@article {JUDAS2020, title = {Becoming JUDAS: Correlating Users and Devices during a Digital Investigation}, journal = {IEEE Transactions on Information Forensics \& Security}, volume = {15}, year = {2020}, month = {17/04/2020}, pages = {3325-3334}, publisher = {IEEE}, abstract = {

One of the biggest challenges in IoT-forensics is the analysis and correlation of heterogeneous digital evidence, to enable an effective understanding of complex scenarios. This paper defines a methodology for extracting unique objects (e.g., representing users or devices) from the files of a case, defining the context of the digital investigation and increasing the knowledge progressively, using additional files from the case (e.g. network captures). The solution includes external searches using\ open source intelligence\ (OSINT) sources when needed. In order to illustrate this approach, the proposed methodology is implemented in the\ JSON Users and Devices analysis\ (JUDAS) tool, which is able to generate the context from JSON files, complete it, and show the whole context using dynamic graphs. The approach is validated using the files in an IoT-Forensic digital investigation where an important set of potential digital evidence extracted from Amazon{\textquoteright}s Alexa Cloud is analysed.

}, keywords = {Alexa, Data Normalisation, Digital Investigation, IoT-Forensics, JSON, OSINT}, issn = {1556-6013}, doi = {10.1109/TIFS.2020.2988602}, url = {https://ieeexplore.ieee.org/document/9069950}, author = {Ana Nieto} } @article {HFNR2019, title = {Cybersecurity Profiles based on Human-Centric IoT Devices}, journal = {Human-centric Computing and Information Sciences}, volume = {9}, number = {1}, year = {2019}, pages = {1-23}, publisher = {Springer}, issn = {2192-1962}, doi = {10.1186/s13673-019-0200-y}, author = {Ana Nieto and Ruben Rios} } @inproceedings {1835, title = {Personalized Computer Security Tasks with Automatic Evaluation and Feedback}, booktitle = {International Conference on Information Systems Education and Research (AIS SIGED 2019)}, year = {2019}, month = {12/2019}, keywords = {autonomy, evaluation, feedback, learn by doing, Moodle, self-learning}, isbn = {978-1-7343123-0-0}, author = {Isaac Agudo and Ruben Rios and Ana Nieto} } @incollection {1777, title = {Privacy-Aware Digital Forensics}, booktitle = {Security and Privacy for Big Data, Cloud Computing and Applications}, year = {2019}, month = {09/2019}, publisher = {The Institution of Engineering and Technology (IET) }, organization = {The Institution of Engineering and Technology (IET) }, edition = {Lizhe Wang, Wei Ren, Raymoond Choo and Fatos Xhafa}, address = {United Kingdom}, isbn = {978-1-78561-747-8}, url = {https://www.amazon.es/Security-Privacy-Computing-Applications-Networks/dp/1785617478}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @inproceedings {1709, title = {Analyzing cross-platform attacks: towards a three-actor approach}, booktitle = {The 16th IEEE International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)}, year = {2018}, month = {08/2018}, pages = {536-543}, abstract = {


In the current telecommunications landscape, different devices, systems and platforms are constantly communicating with each other. This heterogeneous environment creates the perfect situation for attacks to pass from one platform to another. This is a particularly worrying scenario, because of the new technologies being used (such as network slicing in 5G), the increasing importance of connected devices in our lives (IoT), and the unpredictable consequences that an attack of this type could have. The current approaches in attack analysis do not take into account these sitations, and the attacker/victim paradigm usually followed may fall short when dealing with these attacks. Thus, in this paper, an architecture for the analysis of cross-platform attacks will be presented, aiming to help understand better this kind of threats and offering solutions to mitigate and track them.

}, isbn = {978-1-5386-7518-2}, doi = {10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00102}, author = {Antonio Acien and Ana Nieto and Javier Lopez} } @inproceedings {CRAT2018, title = {Capture the RAT: Proximity-based Attacks in 5G using the Routine Activity Theory}, booktitle = {The 16th IEEE International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)}, year = {2018}, month = {08/2018}, pages = {520-527}, publisher = {IEEE}, organization = {IEEE}, address = {Athens, Greece}, abstract = {

The fifth generation of cellular networks (5G) will enable different use cases where security will be more critical than ever before (e.g. autonomous vehicles and critical IoT devices). Unfortunately, the new networks are being built on the certainty that security problems can not be solved in the short term. Far from reinventing the wheel, one of our goals is to allow security software developers to implement and test their reactive solutions for the capillary network of 5G devices. Therefore, in this paper a solution for analysing proximity-based attacks in 5G environments is modelled and tested using OMNET++. The solution, named CRAT, is able to decouple the security analysis from the hardware of the device with the aim to extend the analysis of proximity-based attacks to different use-cases in 5G. We follow a high-level approach, in which the devices can take the role of victim, offender and guardian following the principles of the routine activity theory.\ 

}, isbn = {978-1-5386-7518-2}, doi = {10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00100}, url = {https://ieeexplore.ieee.org/document/8511943}, author = {Ana Nieto and Antonio Acien and Javier Lopez} } @inproceedings {1701, title = {A comprehensive methodology for deploying IoT honeypots}, booktitle = {15th International Conference on Trust, Privacy and Security in Digital Business (TrustBus 2018)}, volume = {LNCS 11033}, year = {2018}, month = {09/2018}, pages = {229{\textendash}243}, publisher = {Springer Nature Switzerland AG}, organization = {Springer Nature Switzerland AG}, address = {Regensburg (Germany)}, abstract = {

Recent news have raised concern regarding the security on the IoT field. Vulnerabilities in devices are arising and honeypots are an excellent way to cope with this problem. In this work, current solutions for honeypots in the IoT context, and other solutions adaptable to it are analyzed in order to set the basis for a methodology that allows deployment of IoT honeypot.

