@incollection {Alcaraz2021d, title = {Situational Awareness for CPS}, booktitle = {Encyclopedia of Cryptography, Security and Privacy}, year = {2021}, month = {08/2021}, pages = {1--3}, publisher = {Springer Berlin Heidelberg}, organization = {Springer Berlin Heidelberg}, type = {Encyclopedia}, address = {Berlin, Heidelberg}, keywords = {Anomaly detection, Attack traceability, Prevention, Response, Visualization}, isbn = {978-3-642-27739-9}, doi = {10.1007/978-3-642-27739-9_1732-1}, url = {https://doi.org/10.1007/978-3-642-27739-9_1732-1}, author = {Cristina Alcaraz} } @incollection {alcaraz2019, title = {Secure Interconnection of IT-OT Networks in Industry 4.0}, booktitle = {Critical Infrastructure Security and Resilience: Theories, Methods, Tools and Technologies}, number = {Advanced Sciences and Technologies for Security Applications book series (ASTSA)}, year = {2019}, month = {01/2019}, pages = {201-217}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, abstract = {

Increasingly, the society is witnessing how today{\textquoteright}s industry is adapting\ the new technologies and communication protocols to offer more optimal and reliable\ services to end-users, with support for inter-domain communication belonging\ to diverse critical infrastructures. As a consequence of this technological revolution,\ interconnection mechanisms are required to offer transparency in the connections\ and protection in the different application domains, without this implying a significant\ degradation of the control requirements. Therefore, this book chapter presents\ a reference architecture for the new Industry 4.0 where the interconnection core is\ mainly concentrated in the Policy Decision Points (PDP), which can be deployed\ in high volume data processing and storage technologies such as cloud and fog\ servers. Each PDP authorizes actions in the field/plant according to a set of factors\ (entities, context and risks) computed through the existing access control measures,\ such as RBAC+ABAC+Risk-BAC (Role/Attribute/Risk-Based Access Control, respectively),\ to establish coordinated and constrained accesses in extreme situations.\ Part of these actions also includes proactive risk assessment measures to respond to\ anomalies or intrusive threats in time.

}, isbn = {978-3-030-00024-0}, doi = {https//doi.org/10.1007/978-3-030-00024-0_11}, url = {https://doi.org/10.1007/978-3-030-00024-0_11}, author = {Cristina Alcaraz} } @incollection {1603, title = {Secure Interoperability in Cyber-Physical Systems}, booktitle = {Security Solutions and Applied Cryptography in Smart Grid Communications, IGI Global, USA}, year = {2017}, pages = {137-158}, publisher = { IGI Global}, organization = { IGI Global}, chapter = {8}, address = {USA}, abstract = {

Transparency in control transactions under a secure network architecture is a key topic that must be discussed when aspects related to interconnection between heterogeneous cyber-physical systems (CPSs) arise. The interconnection of these systems can be addressed through an enforcement policy system responsible for managing access control according to the contextual conditions. However, this architecture is not always adequate to ensure a rapid interoperability in extreme crisis situations, and can require an interconnection strategy that permits the timely authorized access from anywhere at any time. To do this, a set of interconnection strategies through the Internet must be studied to explore the ability of control entities to connect to the remote CPSs and expedite their operations, taking into account the context conditions. This research constitutes the contribution of this chapter, where a set of control requirements and interoperability properties are identified to discern the most suitable interconnection strategies.

}, keywords = {authentication, authorization, Control Access, Control systems, cyber-physical systems, Internet of Things, Interoperability, Secure Interconnection}, isbn = {9781522518297}, doi = {10.4018/978-1-5225-1829-7.ch008}, author = {Cristina Alcaraz and Javier Lopez} } @incollection {BC2011Alcaraz, title = {Security Aspects of SCADA and DCS Environments}, booktitle = {Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense}, series = {Advances in Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense. LNCS 7130.}, volume = {7130}, year = {2012}, month = {September 2012}, pages = {120-149}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Heidelberger (Berlin, Alemania)}, abstract = {

SCADA Systems can be seen as a fundamental component in Critical Infrastructures, having an impact in the overall performance of other Critical Infrastructures interconnected. Currently, these systems include in their network designs different types of Information and Communication Technology systems (such as the Internet and wireless technologies), not only to modernize operational processes but also to ensure automation and real-time control. Nonetheless, the use of these new technologies will bring new security challenges, which will have a significant impact on both the business process and home users. Therefore, the main purpose of this Chapter is to address these issues and to analyze the interdependencies of Process Control Systems with ICT systems, to discuss some security aspects and to offer some possible solutions and recommendations.

}, keywords = {Critical Information Infrastructure Protection, SCADA Systems}, isbn = {ISBN:978-3-642-28919-4}, issn = {0302-9743}, author = {Cristina Alcaraz and Gerardo Fernandez and Fernando Carvajal}, editor = {Javier Lopez and Stephen. Wolthunsen and Roberto Setola} } @incollection {Moyano_DHNChapter, title = {Security}, booktitle = {Digital Home Networking}, year = {2011}, pages = {139-202}, chapter = {Security}, issn = {9781848213210}, author = {Francisco Moyano and Rodrigo Roman and Anas Abou El Kalam and Marc Lacoste and Mohamed Maachaoui}, editor = {Romain Carbou and Michel Diaz and Ernesto Exposito and Rodrigo Roman} } @incollection {1626, title = {Security in the Developments Process of Mobile Grid Systems}, booktitle = {Advances in Grid Computing}, year = {2011}, pages = {173-198}, publisher = {Intech}, organization = {Intech}, edition = {Zoran Constantinescu}, author = {David G. Rosado and E. Fernandez-Medina and Javier Lopez} }