The 7th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection (CPS4CIP 2026)

Program

Friday, 18th September 2026
Lunch 12:20–13:50

Welcome and Opening Remarks
Session 1: AI-Based Intrusion and Anomaly Detection for Critical Infrastructures

Habtamu Abie, Norwegian Computing Center

13:50–14:50

ST-RelGNN: Spatio-Temporal Relational Graph Neural Network for Intrusion Detection

Kaouthar Merzouki, Hirad Daneshvar, Hajar Moudoud, Hassan Elghazi and Zakaria Abou El Houda

Byte-Level Anomaly Detection in ICS Serial Communication Channels

Jacopo Momesso, Denis Donadel, Fabio De Gaspari and Mauro Conti

X-LIM: Architectural Explainability for Learning-in-the-Middle Anomaly Detection in Recursive Critical-Infrastructure Networks

Toktam Ramezanifarkhani and Andrii Shalaginov

The Autonoetic Defense Framework: A Chaos-Inspired Robust AI Architecture for Anomaly Detection in Cyber-Physical Critical Infrastructures

Manel Abdelkader and Mohamed Hamdi

Session 2: Security Assessment, Testing, and Validation

Toktam Ramezanifarkhani, Kristiania University of Applied Sciences

14:50–15:20

COSIM: Automated Multi-Run Emulation for Smart Grid Cybersecurity Assessments

Davide Savarro, Roberta Terruggia and Giovanna Dondossola

Testing BFT with Containerized IoT Nodes and Configurable Fault Injection

Beste Nur Pacci, Ismail Ari, Sandeep Pirbhulal and Habtamu Abie

Coffee Break 15:20–15:40

Session 3: Threat Intelligence, Trustworthy AI, and Cyber Risk

Habtamu Abie, Norwegian Computing Center

15:40–16:40

From Threat Intelligence to Actionable Risk Prioritisation: A Hybrid Cyber-Risk Intelligence Framework for the Norwegian Energy Sector

Dilhara Wickramasinghe, Marion Cecilia and Peyman Teymoori

Beyond Industrial Protocols: An Analysis of Web-Facing HMI Behavior in ICS Honeypots

Mauro Conti, Denis Donadel, Hubert Artur Golasa, Francesco Lupia and Massimo Merro

Cross-Domain Contamination in Locally Deployed LLMs for Critical Infrastructure

Amirhossein Noshadi, Simone Carpanzano and Enrico Cambiaso

Does Context Matter? Evaluation of Language Models as Email Classifiers

Francisco Cardoso, Eva Maia and Isabel Praça

Session 4: Cyber-Physical Systems Security and Resilience

Amirhossein Noshadi, Consiglio Nazionale delle Ricerche

16:40–17:25

Context-Aware Impact Estimation and Adaptive Mitigation in Cyber-Physical Vehicle Systems

Yaman Qendah, Jannis Hamborg, Christoph Krauß and Stefan Katzenbeisser

AI for Maritime Transportation Security: Robust Detection of GPS Data Manipulation Attacks Across Sea States

Lorenzo Fasol, Silvio Cretti, Giuseppe Laurenza, Lorenzo Gorza and Roberto Doriguzzi-Corin

A Digital-Twin Framework for Cyber-Resilient Validation of Virtual Synchronous Generators

Isaac Kweku Aidoo, Fabien Sechi, Charu Sharma, Nadia Saad Noori and Pawan Sharma

Closing remarks & discussions

Habtamu Abie, Norwegian Computing Center

17:35–17:45