}, keywords = {Honeypot, IoT, methodology, security}, doi = {https://doi.org/10.1007/978-3-319-98385-1_16}, author = {Antonio Acien and Ana Nieto and Gerardo Fernandez and Javier Lopez} } @article {NAFMONET2018, title = {Crowdsourcing analysis in 5G IoT: Cybersecurity Threats and Mitigation}, journal = {Mobile Networks and Applications (MONET)}, year = {2018}, month = {10/2018}, pages = {881-889}, publisher = {Springer US}, abstract = {
Crowdsourcing can be a powerful weapon against cyberattacks in 5G networks. In this paper we analyse this idea in detail, starting from the use cases in crowdsourcing focused on security, and highlighting those areas of a 5G ecosystem where crowdsourcing could be used to mitigate local and remote attacks, as well as to discourage criminal activities and cybercriminal behaviour. We pay particular attention to the capillary network, where an infinite number of IoT objects coexist. The analysis is made considering the different participants in a 5G IoT ecosystem.
}, keywords = {5G security, Cybersecurity, digital witness, Proactive security}, issn = {1383-469X}, doi = {https://doi.org/10.1007/s11036-018-1146-4}, author = {Ana Nieto and Antonio Acien and Gerardo Fernandez} } @inproceedings {1706, title = {Definici{\'o}n de procedimientos para fabricar honeypots IoT basados en criterios de b{\'u}squeda}, booktitle = {XV Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n}, year = {2018}, month = {10/2018}, address = {Granada (Espa{\~n}a)}, abstract = {

Con la revoluci{\'o}n tecnol{\'o}gica que ha supuesto la Internet de las Cosas (Internet of Things, IoT) se han presentado escenarios donde la preocupaci{\'o}n por la seguridad en dicho entorno es cada vez m{\'a}s relevante. Est{\'a}n comenzando a surgir vulnerabilidades en varios dispositivos, y los sistemas trampa son una excelente manera de lidiar con este problema. En este trabajo se analizan soluciones para honeypots en el entorno IoT (y en otros que se puedan adaptar) para sentar las bases de una metodolog{\'\i}a que permita el despliegue de honeypots IoT.

}, isbn = {978-84-09-02463-6}, author = {Antonio Acien and Ana Nieto and Gerardo Fernandez and Javier Lopez} } @article {nrlSensors2018, title = {IoT-Forensics meets Privacy: Towards Cooperative Digital Investigations}, journal = {Sensors}, volume = {18}, number = {492}, year = {2018}, month = {02/2018}, publisher = {MDPI}, abstract = {
IoT-Forensics is a novel paradigm for the acquisition of electronic evidence whose operation is conditioned by the peculiarities of the Internet of Things (IoT) context. As a branch of computer forensics, this discipline respects the most basic forensic principles of preservation, traceability, documentation, and authorization. The digital witness approach also promotes such principles in the context of the IoT while allowing personal devices to cooperate in digital investigations by voluntarily providing electronic evidence to the authorities. However, this solution is highly dependent on the willingness of citizens to collaborate and they may be reluctant to do so if the sensitive information within their personal devices is not sufficiently protected when shared with the investigators. In this paper, we provide the digital witness approach with a methodology that enables citizens to share their data with some privacy guarantees. We apply the PRoFIT methodology, originally defined for IoT-Forensics environments, to the digital witness approach in order to unleash its full potential. Finally, we show the feasibility of a PRoFIT-compliant digital witness with two use cases.
}, keywords = {digital witness, IoT-Forensics, privacy}, issn = {1424-8220}, doi = {10.3390/s18020492}, url = {http://www.mdpi.com/1424-8220/18/2/492}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @inproceedings {1699, title = {Modelo para la clasificaci{\'o}n y an{\'a}lisis de ataques Cross-Platform}, booktitle = {IV Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2018)}, year = {2018}, month = {06/2018}, publisher = {Servicio Editorial de Mondragon Unibertsitatea}, organization = {Servicio Editorial de Mondragon Unibertsitatea}, address = {Donostia-San Sebasti{\'a}n (Espa{\~n}a)}, abstract = {

Los ataques cross-platform suponen un serio desaf{\'\i}o para los mecanismos de seguridad cuando los portadores de un ataque dirigido no son conscientes de su participacion en el mismo. Es por ello que, con dispositivos y tecnolog{\'\i}as cada vez mas entrelazadas, en constante comunicaci{\'o}n, numerosos ataques pasan desapercibidos hasta que alcanzan su objetivo final. Estos nuevos escenarios hacen posible una v{\'\i}a de transmision a tener en cuenta, y que se debe abordar cuanto antes, ya que sus consecuencias, especialmente en el panorama de telecomunicaciones actual, podr{\'\i}an ser desoladoras. La rapida transmisi{\'o}n de estos ataques, y la dificultad que supone su prevencion, detecci{\'o}n y mitigaci{\'o}n antes de que se hagan efectivos, hacen que el problema sea particularmente preocupante. En este art{\'\i}culo se presentar{\'a} una arquitectura para el analisis de los ataques cross-platform silenciosos, cuyo objetivo es ayudar a comprender mejor este tipo de amenazas y ofrecer soluciones que permitan mitigarlas y rastrearlas.

