CPS and Hardware Security Threat Modeling of Cyber-Physical Systems in Practice -- AVSDA: Autonomous Vehicle Security Decay Assessment -- A TSX-Based KASLR Break: Bypassing UMIP and Descriptor-Table Exiting -- Responses, and Security Management A Stakeholder-Centric Approach for Defining Metrics for Information Security Management Systems -- A Novel Approach for Attack Tree to Attack Graph Transformation -- Intelligent Decision Support for Cybersecurity Incident Response Teams: Autonomic Architecture and Mitigation Search -- Using Garbled Circuit for Secure Brokering -- Network and Data Security Path-preserving Anonymization for Inter-domain Routing Policiescal Systems in Practice -- Designing a Service for Compliant Sharing of Sensitive Research Data -- Authenticated Multi-Proxy Accumulation Schemes for Delegated Membership Proofs -- Extending the Exposure Score of Web Browsers By Incorporating CVSS.

This book constitutes the proceedings of the 17th International Conference on Risks and Security of Internet and Systems, CRiSIS 2021, which took place during November 11-13, 2021. The conference was originally planned to take place in Ames, IA, USA, but had to change to an online format due to the COVID-19 pandemic. The 9 full and 3 short papers included in this volume were carefully reviewed and selected from 23 submissions. The papers were organized in topical sections named: CPS and hardware security; attacks, responses, and security management; network and data security.