@incollection {2013, title = {POM: A Trust-based AHP-like Methodology to Solve Conflict Requirements for the IoT}, booktitle = {Collaborative Approaches for Cyber Security in Cyber-Physical Systems}, number = {Part of the Advanced Sciences and Technologies for Security Applications book series (ASTSA)}, year = {2023}, month = {01/2023}, pages = {145-170}, publisher = {Springer}, organization = {Springer}, keywords = {Analytic Hierarchy Process (AHP), Internet of Things (IoT), Multi Criteria Decision Analysis (MCDA), Requirements Engineering, Trust}, issn = {1613-5113}, doi = {https://doi.org/10.1007/978-3-031-16088-2_7}, url = {https://link.springer.com/chapter/10.1007/978-3-031-16088-2_7}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {1980, title = {Novel Approaches for the Development of Trusted IoT Entities}, booktitle = {37th International Conference on ICT Systems Security and Privacy Protection {\textendash} IFIP SEC 2022}, year = {2022}, month = {06/2022}, pages = {215-230}, publisher = {Springer}, organization = {Springer}, address = {Copenhagen}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC)., Trust, UML}, issn = {1868-4238 }, doi = {https://doi.org/10.1007/978-3-031-06975-8}, url = {https://link.springer.com/content/pdf/10.1007\%2F978-3-031-06975-8_13}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @article {rios2022pmec, title = {Personal IoT Privacy Control at the Edge}, journal = {IEEE Security \& Privacy }, volume = {20}, year = {2022}, month = {01/2022}, pages = {23 - 32}, publisher = {IEEE}, abstract = {

This article introduces a privacy manager for IoT data based on Edge Computing. This poses the advantage that privacy is enforced before data leaves the control of the user, who is provided with a tool to express data sharing preferences based on a novel context-aware privacy language.

}, issn = {1540-7993}, doi = {10.1109/MSEC.2021.3101865}, author = {Ruben Rios and Jose A. Onieva and Rodrigo Roman and Javier Lopez} } @inproceedings {1979, title = {Privacidad Contextual en entornos Edge}, booktitle = {VII Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2022)}, year = {2022}, month = {06/2022}, pages = {122-129}, address = {Bilbao, Spain}, abstract = {

La privacidad contextual se refiere a la protecci{\'o}n de toda aquella informaci{\'o}n que puede desprenderse de la interacci{\'o}n entre usuarios y/o servicios, exceptuando los datos que el propio usuario elige transmitir. La localizaci{\'o}n, el tiempo, los patrones de uso y los diferentes par{\'a}metros necesarios para realizar la comunicaci{\'o}n son algunos ejemplos. Este tipo de privacidad es extremadamente importante en la computaci{\'o}n edge debido al acercamiento de los recursos de la infraestructura a los usuarios. Por ello, el objetivo de este trabajo es ofrecer un an{\'a}lisis y clasificaci{\'o}n de las diferentes soluciones propuestas en la literatura respecto a la privacidad contextual en entornos edge, mostrando tanto las capacidades de los mecanismos actuales como los desaf{\'\i}os en este campo.

}, keywords = {Computaci{\'o}n edge, Privacidad, Privacidad contextual}, isbn = {978-84-88734-13-6 }, author = {Manuel Ruiz and Ruben Rios and Rodrigo Roman and Javier Lopez} } @inproceedings {morales2022cc, title = {Real-time Crowd Counting based on Wearable Ephemeral IDs}, booktitle = {19th International Conference on Security and Cryptography (SECRYPT 2022)}, year = {2022}, month = {07/2022}, pages = {249-260}, publisher = {Scitepress}, organization = {Scitepress}, address = {Lisbon}, abstract = {Crowd Counting is a very interesting problem aiming at counting people typically based on density averages and/or aerial images. This is very useful to prevent crowd crushes, especially on urban environments with high crowd density, or to count people in public demonstrations. In addition, in the last years, it has become of paramount importance for pandemic management. For those reasons, giving users automatic mechanisms to anticipate high risk situations is essential. In this work, we analyze ID-based Crowd Counting, and propose a real-time Crowd Counting system based on the Ephemeral ID broadcast by contact tracing applications on wearable devices. We also performed some simulations that show the accuracy of our system in different situations. }, keywords = {Crowd Counting, IDS, Pandemics, privacy, Secure Multiparty computation}, isbn = {978-989-758-590-6}, issn = {2184-7711}, doi = {10.5220/0011327200003283}, author = {Daniel Morales and Isaac Agudo and Javier Lopez} } @article {munoz2022, title = {A Test Environment for Wireless Hacking in Domestic IoT Scenarios}, journal = {Mobile Networks and Applications}, year = {2022}, month = {2022/10/14}, publisher = {Springer}, keywords = {Domestic security, Hacking the IoT, IoT security, Network Security}, issn = {1383-469X}, doi = {10.1007/s11036-022-02046-x}, url = {https://doi.org/10.1007/s11036-022-02046-x}, author = {Mu{\~n}oz, Antonio and Carmen Fernandez-Gago and Roberto Lopez-villa} } @inproceedings {1981, title = {Verification and Validation Methods for a Trust-by-Design Framework for the IoT}, booktitle = {36th Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSec{\textquoteright}22)}, volume = {13383}, year = {2022}, month = {07/2022}, pages = {183-194}, publisher = {Springer}, organization = {Springer}, address = {Newark, NJ, USA}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC), Trust, UML}, isbn = {978-3-031-10683-5}, doi = {https://doi.org/10.1007/978-3-031-10684-2_11}, url = {https://link.springer.com/chapter/10.1007/978-3-031-10684-2_11}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @article {Agudo2020, title = {A Blockchain Approach for Decentralized V2X (D-V2X)}, journal = {IEEE Transactions on Vehicular Technology}, volume = {70}, number = {5}, year = {2021}, month = {05/2021}, pages = {4001 - 4010}, publisher = {IEEE}, abstract = {

