According to the EU State of Cybersecurity report by the European Union Agency for Cybersecurity (ENISA), the number of cybersecurity-related incidents will increase by 24 percent by 2025, with ransomware and DoS/DDoS attacks being the most common. The emergence of new threats [1] and the consolidation of existing ones require doubling of efforts in proactive prevention and a decisive increase in research dedicated to cybersecurity. CyberNEMO (End-to-end Cybersecurity to NEMO meta-OS) project emerges as an evolution of the NEMO (Next Generation Meta Operating System) platform, designed to provide a secure, trustworthy, and robust execution environment across the IoT-Edge-Cloud computing continuum. Leveraging NEMO modular meta-operating system (mOS) framework, CyberNEMO introduces advanced cybersecurity and privacy-preserving mechanisms, emphasizing Zero Trust principles. This paper presents the CyberNEMO architecture, details its core innovative technologies, and describes its validation strategy through diverse living labs-including Smart Energy, Smart Water, Smart Manufacturing, Healthcare, Multimedia Distribution, and Smart Farming scenarios-demonstrating end-to-end cybersecurity and real-time threat mitigation capabilities, aligned with Europe's strategic cybersecurity goals.

The path to the Digital Decade in Europe is realized by various governance and regulatory frameworks that aim to materialize this core European strategy. The EU cybersecurity strategy projects to safeguard this path and enable a swift but smooth transition. Arguably, EU is constantly taking actions to address cybersecurity challenges and promote cyber resilience, focusing primarily in critical sectors such as energy. This imposes significant challenges for the cybersecurity technology providers and requires a flexible, adaptive and agile design and development approach. The presented work is an evolution of the ARES2021 paper “Pan-European Cybersecurity Incidents Information Sharing Platform to support NIS Directive” that further aligns with advancements in the European Cybersecurity policy and regulations landscape. This is feasible since the development of the Incidents Information Sharing Platform (I2SP) is agile, adaptive and has continuously been driven by the advancements observed and imposed by the European cybersecurity regulatory framework. The current work showcases the I2SP design enhancements to address the latest EU cybersecurity regulatory framework updates relating to the Network Code on Cybersecurity (NCCS), NIS2 and the Cyber Resilience Act, highlighting the stringent alignment between I2SP and the EU cybersecurity strategy.

Cybersecurity in the Energy sector and relevant information sharing is at the foremost of European strategy towards the digital decade targeted by the EC for the years to come. The proposed Pan-European Incidents Information Sharing Platform (I2SP) offers a cyber-shield armour to European Electrical Power and Energy Systems (EPES) enabling cooperative detection of large scale, cyber-human security and privacy incidents and attacks. Via Incidents Information Sharing Platform, early detection and appropriate mitigation, guarantees the continuity of operations and minimization of cascading effects in the infrastructure itself, the environment, the citizens and the end-users.The Incidents’ Information Sharing Platform (I2SP) constitutes the software package which enables secure Cyber-Threat Intelligence (CTI) information sharing among EPES participants, as well as with trusted nominated entities, such as Information Sharing and Analysis Centers (ISACs), Computer Security Incident Response Teams (CSIRTs) and Security Operations Centers (SOC). I2SP facilitates technical information sharing in view of a warning system and incident reporting across the EU, aligning with the pillars of the new Network Code on Cybersecurity.

Food security is currently considered a huge societal challenge which technology providers, technology adopters, policy makers and consumers altogether are facing. A first step towards more secure and safe food has been attempted through the deployment mainly of Internet of Things based solutions and applications that gather information and provide it to the users. However, these systems are susceptible to attacks e.g. data leakage and information modification, keeping our societies away from the target of secure food. This paper explores the requirements of the farm to fork supply chain with respect to security and proposes a platform that aims at alleviating and mitigating a wide set of attacks.

Current partially or even no automated in-hospital processes often allow unacceptable errors to occur, the effects of which may span from simple injury to mortality. Recent advances in the Internet of Things, smart tags and cloud technologies may decisively alter this fact and minimize such "never events". In this paper, MATISSE is presented as a smart hospital ecosystem, aiming to decisively decrease "never events" in the hospital value chain. Real-time drugs/pills lifetime/aptness verification and medication administration, patients' identification and association with drugs and medical exams, as well as real-time quality assessment are supported in the proposed ecosystem. The ecosystem leverages the exploitation of information lying in (dynamic) smart tags attached to physical and virtual entities of the ecosystem, as well as the integration of a smart medication cart. The paper presents the supported use cases and the architectural design of the proposed solution, while it provides insights in both the hardware and software assembly of the smart medication cart.

The massive deployment of IoT devices, broadband and mission critical services are paving the way for 5G communication networks, which will enable massive capacity, zero delay, elasticity and optimal deployment, enhanced security, privacy by design and connectivity to billions of devices with less predictable traffic patterns. This paper targets a very important and demanding application the Preventive Maintenance as a Service in Critical Infrastructures and more precisely in the energy (electricity and gas) transmission and distribution network that combines the 5G technology with secure IoT and drones flight control. In more details, it addresses the 5G advances at the edge network and proposes a number of VNFs to support surveillance using swarms of drones.

The increasing demand for highly sophisticated cloud services and the consequent worldwide increase in the number of data centers (DC), make the need for energy efficient operation of DCs more actual than ever. Additionally, in the context of smart city and smart grid integration, flexible DCs can play a key role toward acting as grid-stabilization factors. In this paper, a review of the available techniques toward energy-efficient DC operation is performed. The available techniques give rise to four axes of flexibility within a federated DC network. Next, the applicability of the flexible, energy-efficient DC operation is highlighted, by proposing a simple scheduling algorithm, applicable to legacy DC equipment, for effective host and re-arrangement of the DC computing load. The proposed algorithm can provide substantial energy savings during periods of low computing load and improved Quality of Service during periods of high computing load. Concluding, the paper focuses on the grid-stabilization aspects of a federated DC network and the interoperability with the energy network via an Electronic Energy Marketplace in the context of a Smart City.