}, keywords = {architecture, attack, Cross-platform, security}, isbn = {978-84-09-02697-5}, url = {http://2018.jnic.es/assets/Actas_JNIC2018.pdf}, author = {Antonio Acien and Ana Nieto and Javier Lopez} } @inproceedings {Nieto5GWF, title = {An Overview of Proactive Forensic Solutions and its Applicability to 5G}, booktitle = {IEEE 5G World Forum (5GWF)}, year = {2018}, month = {07/2018}, pages = {191-196}, publisher = {IEEE}, organization = {IEEE}, address = {Santa Clara (USA)}, abstract = {

This article analyses the state of the art of proactive forensic solutions and highlights the importance of preparing the 5G ecosystem to serve digital forensic purposes. The analysis considers the current 5G threat landscape from the ENISA report, and discusses how some of the attacks could be mitigated using proactive forensic mechanisms. In addition, the requirements for deploying proactive forensic solutions in 5G are classified, and analysed based on the specific threats against 5G.\ 

}, isbn = {978-1-5386-4982-4}, doi = {10.1109/5GWF.2018.8516940}, author = {Ana Nieto} } @inproceedings {1650, title = {Configuraci{\'o}n de honeypots adaptativos para an{\'a}lisis de malware}, booktitle = {III Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2017)}, year = {2017}, month = {06/2017}, pages = {91-98}, publisher = {Servicio de Publicaciones de la URJC}, organization = {Servicio de Publicaciones de la URJC}, address = {Madrid (Spain)}, abstract = {

Este trabajo propone una arquitectura de despliegue de honeypots adaptativos, configurados din{\'a}micamente a partir de los requisitos del malware que intenta infectar los servicios trampa. A diferencia de otros trabajos sobre honeypots adaptativos, los mecanismos de adaptabilidad aqu{\'\i} dise{\~n}ados tomar{\'a}n como base informaci{\'o}n de inteligencia sobre amenazas actuales, indicadores de compromiso (IOCs) conocidos, as{\'\i} como informaci{\'o}n de actividades sospechosas actualmente en estudio por los analistas. Este conocimiento ser{\'a} empleado para configurar honeypots de manera din{\'a}mica, permitiendo satisfacer los requisitos necesarios para que el malware pueda desplegar toda su operativa.\ 

}, keywords = {adaptive, dynamic, Honeypot, intelligence, IOC, malware}, isbn = {978-84-608-4659-8}, url = {https://eciencia.urjc.es/handle/10115/14540}, author = {Gerardo Fernandez and Ana Nieto} } @inproceedings {1654, title = {Digital Witness and Privacy in IoT: Anonymous Witnessing Approach}, booktitle = {16th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom 2017)}, year = {2017}, month = {08/2017}, pages = {642-649}, publisher = {IEEE}, organization = {IEEE}, address = {Sydney (Australia)}, abstract = {

The digital witness approach defines the collaboration between IoT devices - from wearables to vehicles - to provide digital evidence through a Digital Chain of Custody to an authorised entity. As one of the cores of the digital witness, binding credentials unequivocally identify the user behind the digital witness. The objective of this article is to perform a critical analysis of the digital witness approach from the perspective of privacy, and to propose solutions that help include some notions of privacy in the scheme (for those cases where it is possible). In addition, digital anonymous witnessing as a tradeoff mechanism between the original approach and privacy requirements is proposed. This is a clear challenge in this context given the restriction that the identities of the links in the digital chain of custody should be known.\ 

}, keywords = {Forensics, IEC Standards, ISO Standards, privacy}, isbn = {978-1-5090-4906-6}, issn = {2324-9013}, doi = {10.1109/Trustcom/BigDataSE/ICESS.2017.295}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @article {NietNLS15, title = {Dynamic Knowledge-based Analysis in non-Secure 5G Green Environments using Contextual Data}, journal = {IEEE Systems Journal}, volume = {11}, number = {99}, year = {2017}, month = {12/2017}, pages = {2479-2489}, publisher = {IEEE}, abstract = {

The growing number of parameters in heteroge- neous networks, as is the case of the fifth generation (5G) Green networks, greatly complicates the analysis of the Security and Quality of Service Tradeoff (SQT). However, studying these types of relationships is crucial in Future Internet scenarios to prevent potential points of failure and to enhance the use of limited resources, increasing the user{\textquoteright}s experience. Therefore, it is fundamental to provide tools and models for training, so that the users understand these dependencies and solve them prior to deploying new solutions. In this paper, a Recommendation System for SQT (SQT-RS) is deployed in 5G Green systems, considering the particular case of relay networks and the impact of eavesdropping and jamming contexts on the models generated by the user, aided by SQT-RS. With this goal in mind, we provide a component for the user to automatically select specific contexts based on 5G Green capabilities.\ 

