In the last years, we have seen an increase in the number of Artificial Intelligence (AI)-powered applications for information retrieval and data science. This fact led to an increasing reliance on distributed computing infrastructures, including Cloud, Edge, and IoT environments. These architectures enable powerful and scalable solutions but also introduce new security and privacy risks that must be addressed at both the system and data levels. Even a single breach on any of the links of the data-service-infrastructure chain may seriously compromise the security of the end-user application. With such a wide attack surface, security must definitely be approached in a holistic way and addressed in any layer where concerns may potentially arise. SIoTEC solicits novel and innovative ideas, proposals, positions and best practices that address the modelling, design, implementation, and enforcement of security in Cloud/Edge/IoT environments. Workshop website: https://siotec.netsons.org/

Nowadays, thanks to the ever-increasing hardware capacity of Edge computing, the achievement of Ubiquitous Computing is no longer a utopia, even though it presents still several challenges. In this paper, we introduce the concept of the Cloud-Edge-Client Continuum, by extending the well-known Cloud-Edge Continuum paradigm with the addition of Clients as deployment nodes. Specifically, we propose both a system architecture and a piece of middleware that allows a web browser to be used seamlessly as a deployment Client node, introducing the concept of a Virtual Point of Deployment (VPod). Our solution allows to: a) leverage the computational capacity of a huge number of ready-to-use devices that do not require the installation of any dependencies; b) optimize the use of resources with clear benefits for end users, who can take advantage of their computing capacity to process sensitive data; c) reduce infrastructure costs. In addition, our proposal opens toward a multitude of scenarios, as the logical division that exists in the common client-server architecture is overcome, enabling the creation of a Cloud-Edge-Client Continuum environment.

Internet of Things (IoT) became more and more popular because of the raise of ubiquitous internet connected devices. In this regard, IoT nodes are often organized in wireless sensor networks to facilitate communication and perform a coral computation. Such a network is often employed in urban or rural areas, i.e., for traffic, fires, and floods monitoring. Nodes are, therefore, deployed in remote areas, preventing the possibility to frequently access them, i.e., for firmware update. In this context, over-the-air (OTA) firmware update is used to remotely change the behavior of one or more nodes. In this paper, we firstly build a wireless mesh network with microcontrollers (i.e., ESP32) and, therefore, propose a secure filtered O TA firmware update involving firmware freshness (i.e., quarantine when firmware is not up-to-date), key pairing, and digital signature for data integrity and non-repudiation. The system is evaluated in terms of deactivation time $(s)$, energy consumption $(kWh)$, and greenhouse gases $(\mathrm{kgCO}_{2}\mathrm{e})$, highlighting good results in terms of scalability for grouped updates.