In this paper, we present an integrated approach that combines data and information sources from different domains to better capture the potential effects of a pandemic and to improve preparedness of critical infrastructures and decision makers in the future.This approach not only takes epidemiological data on a pathogen into account but also allows to simulate the cascading effects of the pandemic itself as well as the mitigation measures might have on the operation of CIs from various domains and, consequently, on the well-being of the society.Additionally, these effects can influence the operational capacity and economic well-being of CIs.Hence, the approach also projects the possible economic effects, i.e., monetary costs, a future pandemic might impose on society, including wide-ranging counter measures such as school closures or lock-downs.

Combined cyber and physical attacks on Critical Infrastructures have disastrous consequences on economies and in social well-being. Protection and resilience of CIs under combined attacks is challenging due to their complexity, reliance on ICT systems and the interdependences between different types of CIs. The PRAETORIAN framework was designed to address these challenges, by integrating components responsible for detecting both cyber and physical threats. Additionally, it forecasts how the combined attacks will evolve and their cascading effects on interdependent CIs. The PRAETORIAN framework was demonstrated based on a realistic scenario in the Zagreb airport, combining both physical and cyber attacks.

In this paper, we describe the functioning of the PRAETORIAN Framework, an integrated platform to identify complex threats across the physical and cyber domains of Critical Infrastructures (CIs). Therefore, the framework combines a physical and a cyber situation awareness solution into an innovative Hybrid Situation Awareness tool to detect the different stages of a complex threat. Further, the framework supports the decision makers and emergency organizations with a Coordinated Response tool to align and plan the activities for reducing or preventing the effects of an attack. All aspects are described according to a real-life use case that has been tested at the Zagreb airport.

Critical infrastructures are a core part in modern society, supplying essential goods and services for our everyday life. Therefore, any incident compromising the operation of a critical infrastructure can directly affect the social life. Moreover, due to the increasing interconnections between critical infrastructures, any incident can have cascading effects on other infrastructures as well. In this article, we present a novel simulation framework which allows to model the interdependencies and thus also the cascading effects among critical infrastructures. This framework builds upon stochastic processes describing, on the one hand, the relations between the critical infrastructures and, on the other hand, the random and sometimes arbitrary propagation of the consequences. This existing framework is extended and implemented in OMNeT++, which allows an easy and swift implementation of the mathematical algorithms and also provides a built-in visualization of the propagation of consequences within the critical infrastructure network. The goal is to support risk and security officers within the critical infrastructure in their decisions.

Secure communication is often based on encryption thus hinges on (public-key) infrastructures that handle all the key-management. This inevitably requires human intervention, thus creating a rather vulnerable point in the system. So it appears desirable to automate key-management tasks to the widest possible extent. In this work, we report on a software implementation of secure multipath transmission. Our system takes a network infrastructure model as input and determines the maximal achievable security for a communication between a chosen sender and receiver, while handling all key-management transparently for the user. The security is information-theoretic, and unlike public-key or symmetric cryptography does neither hinge on computational intractability nor empirical evidence. More importantly, security can be measured in quantitative terms, thus making the results useful in enterprise risk management. Our software computes the risk for a given transmission under multipath transmission and generates simple \textsc{OmNet++} models to demonstrate the channel construction as practically doable and to measure the additional network overhead. This is for a-priori decision-support and practical guidance for an installation of secure multipath transmission as a high-security transmission service within the enterprise network.

Companies running research and development (R&D) departments invest considerable effort into the protection of results and security of communication channels. In cases where particular expertise is unavailable within the company, R&D may be partially outsourced to external specialists being universities or independent research centers. In any such case where highly valuable data is to be exchanged between departments of a company or a university, quantum cryptography offers a convenient way to protect the investment and revenue tied to the research. Upon recent results within the EU-project SECOQC, we present an application framework that is suitable for meeting R&D security requirements. We draw from the latest experimental results, demonstrating the feasibility and efficiency of using quantum cryptography in that context.