}, keywords = {cellular networks, Communication system security, Context, Green design, Knowledge-based systems}, issn = {1932-8184}, doi = {10.1109/JSYST.2015.2477782}, author = {Ana Nieto and Nikolaos Nomikos and Javier Lopez and Charalambos Skianis} } @inproceedings {1652, title = {A Methodology for Privacy-Aware IoT-Forensics}, booktitle = {16th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom 2017)}, year = {2017}, month = {08/2017}, pages = {626-633}, publisher = {IEEE}, organization = {IEEE}, address = {Sydney (Australia)}, abstract = {

The Internet of Things (IoT) brings new challenges to digital forensics. Given the number and heterogeneity of devices in such scenarios, it bring extremely difficult to carry out investigations without the cooperation of individuals. Even if they are not directly involved in the offense, their devices can yield digital evidence that might provide useful clarification in an investigation. However, when providing such evidence they may leak sensitive personal information. This paper proposes PRoFIT; a new model for IoT-forensics that takes privacy into consideration by incorporating the requirements of ISO/IEC 29100:2011 throughout the investigation life cycle. PRoFIT is intended to lay the groundwork for the voluntary cooperation of individuals in cyber crime investigations.

}, keywords = {Adaptation models, Forensics, IEC Standards, Information management, ISO Standards, privacy, Software}, isbn = {978-1-5090-4906-6}, issn = {2324-9013}, doi = {10.1109/Trustcom/BigDataSE/ICESS.2017.293}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @inproceedings {1656, title = {Modeling Malware-driven Honeypots}, booktitle = {14th International Conference On Trust, Privacy \& Security In Digital Business (TrustBus 2017)}, volume = {10442}, year = {2017}, month = {08/2017}, pages = {130-144}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, address = {Lyon (France)}, abstract = {

In this paper we propose the Hogney architecture for the deployment of malware-driven honeypots. This new concept refers to honeypots that have been dynamically configured according to the environment expected by malware. The adaptation mechanism designed here is built on services that offer up-to-date and relevant intelligence information\ on current threats. Thus, the Hogney architecture takes advantage of recent Indicators Of Compromise\ (IOC) and information about suspicious activity currently being studied by analysts. The information gathered from these services is then used to adapt honeypots to fulfill malware requirements, inviting them to unleash their full strength.

}, keywords = {adaptive, dynamic, Honeypot, intelligence, IOC, malware}, isbn = {978-3-319-64482-0}, doi = {https://doi.org/10.1007/978-3-319-64483-7_9}, url = {https://link.springer.com/chapter/10.1007/978-3-319-64483-7_9}, author = {Gerardo Fernandez and Ana Nieto and Javier Lopez} } @inproceedings {1655, title = {PRoFIT: modelo forense-IoT con integraci{\'o}n de requisitos de privacidad}, booktitle = {XIII Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL 2017)}, volume = {Libro de actas}, year = {2017}, month = {01/2018}, pages = {302-309}, publisher = {Editorial Universitat Polit{\`e}cnica de Val{\`e}ncia}, organization = {Editorial Universitat Polit{\`e}cnica de Val{\`e}ncia}, address = {Valencia}, isbn = {978-84-9048-595-8}, doi = {http://dx.doi.org/10.4995/JITEL2017.2017.7061}, url = {http://jlloret.webs.upv.es/jitel2017/files/ACTASJITEL2017.pdf}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @inproceedings {1648, title = {Requisitos y soluciones de privacidad para la testificaci{\'o}n digital}, booktitle = {III Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2017)}, volume = {Actas del JNIC 2017}, year = {2017}, pages = {51-58}, publisher = { Servicio de Publicaciones de la URJC}, organization = { Servicio de Publicaciones de la URJC}, address = {Madrid (Spain)}, isbn = {978-84-608-4659-8}, url = {https://eciencia.urjc.es/handle/10115/14540}, author = {Ana Nieto and Ruben Rios} } @inproceedings {1582, title = {Arquitectura funcional para la cadena de custodia digital en objetos de la IoT}, booktitle = {XIV Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n}, year = {2016}, month = {10/2016}, pages = {168-173}, abstract = {
En la Internet de los Objetos (IoT, por sus siglas en ingl{\'e}s), los ataques pueden ser perpetrados desde dispositivos que enmascaran su rastro ayud{\'a}ndose de la densidad de objetos y usuarios. Actualmente la idea de que los dispositivos de usuario almacenan evidencias que pueden ser muy valiosas para frenar ataques es bien conocida. Sin embargo, la colaboraci{\'o}n de {\'e}stos para denunciar posibles abusos telem{\'a}ticos a{\'u}n est{\'a} por definir. Los testigos digitales son dispositivos concebidos para definir la participaci{\'o}n de dispositivos de usuario en una cadena de custodia digital. La idea es que las evidencias se generan, almacenan y transfieren siguiendo los requisitos marcados por las normas actuales (p.ej. UNE 71505), pero respetando las restricciones en recursos de los dispositivos. En este art{\'\i}culo proponemos una arquitectura funcional para la implementaci{\'o}n del concepto de testigo digital en dispositivos heterog{\'e}neos de la IoT.
}, keywords = {Cadena de custodia digital, Identidad de las cosas, Testigo digital}, isbn = {978-84-608-9470-4}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {ercim-nrl16, title = {Digital Witness: Digital Evidence Management Framework for the Internet of Things}, journal = {ERCIM News}, number = {106}, year = {2016}, month = {07/2016}, pages = {9-9}, publisher = {ERCIM EEIG}, issn = {0926-4981}, url = {http://ercim-news.ercim.eu/images/stories/EN106/EN106-web.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {ieeenet16-nrl, title = {Digital Witness: Safeguarding Digital Evidence by using Secure Architectures in Personal Devices}, journal = {IEEE Network}, year = {2016}, pages = {12-19}, publisher = {IEEE Communications Society}, abstract = {

