@book {Rios2016, title = {Location Privacy in Wireless Sensor Networks}, series = {CRC Series in Security, Privacy and Trust}, year = {2016}, publisher = {Taylor \& Francis}, organization = {Taylor \& Francis}, isbn = {9781498776332}, url = {https://www.crcpress.com/Location-Privacy-in-Wireless-Sensor-Networks/Rios-Lopez-Cuellar/p/book/9781498776332}, author = {Ruben Rios and Javier Lopez and Jorge Cuellar} } @article {rios2015, title = {Probabilistic receiver-location privacy protection in wireless sensor networks}, journal = {Information Sciences}, volume = {321}, year = {2015}, month = {07/2015}, pages = {205 - 223}, publisher = {Elsevier}, abstract = {

Wireless sensor networks (WSNs) are continually exposed to many types of attacks. Among these, the attacks targeted at the base station are the most devastating ones since this essential device processes and analyses all traffic generated in the network. Moreover, this feature can be exploited by a passive adversary to determine its location based on traffic analysis. This receiver-location privacy problem can be reduced by altering the traffic pattern of the network but the adversary may still be able to reach the base station if he gains access to the routing tables of a number of sensor nodes. In this paper we present HISP-NC (Homogenous Injection for Sink Privacy with Node Compromise protection), a receiver-location privacy solution that consists of two complementary schemes which protect the location of the base station in the presence of traffic analysis and node compromise attacks. The HISP-NC data transmission protocol prevents traffic analysis by probabilistically hiding the flow of real traffic with moderate amounts of fake traffic. Moreover, HISP-NC includes a perturbation mechanism that modifies the routing tables of the nodes to introduce some level of uncertainty in attackers capable of retrieving the routing information from the nodes. Our scheme is validated both analytically and experimentally through extensive simulations.

}, keywords = {node capture, privacy, security, traffic analysis, wireless sensor networks}, issn = {0020-0255}, doi = {10.1016/j.ins.2015.01.016}, author = {Ruben Rios and Jorge Cuellar and Javier Lopez} } @incollection {ruben2014a, title = {Location Privacy in WSNs: Solutions, Challenges, and Future Trends}, booktitle = {Foundations of Security Analysis and Design VII}, volume = {8604}, number = {LNCS}, year = {2014}, pages = {244-282}, publisher = {Springer}, organization = {Springer}, abstract = {

Privacy preservation is gaining popularity in Wireless Sensor Network (WSNs) due to its adoption in everyday scenarios. There are a number of research papers in this area many of which concentrate on the location privacy problem. In this paper we review and categorise these solutions based on the information available to the adversary and his capabilities. But first we analyse whether traditional anonymous communication systems conform to the original requirements of location privacy in sensor networks. Finally, we present and discuss a number of challenges and future trends that demand further attention from the research community.

}, keywords = {Location Privacy, survey, traffic analysis, wireless sensor networks}, isbn = {978-3-319-10081-4}, issn = {0302-9743}, doi = {10.1007/978-3-319-10082-1_9}, author = {Ruben Rios and Javier Lopez and Jorge Cuellar} } @inproceedings {Lopez2014prl, title = {Preserving Receiver-Location Privacy in Wireless Sensor Networks}, booktitle = {Information Security Practice and Experience (ISPEC 2014)}, volume = {8434}, year = {2014}, month = {05/2014}, pages = {15-27}, publisher = {Springer}, organization = {Springer}, address = {Fuzhou, China}, abstract = {

Wireless sensor networks (WSNs) are exposed to many different types of attacks. Among these, the most devastating attack is to compromise or destroy the base station since all communications are addressed exclusively to it. Moreover, this feature can be exploited by a passive adversary to determine the location of this critical device. This receiver-location privacy problem can be reduced by hindering traffic analysis but the adversary may still obtain location information by capturing a subset of sensor nodes in the field. This paper addresses, for the first time, these two problems together in a single solution

}, keywords = {Location Privacy, node capture, traffic analysis, wireless sensor networks}, isbn = {978-3-319-06319-5}, issn = {0302-9743}, doi = {10.1007/978-3-319-06320-1_3}, url = {http://link.springer.com/chapter/10.1007/978-3-319-06320-1_3$\#$}, author = {Javier Lopez and Ruben Rios and Jorge Cuellar} } @inproceedings {rios2013b, title = {Ocultaci{\'o}n de la estaci{\'o}n base en redes inal{\'a}mbricas de sensores}, booktitle = {XI Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL 2013)}, year = {2013}, month = {Oct 2013}, pages = {481-486}, publisher = {Asociaci{\'o}n de Telem{\'a}tica}, organization = {Asociaci{\'o}n de Telem{\'a}tica}, address = {Granada}, abstract = {

