Antonio Muñoz

@inproceedings{munoz2025trusted,

title = {Trusted Platform and Privacy Management in Cyber Physical Systems: The DUCA Framework},

author = {Antonio Mu\~{n}oz and Javier Lopez and Cristina Alcaraz and Fabio Martinelli},

url = {/wp-content/papers/munoz2025trusted.pdf},

doi = {10.1007/978-3-031-96590-6_12},

year  = {2025},

date = {2025-06-23},

urldate = {2025-06-23},

booktitle = {IFIP Annual Conference on Data and Applications Security and Privacy},

volume = { 15722},

publisher = {Springer},

series = {LNCS},

abstract = {his paper explores the application of the DUCA (Data Usage Control and Compliance Architecture) framework for privacy management in Cyber-Physical Systems (CPS). DUCA integrates Privacy-by-Design (PbD) principles, Privacy-Enhancing Technologies (PETs), and context-aware policy enforcement to support regulatory compliance and protect data throughout its lifecycle. A key focus of this work is the integration of Secure Elements (SEs)\textemdashincluding Trusted Execution Environments

(TEE), Trusted Platform Modules (TPM), and Intel SGX\textemdashto enable privacy protection during data processing, complementing traditional safeguards for data at rest and in transit. The framework also supports emerging standards such as DICE and MARS to facilitate scalable trust management in heterogeneous CPS environments. We present DUCA’s modular architecture and evaluate its applicability across representative use cases, including smart grids, eHealth, and AI-enabled infrastructures,

demonstrating its effectiveness in enforcing privacy without compromising functionality.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{2016,

title = {AndroCIES: Automatizaci\'{o}n de la certificaci\'{o}n de seguridad para aplicaciones Android},

author = {Manuel Ruiz and Ruben Rios and Rodrigo Roman and Antonio Mu\~{n}oz and Juan Manuel Mart\'{i}nez and Jorge Wallace},

url = {/wp-content/papers/2016.pdf},

year  = {2022},

date = {2022-10-01},

urldate = {2022-10-01},

booktitle = {XVII Reuni\'{o}n Espa\~{n}ola sobre Criptolog\'{i}a y Seguridad de la Informaci\'{o}n (RECSI 2022)},

volume = {265},

pages = {192-197},

publisher = {Ediciones Universidad Cantabria},

address = {Santander, Spain},

organization = {Ediciones Universidad Cantabria},

abstract = {El auge de las plataformas m\'{o}viles est\'{a} impulsando el desarrollo de un gran n\'{u}mero de aplicaciones, muchas de las cuales salen al mercado sin las convenientes comprobaciones de seguridad. Recientemente, Google est\'{a} apostando por hacer este problema m\'{a}s visible y concienciar a los usuarios de la necesidad de instalar aplicaciones verificadas por laboratorios independientes. Sin embargo, la certificaci\'{o}n de aplicaciones suele ser una tarea ardua y no exenta de errores. Por ello, en este trabajo, presentamos la herramienta AndroCIES, que es capaz de automatizar en gran medida las evaluaciones necesarias para la certificaci\'{o}n de aplicaciones m\'{o}viles, reduciendo en torno a un 20% el tiempo empleado en este proceso.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{munoz2020icitpm,

title = {ICITPM: Integrity validation of software in iterative Continuous Integration through the use of Trusted Platform Module (TPM)},

author = {Antonio Mu\~{n}oz},

editor = {Aristeidis Farao},

url = {/wp-content/papers/munoz2020icitpm.pdf},

doi = {10.1007/978-3-030-66504-3_9},

isbn = {978-3-030-66504-3},

year  = {2020},

date = {2020-01-01},

urldate = {2020-01-01},

booktitle = {1st Workshop on Dependability and Safety Emerging Cloud and Fog Systems (DeSECSyS) - Colocated with ESORICS, Guildford (United Kingdom). September 2020.},

volume = {12580},

pages = {147\textendash165},

publisher = {Springer},

organization = {Springer},

abstract = {Software development has passed from being rigid and not very flexible, to be automated with constant changes. This happens due to the creation of continuous integration and delivery environments. Nevertheless, developers often rely on such environments due to the large number of amenities they offer. They focus on authentication only, without taking into consideration other aspects of security such as the integrity of the source code and of the compiled binaries. The source code of a software project must not be maliciously modified. Notwithstanding, there is no safe method to verify that its integrity has not been violated. Trusted computing technology, in particular, the Trusted Platform Module (TPM) can be used to implement that secure method.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{munoz2018,

title = {Evolution Oriented Monitoring Oriented to Security Properties for Cloud Applications},

author = {Jamal Toutouh and Antonio Mu\~{n}oz and Sergio Nesmachnow},

url = {/wp-content/papers/munoz2018.pdf},

doi = {10.1145/3230833.3232856},

isbn = {9781450364485},

year  = {2018},

date = {2018-01-01},

urldate = {2018-01-01},

booktitle = {Proceedings of the 13th International Conference on Availability, Reliability and Security},

publisher = {Association for Computing Machinery},

address = {Hamburg, Germany},

series = {ARES '18},

abstract = {Internet is changing from an information space to a dynamic computing space. Data distribution and remotely accessible software services, dynamism, and autonomy are prime attributes. Cloud technology offers a powerful and fast growing approach to the provision of infrastructure (platform and software services) avoiding the high costs of owning, operating, and maintaining the computational infrastructures required for this purpose. Nevertheless, cloud technology still raises concerns regarding security, privacy, governance, and compliance of data and software services offered through it. Concerns are due to the difficulty to verify security properties of the different types of applications and services available through cloud technology, the uncertainty of their owners and users about the security of their services, and the applications based on them, once they are deployed and offered through a cloud. This work presents an innovative and novel evolution-oriented, cloud-specific monitoring model (including an architecture and a language) that aim at helping cloud application developers to design and monitor the behavior and functionality of their applications in a cloud environment.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}