Personal devices contain electronic evidence associated with the behaviour of their owners and other devices in their environment, which can help clarify the facts of a cyber-crime scene. These devices are usually analysed as containers of proof. However, it is possible to harness the boom of personal devices to define the concept of digital witnesses, where personal devices are able to actively acquire, store, and transmit digital evidence to an authorised entity, reliably and securely. This article introduces this novel concept, providing a preliminary analysis on the management of digital evidence and the technologies that can be used to implement it with security guarantees in IoT environments. Moreover, the basic building blocks of a digital witness are defined.

}, keywords = {Digital Evidence, Identity Delegation, IoT-Forensics, Secure Element}, issn = {0890-8044}, doi = {10.1109/MNET.2016.1600087NM}, url = {http://ieeexplore.ieee.org/document/7764297/$\#$full-text-section}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {nrlSIC16, title = {Testificaci{\'o}n Digital}, journal = {Revista SIC}, volume = {122}, year = {2016}, month = {Nov 2016}, pages = {94-98}, publisher = {Ediciones CODA}, abstract = {

El creciente n{\'u}mero de dispositivos interconectados trae consigo problemas de seguridad bien conocidos; por ejemplo, aquellos debidos a las vulnerabilidades en protocolos muy diversos {\textendash}muchos de ellos propietarios{\textendash} y al factor de error humano introducido por los usuarios. Sin embargo, cabe preguntarse c{\'o}mo podemos usar el despliegue de tales dispositivos en beneficio de la ciberseguridad. En el proyecto IoTest se est{\'a} desarrollando una soluci{\'o}n, el Testigo Digital, que permitir{\'a} a los dispositivos personales con arquitectura de seguridad embebida reaccionar ante ataques virtuales, protegi{\'e}ndonos de los ciberataques emergentes.

}, issn = {1136-0623}, url = {https://revistasic.es/index.php?option=com_content\&view=article\&id=1713\&Itemid=1498}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @inproceedings {1578, title = {Testigo digital: delegaci{\'o}n vinculante de evidencias electr{\'o}nicas para escenarios IoT}, booktitle = {II Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2016)}, year = {2016}, month = {06/2016}, pages = {109-116}, abstract = {

En un mundo en el que los usuarios dependen cada vez m{\'a}s de sus dispositivos, {\'e}stos almacenan gran cantidad de datos y son una fuente muy valiosa de informaci{\'o}n sobre su entorno. Sin embargo, la heterogeneidad y la densidad de los objetos conectados, caracter{\'\i}sticas propias de la Internet de las Cosas (IoT), sirven de velo para ocultar conductas maliciosas que afectan a estos dispositivos, sin que quede rastro de tales acciones. En este art{\'\i}culo definimos el concepto de testigo digital: funcionalidad que permitir{\'a} a los dispositivos personales y otros objetos colaborar para implementar una cadena de custodia digital en la IoT. El fin perseguido es ofrecer soluciones que mitiguen los efectos de la ciberdelincuencia, ampar{\'a}ndose en la colaboraci{\'o}n de los dispositivos con arquitecturas de seguridad embebidas para alertar de conductas maliciosas, y dejar constancia de {\'e}stas.

}, keywords = {computaci{\'o}n forense, elemento seguro, Evidencia electr{\'o}nica, IoT, no-repudio}, isbn = {978-84-608-8070-7}, url = {http://ucys.ugr.es/jnic2016/docs/ActasJNIC2016.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {NL-COMCOM15, title = {Contextualising Heterogeneous Information in Unified Communications with Security Restrictions}, journal = {Computer Communications}, volume = {68}, year = {2015}, month = {09/2015}, pages = {33-46}, publisher = {Elsevier}, abstract = {

The lack of abstraction in a growing semantic, virtual and abstract world poses new challenges for assessing security and QoS tradeoffs. For example, in Future Internet scenarios, where Unified Communications (UC) will take place, being able to predict the final devices that will form the network is not always possible. Without this information the analysis of the security and QoS tradeoff can only be based on partial information to be completed when more information about the environment is available. In this paper, we extend the description of context-based parametric relationship model, providing a tool for assessing the security and QoS tradeoff (SQT) based on interchangeable contexts. Our approach is able to use the heterogeneous information produced by scenarios where UC is present.