New mobility paradigms have appeared in recent years, and everything suggests that some more are coming. This fact makes apparent the necessity of modernizing the road infrastructure, the signalling elements and the traffic management systems. Many initiatives have emerged around the term Intelligent Transport System (ITS) in order to define new scenarios and requirements for this kind of applications. We even have two main competing technologies for implementing Vehicular communication protocols (V2X), C-V2X and 802.11p, but neither of them is widely deployed yet.

One of the main barriers for the massive adoption of those technologies is governance. Current solutions rely on the use of a public key infrastructure that enables secure collaboration between the different entities in the V2X ecosystem, but given its global scope, managing such infrastructure requires reaching agreements between many parties, with conflicts of interest between automakers and telecommunication operators. As a result, there are plenty of use cases available and two mature communication technologies, but the complexity at the business layer is stopping the drivers from taking advantage of ITS applications.

Blockchain technologies are defining a new decentralized paradigm for most traditional applications, where smart contracts provide a straightforward mechanism for decentralized governance. In this work, we propose an approach for decentralized V2X (D-V2X) that does not require any trusted authority and can be implemented on top of any communication protocol. We also define a proof-of-concept technical architecture on top of a cheap and highly secure System-on-Chip (SoC) that could allow for massive adoption of D-V2X.\ 

}, issn = {0018-9545}, doi = {10.1109/TVT.2020.3046640}, author = {Isaac Agudo and Manuel Montenegro-G{\'o}mez and Javier Lopez} } @article {Rubio2020IIoT, title = {Integration of a Threat Traceability Solution in the Industrial Internet of Things}, journal = {IEEE Transactions on Industrial Informatics}, volume = {16}, number = {6575-6583}, year = {2020}, month = {10/2020}, publisher = {IEEE}, abstract = {In Industrial Internet of Things (IIoT) scenarios, where a plethora of IoT technologies coexist with consolidated industrial infrastructures, the integration of security mechanisms that provide protection against cyber-security attacks becomes a critical challenge. Due to the stealthy and persistent nature of some of these attacks, such as Advanced Persistent Threats, it is crucial to go beyond traditional Intrusion Detection Systems for the traceability of these attacks. In this sense, Opinion Dynamics poses a novel approach for the correlation of anomalies, which has been successfully applied to other network security domains. In this paper, we aim to analyze its applicability in the IIoT from a technical point of view, by studying its deployment over different IIoT architectures and defining a common framework for the acquisition of data considering the computational constraints involved. The result is a beneficial insight that demonstrates the feasibility of this approach when applied to upcoming IIoT infrastructures. }, keywords = {Detection, Dynamics, IIoT, Industry, Intrusion, Opinion, Traceability}, issn = {1551-3203}, doi = {10.1109/TII.2020.2976747}, author = {Juan E. Rubio and Rodrigo Roman and Javier Lopez} } @article {ferraris2020b, title = {A model-driven approach to ensure trust in the IoT}, journal = {Human-centric Computing and Information Sciences}, volume = {10}, number = {50}, year = {2020}, month = {12/2020}, publisher = {Springer}, abstract = {

The Internet of Things (IoT) is a paradigm that permits smart entities to be interconnected anywhere and anyhow. IoT opens new opportunities but also rises new issues.
In this dynamic environment, trust is useful to mitigate these issues. In fact, it is important that the smart entities could know and trust the other smart entities in order to collaborate with them.
So far, there is a lack of research when considering trust through the whole System Development Life Cycle (SDLC) of a smart IoT entity.
In this paper, we suggest a new approach that considers trust not only at the end of the SDLC but also at the start of it. More precisely, we explore the modeling phase proposing a model-driven approach extending UML and SysML considering trust and its related domains, such as security and privacy.
We propose stereotypes for each diagram in order to give developers a way to represent trust elements in an effective way.
Moreover, we propose two new diagrams that are very important for the IoT: a traceability diagram and a context diagram.
This model-driven approach will help developers to model the smart IoT entities according to the requirements elicited in the previous phases of the SDLC.
These models will be a fundamental input for the following and final phases of the SDLC.

}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC), Trust, UML}, issn = {2192-1962 }, doi = {10.1186/s13673-020-00257-3}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {1814, title = {An Analysis of Trust in Smart Home Devices}, booktitle = {The 20th World Conference on Information Security Applications: WISA-Workshop 2019}, year = {2019}, publisher = {Springer}, organization = {Springer}, address = {Jeju Island, Korea}, abstract = {

In recent times, smart home devices like Amazon Echo and Google Home have reached mainstream popularity. These devices are intrinsically intrusive, being able to access user{\textquoteright}s personal information. There are growing concerns about indiscriminate data collection and invasion of user privacy in smart home devices. Improper trust assumptions and security controls can lead to unauthorized access of the devices, which can have severe consequences (i.e. safety risks). In this paper, we analysed the behaviour of smart home devices with respect to trust relationships. We set up a smart home environment to evaluate how trust is built and managed. Then, we performed a number of interaction tests with different types of users (i.e. owner, guests). As a result, we were able to assess the effectiveness of the provided security controls and identify some relevant security issues. To address them, we defined a trust model and proposed a solution based on it for securing smart home devices.

