IMSc Conference on IT Security

We organize a conference for collecting IMSc points in the context of the IT Security BSc course in the spring semester of the 2023/24 academic year at BME. Beyond IMSc point collection, the goal of the conference is to encourage students to deep-dive into some hot topics of IT security, to get familiar with the challenges and recent research results, and to share knowledge with other students in the form of short presentations. We do hope that the conference will shed light on the beauty of the field of IT security and some of its exciting research areas, and it will stimulate both the active participants of the conference and all other students enrolled in the IT security course to engage in further studies in the domain of IT security.

The Call for Papers (CfP) for the conference is available here.

Conference topics

all, uav, cyber-physical-system, vehicle, network-security, power grid, machine-learning, data-evaluation, privacy, economics, malware, binary-similarity, cryptography, machine-learning-security, LLM-security, LLM, copilot, federated-learning, poisoning, password-manager, AAA, OAuth, web-security, Kerberos

The State of Cyber-Insurance

Cyber-insurance has been hailed as the ultimate tool for both i) efficient risk transfer in cyber environments and b) providing strong incentives for enhanced security levels. Part of this promise has been fulfilled, but there exist signifcant challenges standing in the way of total success. These include (but are not limited to): the lack of historical data, interdependent security, correlated risk, and information asymmetries. However, there is light at the end of the tunnel...

Tags: economics

References:

IoT Security Economics

The Internet of Things is both a successful technological trend and a cybersecurity nightmare. The huge market for cheap IoT gadgets make manufacturers forget about (even basic, no-brainer) security measures. With historical evidence (e.g., the Mirai botnet) and current and predicted proliferation of IoT, this has to change. Current regulatory and standardization efforts propose several mechanisms to improve the state of affairs including security labels (a la energy labels) and the Software Bill of Materials (SBOM). Will they be successful?

Tags: economics, cyber-physical-system

References: