@inproceedings {1815, title = {SealedGRID: A Secure Interconnection of Technologies for Smart Grid Applications}, booktitle = {14th International Conference on Critical Information Infrastructures Security (CRITIS 2019)}, volume = {11777}, year = {2019}, month = {12/2019}, pages = {169-175}, publisher = {Springer, Cham}, organization = {Springer, Cham}, abstract = {

In recent years, the Smart Grid has increasingly integrated cutting-edge technologies that generate several benefits for all the stakeholders involved, such as a more accurate billing system and enhanced Demand Response procedures. However, this modernization also brings with it diverse cyber security and privacy issues, which sets the necessity for developing a security platform specifically tailored to this scenario. In this paper, we present SealedGRID, which proposes a flexible architecture that provides security services at all levels by implementing Trusted Execution Environments on their devices, together with advanced authentication and authorization mechanisms, as well as privacy preserving techniques. These technologies are presented in depth and a final security analysis is conducted, which highlights the contributions of this project.

}, isbn = {978-3-030-37669-7}, doi = {https://doi.org/10.1007/978-3-030-37670-3_14}, author = {Aristeidis Farao and Juan E. Rubio and Cristina Alcaraz and Christoforos Ntantogian and Christos Xenakis and Javier Lopez} } @inproceedings {1780, title = {A Segregated Architecture for a Trust-based Network of Internet of Things}, booktitle = {IEEE Consumer Communications \& Networking Conference 2019}, year = {2019}, month = {03/2019}, publisher = {IEEE}, organization = {IEEE}, address = {Las Vegas (USA)}, abstract = {

With the ever-increasing number of smart home devices, the issues related to these environments are also growing. With an ever-growing attack surface, there is no standard way to protect homes and their inhabitants from new threats. The inhabitants are rarely aware of the increased security threats that they are exposed to and how to manage them. To tackle this problem, we propose a solution based on segmented architectures similar to the ones used in industrial systems. In this approach, the smart home is segmented into various levels, which can broadly be categorised into an inner level and external level. The external level is protected by a firewall that checks the communication from/to the Internet to/from the external devices. The internal level is protected by an additional firewall that filters the information and the communications between the external and the internal devices. This segmentation guarantees a trusted environment between the entities belonging to the internal network. In this paper, we propose an adaptive trust model that checks the behaviour of the entities and, through this model, in case the entities violate trust rules they can be put in quarantine or banned from the network.

}, keywords = {Security; Trust; Privacy; Internet of Things (IoT); Smart Home}, doi = {10.1109/CCNC.2019.8651703}, url = {https://ieeexplore.ieee.org/document/8651703}, author = {Davide Ferraris and Carmen Fernandez-Gago and Joshua Daniel and Javier Lopez} } @inproceedings {1600, title = {Selecting Privacy Solutions to Prioritise Control in Smart Metering Systems}, booktitle = {The 11th International Conference on Critical Information Infrastructures Security}, volume = {10242}, year = {2017}, pages = {176-188}, abstract = {

The introduction of the Smart Grid brings with it several benefits to society, because its bi-directional communication allows both users and utilities to have better control over energy usage. However, it also has some privacy issues with respect to the privacy of the customers when analysing their consumption data. In this paper we review the main privacy-preserving techniques that have been proposed and compare their efficiency, to accurately select the most appropriate ones for undertaking control operations. Both privacy and performance are essential for the rapid adoption of Smart Grid technologies.

}, keywords = {and Metering, Control, Data privacy, Smart Grid}, author = {Juan E. Rubio and Cristina Alcaraz and Javier Lopez} } @inproceedings {nunez2017sistema, title = {Sistema de Acceso Delegado a Informaci{\'o}n Cifrada para Apache Hadoop}, booktitle = {III Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad}, year = {2017}, month = {06/2017}, pages = {174-175}, publisher = {URJC}, organization = {URJC}, address = {Madrid}, abstract = {

En este art{\'\i}culo presentamos un sistema que permite delegaci{\'o}n de acceso a informaci{\'o}n cifrada para Apache Hadoop, de forma segura y transparente al usuario. Para ello usamos t{\'e}cnicas criptogr{\'a}ficas avanzadas basadas en el recifrado delegado.\ Con este sistema, es posible almacenar en Hadoop los datos de forma cifrada y delegar de forma segura el acceso a los nodos de computaci{\'o}n.\ El funcionamiento es transparente ya que se integra con la capa del sistema de ficheros nativa HDFS.\ Adem{\'a}s, el recifrado delegado permite hacer rotaci{\'o}n de claves de cifrado de forma segura y r{\'a}pida.

}, keywords = {Big Data, Cryptography, Hadoop, proxy re-encryption}, isbn = {978-84-608-4659-8}, url = {http://hdl.handle.net/10115/14540}, author = {David Nu{\~n}ez and Isaac Agudo and Michael Egorov and MacLane Wilkison} } @inproceedings {1598, title = {Safeguarding Structural Controllability in Cyber-Physical Control Systems}, booktitle = {The 21st European Symposium on Research in Computer Security (ESORICS 2016)}, volume = {9879}, year = {2016}, pages = {471-489}, publisher = {Springer}, organization = {Springer}, address = {Crete, Greece}, abstract = {

Automatic restoration of control wireless networks based on dynamic\ cyber-physical systems has become a hot topic in recent years, since most of their\ elements tend to have serious vulnerabilities that may be exploited by attackers.\ In fact, any exploitation may rapidly extend to the entire control network due to\ its problem of non-locality, where control properties of a system and its structural\ controllability can disintegrate over time. Unfortunately, automated self-healing\ processes may become costly procedures in which the reliability of the strategies\ and the time-critical of any recovery of the control can become key factors to\ re-establish the control properties in due time. This operational need is precisely\ the aim of this paper, in which four reachability-based recovery strategies from\ a thereotical point of view are proposed so as to find the best option/s in terms\ of optimization, robustness and complexity. To do this, new definitions related to\ structural controllability in relation to the type of distribution of the network and\ its control load capacity are given in this paper, resulting in an interesting practical\ study.

}, keywords = {Control systems, cyber-physical systems, restoration, self-healing, structural controllability}, isbn = {978-3-319-45741-3}, author = {Cristina Alcaraz and Javier Lopez} } @inproceedings {932, title = {Security and QoS Tradeoff Recommendation System (SQT-RS) for Dynamic Assessing CPRM-based Systems}, booktitle = {10th ACM International Symposium on QoS and Security for Wireless and Mobile Networks (Q2SWinet{\textquoteright}14)}, year = {2014}, month = {09/2014}, pages = {25-32}, publisher = {ACM}, organization = {ACM}, address = {Montr{\'e}al (Canada)}, abstract = {
Context-based Parametric Relationship Models (CPRM) define complex dependencies between different types of parameters. In particular, Security and QoS relationships, that may occur at different levels of abstraction, are easily identified using CPRM. However, the growing number of parameters and relationships, typically due to the heterogeneous scenarios of future networks, increase the complexity of the final diagrams used in the analysis, and makes the current solution for assessing Security and QoS tradeoff (SQT) impractical for untrained users. In this paper, we define a recommendation system based on contextual parametric relationships in accordance with the definition of CPRM. The inputs for the system are generated dynamically based on the context provided by CPRM-based systems.

}, isbn = {978-1-4503-3027-5}, doi = {10.1145/2642687.2642689}, author = {Ana Nieto and Javier Lopez} } @inproceedings {1810, title = {Structural Controllability of Networks for Non-Interactive Adversarial Vertex Removal}, booktitle = {8th International Conference on Critical Information Infrastructures Security}, volume = {8328}, year = {2013}, pages = {120-132}, publisher = {Springer}, organization = {Springer}, address = {Amsterdam, The Netherlands}, abstract = {

The problem of controllability of networks arises in a number of different\ domains, including in critical infrastructure systems where control must be\ maintained continuously. Recent work by Liu et al. has renewed interest in the\ seminal work by Lin on structural controllability, providing a graph-theoretical\ interpretation. This allows the identification of driver nodes capable of forcing the\ system into a desired state, which implies an obvious target for attackers wishing\ to disrupt the network control. Several methods for identifying driver nodes\ exist, but require undesirable computational complexity. In this paper, we therefore\ investigate the ability to regain or maintain controllability in the presence\ of adversaries able to remove vertices and implicit edges of the controllability\ graph. For this we rely on the POWER DOMINATING SET (PDS) formulation for\ identifying the control structure and study different attack strategies for multiple\ network models. As the construction of a PDS for a given graph is not unique,\ we further investigate different strategies for PDS construction, and provide a\ simulative evaluation.

}, issn = {0302-9743}, doi = {http://link.springer.com/chapter/10.1007\%2F978-3-319-03964-0_11}, author = {Cristina Alcaraz and Estefania Etcheves Miciolino and Stephen Wolthusen} } @inproceedings {Najera_STM11, title = {Secure architecure for the integration of RFID and sensors in personal networks}, booktitle = {7th International Workshop on Security and Trust Management (STM{\textquoteright}11)}, series = {LNCS}, volume = {7170}, year = {2012}, pages = {207-222}, publisher = {Springer}, organization = {Springer}, address = {Copenhagen, Denmark}, abstract = {

The secure integration of RFID technology into the personal network paradigm, as a context-aware technology which complements body sensor networks, would provide notable benefits to applications and potential services of the PN. RFID security as an independent technology is reaching an adequate maturity level thanks to research in recent years; however, its integration into the PN model, interaction with other network resources, remote users and service providers requires a specific security analysis and a PN architecture prepared to support these resource-constrained pervasive technologies. This paper provides such PN architecture and analysis. Aspects such as the management of personal tags as members of the PN, the authentication and secure communication of PN nodes and remote users with the context-aware technologies, and the enforcement of security and privacy policies are discussed in the architecture.

}, isbn = {978-3-642-29962-9}, doi = {10.1007/978-3-642-29963-6_15}, author = {Pablo Najera and Rodrigo Roman and Javier Lopez} } @inproceedings {Nieto2012c, title = {Security and QoS relationships in Mobile Platforms}, booktitle = {The 4th FTRA International Conference on Computer Science and its Applications (CSA 2012)}, series = {Lecture Notes in Electrical Engineering}, volume = {203}, year = {2012}, month = {2012}, pages = {13-21}, publisher = {Springer Netherlands}, organization = {Springer Netherlands}, address = {Jeju (Korea)}, abstract = {

Mobile platforms are becoming a fundamental part of the user{\textquoteright}s daily life. The human-device relationship converts the devices in a repository of personal data that may be stolen or modified by malicious users. Moreover, wireless capabilities open the door to several malicious devices, and mobility represents an added difficulty in the detection of malicious behavior and in the prevention of the same. Furthermore, smartphones are subject to quality of service (QoS) restrictions, due to the user needs for multimedia applications and, in general, the need to be always-on. However, Security and QoS requirements are largely confronted and the mobility and heterogeneous paradigm on the Future Internet makes its coexistence even more difficult, posing new challenges to overcome. We analyze the principal challenges related with Security and QoS tradeoffs in mobile platforms. As a result of our analysis we provide parametric relationships between security and QoS parameters focused on mobile platforms.

}, keywords = {Mobile Platforms, QoS, security, Tradeoffs}, isbn = {978-94-007-5699-1}, doi = {10.1007/978-94-007-5699-1_2}, url = {http://dx.doi.org/10.1007/978-94-007-5699-1_2}, author = {Ana Nieto and Javier Lopez} } @inproceedings {Nieto2012b, title = {Security and QoS tradeoffs: towards a FI perspective}, booktitle = {Advanced Information Networking and Applications Workshops (WAINA), 2012 26th International Conference on}, year = {2012}, month = {03/2012}, pages = {745-750}, publisher = {IEEE}, organization = {IEEE}, address = {Fukuoka (Japan)}, abstract = {

\ Motivated by the growing convergence of diverse types of networks and the raise of new concepts such as Future Internet (FI), in this paper we present an analysis of current research on the development of security mechanisms in a tradeoff with Quality of Service (QoS) mechanisms. More precisely, we pay attention to the Security and QoS problems in resource-constrained networks that are candidates to be an important part of the FI due to their proximity to the user or because of their contribution to the information society. We analyse the current state of the research on security and QoS in the integration of sensors, MANET and cellular networks, with the aim of providing a critical point of view, allowing us to assess whether it is possible that such integration of networks is both secure and efficient.

}, keywords = {Future Internet, QoS, security}, isbn = {978-0-7695-4652-0/12}, doi = {10.1109/WAINA.2012.204}, author = {Ana Nieto and Javier Lopez} } @inproceedings {moyano2012essosds, title = {Service-Oriented Trust and Reputation Architecture}, booktitle = {Proceedings of the Doctoral Symposium of the International Symposium on Engineering Secure Software and Systems (ESSoS-DS 2012)}, series = {CEUR-WS}, volume = {834}, year = {2012}, note = {

Partner:UMA, Project:NESSoS

}, pages = {41-46}, publisher = {CEUR-WS}, organization = {CEUR-WS}, address = {Eindhoven}, abstract = {

As the Future Internet arrives, more complex, service-based applications are spreading. These applications pose several challenges, including the huge amount of entities that must interact and their het- erogeneity. The success of these applications depends on the collaboration and communication of these entities, that might belong to different or- ganizations and administrative domains. Therefore, trust and reputation become two crucial issues. We propose the specification and design of a service-based security architecture that stresses the delivery of trust and reputation services to any application that might require them.

}, issn = {1613-0073}, url = {http://ceur-ws.org/Vol-834/paper7_essosds2012.pdf}, author = {Francisco Moyano and Carmen Fernandez-Gago and Javier Lopez}, editor = {Jorge Cuellar and Nora Koch} } @inproceedings {NF_RECSI12, title = {Sistema Colaborativo de Detecci{\'o}n y Reacci{\'o}n ante Intrusiones basado en Intel vPro}, booktitle = {XII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2012)}, year = {2012}, month = {Sep 2012}, pages = {45-50}, address = {San Sebasti{\'a}n}, abstract = {

En este trabajo proponemos una plataforma para el desarrollo de un sistema colaborativo para la detecci{\'o}n y reacci{\'o}n ante intrusiones, empleando como base las tecnolog{\'\i}as presentes en Intel vPro. La soluci{\'o}n presentada est{\'a} dirigida a solventar la necesidad de implantaci{\'o}n de nuevas tecnolog{\'\i}as que posibiliten la reacci{\'o}n ante ataques, independientemente del sistema operativo usado. Con este fin, en este trabajo abordamos tres puntos fundamentales: la detecci{\'o}n de intrusiones colaborativa, la respuesta autom{\'a}tica de los nodos ante la detecci{\'o}n de una intrusi{\'o}n y el uso de herramientas que posibiliten asegurar la confianza en un nodo. En un sistema colaborativo como el que se propone aqu{\'\i}, un aspecto clave para la seguridad es la protecci{\'o}n de las comunicaciones entre los mecanismos de detecci{\'o}n y reacci{\'o}n frente a intrusiones. La modificaci{\'o}n o el simple acceso a los datos intercambiados por tales sistemas supone un grave riesgo para la seguridad del entorno. Como resultado hemos desarrollado un prototipo preliminar para probar la soluci{\'o}n propuesta en un escenario de ataque real.

}, keywords = {IDS, Intel vPro, IRS}, isbn = {978-84-615-9933-2}, author = {Ana Nieto and Gerardo Fernandez} } @inproceedings {alcaraz2012b, title = {Smart Grid Privacy: Issues and Solutions}, booktitle = {21st International Conference on Computer Communications and Networks (ICCCN)}, year = {2012}, month = {Jul 2012}, pages = {1-5}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Munich, Germany}, abstract = {

Migration to an electronically controlled electrical grid to transmit, distribute, and deliver power to consumers has helped enhance the reliability and efficiency of conventional electricity systems. At the same time, this digitally enabled technology called the Smart Grid has brought new challenges to businesses and consumers alike. A key component of such a grid is the smart-metering technology, which is used to collect energy consumption data from homes and transmitting it back to power distributors. A crucial concern is the privacy related to the collection and use of energy consumption data. We present an analysis of Smart Grid privacy issues and discuss recently proposed solutions that can protect the privacy of Smart Grid users.

}, keywords = {Computer architecture, Data privacy, Electricity, Home appliances, privacy, security, Smart grids}, isbn = {978-1-4673-1543-2}, doi = {10.1109/ICCCN.2012.6289304}, url = {http://ieeexplore.ieee.org/xpl/articleDetails.jsp?tp=\&arnumber=6289304\&contentType=Conference+Publications\&openedRefinements\%3D*\%26pageNumber\%3D7\%26rowsPerPage\%3D100\%26queryText\%3D\%28smart+grid\%29}, author = {F. Siddiqui and S. Zeadally and Cristina Alcaraz and S. Galvao} } @inproceedings {neumann2012strong, title = {Strong Authentication of Humans and Machines in Policy Controlled Cloud Computing Environment Using Automatic Cyber Identity}, booktitle = {Information Security Solutions Europe 2012}, year = {2012}, month = {2012}, pages = {195-206}, publisher = {Springer Vieweg}, organization = {Springer Vieweg}, address = {Brussels, Belgium}, abstract = {

The paper describes the experience with integration of automatic cyber identity technology with policy controlled virtualisation environment. One identity technology has been used to enable strong authentication of users (human beings) as well as machines (host systems) to the virtualization management system. The real experimental evaluation has been done in PASSIVE project (Policy-Assessed system-level Security of Sensitive Information processing in Virtualised Environments - SEVENTH FRAMEWORK PROGRAMME THEME ICT-2009.1.4 INFORMATION AND COMMUNICATION TECHNOLOGIES - Small or medium-scale focused research project - Grant agreement no.: 257644).

}, isbn = {978-3-658-00332-6}, doi = {10.1007/978-3-658-00333-3_19}, author = {Neumann Libor and Tomas Halman and Rotek Pavel and Alexander Boettcher and Julian Stecklina and Michal Sojka and David Nu{\~n}ez and Isaac Agudo}, editor = {Norbert Pohlmann and Helmut Reimer and Wolfgang Schneider} } @inproceedings {Roman11SK, title = {SenseKey - Simplifying the Selection of Key Management Schemes for Sensor Networks}, booktitle = {5th International Symposium on Security and Multimodality in Pervasive Environments (SMPE{\textquoteright}11)}, year = {2011}, month = {March}, publisher = {IEEE}, organization = {IEEE}, address = {Singapore}, abstract = {

Key Management Schemes (KMS) are a very important security mechanism for Wireless Sensor Networks (WSN), as they are used to manage the credentials (i.e. secret keys) that are needed by the security primitives. There is a large number of available KMS protocols in the literature, but it is not clear what should network designers do to choose the most suitable protocol for the needs of their applications. In this paper, we consider that given a certain set of application requirements, the network designer can check which properties comply with those requirements and select the KMS protocols that contains those particular properties. Therefore, we study the relationship between requirements and properties, and we provide a web tool, the SenseKey tool, that can be used to automatically obtain an optimal set of KMS protocols.

}, doi = {10.1109/WAINA.2011.78}, url = {http://www.ftrai.org/smpe2011/}, author = {Rodrigo Roman and Javier Lopez and Cristina Alcaraz and Hsiao Hwa Chen} } @inproceedings {Rios2010, title = {Source Location Privacy Considerations in Wireless Sensor Networks}, booktitle = {4th International Symposium of Ubiquitous Computing and Ambient Intelligence (UCAmI{\textquoteright}10)}, year = {2010}, month = {Sept.}, pages = {29 - 38}, publisher = {IBERGARCETA PUBLICACIONES, S.L.}, organization = {IBERGARCETA PUBLICACIONES, S.L.}, address = {Valencia (Spain)}, abstract = {

Wireless Sensor Networks are considered to be one of the cornerstones of Ambient Intelligence since they can be used in countless applications, where sensors are unobtrusively embedded into the environment to perform operations like monitoring, tracking and reporting. In such scenarios, privacy issues must be carefully considered since the mere observation of the network operation might reveal great amounts of private information to unauthorised parties. One of the problems that is gaining more attention in the realm of privacy, is the location privacy problem, which aims to prevent an attacker from obtaining the location of specific nodes of interest to him. In this paper we provide a general overview of the proposed solutions to counter this threat. Finally, we will also discuss some open challenges and future directions of research for a convenient management of privacy issues in smart environments.

}, isbn = {978-84-92812-61-5}, author = {Ruben Rios and Javier Lopez}, editor = {Lidia Fuentes and Nadia G{\'a}mez and Jos{\'e} Bravo} } @inproceedings {rosado2010c, title = {A Study of Security Approaches for the Development of Mobile Grid Systems}, booktitle = {5th International Conference on Software and Data Technologies (ICSOFT{\textquoteright}10)}, volume = {1}, year = {2010}, month = {july}, pages = {133-138}, publisher = {Springer}, organization = {Springer}, address = {Athens, Greece}, abstract = {

Mobile Grid systems allow us to build highly complex information systems with various and remarkable features (interoperability between multiple security domains, cross-domain authentication and authorization, dynamic, heterogeneous and limited mobile devices, etc), which demand secure development methodologies to build quality software, offering methods, techniques and tools that facilitate the work of the entire team involved in software development. These methodologies should be supported by Grid security architectures that define the main security aspects to be considered, and by solutions to the problem of how to integrate mobile devices within Grid systems. Some approaches regarding secure development methodologies of Grid security architectures and of the integration of mobile devices in the Grid have been found in literature, and these are analyzed and studied in this paper, offering a comparison framework of all the approaches related to security in Mobile Grid environments.

}, isbn = {978-989-8425-22-5}, author = {David G. Rosado and Eduardo Fernandez-Medina and Javier Lopez} } @inproceedings {vivas09, title = {Security Assurance During the Software Development Process}, booktitle = {International Conference on Computer Systems and Technologies (CompSysTech09)}, year = {2009}, pages = {11.7.1-11.7.6}, publisher = {ACM}, organization = {ACM}, address = {Ruse (Bulgary)}, abstract = {

Assurance has been a major topic for critical systems. Assurance is usually associated with safety conditions but has also an important role for checking security requirements. Security is best assured if it is addressed holistically, systematically, and from the very beginning in the software{\textquoteright}s development process. We propose to integrate assurance and system development by letting the different stages of the system development life-cycle be mapped to the structure of the assurance case.

}, isbn = {978-1-60558-986-2}, doi = {10.1145/1731740.1731763}, author = {Jose L. Vivas and Isaac Agudo and Javier Lopez} } @inproceedings {Benito2009, title = {SMEPP: A Secure Middleware for Embedded P2P}, booktitle = {ICT Mobile and Wireless Communications Summit (ICT-MobileSummit{\textquoteright}09)}, year = {2009}, month = {June}, address = {Santander (Spain)}, abstract = {

The increasing presence of embedded devices with internet access capabilities constitutes a new challenge in software development. These devices are now cooperating in a distributed manner towards what has been called as \"Internet of Things\". In this new scenario the client-server model is sometimes not adequate and dynamic ad-hoc networks are more common than before. However, security poses as a hard issue as these systems are extremely vulnerable. In this paper, we introduce SMEPP project, which aims at developing a middleware designed for P2P systems with a special focus on embedded devices and security. SMEPP is designed to be deployed in a wide range of devices. It tries to ease the development of applications hiding platforms details and other aspects such as scalability, adaptability and interoperability. A full implementation of this middleware is already available that incorporates security features specially designed for low-resource devices. Moreover, we describe two business applications being developed using this middleware in the context of \"Digital Home\" and \"Environmental Monitoring in Industrial Environments\".

}, isbn = {978-1-905824-12-0}, author = {Rafael J. Caro and David Garrido and Pierre Plaza and Rodrigo Roman and Nuria Sanz and Jose L. Serrano} } @inproceedings {PNajera2009, title = {Secure Integration of RFID Technology in Personal Documentation for Seamless Identity Validation}, booktitle = {3rd Symposium of Ubiquitous Computing and Ambient Intelligence 2008}, series = {Advances in Soft Computing}, volume = {51/2009}, year = {2008}, month = {October}, pages = {134-138}, publisher = {Springer}, organization = {Springer}, address = {Salamanca (Spain)}, abstract = {

Seamless human identification and authentication in the information system is a fundamental step towards the transparent interaction between the user and its context proposed in ambient intelligence. In this context, the IDENTICA project is aimed to the design and implementation of a distributed authentication platform based on biometrics (i.e. voice and facial image) and personal documentation. In this paper, we present our work in this project focused on the secure integration of RFID technology in personal documentation in order to provide seamless identity validation. Our actual work status, first results and future directions are described in detail.

}, keywords = {Biometry, identity verification, privacy, RFID, security}, isbn = {978-3-540-85866-9}, doi = {http://dx.doi.org/10.1007/978-3-540-85867-6_16}, url = {http://www.springerlink.com/content/bx8t243130k07585/}, author = {Pablo Najera and Francisco Moyano and Javier Lopez} } @inproceedings {Marquez2008, title = {Secure Real-Time Integration of Services in a OSGi Distributed Environment}, booktitle = {Fourth International Conference on Networked Computing and Advanced Information Management (NCM{\textquoteright}08)}, volume = {1}, year = {2008}, month = {September}, pages = {631-635}, publisher = {IEEE}, organization = {IEEE}, address = {Gyeongju, South Korea}, abstract = {This paper presents a service oriented architecture for real-time integration of services, how to distribute them in a local domain and how to define a secure way of accessing resources using users{\textquoteright} and services{\textquoteright} authorization and authentication. This work take advantage of previous European R amp;D projects focused on del.ivering applications and utilities in embedded real-time environments and the convergence of different worlds like Internet and digital TV.}, keywords = {authentication, authorisation, authorization, digital TV, embedded real-time environments, embedded systems, Internet, message authentication, open systems, OSGi distributed environment, secure real-time integration, service oriented architecture, software architecture}, isbn = {978-0-7695-3322-3}, doi = {10.1109/NCM.2008.173}, author = {Jose Manuel Marquez and Javier Jimenez and Isaac Agudo} } @inproceedings {FernandezGago2007, title = {A Survey on the Applicability of Trust Management Systems for Wireless Sensor Networks}, booktitle = {3rd International Workshop on Security, Privacy and Trust in Pervasive and Ubiquitous Computing (SecPerU{\textquoteright}07)}, year = {2007}, pages = {25-30}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Istanbul (Turkey)}, abstract = {

Trust plays an important role in human life environments and virtual organizations. In the context of a network, trust may help its elements to decide whether another member of the same network is being uncooperative or malicious. Trust becomes quite important in self-configurable and autonomous systems, such as wireless sensor networks (WSN). However, very little effort has been done in the field of trust management in WSN. On the other hand, some efforts have been made in quite related fields such as Ad-hoc and P2P networks. In this paper we give an overview of existing trust management solutions, mainly those developed for Ad-Hoc and P2P networks and, more importantly, investigate their suitability to WSN. We also provide some guidelines to aid the development of trust management systems for WSN according to the nature of these networks.

}, doi = {10.1109/SECPERU.2007.3}, author = {Carmen Fernandez-Gago and Rodrigo Roman and Javier Lopez} } @inproceedings {JavierLopez2006, title = {A Secure and Auto-configurable Environment for Mobile Agents in Ubiquitous Computing Scenarios}, booktitle = {Third International Conference on Ubiquitous Intelligence and Computing}, series = {LNCS}, volume = {4159}, number = {4159}, year = {2006}, month = {August}, pages = {977-987}, publisher = {Springer}, organization = {Springer}, address = {Wuhan, China}, abstract = {
The increased heterogeneity and dynamism of new computing paradigms and especially of ubiquitous computing models is boosting the need for auto-configurable systems. In these new scenarios, heterogeneity and dynamism are inherent properties and applications are built by aggregating distributed information and services that are not under the control of a single entity. Furthermore, the current trend towards distributed computing poses important problems related to the need to transmit large amounts of data between the distributed nodes of the computing system; the control over the information; and the flexibility to adapt to heterogeneous client requirements. These characteristics are difficult to manage by traditional computing models. For these reasons, the mobile agent paradigm is gaining momentum and the interest of researchers and industry in this paradigm is increasing. In this paper we present a solution to provide a secure and auto-configurable environment for mobile agents in ubiquitous computing scenarios. Our approach is based on two main building blocks: trusted platforms and profiles.
}, author = {Javier Lopez and Antonio Mana and Mu{\~n}oz, Antonio} } @inproceedings {JavierLopez2006a, title = {Service-Oriented Security Architecture for CII based on Sensor Networks}, booktitle = {2nd International Workshop on Security Privacy and Trust in Pervasive and Ubiquitous Computing (SecPerU{\textquoteright}06)}, year = {2006}, month = {June}, pages = {1-6}, publisher = {IEEE Press}, organization = {IEEE Press}, address = {Lyon, France}, abstract = {