}, keywords = {Internet of Things (IoT), security, Smart Home., Trust}, author = {Davide Ferraris and Daniel Bastos and Carmen Fernandez-Gago and Fadi El-Moussa and Javier Lopez} } @article {onieva2019vec, title = {Edge-Assisted Vehicular Networks Security}, journal = {IEEE Internet of Things Journal}, volume = {6}, year = {2019}, month = {10/2019}, pages = {8038-8045}, publisher = {IEEE Computer Society}, abstract = {

Edge Computing paradigms are expected to solve some major problems affecting current application scenarios that rely on Cloud computing resources to operate. These novel paradigms will bring computational resources closer to the users and by doing so they will not only reduce network latency and bandwidth utilization but will also introduce some attractive context-awareness features to these systems. In this paper we show how the enticing features introduced by Edge Computing paradigms can be exploited to improve security and privacy in the critical scenario of vehicular networks (VN), especially existing authentication and revocation issues. In particular, we analyze the security challenges in VN and describe three deployment models for vehicular edge computing, which refrain from using vehicular- to-vehicular communications. The result is that the burden imposed to vehicles is considerably reduced without sacrificing the security or functional features expected in vehicular scenarios.

}, keywords = {Critical Infrastructures, Internet of Things, privacy, security, Vehicular Networks}, issn = {2327-4662}, doi = {10.1109/JIOT.2019.2904323}, author = {Jose A. Onieva and Ruben Rios and Rodrigo Roman and Javier Lopez} } @article {roman2018VIS, title = {Immune System for the Internet of Things using Edge Technologies}, journal = {IEEE Internet of Things Journal}, volume = {6}, year = {2019}, month = {06/2019}, pages = {4774-4781}, publisher = {IEEE Computer Society}, abstract = {

The Internet of Things (IoT) and Edge Computing are starting to go hand in hand. By providing cloud services close to end-users, edge paradigms enhance the functionality of IoT deployments, and facilitate the creation of novel services such as augmented systems. Furthermore, the very nature of these paradigms also enables the creation of a proactive defense architecture, an immune system, which allows authorized immune cells (e.g., virtual machines) to traverse edge nodes and analyze the security and consistency of the underlying IoT infrastructure. In this article, we analyze the requirements for the development of an immune system for the IoT, and propose a security architecture that satisfies these requirements. We also describe how such a system can be instantiated in Edge Computing infrastructures using existing technologies. Finally, we explore the potential application of immune systems to other scenarios and purposes.

}, keywords = {Edge computing, Immune Systems, Internet of Things, security}, issn = {2327-4662}, doi = {10.1109/JIOT.2018.2867613}, url = {https://ieeexplore.ieee.org/document/8449989/}, author = {Rodrigo Roman and Ruben Rios and Jose A. Onieva and Javier Lopez} } @inproceedings {1780, title = {A Segregated Architecture for a Trust-based Network of Internet of Things}, booktitle = {IEEE Consumer Communications \& Networking Conference 2019}, year = {2019}, month = {03/2019}, publisher = {IEEE}, organization = {IEEE}, address = {Las Vegas (USA)}, abstract = {

With the ever-increasing number of smart home devices, the issues related to these environments are also growing. With an ever-growing attack surface, there is no standard way to protect homes and their inhabitants from new threats. The inhabitants are rarely aware of the increased security threats that they are exposed to and how to manage them. To tackle this problem, we propose a solution based on segmented architectures similar to the ones used in industrial systems. In this approach, the smart home is segmented into various levels, which can broadly be categorised into an inner level and external level. The external level is protected by a firewall that checks the communication from/to the Internet to/from the external devices. The internal level is protected by an additional firewall that filters the information and the communications between the external and the internal devices. This segmentation guarantees a trusted environment between the entities belonging to the internal network. In this paper, we propose an adaptive trust model that checks the behaviour of the entities and, through this model, in case the entities violate trust rules they can be put in quarantine or banned from the network.

}, keywords = {Security; Trust; Privacy; Internet of Things (IoT); Smart Home}, doi = {10.1109/CCNC.2019.8651703}, url = {https://ieeexplore.ieee.org/document/8651703}, author = {Davide Ferraris and Carmen Fernandez-Gago and Joshua Daniel and Javier Lopez} } @article {RomanIoT18, title = {Evolution and Trends in the Security of the Internet of Things}, journal = {IEEE Computer}, volume = {51}, year = {2018}, month = {07/2018}, pages = {16-25}, publisher = {IEEE Computer Society}, address = {New Jersey, USA}, keywords = {Evolution, Internet of Things, IoT, security, Trends}, issn = {0018-9162}, doi = {10.1109/MC.2018.3011051}, url = {https://ieeexplore.ieee.org/document/8423133/}, author = {Rodrigo Roman and Javier Lopez and Stefanos Gritzalis} } @article {Hiroshi18IoT, title = {Feasibility of Societal Model for Securing Internet of Things}, journal = {KSII Transactions on Internet and Information Systems}, volume = {12}, number = {8}, year = {2018}, month = {08/2018}, pages = {3567-3588}, publisher = {KSII}, abstract = {

