3rd International Workshop on SECurity and Privacy Requirements Engineering

In conjunction with ESORICS 2019

26-27 September, 2019

Workshop Program

Download Proceedings


Software engineering is an essential aspect for obtaining a systematic, disciplined and quantifiable approach to the development, operation, and maintenance of software and services. Incorporating security and privacy during the engineering process is of vital importance for assuring the development of reliable, correct, robust and trustful systems as well as adaptive, usable and evolving software services that satisfy users’ requirements.

For many years software engineers were focused in the development of new software thus considering security and privacy mainly during the development stage as an ad-hoc process rather than an integrated one initiated in the system design stage. However, the data protection regulations, the complexity of modern environments such as IoT, IoE, Cloud Computing, Big Data, Cyber Physical Systems etc. and the increased level of users’ awareness in IT have forced software engineers to identify security and privacy as fundamental design aspects leading to the implementation of more trusted software systems and services. Researchers have addressed the necessity and importance of implementing design methods for security and privacy requirements elicitation, modeling and implementation the last decades. Today Security by Design (SbD) and Privacy by Design (PbD) are established research areas that focus on these directions. 


Methods, tools and techniques for the elicitation, analysis and modeling of security and privacy requirements
Security and Privacy testing methods and tools
Adaptive Security and Privacy related methods and tools
Methods and tools for designing usable secure and privacy-aware systems
Methods and tools for the coordination of legal requirements along with Security and Privacy requirements
Security and Privacy requirements verification
Integration of functional, security and privacy requirements
Security and Privacy by design issues
SbD and PbD legal and regulatory issues


General Chairs

Prof. Annie Antón

Georgia Institute of Technology

Prof. Stefanos Gritzalis

University of the Aegean

Program Committee Chairs

Prof. John Mylopoulos

University of Toronto

Assoc. Prof. Christos Kalloniatis

University of the Aegean

Technical Program Committee

Frederic Cuppens, Telecom Bretange, France
Sabrina De Capitani di Vimercati, Università degli Studi di Milano, Italy
Vasiliki Diamantopoulou, University of the Aegean, Greece
Eric Dubois, Luxembourg Institute of Science & Technology, Luxembourg
Carmen Fernandez-Gago, University of Malaga, Spain
Eduardo Fernandez-Medina, University of Castilla-La Mancha, Spain
Mohamad Gharib, University of Florence, Italy
Maritta Heisel, Univeristy of Duisburg-Essen, Germany
Jan Juerjens, University of Koblenz-Landau, Germany
Costas Lambrinoudakis, University of Piraeus, Greece
Tong Li, Beijing University of Technology, China
Javier Lopez, University of Malaga, Spain
Fabio Martinelli , National Research Council -C.N.R., Italy
Aaron Massey, University of Maryland, USA
Haralambos Mouratidis, University of Brighton, UK
Liliana Pasquale, University College Dublin, Ireland
Michalis Pavlidis, University of Brighton, UK
William Robinson, Georgia State University, USA
David Garcia Rosado, University of Castilla-La Manca, Spain
Mattia Salnitri, University of Trento, Italy
Pierangela Samarati, Università degli Studi di Milano, Italy
Jessica Staddon, North Carolina State University, USA
Nicola Zannone, Eindhoven University of Technology, The Netherlands
Jianying Zhou, Singapore University of Technology and Design, Singapore

Paper Submission

Submission Guidelines

Submitted papers must not substantially overlap with papers that have been published or that are simultaneously submitted to a journal or a conference/workshop with proceedings. The workshop proceedings will be published by Springer in the Lecture Notes in Computer Science (LNCS) series.

All submissions should follow the LNCS template from the time they are submitted. Submitted papers can be either full papers or short papers. Full papers should be at most 20 pages while short papers should be at most 8 pages including the bibliography in both cases. All submissions must be written in English. Submissions are to be made to the Submission web site. Only pdf files will be accepted.

Submissions not meeting these guidelines risk rejection without consideration of their merits. Authors of accepted papers must guarantee that their papers will be presented at the conference.

Extended versions of high quality accepted papers will be given fast track opportunity to be published in Information and Computer Security journal.

Important Dates

Submission deadline

June 28, 2019 July 10, 2019
(11:59 p.m.American Samoa time UTC-11)

Notification to authors

July 28, 2019August 4, 2019

Camera-ready versions

August 20, 2019August 31, 2019

List of Accepted Papers

  1. Jan Willemson. How not to Use a Privacy-Preserving Computation Platform: Case Study of a Voting Application
  2. Εleni-Laskarina Makri, Zafeiroula Georgiopoulou and Lambrinoudakis Costas. A Proposed Privacy Impact Assessment Method using Metrics based on Organizational Characteristics
  3. Myrsini Athinaiou, Haralambos Mouratidis, Theo Fotis and Michalis Pavlidis. A modelling language redesign for cyber resiliency of healthcare systems
  4. Thanos Papaioannou, Aggeliki Tsohou and Maria Karyda. Shaping Digital Identities in Social Networks: Data Elements and the Role of Privacy Concerns
  5. Zafeiroula Georgiopoulou, Costas Lambrinoudakis and Eleni Laskarina Makri. GDPR Compliance: Proposed Technical and Organizational measures for Cloud Providers
  6. Dimitri Van Landuyt, Laurens Sion, Emiel Vandeloo and Wouter Joosen. On the applicability of security and privacy threat modeling for blockchain applications
  7. Aggeliki Tsohou, Emmanouil Magkos, Haralambos Mouratidis, George Chrysoloras, Luca Piras, Michalis Pavlidis, Julien Debussche, Marco Rotoloni and Beatriz Gallego-Nicasio. Privacy, Security, Legal and Technology Acceptance Requirements for a GDPR Compliance Platform
  8. Mohammad Heydari, Alexios Mylonas, Vasilios Katos, Emili Balaguer-Ballester and Vahid Heydari Fami Tafreshi. Uncertainty-Aware Authentication Model for IoT
  9. Vasiliki Diamantopoulou, Aggeliki Tsohou and Maria Karyda. From ISO/IEC 27002:2013 Information Security Controls to Personal Data Protection Controls: Guidelines for GDPR Compliance

Contact us

For further inquiries, please contact the program committee chairs at:

secpre2019 [at] easychair [dot] org