GiCP · CSIC · ITEFI
Browse group updates, research stories, events, opportunities, projects and selected papers by topic.
Posts must include all selected tags.
92 posts
No posts match these filters. Try another tag or clear the search.
Explainers, analysis and research stories from the group.
32 posts02Seminars, invited talks and other research events.
34 posts03Open positions, calls and opportunities to work with GiCP.
2 posts04Updates and results from collaborative research projects.
12 posts05Stories about selected papers and research outputs.
12 postsModern web scams are no longer isolated operations run by solo actors. Cybercriminals operate within highly specialized, coordinated ecosystems where Disinformation-as-a-Service (DaaS) mirrors the established dynamics of
The public and media discourse surrounding children, adolescents, and the internet is frequently caught in a loop of adult-centric alarmism, or what sociology defines as "moral panic" (Cohen, 1972; Finkelhor, 2011). Cont
Following the IX Global Summit of the Open Government Partnership (OGP), held in Vitoria-Gasteiz in October 2025, Spain has reinforced its position as an international reference in the protection of digital rights and th
On May 9, 2026 GiCP co-organised the third edition of the Workshop on Cryptographic Tools for Blockchains (CTB 2026), held in Rome as a satellite event of Eurocrypt 2026 — one of the flagship venues of the International
From a general point of view, we live immersed in what we call the "smart society," an ecosystem where technological infrastructure is as ubiquitous as it is invisible. Concepts that once belonged to the academic realm,
Abstract: Microarchitectural timing attacks exploit subtle timing variations caused by hardware behaviors to leak sensitive information. This talk introduces MCHammer, a novel side-channel technique that leverages machin
The introduction of the European Union Artificial Intelligence (AI) Act, the NIST AI Risk Management Framework, and related international norms and policy documents demand a better understanding and implementation of nov
Virtual and digital twins are means of high value to characterize, model and control physical systems, providing the basis for a simulation environment and lab. In the case of a digital twin, it is possible to have a rep
The continuously evolving nature of cryptography is driven by the emergence of new threats and attack vectors. Quantum computers pose a paradigmatic security risk to cryptography, challenging its very core principles. Th
Distributed Ledger Technologies (DLT) in general, and blockchain, in particular, can help enhance the reliability of authentication, authorisation, audit, and accountability (AAAA) protocols. The use of advanced cryptogr
Authentication remains a critical challenge in IIoT environments, particularly due to the resource constraints of edge devices.To address the limitations of traditional authentication methods (e.g.,passwords or PKI) in r
We present a post-quantum (PQ) upgrade of RESEKRA, a Trusted Platform Module (TPM)-centric remote attestation protocol for IoT devices, aligned with FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA). Our hybrid design combines lat
Scientific fraud and misconduct are increasingly relevant as a research topic in various areas such as scientometrics or the ethics of research. From the replication crisis to massive retractions, through fraudulent use
The Horizon Europe projects PRESERVE, SafeHorizon, and ENSEMBLE, along with the LEA Projects Cluster, are delighted to invite you to the 2nd Edition of our Joint Stakeholder Workshop: "Networking within the security rese
Encountering an Oxyuranus microlepidotus by chance can have many results, including death. This is because it bites and is one of the most venomous snakes in the world. While it's true that you are very unlikely to come
SafeHorizon (Grant Agreement no. 101168562)
The digital world holds no mysteries for younger generations. Yet the ease with which they navigate it can be deceptive: understanding how technology makes us vulnerable is key to learning how to protect our data and pri
SafeHorizon (Grant Agreement no. 101168562)
SafeHorizon (Grant Agreement no. 101168562)
Presentation of results at the Diplomatic School. Source: Spain’s Department of National Security
SafeHorizon (Grant Agreement no. 101168562)
SafeHorizon (Grant Agreement no. 101168562)
The Quantum computing has captured the imagination of many, promising to revolutionize fields from cryptography to materials simulation. However, along with its growing popularity, various myths and misunderstandings hav
In GiCP, we have always believed that a safer future is possible through the combination of technology and cybersecurity. And today, we want to share an exciting news in our mission towards this goal: our team has been s
In this talk, Julio Gómez Ortega, cybersecurity expert and Principal Solutions Architect at Elastic, will show us how to build an analytics and intelligence platform using the Elastic stack. We will learn how to collect,
Quantum computing, with its ability to solve highly complex mathematical problems, is revolutionizing the cryptographic security landscape. Traditional algorithms such as RSA (based on large integer factorization) and EC
One of the biggest reasons why attackers tend to be ahead of detection teams is because of their cross-cutting vision, while the latter are more focused on specific tasks to perform. This, in the world of mathematics, is
SPIRS addresses innovative approaches to provide security and data-privacy to future Information and Communications Technology (ICT) elements.
