Doradus Labs Submits Research to CPS4CIP 2026 on Telemetry Fusion for Cross-Sector Critical Infrastructure
Published May 27, 2026
Doradus Labs has submitted a research paper to the 7th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection, known as CPS4CIP 2026, co-located with the 31st European Symposium on Research in Computer Security in Rome this September. The paper extends our ongoing argument that the protection of regulated gaming environments, large entertainment venues, and integrated resort operations belongs in the same research conversation as the protection of water, energy, and transportation infrastructure.
The paper, titled "Telemetry Fusion for Cyber-Physical Resilience in Underserved Critical Infrastructure Sectors," presents a framework that integrates three streams of operational telemetry that nearly every mature high-availability environment already produces: network and endpoint data from cybersecurity tooling, control system data from operational technology platforms, and physical environment data from intelligent video analytics. While each of these streams has matured significantly within its own discipline, integrating them remains an open challenge across every sector we serve. The paper formalizes that integration through five correlation primitives, defines five detection scenarios that cross domain boundaries, and aligns the framework with the regulatory expectations established under the European Union's NIS2 Directive, the Digital Operational Resilience Act, and the Artificial Intelligence Act.
The work is grounded in operational practice. We validate the framework against a representative high-availability gaming environment, demonstrating that the integration of cyber, control, and surveillance telemetry produces detection capability that no single layer offers on its own. We then map the framework onto water distribution and electric distribution operations, showing that the same correlation primitives apply with limited adaptation. The cross-sector mapping is central to the contribution of the paper and reflects the position Doradus Labs has taken consistently: the cyber-physical security challenges in a regulated gaming environment are not exotic. They are common across critical infrastructure sectors, and the lessons transfer cleanly in both directions.
This submission follows our recent paper to the SecAssure workshop at the same conference, which focused on design-time assurance for casino management systems. The two contributions are intentionally complementary. The SecAssure paper addresses the question of how architectural vulnerabilities arise and how to identify them through structured threat modeling and assurance frameworks. The CPS4CIP paper addresses the question of how to detect those attacks at runtime when they occur in real operational environments. Together, they reflect the dual orientation Doradus Labs brings to every engagement: rigorous design-time analysis paired with operational detection and response capability.
The choice of venue matters. CPS4CIP is supported by the European Cluster for Securing Critical Infrastructures, a network of European Union-funded projects that has collectively shaped much of the modern critical infrastructure protection agenda. Submitting to this venue places Doradus Labs in direct conversation with the project leads and practitioners whose work defines the field. It also positions the firm's expertise in regulated gaming, an underrepresented sector in the academic literature, alongside the canonical sectors of water, energy, and finance that receive the bulk of research attention.
The broader trajectory is clear. Doradus Labs has spent the past several years building deep operational expertise in one of the most demanding cyber-physical environments in commercial practice. We are now systematically transferring that expertise into sectors where the same problems exist but where our perspective is new. Our recent engagement with the Colorado Water Congress, our continued investment in intelligent video analytics for surveillance-rich environments, and our long-standing partnerships with major gaming technology vendors all reinforce this trajectory. The CPS4CIP submission is one more step in establishing Doradus Labs as a credible voice in cross-sector critical infrastructure protection.
Notification of acceptance is expected in mid-July. The workshop itself convenes in Rome from September 14 through September 18, 2026, in conjunction with ESORICS 2026. We will share the camera-ready version, the workshop presentation, and the operational lessons that follow from the research as the year progresses.
Doradus Labs continues to invest in the research, standards, and policy work that supports our clients today and that anticipates the regulatory and operational landscape they will face tomorrow. We are grateful to the operators, partners, and regulators whose continued trust makes this work possible.