}, keywords = {Context, QoS, security, Tradeoff}, issn = {0140-3664}, doi = {10.1016/j.comcom.2015.07.015}, url = {http://www.sciencedirect.com/science/article/pii/S0140366415002534}, author = {Ana Nieto and Javier Lopez} } @article {NNMSVRLS, title = {Relay Selection for Secure 5G Green Communications}, journal = {Telecommunication Systems }, volume = {59}, year = {2015}, month = {05/2015}, pages = {169-187}, publisher = {Springer US}, abstract = {

In this article, we present relay selection policies in applications with secrecy requirements which are of interest in the fifth generation (5G) of wireless networks. More specifically, we provide a classification of relays based on their distinct communication attributes, such as processing, multiple antennas, storage, channel estimation, density and security level. In addition, we discuss the level of efficiency exhibited by each relay class, regarding their impact in delay-critical applications and green communications applications, while aiming at a specific security level at the physical layer. Then, relay selection policies are proposed taking into consideration the goals set by each application. Numerical evaluation of the proposed policies in terms of the average secrecy rate, average delay and power reduction show improved performance compared to other state-of-the-art solutions.\ 

}, keywords = {5G relays, Delay-critical, Power-efficient communications, Relay selection, security}, issn = {1018-4864}, doi = {10.1007/s11235-014-9890-7}, url = {http://dx.doi.org/10.1007/s11235-014-9890-7}, author = {Nikolaos Nomikos and Ana Nieto and Prodromos Makris and Dimitrios N. Skoutas and Demosthenes Vouyioukas and Panagiotis Rizomiliotis and Javier Lopez and Charalambos Skianis} } @article {PATENTDW15, title = {Testigo digital: procedimientos y dispositivos para la gesti{\'o}n segura de evidencias electr{\'o}nicas con credenciales vinculantes}, journal = {Espa{\~n}a, C. Aut{\'o}n./Reg. de explotaci{\'o}n: Andaluc{\'\i}a}, volume = {P201500764}, year = {2015}, month = {10/2015}, publisher = {G06F 21/00}, type = {Invention Patent}, edition = {Invention Patent}, chapter = {WO2017068222}, address = {Spain}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @inproceedings {431, title = {A Context-based Parametric Relationship Model (CPRM) to Measure the Security and QoS tradeoff in Configurable Environments}, booktitle = {IEEE International Conference on Communications (ICC{\textquoteright}14)}, year = {2014}, month = {06/2014}, pages = {755-760}, publisher = {IEEE Communications Society}, organization = {IEEE Communications Society}, address = {Sydney (Australia)}, abstract = {

Heterogeneity of future networks requires the use of extensible models to understand the Security and QoS tradeoff. We believe that a good starting point is to analyze the Security and QoS tradeoff from a parametric point of view and, for this reason, in a previous paper, we defined the Parametric Rela- tionship Model (PRM) to define relationships between Security and QoS parameters. In this paper, we extend that approach in order to change the behaviour of the model so that different contexts in the same system are considered; that is, to provide a Context-based Parametric Relationship Model (CPRM). The final aim is to provide useful tools for system administrators in order to help them deal with Security and QoS tradeoff issues in the configuration of the environment.\ 

}, isbn = {978-1-4799-2003-7}, doi = {10.1109/ICC.2014.6883410}, author = {Ana Nieto and Javier Lopez} } @inproceedings {933, title = {Evaluation of Dynamic Instantiation in CPRM-based Systems}, booktitle = {9th International Conference on Risk and Security of Internet and Systems (CRiSIS{\textquoteright}14)}, volume = {8924}, year = {2014}, pages = {52-66}, publisher = {Springer}, organization = {Springer}, address = {Trento (Italy)}, abstract = {
Context-based Parametric Relationship Models (CPRMs) reduce the complexity of working with various numbers of parameters and dependencies, by adding particular contexts to the final scheme when it is required, dynamically. In this paper the cost of including new information in CPRM is properly analysed, considering the information in the parametric trees defined for the parameters in the CPRM-based system. Some strategies for mitigating the cost of the instantiation process are proposed.
}, isbn = {978-3-319-17127-2}, doi = {10.1007/978-3-319-17127-2_4}, url = {http://dx.doi.org/10.1007/978-3-319-17127-2_4}, author = {Ana Nieto} } @inproceedings {909, title = {Herramienta para la Compensaci{\'o}n de Par{\'a}metros de QoS y Seguridad}, booktitle = {XIII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2014)}, year = {2014}, month = {09/2014}, pages = {303-308}, address = {Alicante (Espa{\~n}a).}, abstract = {

El an{\'a}lisis conjunto de mecanismos de seguridad y QoS es esencial para las redes heterog{\'e}neas donde diversos\ dispositivos pueden coexistir en entornos din{\'a}micos. En concreto, los dispositivos no siempre pueden ser\ conocidos, por lo que diferentes requisitos y mecanismos pueden surgir para el an{\'a}lisis. En este art{\'\i}culo,\ proponemos una herramienta para facilitar la configuraci{\'o}n de entornos basada en el an{\'a}lisis param{\'e}trico de\ dependencias, tomando como base de conocimiento un conjunto de par{\'a}metros de seguridad y QoS. Esta forma de\ an{\'a}lisis de par{\'a}metros a alto nivel permite considerar las dependencias y la compensaci{\'o}n entre mecanismos con\ independencia del sistema de informaci{\'o}n subyacente. Posibilita por tanto evaluar el impacto que tales\ mecanismos, y otros definidos acorde al modelo, tienen sobre un sistema previo a su despliegue.\ 