La estaci{\'o}n base es el elemento m{\'a}s importante en un red de sensores y, por tanto, es necesario evitar que un atacante pueda hacerse con el control de este valioso dispositivo. Para ello, el atacante puede valerse tanto de t{\'e}cnicas de an{\'a}lisis de tr{\'a}fico como de la captura de nodos. En este trabajo presentamos un esquema que consta de dos fases, la primera est{\'a} dedicada a homogeneizar los patrones de tr{\'a}fico y la segunda encargada de perturbar las tablas de rutas de los nodos. Ambas fases permiten mantener a la estaci{\'o}n base fuera del alcance del atacante con un coste computacional insignificante y un consumo energ{\'e}tico moderado. La validez de nuestro esquema ha sido validada anal{\'\i}ticamente y a trav{\'e}s de numerosas simulaciones.

}, isbn = {978-84-616-5597-7}, author = {Ruben Rios and Jorge Cuellar and Javier Lopez}, editor = {Jes{\'u}s E. D{\'\i}az Verdejo and Jorge Navarro Ortiz and Juan J. Ramos Mu{\~n}oz} } @inproceedings {Rios2012d, title = {Robust Probabilistic Fake Packet Injection for Receiver-Location Privacy in WSN}, booktitle = {17th European Symposium on Research in Computer Security (ESORICS 2012)}, series = {LNCS}, volume = {7459}, year = {2012}, month = {Sep 2012}, pages = {163-180}, publisher = {Springer}, organization = {Springer}, address = {Pisa, Italy}, abstract = {

The singular communication model in wireless sensor networks (WSNs) originate pronounced traffic patterns that allow a local observer to deduce the location of the base station, which must be kept secret for both strategical and security reasons. In this work we present a new receiver-location privacy solution called HISP (Homogenous Injection for Sink Privacy). Our scheme is based on the idea of hiding the flow of real traffic by carefully injecting fake traffic to homogenize the transmissions from a node to its neighbors. This process is guided by a lightweight probabilistic approach ensuring that the adversary cannot decide with sufficient precision in which direction to move while maintaining a moderate amount of fake traffic. Our system is both validated analytically and experimentally through simulations.

}, isbn = {978-3-642-33167-1}, issn = {0302-9743}, doi = {10.1007/978-3-642-33167-1_10}, author = {Ruben Rios and Jorge Cuellar and Javier Lopez}, editor = {Sara Foresti and Moti Yung and Fabio Martinelli} } @article {AlcarazR2012, title = {Selecting key management schemes for WSN applications}, journal = {Computers \& Security}, volume = {31}, number = {38}, year = {2012}, month = {Nov 2012}, pages = {956{\textendash}966}, publisher = {Elsevier}, abstract = {

Key management in wireless sensor networks (WSN) is an active research topic. Due to the fact that a large number of key management schemes (KMS) have been proposed in the literature, it is not easy for a sensor network designer to know exactly which KMS best fits in a particular WSN application. In this article, we offer a comprehensive review on how the application requirements and the properties of various key management schemes influence each other. Based on this review, we show that the KMS plays a critical role in determining the security performance of a WSN network with given application requirements. We also develop a method that allows the network designers to select the most suitable KMS for a specific WSN network setting. In addition, the article also addresses the issues on the current state-of-the-art research on the KMS for homogeneous (i.e. non-hierarchical) networks to provide solutions for establishing link-layer keys in various WSN applications and scenarios.

}, keywords = {security}, issn = {0167-4048}, doi = {10.1016/j.cose.2012.07.002}, url = {http://www.sciencedirect.com/science/article/pii/S0167404812001034}, author = {Cristina Alcaraz and Javier Lopez and Rodrigo Roman and Hsiao-Hwa Chen} } @incollection {Alcaraz2011_ChapterBook, title = {Digital Home Networking: Standards}, booktitle = {Digital Home Networking}, number = {7130}, year = {2011}, pages = {60-96}, publisher = {John Wiley \& Sons Inc.}, organization = {John Wiley \& Sons Inc.}, address = {Reino Unido}, keywords = {Standards, ZigBee}, issn = {978-1-84821-321-0}, author = {Remi Bars and Jorge Gomez and Mohamed Mahdi and Cristina Alcaraz and Rodrigo Roman}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman and Michel Diaz} } @inproceedings {Roman11SK, title = {SenseKey - Simplifying the Selection of Key Management Schemes for Sensor Networks}, booktitle = {5th International Symposium on Security and Multimodality in Pervasive Environments (SMPE{\textquoteright}11)}, year = {2011}, month = {March}, publisher = {IEEE}, organization = {IEEE}, address = {Singapore}, abstract = {

Key Management Schemes (KMS) are a very important security mechanism for Wireless Sensor Networks (WSN), as they are used to manage the credentials (i.e. secret keys) that are needed by the security primitives. There is a large number of available KMS protocols in the literature, but it is not clear what should network designers do to choose the most suitable protocol for the needs of their applications. In this paper, we consider that given a certain set of application requirements, the network designer can check which properties comply with those requirements and select the KMS protocols that contains those particular properties. Therefore, we study the relationship between requirements and properties, and we provide a web tool, the SenseKey tool, that can be used to automatically obtain an optimal set of KMS protocols.