In previous articles, we have discussed both the fundamentals of quantum computing and its impact on cybersecurity, addressing current challenges and solutions. However, the implications of this technology extend beyond
The time has come, that moment in which it is worthwhile to take a look around and observe not only the subject under discussion but also the conceptual bases from which it is being built, evolved and iterated: we are re
In the previous article, we discussed what problmes resolve quantum computing. In this article we put on the "black hat" (reference to the conference and hacker stuff) to delve into the changes, promises and threats pose
David Arroyo's talk at C1B3RWALL 2024 in which he addresses the generation of synthetic content, motivations, techniques and human factor.
Quantum computing is emerging as a technological revolution capable of transforming diverse fields, from medicine to artificial intelligence. In our previous article, “What is Quantum Computing?”, we explored the basic c
Quantum computing is emerging as a technological revolution capable of transforming diverse fields. Imagine overcoming current limits in medicine, science and artificial intelligence thanks to unimaginable processing pow
In our continuing series on Large Language Models (LLMs), today we delve into an essential aspect of these advanced AI systems: security. As LLMs become more integral to our daily digital interactions, ensuring their sec
(CSIC) Tenured Scientist positions at ITEFI.
Blockchain Horizons: INATBA’s Academic and R&D Forum
GiCP's collaboration with SPIRS has been instrumental in advancing the field of privacy protection in digital environments. Together, they have pioneered innovative solutions to safeguard confidential information and uph
In our series of publications on Large Language Models (LLMs), we have addressed several fundamental aspects and innovative applications of these models. Before delving into more specific topics such as security and adva
A DevOps profile refers to an individual who specializes in both software development (Dev) and IT operations (Ops), with expertise in integrating these two disciplines for more efficient, reliable, and scalable software
A DevSecOps (Development Security Operations) profile refers to an approach that integrates security practices within all phases of software development lifecycle, aiming to build more secure applications from the ground
We are seeking innovative research proposals that explore issues at the frontier of machine learning and cybersecurity including both more secure/robust ML methods and/or ML methods to enhance cybersecurity.
The Convergence between technology and standards, along with regulatory coherence, are critical in the global information and communication industry. In this analysis, we will explore the challenges and strategies for es
Technology has transcended its traditional role as a process facilitator and has emerged as a central axis in world politics. The recent Mobile World Congress 2024 highlighted how technological innovations can unite cult
We are going to star a series of publications, in wich we will enter in the world of the Large Language Models (LLM), and their impact on artificial intelligenc (AI), the communication and other means. This will be the f
Cybersecurity through Openness
As part of the standardization activities in GoIT, we attended to the plenary meeting of of CEN-CLC/JTC 13 ‘Cybersecurity and data protection’. As part of the Spanish standardization body, we have participated in the dis
In the digital age, criminal activity has transformed with the advent of 'Crime-as-a-Service' (CaaS), presenting unprecedented challenges in the cyber world. Our research initiative, SafeHorizon, is at the forefront of c
Our 2020 paper published in “Computers in Industry” introduces a blockchain-based system for managing commercial aircraft leasing contracts. This addresses inefficiencies in traditional leasing processes. The system, bui
From Thursday 07th to Saturday 10th of March, RootedCON took place on Ciudad de la Imagen, Madrid. RootedCON is one of the main cybersecurity events in Spain and, this year, around 4000 people attended the more than 100
In today's digital age, discerning patterns and biases in news media is essential for comprehensive research. The NP-Spiders project, developed by the Cybersecurity and Privacy Protection Research Group, is a sophisticat
Data production and exploitation are the very core of our economic and social reality. Our daily activity is more determined the day by the way we access cloud services through our smartphones and, the less the day, by m
In this workshop, David Arroyo analyzes the main advantages and disadvantages of blockchain technology, with special emphasis on the characteristics of its promise of decentralization of configuration and decision making
In 2022, the European Union, in an attempt to limit the spread of Russia's disinformation campaigns, banned RT and Sputnik News from broadcasting in the EU. Understanding the functioning of the Kremlin's propaganda ecosy
In this workshop, David Arroyo analyzes the main advantages and disadvantages of blockchain technology,We present a platform for the detection and management of disinformation campaigns (Misinformation Widget - MiW) and
Bayesian optimization (BO) is a class of methods with state-of-the-art performance that deal with black-box functions, where such a function is defined as having unknown gradients (hence not being able to apply classical
AI-based image generation is bounded by system parameters and the way users define prompts. Both prompt engineering and AI tuning configuration are current open research challenges and they require a significant amount o
During the last 15 years, constant-time cryptographic software has transitioned from an academic construct to a concrete security requirement for real-world libraries. From the engineering perspective, we have quality se
Our group, GiCP, participates in the QCDI project financed through NextGenerationEU funds within the Plan de Recuperación, Transformación y Resiliencia within the program Misiones Ciencia e Innovación of the CDTI (Center
In the context of the GOIT project, which is dedicated to promoting open-source architectures like RISC-V in Europe, GTool serves as a practical utility. It's a straightforward tool designed to extract news URLs from two
The traffic analyzed was extracted from the Mastodon instance infosec.exchange, an instance about info/cyber security-minded people.