}, isbn = {978-84-9717-323-0}, author = {Ana Nieto and Javier Lopez} } @article {nieto2013mone, title = {A Model for the Analysis of QoS and Security Tradeoff in Mobile Platforms}, journal = {Mobile Networks and Applications (MONET) Journal}, volume = {19}, year = {2014}, month = {02/2014}, pages = {64-78}, publisher = {Springer US}, abstract = {

Today, mobile platforms are multimedia devices that provide different types of traffic with the consequent particular performance demands and, besides, security concerns (e.g. privacy). However, Security and QoS requirements quite often conflict to a large degree; the mobility and heterogeneous paradigm of the Future Internet makes coexistence even more difficult, posing new challenges to overcome. Probably, one of the main challenges is to identify the specific reasons why Security and QoS mechanisms are so related to each other. In this paper, we present a Parametric Relationship Model (PRM) to identify the Security and QoS dependencies, and to elaborate on the Security and QoS tradeoff. In particular, we perform an analysis that focus on the mobile platform environment and, consequently, also considers subjective parameters such user{\textquoteright}s experience, that is crucial for increasing the usability of new solutions in the Future Internet. The final aim of our contribution is to facilitate the development of secure and efficient services for mobile platforms.

}, keywords = {Dependencies, Parameters, PRM, QoS, Relationships, security, Tradeoff}, issn = {1383-469X}, doi = {10.1007/s11036-013-0462-y}, url = {http://dx.doi.org/10.1007/s11036-013-0462-y}, author = {Ana Nieto and Javier Lopez} } @inproceedings {932, title = {Security and QoS Tradeoff Recommendation System (SQT-RS) for Dynamic Assessing CPRM-based Systems}, booktitle = {10th ACM International Symposium on QoS and Security for Wireless and Mobile Networks (Q2SWinet{\textquoteright}14)}, year = {2014}, month = {09/2014}, pages = {25-32}, publisher = {ACM}, organization = {ACM}, address = {Montr{\'e}al (Canada)}, abstract = {
Context-based Parametric Relationship Models (CPRM) define complex dependencies between different types of parameters. In particular, Security and QoS relationships, that may occur at different levels of abstraction, are easily identified using CPRM. However, the growing number of parameters and relationships, typically due to the heterogeneous scenarios of future networks, increase the complexity of the final diagrams used in the analysis, and makes the current solution for assessing Security and QoS tradeoff (SQT) impractical for untrained users. In this paper, we define a recommendation system based on contextual parametric relationships in accordance with the definition of CPRM. The inputs for the system are generated dynamically based on the context provided by CPRM-based systems.

}, isbn = {978-1-4503-3027-5}, doi = {10.1145/2642687.2642689}, author = {Ana Nieto and Javier Lopez} } @article {nietoscn13, title = {Analysis and Taxonomy of Security/QoS tradeoff solutions for the Future Internet}, journal = {Security and Communication Networks (SCN) Journal}, volume = {7}, year = {2013}, pages = {2778-2803}, publisher = {Wiley-Blackwell}, abstract = {

Motivated by the growing convergence of diverse types of networks and the rise of concepts such as Future Internet (FI), in this paper we analyse the coexistence of security mechanisms and Quality of Service (QoS) mechanisms in resourceconstrained networks, that are relevant types of networks within the FI environment. More precisely, we analyse the current state of the research on security and QoS in the integration of Wireless Sensor Networks (WSNs), Mobile Ad-Hoc Networks (MANETs) and cellular networks. Furthermore, we propose a taxonomy to identify similarities among these technologies, as well as the requirements for network interconnection. As a result, we define a dependency-based model for the analysis of Security and QoS tradeoff, and also define a high-level integration architecture for networks in the FI setting. The final goal is to provide a critical point of view that allows to assess whether such an integration of networks can be both secure and efficient.

}, keywords = {cellular networks, IoT, MANET, QoS, security, WSN}, issn = {1939-0114}, doi = {10.1002/sec.809}, url = {http://onlinelibrary.wiley.com/doi/10.1002/sec.809/abstract?deniedAccessCustomisedMessage=\&userIsAuthenticated=false}, author = {Ana Nieto and Javier Lopez} } @inproceedings {Nieto2012c, title = {Security and QoS relationships in Mobile Platforms}, booktitle = {The 4th FTRA International Conference on Computer Science and its Applications (CSA 2012)}, series = {Lecture Notes in Electrical Engineering}, volume = {203}, year = {2012}, month = {2012}, pages = {13-21}, publisher = {Springer Netherlands}, organization = {Springer Netherlands}, address = {Jeju (Korea)}, abstract = {

Mobile platforms are becoming a fundamental part of the user{\textquoteright}s daily life. The human-device relationship converts the devices in a repository of personal data that may be stolen or modified by malicious users. Moreover, wireless capabilities open the door to several malicious devices, and mobility represents an added difficulty in the detection of malicious behavior and in the prevention of the same. Furthermore, smartphones are subject to quality of service (QoS) restrictions, due to the user needs for multimedia applications and, in general, the need to be always-on. However, Security and QoS requirements are largely confronted and the mobility and heterogeneous paradigm on the Future Internet makes its coexistence even more difficult, posing new challenges to overcome. We analyze the principal challenges related with Security and QoS tradeoffs in mobile platforms. As a result of our analysis we provide parametric relationships between security and QoS parameters focused on mobile platforms.