The extraordinary growth of the Information Society is originating a high dependency on ICT. This provokes that those strongly interrelated technological infrastructures, as well as the information systems that underpin them, become highly critical, since their disruption would lead to high economical, material and, sometimes, human loss. As a consequence, the protection of these Critical Information Infrastructures is becoming a major objective for governments and companies. In this paper, we give an overview of the main challenges and open research issues on Critical Information Infrastructure security, and introduce an on-going research project that, using wireless sensor networks as an underlying technology, is dealing with those problems. Our research project focuses on the development of protection, control, evaluation, maintenance and verification mechanisms, integrated into a secure service-oriented architecture.

}, author = {Javier Lopez and Jose A. Montenegro and Rodrigo Roman} } @inproceedings {Cid2006, title = {Software Engineering Techniqes Applied to AmI: Security Patterns}, booktitle = {First International Conference on Ambient Intelligence Developments (AmID{\textquoteright}06)}, year = {2006}, month = {September}, pages = {108-123}, publisher = {Springer}, organization = {Springer}, address = {Sophia-Antipolis (France)}, abstract = {

The realization of the Ambient Intelligence concept entails many important challenges, but the most important barriers to this realization is the lack of adequate support for security. In this paper we present a conceptual model of our solution for building secure systems for AmI environments, taking as basis the concept of Security and Dependability (S\&D) Pattern as a precise representation of validated S\&D solutions and mechanisms. The main elements embedded in our solution framework (S\&D library, monitoring interface and S\&D Manager) are presented both conceptually, and also using a simple example scenario based on an hospital AmI environment.

}, keywords = {Ambient Intelligence, security}, isbn = {978-3-642-01464-2}, doi = {http://dx.doi.org/10.1007/978-2-287-47610-5_8}, author = {Francisco Sanchez-Cid and Mu{\~n}oz, Antonio and Daniel Serrano and Carmen Fernandez-Gago} } @inproceedings {JianyingZhou2006, title = {A Synchronous Multi-Party Contract Signing Protocol Improving Lower Bound of Steps}, booktitle = {21st International Information Security Conference (IFIP SEC{\textquoteright}06)}, series = {LNCS}, number = {201}, year = {2006}, month = {May}, pages = {221-232}, publisher = {Springer}, organization = {Springer}, abstract = {

Contract signing is a fundamental service in doing business. The Internet has facilitated the electronic commerce, and it is necessary to find appropriate mechanisms for contract signing in the digital world. A number of two-party contract signing protocols have been proposed with various features. Nevertheless, in some applications, a contract may need to be signed by multiple parties. Less research has been done on multi-party contract signing. In this paper, we propose a new synchronous multi-party contract signing protocol that, with n parties, it reaches a lower bound of 3(n \− 1) steps in the all-honest case and 4n \− 2 steps in the worst case (i.e., all parties contact the trusted third party). This is so far the most efficient synchronous multi-party contract signing protocol in terms of the number of messages required. We further consider the additional features like timeliness and abuse-freeness in the improved version.

}, author = {Jianying Zhou and Jose A. Onieva and Javier Lopez} } @inproceedings {AntonioMunoz2005, title = {On Secure Profiling}, booktitle = {1st International Workshop on Secure Ubiquitous Networks (SUN{\textquoteright}05)}, year = {2005}, month = {August}, pages = {214-218}, publisher = {IEEE Press}, organization = {IEEE Press}, abstract = {

Ubiquitous environments have several drawbacks to be solved. Most of them are focused on security, and relevant ones are authorization and authentication. Amongst the essential elements to adequately provide solutions, we can find profiles. A profile can be defined as a repository to store structured data from users, networks, devices, applications, etc. As profiles are needed in ubiquitous environments, and these need of secure management as well, in this paper, we provide some initial guidance on the security storage of profiles and on security levels needed for each type of profile. Additionally, we review different alternatives to bear profiles, concluding that smartcards are the most suitable devices.

