Speakers are introduced continuously until the start of the conference.
Invited speakers
Dongyan Xu, Samuel D. Conte Professor of Computer Science and Director of CERIAS, Purdue’s cybersecurity research center
Towards a Cross-Plane Methodology for Cyber-Physical Security
Abstract
The landscape of cybersecurity has undergone significant changes in the past decade, with its coverage expanding from “cyber-only” systems such as compute job execution, web services, and mobile apps, to “cyber-physical” systems such as smart grids, autonomous vehicles, and manufacturing systems. Today, any system with a cyber component faces threats from cyber attacks, calling for new security approaches and solutions to secure not just the cyber components (i.e., computers and networks), but the overall cyber-physical systems (CPS). I will discuss new challenges in cyber-physical security that did not exist in traditional computer security, as well as opportunities to secure CPS via an inter-disciplinary cross-plane (cyber and physical) methodology. I will also report our ongoing efforts in CPS vulnerability discovery and confirmation, as concrete instantiation of the cross-plane methodology.
Bio
Dongyan Xu is the Samuel Conte Professor of Computer Science and Director of the Center for Education and Research in Information Assurance and Security (CERIAS) at Purdue University. His current research interests include computer systems security and cyber-physical security, especially in the domains of autonomous vehicles, industrial control systems, and supply chain networks. He has received multiple awards from major cybersecurity conferences for his research papers on kernel malware defense, memory forensics, advanced persistent threat (APT) analytics, and IoT/CPS vulnerability mitigation. He is an AAAS Fellow.
Martin Bosshardt,chief executive officer, Anapaya
The dark side of innovation – when AI is used by the attackers
Abstract
The accelerating sophistication of AI-driven cyberattacks, rising zero-day vulnerabilities, and the explosive growth of connected IoT devices are fundamentally reshaping the threat landscape. No organization — regardless of size or sector — is immune. Traditional security architectures built on the public Internet are proving structurally inadequate against today’s attacks.SCION (Scalability, Control, and Isolation On Next-generation networks), developed at ETH Zurich and among others commercialized by Anapaya Systems, offers a paradigm shift: network-level security that isolates critical infrastructure from the public Internet entirely. By cryptographically locking traffic paths and rendering services invisible to unauthorized actors, SCION delivers business continuity, end-to-end security, and unprecedented control.Already widely adopted across Swiss finance, healthcare, energy, and government sectors, SCION is proving that becoming Internet-free is not only technical and operational possible — it is measurably effective.
Bio
Martin Bosshardt is CEO of Anapaya Systems AG, the Zürich-based company commercializing SCION technology. He brings over 20 years of leadership and entrepreneurial experience in network security and SD-WAN to the role. Previously, he served as CEO of Open Systems AG, a leading SD-WAN provider operating across more than 180 countries. He sits on the board of Ontinue AG a leading AI driven MDR company owned by the private equity firm EQT. He is a recipient of the SVC Entrepreneurs Award, serves on the Advisory Board of PwC Switzerland, and holds a degree in electrical engineering from ETH Zürich.
John Billow, Director National Cyber Security Center Sweden (NCSC-SE)
Malin Frenning, CEO of the Swedish Research Institute (RISE)
Cybercampus Sessions
Annika Andreasson,Postdoctoral Fellow, Stockholm School of Economics
Abstract
The project Sweden’s Cybersecurity at a Crossroads provides a long-term, interdisciplinary platform to support strategic policy learning, measure the implementation of the national cybersecurity strategy, and aims to generate actionable insights by combining historical institutionalism, comparative policy analysis, case studies, stakeholder interviews, an international panel of experts, and scenario-based activities/exercises, to shape Sweden’s cyber resilience towards 2040.
Bio
Annika Andreasson is a Postdoctoral Fellow at Stockholm School of Economics, affiliated with Center for Security and Resilience and House of Innovation. She holds a PhD from KTH Royal Institute of Technology, where she was affiliated with the Centre for Cyber Defence and Information Security (CDIS). Her research focuses on cybersecurity governance, cyber situational awareness, and organizational resilience, examining how governance and preparedness shape cyber resilience in the Swedish public sector.