In the Internet of Things (IoT) concept, devices communicate autonomously with applications in the Internet. A significant aspect of IoT that makes it stand apart from present-day networked devices and applications is a) the very large number of devices, produced by diverse makers and used by an even more diverse group of users; b) the applications residing and functioning in what were very private sanctums of life e.g. the car, home, and the people themselves. Since these diverse devices require high-level security, an operational model for an IoT system is required, which has built-in security. We have proposed the societal model as a simple operational model. The basic concept of the model is borrowed from human society {\textendash} there will be infants, the weak and the handicapped who need to be protected by guardians. This natural security mechanism works very well for IoT networks which seem to have inherently weak security mechanisms. In this paper, we discuss the requirements of the societal model and examine its feasibility by doing a proof-of-concept implementation.

}, keywords = {Internet of Things, IoT, network architecture, operational model, security, SNMP}, issn = {1976-7277}, doi = {10.3837/tiis.2018.08.003}, url = {http://www.itiis.org/digital-library/manuscript/2082}, author = {Hiroshi Tsunoda and Rodrigo Roman and Javier Lopez and Glenn Mansfield Keeni} } @article {RomanFog16, title = {Mobile edge computing, Fog et al.: A survey and analysis of security threats and challenges}, journal = {Future Generation Computer Systems}, volume = {78}, year = {2018}, month = {01/2018}, pages = {680-698}, publisher = {Elsevier}, abstract = {

For various reasons, the cloud computing paradigm is unable to meet certain requirements (e.g. low latency and jitter, context awareness, mobility support) that are crucial for several applications (e.g. vehicular networks, augmented reality). To fulfil these requirements, various paradigms, such as fog computing, mobile edge computing, and mobile cloud computing, have emerged in recent years. While these edge paradigms share several features, most of the existing research is compartmentalised; no synergies have been explored. This is especially true in the field of security, where most analyses focus only on one edge paradigm, while ignoring the others. The main goal of this study is to holistically analyse the security threats, challenges, and mechanisms inherent in all edge paradigms, while highlighting potential synergies and venues of collaboration. In our results, we will show that all edge paradigms should consider the advances in other paradigms.

}, keywords = {Cloud Computing, Fog computing, Mobile cloud computing, Mobile edge computing, privacy, security}, issn = {0167-739X}, doi = {10.1016/j.future.2016.11.009}, url = {https://authors.elsevier.com/c/1VmhQ,3q5xKgZZ}, author = {Rodrigo Roman and Javier Lopez and Masahiro Mambo} } @inproceedings {1684, title = {A Trust-by-Design Framework for the Internet of Things}, booktitle = {2018 9th IFIP International Conference on New Technologies Mobility and Security (NTMS)}, year = {2018}, month = {04/2018}, publisher = {IEEE}, organization = {IEEE}, address = {Paris}, abstract = {

The Internet of Things (IoT) is an environment of interconnected entities, that are identifiable, usable and controllable via the Internet. Trust is necessary in a system such as IoT as the entities involved should know the effect of interacting with other entities. Moreover, the entities must also be able to trust a system to reliably use it. An IoT system is composed of different entities from different vendors, each of them with a different purpose and a different lifecycle. So considering trust in the whole IoT system lifecycle is useful and necessary to guarantee a good service for the whole system. The heterogeneity and dynamicity of this field make it difficult to ensure trust in IoT. We propose a trust by design framework for including trust in the development of an IoT entity considering all the phases of the life-cycle. It is composed of the K-Model and transversal activities.

}, issn = {2157-4960 }, doi = {10.1109/NTMS.2018.8328674}, url = {http://ieeexplore.ieee.org/document/8328674/}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @article {Lopez2017iotpriv, title = {Evolving privacy: From sensors to the Internet of Things}, journal = {Future Generation Computer Systems}, volume = {75}, year = {2017}, month = {10/2017}, pages = {46{\textendash}57}, publisher = {Elsevier}, abstract = {

The Internet of Things (IoT) envisions a world covered with billions of smart, interacting things capable of offering all sorts of services to near and remote entities. The benefits and comfort that the IoT will bring about are undeniable, however, these may come at the cost of an unprecedented loss of privacy. In this paper we look at the privacy problems of one of the key enablers of the IoT, namely wireless sensor networks, and analyse how these problems may evolve with the development of this complex paradigm. We also identify further challenges which are not directly associated with already existing privacy risks but will certainly have a major impact in our lives if not taken into serious consideration.\ 

}, keywords = {Challenges, Internet of Things, privacy, WSN}, issn = {0167-739X}, doi = {10.1016/j.future.2017.04.045}, author = {Javier Lopez and Ruben Rios and Feng Bao and Guilin Wang} } @inproceedings {nunez2017fallout, title = {The fallout of key compromise in a proxy-mediated key agreement protocol}, booktitle = {31st Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSec{\textquoteright}17)}, volume = {LNCS 10359}, year = {2017}, month = {07/2017}, pages = {453-472}, publisher = {Springer}, organization = {Springer}, address = {Philadelphia, USA}, abstract = {