}, doi = {10.1109/WAINA.2011.78}, url = {http://www.ftrai.org/smpe2011/}, author = {Rodrigo Roman and Javier Lopez and Cristina Alcaraz and Hsiao Hwa Chen} } @inproceedings {Benito2009, title = {SMEPP: A Secure Middleware for Embedded P2P}, booktitle = {ICT Mobile and Wireless Communications Summit (ICT-MobileSummit{\textquoteright}09)}, year = {2009}, month = {June}, address = {Santander (Spain)}, abstract = {

The increasing presence of embedded devices with internet access capabilities constitutes a new challenge in software development. These devices are now cooperating in a distributed manner towards what has been called as \"Internet of Things\". In this new scenario the client-server model is sometimes not adequate and dynamic ad-hoc networks are more common than before. However, security poses as a hard issue as these systems are extremely vulnerable. In this paper, we introduce SMEPP project, which aims at developing a middleware designed for P2P systems with a special focus on embedded devices and security. SMEPP is designed to be deployed in a wide range of devices. It tries to ease the development of applications hiding platforms details and other aspects such as scalability, adaptability and interoperability. A full implementation of this middleware is already available that incorporates security features specially designed for low-resource devices. Moreover, we describe two business applications being developed using this middleware in the context of \"Digital Home\" and \"Environmental Monitoring in Industrial Environments\".

}, isbn = {978-1-905824-12-0}, author = {Rafael J. Caro and David Garrido and Pierre Plaza and Rodrigo Roman and Nuria Sanz and Jose L. Serrano} } @incollection {Roman2009b, title = {Trust and Reputation Systems for Wireless Sensor Networks}, booktitle = {Security and Privacy in Mobile and Wireless Networking}, year = {2009}, pages = {105-128}, publisher = {Troubador Publishing Ltd}, organization = {Troubador Publishing Ltd}, abstract = {

The concept of trust has become very relevant in the late years as a consequence of the growth of fields such as internet transactions or electronic commerce. In general, trust has become of paramount importance for any kind of distributed networks, such as wireless sensor networks (WSN in the following). In this chapter of the book, we try to give a general overview of the state of the art on trust management systems for WSN and also try to identify the main features of the architectures of these trust management systems.

}, isbn = {978-1905886-906}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez and Hsiao Hwa Chen}, editor = {Stefanos Gritzalis and Tom Karygiannis and Charalabos Skianis} } @inproceedings {Benito2008, title = {Middleware Seguro EP2P: un Desaf{\'\i}o para las Redes Sociales}, booktitle = {XVIII Jornadas Telecom I+D}, year = {2008}, month = {October}, address = {Bilbao (Spain)}, abstract = {

Los sistemas distribuidos en dispositivos embebidos representan un nuevo reto en el desarrollo de software. Estos sistemas han supuesto una importante revoluci{\'o}n en el paradigma de la computaci{\'o}n distribuida donde se intenta fragmentar un problema grande en m{\'u}ltiples problemas m{\'a}s peque{\~n}os. El nuevo escenario tiende entonces hacia sistemas en los cuales todos los elementos de la red se consideran iguales y los mecanismos de comunicaci{\'o}n est{\~a}n basados en redes ad-hoc que se forman din{\'a}micamente. De esta forma cualquier usuario de la red (en realidad cualquier elemento, hasta el m{\'a}s simple dispositivo) adquiere valor, a mayor colaboraci{\'o}n, mayor {\'e}xito del sistema. Sin embargo, desde el punto de vista de la seguridad, estos sistemas son extremadamente vulnerables. En este art{\'\i}culo se presenta SMEPP, un middleware dise{\~n}ado especialmente para sistemas P2P incluyendo aspectos de seguridad. SMEPP est{\'a} dise{\~n}ado para poder ser ejecutado en un amplio rango de dispositivos (desde redes de sensores hasta PC), y trata de facilitar el desarrollo de aplicaciones ocultando los detalles de la plataforma y otros aspectos tales como escalabilidad, adaptabilidad e interoperabilidad. Adem{\'a}s el art{\'\i}culo presenta dos aplicaciones de alto nivel que utilizando este middleware pasan a ser m{\'a}s personales, m{\'a}s sociales y m{\'a}s baratas, haciendo que todos los usuarios de la red cobren mayor importancia.

}, author = {Rafael J. Caro and David Garrido and Pierre Plaza and Rodrigo Roman and Nuria Sanz and Jose L. Serrano} }