Syafiq Al Atiiq, PhD from Lund University, VyPr AI
Abstract
Can AI find real security vulnerabilities in the open-source software the world runs on, and do you need an expensive frontier model to do it? This talk shows that capable, openly available models, combined with the right tooling and human review, can go a long way. Using this approach, the project discovered and helped fix several previously unknown vulnerabilities in widely-used software. The key insight is that careful system design is at least as important as raw model power, which opens effective vulnerability discovery to organizations that cannot justify frontier models on cost or data-privacy grounds. The talk covers the main results, what worked and what did not, and where this goes next.
Bio
Syafiq Al Atiiq received his PhD from Lund University in 2025, working at the intersection of AI and security. He is currently building the next generation of software vulnerability detection systems at VyPr AI.
Syafiq Al Atiiq, PhD, VyPr AI
Abstract
Can AI find real security vulnerabilities in the open-source software the world runs on, and do you need an expensive frontier model to do it? This talk shows that capable, openly available models, combined with the right tooling and human review, can go a long way. Using this approach, the project discovered and helped fix several previously unknown vulnerabilities in widely-used software. The key insight is that careful system design is at least as important as raw model power, which opens effective vulnerability discovery to organizations that cannot justify frontier models on cost or data-privacy grounds. The talk covers the main results, what worked and what did not, and where this goes next.
Bio
Syafiq Al Atiiq received his PhD from Lund University in 2025, working at the intersection of AI and security. He is currently building the next generation of software vulnerability detection systems at VyPr AI.
Joakim Kävrestad, Associate Professor Computer Science, ReaTCH
Abstract
Readiness to teach cyberhygiene – an exploration of the perceptions of primary school teachers (ReaTCH): As more educational initiatives at different levels of society have been developed, it becomes crucial that we have methods to evaluate their effects. The project aims to initiate the development of methods for evaluation of learning materials for teaching cyberhygiene in primary school by conducting interviews with teachers and other educators.
Bio
Joakim Kävrestad is associate professor in computer science at the Department of Computer Science and Informatics , School of Engineering, Jönköping University.
Cybercampuses – Shared Experiences and Future Directions
Michael Kreutzer, COO of ATHENE
About ATHENE
ATHENE (the National Research Center for Applied Cybersecurity) is Europe’s largest cybersecurity research center, uniting over 700 researchers from Fraunhofer institutes, TU Darmstadt, Hochschule Darmstadt, and Goethe University Frankfurt. Its research focuses on two strategic priorities: strengthening Europe’s digital sovereignty through security research and advancing the interaction of artificial intelligence and cybersecurity to address emerging threats and opportunities.
Bio
Dr. Michael Kreutzer serves as COO of ATHENE and is responsible for internationalization and strategic industry relations at Fraunhofer SIT. His expertise spans digital sovereignty, cybersecurity governance, crypto-agility and Zero Trust architectures, and he actively advises cybersecurity startups through the ATHENE Digital Hub.
NN, TBA
About
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Bio
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
More speakers TBA
Industry Session
Merve Gülmez, Ericsson
Abstract
Memory Safety Hardening Challenge: From Programming Language to Hardware Design
Memory-unsafe languages such as C and C++ remain dominant for systems programming, embedded systems, and performance-critical software — including key components of telecommunications systems. However, memory-safety vulnerabilities continue to account for a large fraction of software security flaws. In response, organizations such as CISA and the NSA have advocated the adoption of memory-safe programming languages, such as Rust, as well as hardware-based approaches such as CHERI.
This talk provides an overview of Ericsson Security Research activities in memory safety, from programming languages to hardware architecture design — including practical approaches for improving the security and resilience of systems built using Rust, and recent research on CHERI (Capability Hardware Enhanced RISC Instructions) aimed at increasing memory-safety coverage and accuracy, supporting new threat models, and improving performance.
Bio
Merve Gülmez is a researcher at Ericsson Security Research. She holds a PhD in Computer Science from KU Leuven, and her research focuses on systems security, memory safety, and improving software resilience.
NN, TBA
Abstract
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Bio
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
NN, TBA
Abstract
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Bio
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
NN, TBA
Abstract
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Bio
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
More speakers TBA