@inproceedings {morales2022cc, title = {Real-time Crowd Counting based on Wearable Ephemeral IDs}, booktitle = {19th International Conference on Security and Cryptography (SECRYPT 2022)}, year = {2022}, month = {07/2022}, pages = {249-260}, publisher = {Scitepress}, organization = {Scitepress}, address = {Lisbon}, abstract = {Crowd Counting is a very interesting problem aiming at counting people typically based on density averages and/or aerial images. This is very useful to prevent crowd crushes, especially on urban environments with high crowd density, or to count people in public demonstrations. In addition, in the last years, it has become of paramount importance for pandemic management. For those reasons, giving users automatic mechanisms to anticipate high risk situations is essential. In this work, we analyze ID-based Crowd Counting, and propose a real-time Crowd Counting system based on the Ephemeral ID broadcast by contact tracing applications on wearable devices. We also performed some simulations that show the accuracy of our system in different situations. }, keywords = {Crowd Counting, IDS, Pandemics, privacy, Secure Multiparty computation}, isbn = {978-989-758-590-6}, issn = {2184-7711}, doi = {10.5220/0011327200003283}, author = {Daniel Morales and Isaac Agudo and Javier Lopez} } @article {munoz2022, title = {A Test Environment for Wireless Hacking in Domestic IoT Scenarios}, journal = {Mobile Networks and Applications}, year = {2022}, month = {2022/10/14}, publisher = {Springer}, keywords = {Domestic security, Hacking the IoT, IoT security, Network Security}, issn = {1383-469X}, doi = {10.1007/s11036-022-02046-x}, url = {https://doi.org/10.1007/s11036-022-02046-x}, author = {Mu{\~n}oz, Antonio and Carmen Fernandez-Gago and Roberto Lopez-villa} } @article {Agudo2020, title = {A Blockchain Approach for Decentralized V2X (D-V2X)}, journal = {IEEE Transactions on Vehicular Technology}, volume = {70}, number = {5}, year = {2021}, month = {05/2021}, pages = {4001 - 4010}, publisher = {IEEE}, abstract = {

New mobility paradigms have appeared in recent years, and everything suggests that some more are coming. This fact makes apparent the necessity of modernizing the road infrastructure, the signalling elements and the traffic management systems. Many initiatives have emerged around the term Intelligent Transport System (ITS) in order to define new scenarios and requirements for this kind of applications. We even have two main competing technologies for implementing Vehicular communication protocols (V2X), C-V2X and 802.11p, but neither of them is widely deployed yet.

One of the main barriers for the massive adoption of those technologies is governance. Current solutions rely on the use of a public key infrastructure that enables secure collaboration between the different entities in the V2X ecosystem, but given its global scope, managing such infrastructure requires reaching agreements between many parties, with conflicts of interest between automakers and telecommunication operators. As a result, there are plenty of use cases available and two mature communication technologies, but the complexity at the business layer is stopping the drivers from taking advantage of ITS applications.

Blockchain technologies are defining a new decentralized paradigm for most traditional applications, where smart contracts provide a straightforward mechanism for decentralized governance. In this work, we propose an approach for decentralized V2X (D-V2X) that does not require any trusted authority and can be implemented on top of any communication protocol. We also define a proof-of-concept technical architecture on top of a cheap and highly secure System-on-Chip (SoC) that could allow for massive adoption of D-V2X.\ 

}, issn = {0018-9545}, doi = {10.1109/TVT.2020.3046640}, author = {Isaac Agudo and Manuel Montenegro-G{\'o}mez and Javier Lopez} } @inproceedings {1985, title = {Desarrollo de un sem{\'a}foro inteligente basado en comunicaciones seguras}, booktitle = {XIV Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL 2019)}, year = {2019}, month = {10/2019}, abstract = {

