The security of software services accessible via the Internet has always been a crosscutting non-functional requirement of uttermost importance. The recent advent of the Cloud Computing paradigm and its wide diffusion has given birth to new challenges towards the securing of existing Cloud services, by properly accounting the issues related to their delivery models and their usage patterns, and has opened the way to the new concept of Security as a Service(SecaaS), i.e. the ability of developing reusable software services which can be composed with standard Cloud services in order to offer them the suitable security features. In this context, there is a strong need for methods and tools for the modeling of security concerns, as well as for evaluation techniques, for supporting both the comparison of different design choices and the analysis of their impact on the behavior of new services before their actual realization. This paper proposes a meta-model for supporting the modeling of Security Services in a Cloud Computing environment as well as an approach for guiding the identification and the integration of security services within the standard Cloud delivery models. The proposal is exemplified through a case study.

Industrial control systems (ICSs) are vulnerable to cyber-physical attacks, i.e., security breaches in cyberspace that adversely affect the underlying physical processes. In this context, honeypots are effective countermeasures both to defend against such attacks and discover new attack strategies. In recent years, honeypots for ICSs have made significant progress in faithfully emulating OT networks, including physical process interactions. We propose HoneyICS, a high-interaction, physics-aware, scalable, and extensible honeynet for ICSs, equipped with an advanced monitoring system. We deployed our honeynet on the Internet and conducted experiments to evaluate the effectiveness of HoneyICS.

This paper proposes an agent infrastructure (Theatre) centered on Java for distributed simulations over High-Level Architecture/RunTime Infrastructure (HLA/RTI). The architecture rests on actors (agents) as the basic building blocks. Actors have a public message interface and encapsulate a state of local variables and a behavior patterned as a finite state machine. Actors interact with one another by asynchronous message passing. At the system level, theatres are used as the execution platforms for actors. Theatres naturally map on to HLA federates. Actors can migrate between theatres for load-balancing concerns, or in response to (re)configuration operations of dynamic structure systems. The paper introduces Theatre and demonstrates its application to a complex simulation model based on unmanned aerial vehicles (UAVs). The case study is an open agent-based distributed model where mobile agents follow communication patterns established at runtime.