In this paper, we analyze how key compromise affects the protocol by Nguyen et al. presented at ESORICS 2016, an authenticated key agreement protocol mediated by a proxy entity, restricted to only symmetric encryption primitives and intended for IoT environments. This protocol uses long-term encryption tokens as intermediate values during encryption and decryption procedures, which implies that these can be used to encrypt and decrypt messages without knowing the cor- responding secret keys. In our work, we show how key compromise (or even compromise of encryption tokens) allows to break forward secu- rity and leads to key compromise impersonation attacks. Moreover, we demonstrate that these problems cannot be solved even if the affected user revokes his compromised secret key and updates it to a new one. The conclusion is that this protocol cannot be used in IoT environments, where key compromise is a realistic risk.\ 

}, isbn = {978-3-319-61176-1}, doi = {10.1007/978-3-319-61176-1_25}, author = {David Nu{\~n}ez and Isaac Agudo and Javier Lopez} } @inproceedings {Ruben2017smog, title = {From Smog to Fog: A Security Perspective}, booktitle = {2nd IEEE International Conference on Fog and Edge Mobile Computing (FMEC 2017)}, year = {2017}, month = {06/2017}, pages = {56-61}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Valencia, Spain. 8-11 May 2017}, abstract = {

Cloud computing has some major limitations that hinder its application to some specific scenarios (e.g., Industrial IoT, and remote surgery) where there are particularly stringent requirements, such as extremely low latency. Fog computing is a specialization of the Cloud that promises to overcome the aforementioned limitations by bringing the Cloud closer to end-users. Despite its potential benefits, Fog Computing is still a developing paradigm which demands further research, especially on security and privacy aspects. This is precisely the focus of this paper: to make evident the urgent need for security mechanisms in Fog computing, as well as to present a research strategy with the necessary steps and processes that are being undertaken within the scope of the SMOG project, in order to enable a trustworthy and resilient Fog ecosystem.

}, isbn = {978-1-5386-2859-1}, doi = {10.1109/FMEC.2017.7946408}, author = {Ruben Rios and Rodrigo Roman and Jose A. Onieva and Javier Lopez} } @inproceedings {Rios2017query, title = {Query Privacy in Sensing-as-a-Service Platforms}, booktitle = {32nd International Conference on ICT Systems Security and Privacy Protection (IFIP SEC 2017)}, series = {IFIP Advances in Information and Communication Technology (AICT)}, volume = {502}, year = {2017}, month = {05/2017}, pages = {141{\textendash}154}, publisher = {Springer}, organization = {Springer}, address = {Roma, Italy}, abstract = {

The Internet of Things (IoT) promises to revolutionize the way we interact with the physical world. Even though this paradigm is still far from being completely realized, there already exist Sensing-as-a-Service (S2aaS) platforms that allow users to query for IoT data. While this model offers tremendous benefits, it also entails increasingly challenging privacy issues. In this paper, we concentrate on the protection of user privacy when querying sensing devices through a semi-trusted S2aaS platform. In particular, we build on techniques inspired by proxy re-encryption and k-anonymity to tackle two intertwined problems, namely query privacy and query confidentiality. The feasibility of our solution is validated both analytically and empirically.\ 

}, doi = {10.1007/978-3-319-58469-0_10}, author = {Ruben Rios and David Nu{\~n}ez and Javier Lopez}, editor = {Sabrina De Capitani di Vimercati and Fabio Martinelli} } @inproceedings {Rios2016a, title = {Evoluci{\'o}n y nuevos desafios de privacidad en la Internet de las Cosas}, booktitle = {XIV Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n}, year = {2016}, month = {10/2016}, pages = {209-213}, address = {Mah{\'o}n, Menorca, Islas Baleares}, abstract = {

La Internet de las Cosas (en ingl{\'e}s, Internet of Things\ (IoT)) es una evoluci{\'o}n de la Internet tal y como lo conocemos. Esta nueva versi{\'o}n de Internet incorpora objetos de la vida cotidiana, rompiendo as{\'\i} barrera de los digital y extendi{\'e}ndose al mundo f{\'\i}sico. Estos objetos interactuar{\'a}n entre s{\'\i} y con otras entidades tanto de manera local como remota, y estar{\'a}n dotados de cierta capacidad computacional y sensores para que sean conscientes de lo que ocurre en su entorno. Esto traer{\'a} consigo un sinf{\'\i}n de posibilidades y nuevos servicios, pero tambi{\'e}n dar{\'a} lugar a nuevos y mayores riesgos de privacidad para los ciudadanos. En este art{\'\i}culo, estudiamos los problemas de privacidad actuales de una de las tecnolog{\'\i}as claves para el desarrollo de este prometedor paradigma, las redes de sensores, y analizamos como pueden evolucionar y surgir nuevos riesgos de privacidad al ser completamente integradas en la Internet.

}, keywords = {Challenges, Internet of Things, privacy, Sensors}, author = {Ruben Rios and Javier Lopez} } @inproceedings {431, title = {A Context-based Parametric Relationship Model (CPRM) to Measure the Security and QoS tradeoff in Configurable Environments}, booktitle = {IEEE International Conference on Communications (ICC{\textquoteright}14)}, year = {2014}, month = {06/2014}, pages = {755-760}, publisher = {IEEE Communications Society}, organization = {IEEE Communications Society}, address = {Sydney (Australia)}, abstract = {

