Abstract
The rapid evolution of the automotive industry has driven the emergence of Connected and Autonomous Vehicles, raising significant concerns about the cybersecurity vulnerabilities inherent in their complex networks. This systematic review investigates cybersecurity in Connected and Autonomous Vehicles, focusing on internal and external networks and addressing four key research questions: (RQ1) What security controls exist in CAV networks? (RQ2) What methodologies are employed in cybersecurity studies? (RQ3) How effective are these methods, and what limitations do they present? (RQ4) What are the key themes, common approaches, and future research directions? Peer-reviewed studies published between 2019 and 2024 were included, using IEEE Xplore, Elsevier, MDPI, ACM Digital Library, and Springer as data sources. Following PRISMA 2020 guidelines, 111 relevant articles were analysed and grouped into seven themes: Authentication, Blockchain, Intrusion Detection Systems, Vehicle-to-Everything communication, Network Operation Centers, Security Operations Centers, and Systematic Reviews. The thematic synthesis highlighted study objectives, methodologies, and implemented security controls. This review identifies significant gaps in the literature, particularly in integrating Security Information and Event Management systems and the real-world validation of proposed security measures. It underscores the need for adaptive cybersecurity frameworks to address evolving threats and highlights the importance of collaboration between academia and industry. Furthermore, future research should prioritize the development of advanced security protocols, address scalability challenges, and explore the impact of emerging technologies such as Artificial Intelligence and 5G. Providing awareness and training is also essential to mitigate human error. These findings are a foundation for designing more resilient and secure Connected and Autonomous Vehicles systems.

Abstract
The rapid growth of urban populations intensifies congestion, air pollution, and energy demand. Green mobility is central to sustainable smart cities, and the Internet of Things (IoT) offers a means to monitor, coordinate, and optimize transport systems in real time. This paper presents an Internet of Things (IoT)-based architecture integrating heterogeneous sensing with edge-cloud orchestration and AI-driven control for green routing and coordinated Electric Vehicle (EV) charging. The framework supports adaptive traffic management, energy-aware charging, and multimodal integration through standards-aware interfaces and auditable Key Performance Indicators (KPIs). We hypothesize that, relative to a static shortest-path baseline, the integrated green routing and EV-charging coordination reduce (H1) mean travel time per trip by >= 7%, (H2) CO2 intensity (g/km) by >= 6%, and (H3) station peak load by >= 20% under moderate-to-high demand conditions. These hypotheses are tested in Simulation of Urban MObility (SUMO) with Handbook Emission Factors for Road Transport (HBEFA) emission classes, using 10 independent random seeds and reporting means with 95% confidence intervals and formal significance testing. The results confirm the hypotheses: average travel time decreases by approximately 9.8%, CO2 intensity by approximately 8%, and peak load by approximately 25% under demand multipliers >= 1.2 and EV shares >= 20%. Gains are attenuated under light demand, where congestion effects are weaker. We further discuss scalability, interoperability, privacy/security, and the simulation-to-deployment gap, and outline priorities for reproducible field pilots. In summary, a pragmatic edge-cloud IoT stack has the potential to lower congestion, reduce per-kilometer emissions, and smooth charging demand, provided it is supported by reliable data integration, resilient edge services, and standards-compliant interoperability, thereby contributing to sustainable urban mobility in line with the objectives of SDG 11 (Sustainable Cities and Communities).

Abstract
Understanding people's face-to-face interactions is crucial for effective infectious disease management. Traditional contact tracing, often relying on interviews or smartphone applications, faces limitations such as incomplete recall, low adoption rates, and privacy concerns. This study proposes utilizing anonymized Call Detail Records (CDRs) as a substitute for in-person meetings. We assume that when two individuals engage in a phone call connected to the same cell tower, they are likely to meet shortly thereafter. Testing this assumption, we evaluated two hypotheses. The first hypothesis-that such co-located interactions occur in a workplace setting-achieved 83% agreement, which is considered a strong indication of reliability. The second hypothesis-that calls made during these co-location events are shorter than usual-achieved 86% agreement, suggesting an almost perfect reliability level. These results demonstrate that CDR-based co-location events can serve as a reliable substitute for in-person interactions and thus hold significant potential for enhancing contact tracing and supporting public health efforts.

Abstract
Mobile devices have become integral to our everyday lives, yet their utility hinges on their battery life. In Android apps, resource leaks caused by inefficient resource management are a significant contributor to battery drain and poor user experience. Our work introduces Alpakka, a source-to-source compiler for Android's Smali syntax. To showcase Alpakka's capabilities, we developed an Alpakka library capable of detecting and automatically correcting resource leaks in Android APK files. We demonstrate Alpakka's effectiveness through empirical testing on 124 APK files from 31 real-world Android apps in the DroidLeaks [12] dataset. In our analysis, Alpakka identified 93 unique resource leaks, of which we estimate 15% are false positives. From these, we successfully applied automatic corrections to 45 of the detected resource leaks.

Abstract
WebAssembly (Wasm) has emerged as a powerful binary format, enabling the seamless integration of languages like C and Rust into web applications. JavaScript (JS), the dominant language for client-side web development, has its code susceptible to tampering and intellectual property theft due to its transparency in browser environments. We introduce TranspileJS, a novel tool designed to enhance code security by automatically selecting and translating JS snippets into Wasm. TranspileJS leverages a multi-stage architecture that converts JS to TypeScript, which is compiled into Wasm using the AssemblyScript compiler. TranspileJS addresses the challenges posed by the fundamental differences between JS and Wasm, including dynamic typing, runtime behaviour mismatches, and standard library discrepancies, ensuring that the original behaviour of the code is preserved while maximising the amount of code transpiled. Our experiments show that TranspileJS successfully transpiles approximately one-third of the code in our dataset, with a performance impact of up to a 12.3% increase in execution time. The transpilation process inherently obfuscates code, creating effects similar to standard obfuscation techniques, and generates a stealthy and resilient output. Furthermore, combining transpilation with WebAssembly-specific obfuscation techniques opens new possibilities for code protection and resistance against reverse engineering.

Abstract
The rapid proliferation of Edge AI applications demands efficient, low-power computing architectures tailored to specific workloads. The RISC-V ecosystem is a promising solution, and has led to a fast growth of implementations based on custom instructions extensions, but with varying degrees of functionality and support which may hinder easy adoption. In this paper, we extensively review existing RISC-V extensions targeting primarily the AI domain and respective compilation flows, highlighting challenges in deployment, usability, and compatibility. We further implement and provide usable containerized environments for two of these works. To address the identified challenges, we then propose an approach for lightweight early validation of custom instructions via source-to-source transformations, without need of compiler modifications. We target our own Single Instruction Multiple Data (SIMD) accelerator, which we integrate into a CORE-V cv32e40px baseline core through custom instructions, and versus which we achieve up to 11.9x speedup for matrix-vector operations.