Wireless Sensor Networks (WSNs) often need to operate under strict requirements on energy consumption and be capable of self-adapting to the presence of non-trusted nodes which do not fully cooperate in the packet forwarding operation. In such an environment, the mechanism employed for the calculation of routing paths of minimum cost in terms of the number of transmissions executed for the reliable communication between the data source and the data sink is essential to prevent unnecessary nodes' energy depletion and help prolong the network's lifetime. In this paper, we study a routing metric, TXPFI, that captures the expected number of frame transmissions - including retransmissions - needed for the successful delivery of data from the source to the destination in the presence of malicious nodes and lossy links, and validate its applicability to the IETF RPL routing protocol. Through extensive simulations we evaluate the capability of TXPFI to compute routing paths of minimum transmission count and compare it against a number of metrics suitable for transmission count-efficient and trust-aware routing in WSNs. The results show that the use of TXPFI in RPL can lead to significant transmission count savings.

The performance of next-generation interactive 3D networked applications and services depends upon the availability and proper usage of network resources. In this work we have designed and implemented a flexible and reliable mechanism for extracting quantitative information related to the availability of network resources in order to enhance the provision of distributed and resource-demanding 3D applications. Individually weighted metrics have been combined towards composite overlay node selection criteria. We have made the pragmatic assumption of minimal or no collaboration with the networking elements, relying on an end to end scenario. The network - based information is coupled with application dynamics, used for topology enhancement.

ABSTRACT As the applications of wireless sensor networks proliferate, the efficiency in supporting large sensor networks and offering security guarantees becomes an important requirement in the design of the relevant networking protocols. Geographical routing has been proven to efficiently cope with large network dimensions while trust management schemes have been shown to assist in defending against routing attacks. Once trust information is available for all network nodes, the routing decisions can take it into account, i.e. routing can be based on both location and trust attributes. In this paper, we investigate different ways to incorporate trust in location‐based routing schemes and we propose a novel way of balancing trust and location information. Computer simulations show that the proposed routing rule exhibits excellent performance in terms of delivery ratio, latency time and path optimality. Copyright © 2010 John Wiley & Sons, Ltd.

This paper presents the architecture of the VITRO system concept developed under the VITRO project for the realization of Virtual Sensor Networks. The aim of the proposed architecture is to enable the realization of scalable, flexible, adaptive, energy-efficient and trust-aware Virtual Sensor Network platforms, focusing on the reduction of deployment complexity and on advanced interoperability mechanisms. The efforts have been put towards specifying a Service Provisioning architecture and mechanisms for advanced sensor and middleware design.

Security has been recognised as a key issue for the expansion of wireless sensor network applications. To defend against the wide set of security attacks, legacy security solutions are not applicable due to the very limited memory and processing resources of the sensor nodes as well as due to the reason that sensor networks are required to operate in an autonomous infrastructureless manner. Trust management schemes consist a powerful tool for the detection of unexpected node behaviours (either faulty or malicious). Once misbehaving nodes are detected, their neighbours can use these information to avoid cooperating with them either for data forwarding, data aggregation or any other cooperative function. We propose a novel trust management system based on both direct and indirect trust information, which allows for fast detection of a wide set of attacks, including those addressing the reputation exchange scheme, while energy awareness is also incorporated in our approach.

Broadband wireless technology appears to be one of the competitive solutions for the last mile problem. Wireless access systems enable one to incrementally roll out infrastructure and rapidly turn up new services such as high-speed Internet access and video distribution. In this paper, implementation challenges toward an adaptive orthogonal frequency division multiplexing (OFDM) point-to-multipoint outdoor broadband wireless access system are examined. The frequency band tackled is located at 10.5 GHz but the results can be applied to other areas of the spectrum as well. The targeted bit rates go up to 34 Mbps, for varying channel conditions. Dynamic time division multiple access/time division duplex (DTDMA/TDD) is selected for the medium access scheme, since TDD requires only a single unpaired frequency band (thus reducing the cost for purchasing licensed spectrum), while TDMA distributes the number of slots per uplink or downlink direction according to the traffic that each direction has to transmit. In addition, OFDM techniques provide a robust behavior in the presence of multipath fading. This paper focuses on the wireless data link control (W-DLC) layer, addressing the system protocol stack and all W-DLC sublayers, entities and functions, and providing a framework that will be beneficial for a licensed outdoor wireless system.

Despite the business risks, the vigorous investments by the technology and telecommunications industries clearly demonstrate the belief that digital video and interactive television are going to happen. The complete scenario for the provision of interactive multimedia services from the residential user point of view is considered focusing on the software components. Initially, based on the DAVIC paradigm, a reference architecture configuration that is able to provide residential interactive broadband services is presented. However, besides the hardware capabilities, the system will succeed only if it is useable and worth the time and money. Therefore, a set of service requirements is introduced, focusing on three key issues: navigation, access validation and mobility. Solutions dealing with the above issues are proposed.

The asynchronous transfer mode (ATM) is viewed as the emerging technology capable of delivering new interactive multimedia services to residential users. Despite the business risks, the vigorous investments by the technology and telecommunications industries and the content owners, clearly demonstrate the belief that digital video and interactive television are going to happen. On the other hand, the provision of Internet access to home users through an ATM access network is seemed to be required, due to the wide adoption of the Internet. Considering the DAVIC reference configuration and the LAN emulation standard, an end-to-end ATM urban architecture providing interactive multimedia services is shown to be able to provide Internet access to residential users as well. A couple of different approaches to provide access to Internet are presented.