Heterogeneity of future networks requires the use of extensible models to understand the Security and QoS tradeoff. We believe that a good starting point is to analyze the Security and QoS tradeoff from a parametric point of view and, for this reason, in a previous paper, we defined the Parametric Rela- tionship Model (PRM) to define relationships between Security and QoS parameters. In this paper, we extend that approach in order to change the behaviour of the model so that different contexts in the same system are considered; that is, to provide a Context-based Parametric Relationship Model (CPRM). The final aim is to provide useful tools for system administrators in order to help them deal with Security and QoS tradeoff issues in the configuration of the environment.\ 

}, isbn = {978-1-4799-2003-7}, doi = {10.1109/ICC.2014.6883410}, author = {Ana Nieto and Javier Lopez} } @inproceedings {909, title = {Herramienta para la Compensaci{\'o}n de Par{\'a}metros de QoS y Seguridad}, booktitle = {XIII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2014)}, year = {2014}, month = {09/2014}, pages = {303-308}, address = {Alicante (Espa{\~n}a).}, abstract = {

El an{\'a}lisis conjunto de mecanismos de seguridad y QoS es esencial para las redes heterog{\'e}neas donde diversos\ dispositivos pueden coexistir en entornos din{\'a}micos. En concreto, los dispositivos no siempre pueden ser\ conocidos, por lo que diferentes requisitos y mecanismos pueden surgir para el an{\'a}lisis. En este art{\'\i}culo,\ proponemos una herramienta para facilitar la configuraci{\'o}n de entornos basada en el an{\'a}lisis param{\'e}trico de\ dependencias, tomando como base de conocimiento un conjunto de par{\'a}metros de seguridad y QoS. Esta forma de\ an{\'a}lisis de par{\'a}metros a alto nivel permite considerar las dependencias y la compensaci{\'o}n entre mecanismos con\ independencia del sistema de informaci{\'o}n subyacente. Posibilita por tanto evaluar el impacto que tales\ mecanismos, y otros definidos acorde al modelo, tienen sobre un sistema previo a su despliegue.\ 

}, isbn = {978-84-9717-323-0}, author = {Ana Nieto and Javier Lopez} } @article {nieto2013mone, title = {A Model for the Analysis of QoS and Security Tradeoff in Mobile Platforms}, journal = {Mobile Networks and Applications (MONET) Journal}, volume = {19}, year = {2014}, month = {02/2014}, pages = {64-78}, publisher = {Springer US}, abstract = {

Today, mobile platforms are multimedia devices that provide different types of traffic with the consequent particular performance demands and, besides, security concerns (e.g. privacy). However, Security and QoS requirements quite often conflict to a large degree; the mobility and heterogeneous paradigm of the Future Internet makes coexistence even more difficult, posing new challenges to overcome. Probably, one of the main challenges is to identify the specific reasons why Security and QoS mechanisms are so related to each other. In this paper, we present a Parametric Relationship Model (PRM) to identify the Security and QoS dependencies, and to elaborate on the Security and QoS tradeoff. In particular, we perform an analysis that focus on the mobile platform environment and, consequently, also considers subjective parameters such user{\textquoteright}s experience, that is crucial for increasing the usability of new solutions in the Future Internet. The final aim of our contribution is to facilitate the development of secure and efficient services for mobile platforms.

}, keywords = {Dependencies, Parameters, PRM, QoS, Relationships, security, Tradeoff}, issn = {1383-469X}, doi = {10.1007/s11036-013-0462-y}, url = {http://dx.doi.org/10.1007/s11036-013-0462-y}, author = {Ana Nieto and Javier Lopez} } @inproceedings {932, title = {Security and QoS Tradeoff Recommendation System (SQT-RS) for Dynamic Assessing CPRM-based Systems}, booktitle = {10th ACM International Symposium on QoS and Security for Wireless and Mobile Networks (Q2SWinet{\textquoteright}14)}, year = {2014}, month = {09/2014}, pages = {25-32}, publisher = {ACM}, organization = {ACM}, address = {Montr{\'e}al (Canada)}, abstract = {
Context-based Parametric Relationship Models (CPRM) define complex dependencies between different types of parameters. In particular, Security and QoS relationships, that may occur at different levels of abstraction, are easily identified using CPRM. However, the growing number of parameters and relationships, typically due to the heterogeneous scenarios of future networks, increase the complexity of the final diagrams used in the analysis, and makes the current solution for assessing Security and QoS tradeoff (SQT) impractical for untrained users. In this paper, we define a recommendation system based on contextual parametric relationships in accordance with the definition of CPRM. The inputs for the system are generated dynamically based on the context provided by CPRM-based systems.

}, isbn = {978-1-4503-3027-5}, doi = {10.1145/2642687.2642689}, author = {Ana Nieto and Javier Lopez} } @article {roman2013iot, title = {On the features and challenges of security and privacy in distributed internet of things}, journal = {Computer Networks}, volume = {57}, year = {2013}, month = {July 2013}, pages = {2266{\textendash}2279}, publisher = {Elsevier}, abstract = {

In the Internet of Things, services can be provisioned using centralized architectures, where central entities acquire, process, and provide information. Alternatively, distributed architectures, where entities at the edge of the network exchange information and collaborate with each other in a dynamic way, can also be used. In order to understand the applicability and viability of this distributed approach, it is necessary to know its advantages and disadvantages {\textendash} not only in terms of features but also in terms of security and privacy challenges. The purpose of this paper is to show that the distributed approach has various challenges that need to be solved, but also various interesting properties and strengths.

