00 min Best Paper Awards
19 h 45 min
20 h 00 min
20 h 15 min
20 h 30 min
20 h 45 min
21 h 00 min
21 h 15 min
21 h 30 min
21 h 45 min
22 h 00 min
22 h 15 min
22 h 30 min
22 h 45 min
23 h 00 min
23 h 15 min
23 h 30 min
23 h 45 min