}, keywords = {Mobile Platforms, QoS, security, Tradeoffs}, isbn = {978-94-007-5699-1}, doi = {10.1007/978-94-007-5699-1_2}, url = {http://dx.doi.org/10.1007/978-94-007-5699-1_2}, author = {Ana Nieto and Javier Lopez} } @inproceedings {Nieto2012b, title = {Security and QoS tradeoffs: towards a FI perspective}, booktitle = {Advanced Information Networking and Applications Workshops (WAINA), 2012 26th International Conference on}, year = {2012}, month = {03/2012}, pages = {745-750}, publisher = {IEEE}, organization = {IEEE}, address = {Fukuoka (Japan)}, abstract = {

\ Motivated by the growing convergence of diverse types of networks and the raise of new concepts such as Future Internet (FI), in this paper we present an analysis of current research on the development of security mechanisms in a tradeoff with Quality of Service (QoS) mechanisms. More precisely, we pay attention to the Security and QoS problems in resource-constrained networks that are candidates to be an important part of the FI due to their proximity to the user or because of their contribution to the information society. We analyse the current state of the research on security and QoS in the integration of sensors, MANET and cellular networks, with the aim of providing a critical point of view, allowing us to assess whether it is possible that such integration of networks is both secure and efficient.

}, keywords = {Future Internet, QoS, security}, isbn = {978-0-7695-4652-0/12}, doi = {10.1109/WAINA.2012.204}, author = {Ana Nieto and Javier Lopez} } @inproceedings {NF_RECSI12, title = {Sistema Colaborativo de Detecci{\'o}n y Reacci{\'o}n ante Intrusiones basado en Intel vPro}, booktitle = {XII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2012)}, year = {2012}, month = {Sep 2012}, pages = {45-50}, address = {San Sebasti{\'a}n}, abstract = {

En este trabajo proponemos una plataforma para el desarrollo de un sistema colaborativo para la detecci{\'o}n y reacci{\'o}n ante intrusiones, empleando como base las tecnolog{\'\i}as presentes en Intel vPro. La soluci{\'o}n presentada est{\'a} dirigida a solventar la necesidad de implantaci{\'o}n de nuevas tecnolog{\'\i}as que posibiliten la reacci{\'o}n ante ataques, independientemente del sistema operativo usado. Con este fin, en este trabajo abordamos tres puntos fundamentales: la detecci{\'o}n de intrusiones colaborativa, la respuesta autom{\'a}tica de los nodos ante la detecci{\'o}n de una intrusi{\'o}n y el uso de herramientas que posibiliten asegurar la confianza en un nodo. En un sistema colaborativo como el que se propone aqu{\'\i}, un aspecto clave para la seguridad es la protecci{\'o}n de las comunicaciones entre los mecanismos de detecci{\'o}n y reacci{\'o}n frente a intrusiones. La modificaci{\'o}n o el simple acceso a los datos intercambiados por tales sistemas supone un grave riesgo para la seguridad del entorno. Como resultado hemos desarrollado un prototipo preliminar para probar la soluci{\'o}n propuesta en un escenario de ataque real.

}, keywords = {IDS, Intel vPro, IRS}, isbn = {978-84-615-9933-2}, author = {Ana Nieto and Gerardo Fernandez} } @inproceedings {Nieto2012a, title = {Traffic Classifier for Heterogeneous and Cooperative Routing through Wireless Sensor Networks}, booktitle = {Advanced Information Networking and Applications Workshops (WAINA), 2012 26th International Conference on}, year = {2012}, month = {03/2012}, pages = {607-612}, publisher = {IEEE}, organization = {IEEE}, address = {Fukuoka (Japan)}, abstract = {

Wireless Sensor Networks (WSN) are networks composed of autonomous devices manufactured to solve a specific problem, with limited computational capabilities and resource-constrained (e.g. limited battery). WSN are used to monitor physical or environmental conditions within an area (e.g. temperature, humidity). The popularity of the WSN is growing, precisely due to the wide range of sensors available. As a result, these networks are being deployed as part of several infrastructures. However, sensors are designed to collaborate only with sensors of the same type. In this sense, taking advantage of the heterogeneity of WSN in order to provide common services, like it is the case of routing, has not been sufficiently considered. For this reason, in this paper we propose a routing protocol based on traffic classification and role-assignment to enable heterogeneous WSN for cooperation. Our approach considers both QoS requirements and lifetime maximization to allow the coexistence of different applications in the heterogeneous network infrastructure.

}, keywords = {heterogeneous, routing, WSN}, isbn = {978-0-7695-4652-0/12}, doi = {10.1109/WAINA.2012.202}, author = {Ana Nieto and Javier Lopez} } @incollection {Najera_DHNChapter, title = {Network Technologies}, booktitle = {Digital Home Networking}, year = {2011}, pages = {17 - 58}, publisher = {Wiley-ISTE}, organization = {Wiley-ISTE}, isbn = {978-1848213210}, author = {Pablo Najera and Ana Nieto}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman} }