}, keywords = {Internet of Things, Wireless Sensor Network}, issn = {1389-1286}, doi = {10.1016/j.comnet.2012.12.018}, url = {http://www.sciencedirect.com/science/article/pii/S1389128613000054}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @article {1752, title = {Security of Industrial Sensor Network-based Remote Substations in the context of the Internet of Things}, journal = {Ad Hoc Networks}, volume = {11}, year = {2013}, month = {2013}, pages = {1091{\textendash}1104}, publisher = {Elsevier}, abstract = {

The main objective of remote substations is to provide the central system with sensitive information from critical infrastructures, such as generation, distribution or transmission power systems. Wireless sensor networks have been recently applied in this particular context due to their attractive services and inherent benefits, such as simplicity, reliability and cost savings. However, as the number of control and data acquisition systems that use the Internet infrastructure to connect to substations increases, it is necessary to consider what connectivity model the sensor infrastructure should follow: either completely isolated from the Internet or integrated with it as part of the Internet of Things paradigm. This paper therefore addresses this question by providing a thorough analysis of both security requirements and infrastructural requirements corresponding to all those TCP/IP integration strategies that can be applicable to networks with constrained computational resources.

}, keywords = {Industrial Control Networks, Internet of Things, Supervisory Control and Data Acquisition (SCADA) Systems, The Internet, wireless sensor networks}, issn = {1570-8705}, doi = {http://dx.doi.org/10.1016/j.adhoc.2012.12.001}, author = {Cristina Alcaraz and Rodrigo Roman and Pablo Najera and Javier Lopez} } @article {najerascn12, title = {User-centric secure integration of personal RFID tags and sensor networks}, journal = {Security and Communication Networks}, volume = {6}, year = {2013}, month = {Oct 2013}, pages = {1177{\textendash}1197}, publisher = {Wiley-Blackwell}, abstract = {

A personal network (PN) should enable the collaboration of user{\textquoteright}s devices and services in a flexible, self-organizing and friendly manner. For such purpose, the PN must securely accommodate heterogeneous technologies with uneven computational and communication resources. In particular, personal RFID tags can enable seamless recognition of user{\textquoteright}s context, provide user authentication and enable novel services enhancing the quality and quantity of data handled by the PN. However, the highly constrained features of common RFID tags and their passive role in the network highlights the need of an adequate secure communication model with personal tags which enables their participation as a member of the PN. In this paper, we present our concept of PN, with special emphasis on the role of RFID and sensor networks, and define a secure architecture for PNs including methods for the secure access to context-aware technologies from both local PN members and the Internet of Things. The PN architecture is designed to support differentiated security mechanisms to maximize the level of security for each type of personal device. Furthermore, we analyze which security solutions available in the literature can be adapted for our architecture, as well as the challenges and security mechanisms still necessary in the secure integration of personal tags.

}, issn = {1939-0114}, doi = {10.1002/sec.684}, url = {http://dx.doi.org/10.1002/sec.684}, author = {Pablo Najera and Rodrigo Roman and Javier Lopez} } @inproceedings {Clarke:2012, title = {Trust \& Security RTD in the Internet of Things: Opportunities for International Cooperation}, booktitle = {Proceedings of the First International Conference on Security of Internet of Things}, series = {SecurIT {\textquoteright}12}, year = {2012}, pages = {172{\textendash}178}, publisher = {ACM}, organization = {ACM}, address = {New York, NY, USA}, abstract = {

While there has been considerable progress in the research and technological development (RTD) of the Internet of Things (IoT), there is still considerable RTD required by international communities for the trust, privacy and security research challenges arising from the constitution of the IoT architectures, infrastructures, communications, devices, objects, applications and services. In this paper, we present an thorough analysis of the ongoing and future RTD work, specifically in Europe, regarding trust, privacy and security of the Internet of Things with a view towards enabling international cooperation efforts around the globe to solve these major research challenges.

}, keywords = {international cooperation (INCO), Internet of Things, privacy, research and technological development (RTD), security, Trust}, isbn = {978-1-4503-1822-8}, doi = {10.1145/2490428.2490452}, url = {http://doi.acm.org/10.1145/2490428.2490452}, author = {Clarke, James and Roman, Rodrigo and Sharma, Abhishek and Lopez, Javier and Suri, Neeraj} } @article {roman2011, title = {Key management systems for sensor networks in the context of the Internet of Things}, journal = {Computers \& Electrical Engineering}, volume = {37}, year = {2011}, month = {Mar 2011}, pages = {147-159}, publisher = {Elsevier}, abstract = {

If a wireless sensor network (WSN) is to be completely integrated into the Internet as part of the Internet of Things (IoT), it is necessary to consider various security challenges, such as the creation of a secure channel between an Internet host and a sensor node. In order to create such a channel, it is necessary to provide key management mechanisms that allow two remote devices to negotiate certain security credentials (e.g. secret keys) that will be used to protect the information flow. In this paper we will analyse not only the applicability of existing mechanisms such as public key cryptography and pre-shared keys for sensor nodes in the IoT context, but also the applicability of those link-layer oriented key management systems (KMS) whose original purpose is to provide shared keys for sensor nodes belonging to the same WSN.

