News:

• February 2019:
  • Our paper “Quantum-Resistant Identity-Based Signature with Message Recovery and Proxy Delegation” has been accepted for publication in Symmetry journal (MDPI).
  • Our paper “TAW: Cost-Effective Threshold Authentication with Weights for Internet of Things” has been accepted for publication in IEEE Access journal.
• January 2019:
  • Kick-off meeting of the H2020 CUREX project took place in Athens (25th - 26th, Jan 2019).
  • Kick-off meeting of the H2020 SECONDO project took place in Brussels (16/01/2019).
• October 2018: Our paper “A taxonomy and survey of cyber-physical intrusion detection approaches for vehicles” has been accepted for publication in Ad Hoc Networks journal (Elsevier).
• August 2018: Our paper “Cyber-Insurance as a Signaling Game: Self-Reporting and External Security Audits” has been accepted for publication in Gamesec 2018.
• August 2018: Our paper “Apparatus: A Framework for Security Analysis in Internet of Things Systems” has been accepted for publication in Ad Hoc Networks journal (Elsevier).
• August 2018: Our H2020 proposal CUREX (seCUre and pRivate hEalth data eXchange), has been evaluated positively and got funded.
• July 2018: I have been invited to be the guest editor of Games journal of a special issue on “Game Theory for Security”
• June 2018: Our H2020 MARIE CURIE proposal SECONDO (a Security ECONomics service platform for smart security investments and cyber insurance pricing in the beyonD 2020 netwOrking era), has been evaluated positively and got funded.”

---

Short bio

I am a Lecturer (i.e. Assistant Professor) at the University of Surrey, UK and member of the Surrey Centre for Cyber Security (SCCS), a GCHQ--‐recognised UK Academic Centre of Excellence in Cyber Security Research.

Research interests: I am studying cyber security and privacy engineering and decision-making approaches from both a theoretical and practical perspective. I have expertise in developing new models within the above fields and proposing algorithms or methodologies to tackle emerging challenges. I enjoy assessing my theoretical propositions by either simulations (mainly by using Python tools or network event-based simulators) or real-world testbeds.

Research positions and PhD supervision: I am actively pursuing research in cyber security and privacy. I am currently co-supervising three PhD students (as third supervisor) who are with the University of Brighton. I am seeking talented post-doctoral researchers and doctoral (PhD) students to join our group at SCCS. Interested candidates, please email me with a copy of their CV and a cover letter.

Funding: Through successful research and development bids I have secured approximately £1M fund and contributed to another £1M, as detailed here.

Previous studies and experience: I have received the BSc degree in Informatics and Telecommunications from University of Athens, Greece, in 2006 and the MSc degree in Computer Science from Athens University of Economics and Business, Greece in 2008, and PhD degree in Mobile Communications Security from Kingston University London, UK in 2012. Prior to the University of Surrey, I was a Senior Lecturer of Cybersecurity and Privacy at the University of Brighton; invited researcher at Imperial College; postdoctoral researcher at Queen Mary University of London; and a Research and development consultant at Ubitech Technologies Ltd in the Surrey Research Park.

Teaching and project supervision: I teach Information Security for Business and Government in our MSc, Information Security and Web Publishing and Databases in year 1. I am interested in supervising final year or MSc projects on cyber security and privacy, and have some project ideas. To meet with me during my office hours please send me an email to arrange a meeting.

Activities: After I successfully organised the 6^th Conference on Decision and Game Theory for Security (GameSec 2015) in London, I served as the Technical Program Committee Chair (jointly with Tansu Alpcan, University of Melborune) of GameSec 2016 (7^th Conference on Decision and Game Theory for Security). Gamesec is a small but high quality peer-reviewed annual conference. It attracts original submissions in the area of analytical security and privacy with an emphasis on game and decision theory. I am also a reviewer for leading journals by the ACM, IEEE, Elsevier, registered expert with the European Commission and EPSRC reviewer. In addition, I have several years of expertise in preparing EU bids and have secured funds through successful FP7 and H2020 proposals.

---

Selected Research Areas

Internet-of-Things Security and Privacy. Recent advances in information and communication technologies and embedded systems are the major reasons for the proliferation of the Internet of Things (IoT). However, security and privacy issues are a growing concern for consumers and manufacturers of IoT technologies. I am investigating novel methodologies and models that will guarantee the highest possible levels of protection of users' data and devices in presence of different security and privacy threats.

Security and Privacy Games. "Game theory was developed to facilitate decision making in the Cold War. The problems of cyber security are also complex and adversarial. So why is game theory not a standard tool of cyber security?" Game theory can answer the question regarding how the defender will react to the attacker, and vice versa, in cyber security and privacy. The strategic interaction between them is captured by a two-player game in which each player attempts to maximize his or her own interests. The attacker’s strategy depends heavily on the defender’s actions and vice versa. Thus, the effectiveness of a defense mechanism relies on both of the defender’s and attacker’s strategic behaviors. Using a game-theoretic approach, tactical analysis is performed to investigate the attack from a single node or multiple nodes. Hence, game theory is useful to investigate the strategic decision-making situations of the defender and/or to analyze the incentives of the attackers. Besides Shannon’s maxim states "One ought to design systems under the assumption that the enemy will immediately gain full familiarity with them."

5G Security. It is well acknowledged that one of the key enabling factors for the realisation of future 5G networks will be the small cell (SC) technology. Furthermore, recent advances in the fields of network functions virtualisation (NFV) and software-defined networking (SDN) open up the possibility of deploying advanced services at the network edge. In the context of mobile/cellular networks this is referred to as mobile edge computing (MEC). Within the scope of the EU-funded research project SESAME we perform a comprehensive security modelling of MEC-assisted quality-of-experience (QoE) enhancement of fast moving users in a virtualised SC wireless network, and demonstrate it through a representative scenario toward 5G. Our modelling and analysis is based on a formal security requirements engineering methodology called Secure Tropos which has been extended to support MEC-based SC networks. In the proposed model, critical resources which need protection, and potential security threats are identified. Furthermore, we identify appropriate security constraints and select suitable security mechanisms for 5G networks. Thus, we reveal that existing security mechanisms need adaptation to face emerging security threats in 5G networks.

Security Economics. When investing in cyber security resources, information security managers have to follow effective decision-making strategies. We refer to this as the cyber security investment challenge and this is considered as part of the Economics of Security field. Our work has investigated how to support optimal cyber security investments against commodity attacks developing a decision support tool. We have shown that our decision support tool provides the same advice with the one advocated by the UK government with regard to the requirements for basic technical protection from cyber attacks in SMEs.