This November, our team had the great opportunity of attending the 5th Symposium on Multidisciplinary International Symposium on Disinformation in Open Online Media or MISDOOM 2023. This occasion brought together a numbe
This last couple weeks David Arroyo, the head of our research group, delivered two workshops on the Espacio Fundación Telefónica. A multipurpose space full of expos and talks to drive knowledge forward. The first worksho
Here we include a list of relevant conferences, workshops and events in which openness and hardware production are central points of discussion.
- GiCP research lines - Analysis, characterisation and early detection of disinformation phenomena, hybrid threats and grey zone dynamics.
In recent years, the European Commission has taken significant steps to enhance data privacy and security by issuing various directives to establish secure channels for individuals to submit evidence while preserving the
As part GICP activities in GoIT, it has been collected a report on the most relevant initiatives in the domain of open hardware and open silicon. As GoIT is meant to foster co-creation in the field of open hardware, this
The 1st Disinformation and Toxic Content Analysis Workshop (DiTox 23) took place in Vienna, Austria on September 12, 2023. This event was a part of the Language, Data and Knowledge congress (LDK 2023). The workshop aimed
From the Cybersecurity and Privacy Protection Research Group (GiCP) we have a number of different research avenues. One of them aims to materialize certain advances that we make with our scientific work and to carry out
As we stand on the cusp of a quantum revolution, our conventional methods of encryption, data security, and information processing face an unprecedented threat. In this era, quantum computers can potentially untangle the
Project funded by: European Union’s Horizon 2020 Research and Innovation Programme under Grant Agreement No 872855.
At the beginning of March 2020, the whole world began to realize the raising danger of the coming Covid-19 pandemic. A global event that would impact every aspect of life for the consecutive years. On Twitter the convers
Project belonging to: Programa Estatal de I+D+i Orientada a los Retos de la Sociedad (AEI), en el marco del Plan Estatal de Investigación Científica y Técnica y de Innovación 2017-2020
The upcoming release of the NIST Artificial Intelligence risk management framework and the European Union AI Act raises new and intriguing questions about the risk analysis of AI-based systems. To address these issues, t
Amongst all types of fabricated information travelling on open social networks, scientific disinformation, or cloaked science, is both insidious and challenging to be investigated. Here we present the design of the TRESC
In our current era of digital information, misinformation is rampant and no domain is fully safe from falling into its traps. Science is no exception, it has become easy to present a claim as a scientific fact, or an opi
Since 2019, the European Union has prioritized cybersecurity as an essential component of achieving "digital sovereignty," enabling independence in the digital world in line with ethical principles and data protection. E
Detecting unreliable information in social media is an open challenge, in part as a result of the difficulty to associate a piece of information to known and trustworthy actors. The identification of the origin of source
In our democracy a trade-off between checks and balances is mandatory. To play the role of balances, it is necessary to have information that is often only obtainable through channels that ensure the anonymity of the sou
In this paper we present an analysis of misinformation cross-platform dynamics by focusing on communications published by COVID19 negationists on Twitter and Telegram. Previous research shows the need for better explanat
In this article we address the challenge of detecting the generation and spreading of misleading information in the specific scenario of clickbait. Our contribution consists of a methodology that combines a deep neural n
Workshop by David Arroyo Guardeño at EU Blockchain Observatory and Forum Initiative on March 11, 2022.
This video shows the discussion at the Cybersecurity table. Moderator: Rosalía Machín, Head of ICT Projects / Artificial Intelligence, Guardia Civil. - Juan Gónzalez Martínez, RENIC and Gradiant. - Gabriel Urrutia, Halbo
Natural Language Processing (NLP) is still a challenging problem in most research areas. Rumour propagation, clickbait detection, misinformation, fake news, and authorship attribution have become critical in communicatio
Seminar by Luca Nizzardo at ITEFI on February 9, 2022.
David Arroyo ITEFI-CSIC talks about the challenges of intelligent cybersecurity today and in the 2030s.
Workshop by David Arroyo Guardeño at XII JORNADAS STIC CCN-CERT on January 10, 2019.
Workshop by David Arroyo Guardeño at Sofia Security Forum on Octobre 28, 2021.
Pannel discussion by David Arroyo Guardeño, Plácido Doménech Espí, Abel Losada & Jorge Gómez on May 23, 2023.
The Internet plays a key role in our model of society. The so-called GAFA technologies (Google Amazon Facebook Apple) have a central role in accessing the infrastructure and services of the Internet are the main glasses
Alongside virtual money, blockchain has become the focus of interest in the technology news in recent years. Blockchain offers a decentralized mechanism for collecting immutable traces and allows, for example, the constr
The progressive technification of our society has been accentuated in the last twenty years, making us increasingly technologically dependent and vulnerable. We have internalized office automation, smartphones and social