}, issn = {0045-7906}, doi = {10.1016/j.compeleceng.2011.01.009}, url = {http://www.sciencedirect.com/science/article/B6V25-527FRSD-1/2/62661c595153993639c43b9b331d8d66}, author = {Rodrigo Roman and Cristina Alcaraz and Javier Lopez and Nicolas Sklavos} } @article {1633, title = {Securing the Internet of Things}, journal = {IEEE Computer}, volume = {44}, number = {9}, year = {2011}, month = {Sept 2011}, pages = {51 -58}, publisher = {IEEE}, abstract = {

This paper presents security of Internet of things. In the Internet of Things vision, every physical object has a virtual component that can produce and consume services Such extreme interconnection will bring unprecedented convenience and economy, but it will also require novel approaches to ensure its safe and ethical use. The Internet and its users are already under continual attack, and a growing economy-replete with business models that undermine the Internet{\textquoteright}s ethical use-is fully focused on exploiting the current version{\textquoteright}s foundational weaknesses.

}, keywords = {business models, computer network security, Internet, Internet of Things, Internet security, IoT, virtual component}, issn = {0018-9162}, doi = {10.1109/MC.2011.291}, url = {http://dx.doi.org/10.1109/MC.2011.291}, author = {Rodrigo Roman and Pablo Najera and Javier Lopez} } @article {jlopez09, title = {Los Desaf{\'\i}os de Seguridad en la Internet de los Objetos}, journal = {Revista SIC}, volume = {88}, year = {2010}, month = {Feb 2010}, pages = {66-73}, publisher = {Ediciones CODA}, abstract = {

El paradigma de la Internet de los Objetos, donde todos aquellos objetos f{\'\i}sicos que nos rodean tendr{\'a}n la capacidad de generar y consumir informaci{\'o}n en el {\'a}mbito de un mundo virtual, se encuentra cada vez m{\'a}s cerca. Es ahora un buen momento para llamar la atenci{\'o}n sobre sus principales desaf{\'\i}os de seguridad, tanto desde un punto de vista global como asociados a sus elementos m{\'a}s importantes (la tecnolog{\'\i}a RFID y las redes de sensores). As{\'\i}, este paradigma puede ser plenamente comprendido y protegido, evolucionando hacia uno de los nuevos pilares del futuro.

}, issn = {1136-0623}, author = {Javier Lopez and Rodrigo Roman and Pablo Najera} } @inproceedings {calcaraz10, title = {Wireless Sensor Networks and the Internet of Things: Do We Need a Complete Integration?}, booktitle = {1st International Workshop on the Security of the Internet of Things (SecIoT{\textquoteright}10)}, year = {2010}, month = {December}, pages = {xxxx}, publisher = {IEEE}, organization = {IEEE}, address = {Tokyo (Japan)}, abstract = {

Wireless sensor networks (WSN) behave as a digital skin, providing a virtual layer where the information about the physical world can be accessed by any computational system. As a result, they are an invaluable resource for realizing the vision of the Internet of Things (IoT). However, it is necessary to consider whether the devices of a WSN should be completely integrated into the Internet or not. In this paper, we tackle this question from the perspective of security. While we will mention the different security challenges that may arise in such integration process, we will focus on the issues that take place at the network level.

}, issn = {xxxx}, author = {Cristina Alcaraz and Pablo Najera and Javier Lopez and Rodrigo Roman} } @inproceedings {roman2009, title = {Do Wireless Sensor Networks Need to be Completely Integrated into the Internet?}, booktitle = {3rd CompanionAble Workshop - Future Internet of People, Things and Services (IoPTS) eco-Systems}, year = {2009}, month = {December}, pages = {xxxx}, publisher = {xxxx}, organization = {xxxx}, address = {Brussels (Belgium)}, abstract = {

Wireless sensor networks are considered as an integral part of the Internet of Things paradigm. Not only they provide a virtual presence to elements of the real world, but also allow any computationalsystem to know about the physical state of those elements thanks to the use of embedded sensors. In order to belong to the Internet of Things, the elements of a sensor network can implement Internet protocols and services such as the TCP/IP stack and web services. Still, a question that must be raised at this point of time is whether all sensor network applications should be completely integrated into the Internet or not. The purpose of this paper is to analyze this question, reviewing the challenges and security requirements of Internet-enabled sensor networks.

}, issn = {xxxx}, author = {Rodrigo Roman and Javier Lopez and Cristina Alcaraz} } @article {roman2009a, title = {Integrating Wireless Sensor Networks and the Internet: A Security Analysis}, journal = {Internet Research}, volume = {19}, number = {2}, year = {2009}, month = {Mar 2009}, pages = {246-259}, publisher = {Emerald}, abstract = {

Purpose: This paper aims to analyze the security issues that arise when integrating wireless sensor networks (WSN) and the internet. Also, it seeks to review whether existing technology mechanisms are suitable and can be applied in this context.

Design/methodology/approach: The paper considers the possible approaches that can be used to connect a WSN with the internet, and analyzes the security of their interactions.

Findings: By providing the services of the network through a front-end proxy, a sensor network and the internet can interact securely. There are other challenges to be solved if the sensor nodes are integrated into the internet infrastructure, although there exists interesting advances on his matter.

Research limitations and implications: The complete integration of sensor networks and the internet still remains as an open issue.

Practical implications: With the current state of the art, it is possible to develop a secure sensor network that can provide its services to internet hosts with certain security properties.

Originality/value: The paper studies the interactions between sensor networks and the internet from the point of view of security. It identifies both solutions and research challenges.

}, keywords = {Computer networks, Data security, Integration, Internet, Wireless}, issn = {1066-2243}, doi = {10.1108/10662240910952373}, author = {Rodrigo Roman and Javier Lopez} }