Critical Information Infrastructures Security

The 10 full papers and 5 short papers presented were carefully reviewed and selected from 30 submissions. They are grouped in the following topical sections: Invited Papers, Risk Management, Vulnerability Assessment, Resilience and Mitigation Short Papers, and Industry and Practical Experience Reports.

Invited Papers. - Everything is Awesome! Or is it? Cyber Security Risks in Critical Infrastructure. - Challenges In Quantifying An Adversary s Cyber Access to Critical Infrastructures. - Risk Management. - Exploring how Component Factors and their Uncertainty A ect Judgements of Risk in Cyber-Security. - Estimating Cascading E ects in Cyber-Physical Critical Infrastructures. - Aggregating Centrality Rankings: A Novel Approach to Detect Critical Infrastructure Vulnerabilities. - Vulnerability Assessment. - Cyber-Physical Systems Security Based on A Cross-Linked and Correlated Vulnerability Database. - Climate Change Impact and Vulnerability Analysis in the City of Bratislava: Application and Lessons Learned. - Resilience and Mitigation. - Intrusion Resilience for PV Inverters in a Distribution Grid Use-Case Featuring Dynamic Voltage Control. - Mitigating escalation of cascading e ects of a payment disruption across other critical infrastructures: lessonslearned in 15 simulation-games. - Using Datasets from Industrial Control Systems for Cyber Security Research and Education. - Transport and Finance. - Securing Software Updates for Trains. - A comparison between SWIFT and Blockchain from a cyber resiliency perspective. - Short Papers. - On the Importance of Agility, Transparency, and Positive Reinforcement in Cyber Incident Crisis Communication. - SealedGRID: A Secure Interconnection of Technologies for Smart Grid Applications. - A Dynamic Risk Assessment (DRA) Methodology for High Impact Low Probability (HILP) Security Risks. - On Actuator Security Indices. - Testbed Evaluation of DoS Attacks on PID-controllers. - Industry and Practical Experience Reports. - White Paper on Industry Experiences in Critical Information Infrastructure Security: A Special Session at CRITIS 2019.