En los nuevos paradigmas de movilidad surgidos durante los {\'u}ltimos a{\~n}os y en aquellos a{\'u}n por llegar ha quedado patente la necesidad de modernizar la infraestructura viaria y los elementos de se{\~n}alizaci{\'o}n y gesti{\'o}n del tr{\'a}fico. En el presente trabajo se presenta una propuesta para esta nueva generaci{\'o}n de dispositivos de gesti{\'o}n del tr{\'a}fico: un prototipo de sem{\'a}foro inteligente conectado que implementa diversas medidas de seguridad. Adem{\'a}s de las tradicionales se{\~n}ales luminosas, los usuarios de la v{\'\i}a pueden conocer a trav{\'e}s de sus dispositivos el estado del sem{\'a}foro, adem{\'a}s de otra informaci{\'o}n complementaria a trav{\'e}s de la difusi{\'o}n de mensajes BLE firmados con criptograf{\'\i}a de curva el{\'\i}ptica. A su vez, el sem{\'a}foro puede ser gestionado remotamente a trav{\'e}s de la tecnolog{\'\i}a LTE Cat M1 protegida por TLS. Esto abre la puerta, entre otros, a facilitar el tr{\'a}nsito de los veh{\'\i}culos de emergencia cuando estos se acercan a un cruce o modificar el tiempo de los estados del ciclo en funci{\'o}n de las necesidades del tr{\'a}fico.

}, author = {Isaac Agudo and Manuel Montenegro-G{\'o}mez} } @article {RomanFog16, title = {Mobile edge computing, Fog et al.: A survey and analysis of security threats and challenges}, journal = {Future Generation Computer Systems}, volume = {78}, year = {2018}, month = {01/2018}, pages = {680-698}, publisher = {Elsevier}, abstract = {

For various reasons, the cloud computing paradigm is unable to meet certain requirements (e.g. low latency and jitter, context awareness, mobility support) that are crucial for several applications (e.g. vehicular networks, augmented reality). To fulfil these requirements, various paradigms, such as fog computing, mobile edge computing, and mobile cloud computing, have emerged in recent years. While these edge paradigms share several features, most of the existing research is compartmentalised; no synergies have been explored. This is especially true in the field of security, where most analyses focus only on one edge paradigm, while ignoring the others. The main goal of this study is to holistically analyse the security threats, challenges, and mechanisms inherent in all edge paradigms, while highlighting potential synergies and venues of collaboration. In our results, we will show that all edge paradigms should consider the advances in other paradigms.

}, keywords = {Cloud Computing, Fog computing, Mobile cloud computing, Mobile edge computing, privacy, security}, issn = {0167-739X}, doi = {10.1016/j.future.2016.11.009}, url = {https://authors.elsevier.com/c/1VmhQ,3q5xKgZZ}, author = {Rodrigo Roman and Javier Lopez and Masahiro Mambo} } @inproceedings {Rios2017query, title = {Query Privacy in Sensing-as-a-Service Platforms}, booktitle = {32nd International Conference on ICT Systems Security and Privacy Protection (IFIP SEC 2017)}, series = {IFIP Advances in Information and Communication Technology (AICT)}, volume = {502}, year = {2017}, month = {05/2017}, pages = {141{\textendash}154}, publisher = {Springer}, organization = {Springer}, address = {Roma, Italy}, abstract = {

The Internet of Things (IoT) promises to revolutionize the way we interact with the physical world. Even though this paradigm is still far from being completely realized, there already exist Sensing-as-a-Service (S2aaS) platforms that allow users to query for IoT data. While this model offers tremendous benefits, it also entails increasingly challenging privacy issues. In this paper, we concentrate on the protection of user privacy when querying sensing devices through a semi-trusted S2aaS platform. In particular, we build on techniques inspired by proxy re-encryption and k-anonymity to tackle two intertwined problems, namely query privacy and query confidentiality. The feasibility of our solution is validated both analytically and empirically.\ 

}, doi = {10.1007/978-3-319-58469-0_10}, author = {Ruben Rios and David Nu{\~n}ez and Javier Lopez}, editor = {Sabrina De Capitani di Vimercati and Fabio Martinelli} }