}, author = {Mu{\~n}oz, Antonio and Jose A. Onieva and Javier Lopez} } @inproceedings {Roman2005e, title = {On the Security of Wireless Sensor Networks}, booktitle = {Computational Science and Its Applications (ICCSA{\textquoteright}05)}, series = {LNCS}, volume = {3482}, year = {2005}, month = {May}, pages = {681-690}, publisher = {Springer}, organization = {Springer}, address = {Singapore}, abstract = {

Wireless Sensor Networks are extremely vulnerable against any kind of internal or external attacks, due to several factors such as resource-constrained nodes and lack of tamper-resistant packages. As a result, security must be an important factor to have in mind when designing the infrastructure and protocols of sensor networks. In this paper we survey the state-of-the-art security issues in sensor networks and highlight the open areas of research.security issues in sensor networks and highlight the open areas of research.

}, isbn = {978-3-540-25862-9}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/11424857_75}, url = {http://www.springerlink.com/content/pvnd4eu8b7acgtpe/}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @inproceedings {Agudo2004, title = {Specification and formal verification of security requirements}, booktitle = {5th international conference on Computer systems and technologies (CompSysTech {\textquoteright}04)}, year = {2004}, pages = {1-6}, publisher = {ACM}, organization = {ACM}, address = {Rousse, Bulgaria}, abstract = {With the grown of internet and distributed applications, security requirements are going inherent to the software development process. Each time one communicates with some other one there are relevant security risk that must be taken in account. This is what is happening in the new soft-ware applications using client/server architecture. We propose including security requirements at the top level of development process, together with functional requirements because they are much related. With this information we are able to extract all communication protocols that are involved in our application and their associated security goals. This is the input to a verification phase in which we look for security flaws. The last step, and the more useful (and the not yet finished) is to use this information to modify our initial specification at the top level of the development process}, isbn = {954-9641-38-4}, doi = {10.1145/1050330.1050440}, author = {Isaac Agudo and Javier Lopez} } @inproceedings {SigridGuergens2001, title = {Suitability of a Classical Analysis Method for E-Commerce Protocols}, booktitle = {IV International Information Security Conference (ISC{\textquoteright}01)}, series = {LNCS}, volume = {2200}, year = {2001}, month = {October}, pages = {46-62}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Malaga, Spain}, abstract = {

We present the adaptation of our model for the validation ofkey distribution and authentication protocols to address speci c needsof protocols for electronic commerce. The two models defer in both thethreat scenario and in the formalization. We demonstrate the suitabilityof our adaptation by analyzing a speci c version of the Internet BillingServer protocol introduced by Carnegie Mellon University. Our analysisshows that, while the security properties a key distribution or authenticationprotocol shall provide are well understood, it is often not clearwhat properties an electronic commerce protocol can or shall provide.Our methods rely on automatic theorem proving tools. Speci cally, weused {\O}tter\", an automatic theorem proving software developed at ArgonneNational Laboratories.

}, author = {Sigrid Gurgens and Javier Lopez} } @inproceedings {AntonioMana1998, title = {Secure Examinations Through The Internet}, booktitle = {IFIP World Computer Congress}, year = {1998}, month = {August}, pages = {695-708}, abstract = {

The objective of the present work is to present a solution to the problem of simultaneously examining groups of students in different computer laboratories while each student uses a computer with Internet access. The system presented focus on security and ease of use, being, at the same time, transparent to the users (students) and providing added services to the main objective of simultaneous examinations in several rooms with just one teacher.

}, author = {Antonio Mana and Francisco Villalba and Javier Lopez} } @inproceedings {1741, title = {Sistema Jer{\'a}rquico de Administraci{\'o}n de Claves P{\'u}blicas para el Correo Electr{\'o}nico}, booktitle = {I Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}97)}, year = {1997}, month = {Sep 1997}, pages = {295-302}, address = {Bilbao (Spain)}, isbn = {84-89654-04-2}, author = {Lucia Pino and Antonio Mana and Juan J. Ortega and Javier Lopez} } @inproceedings {JavierLopez1995, title = {Seguridad de Directorios en Criptosistemas de Clave P{\'u}blica mediante Redes Neuronales en Sistemas de Comunicaciones}, booktitle = {X Symposium Nacional de la Uni{\'o}n Cient{\'\i}fica Internacional de Radio (URSI{\textquoteright}95)}, year = {1995}, month = {Septiembre}, pages = {147-150}, address = {Valladolid, Espa}, author = {Javier Lopez and Francisco Ona and Lucia Pino and Carlos Maraval} } @inproceedings {JavierLopez1994, title = {Sistema de Cifrado de Correo Electr{\'o}nico en Red de Area Local}, booktitle = {III Reuni{\'o}n Espa{\~n}ola de Criptolog{\'\i}a (III REC)}, year = {1994}, month = {Noviembre}, pages = {133-138}, address = {Barcelona, Espa}, author = {Javier Lopez and Carlos Maraval} }