@inproceedings {1692, title = {Addressing Security in OCPP: Protection Against Man-in-the-Middle Attacks}, booktitle = {9th IFIP International Conference on New Technologies, Mobility \& Security}, year = {2018}, author = {Juan E. Rubio and Cristina Alcaraz and Javier Lopez} } @inproceedings {1662, title = {Analysis of Intrusion Detection Systems in Industrial Ecosystems}, booktitle = {14th International Conference on Security and Cryptography (SECRYPT 2017)}, volume = {6}, year = {2017}, pages = {116-128}, publisher = {SciTePress}, organization = {SciTePress}, isbn = {978-989-758-259-2}, doi = {10.5220/0006426301160128}, author = {Juan E. Rubio and Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @article {cazorla2015b, title = {Awareness and Reaction Strategies for Critical Infrastructure Protection}, journal = {Computers and Electrical Engineering}, volume = {47}, year = {2015}, pages = {299-317}, publisher = {Elsevier}, abstract = {

Current Critical Infrastructures (CIs) need intelligent automatic active reaction mechanisms to protect their critical processes against cyber attacks or system anomalies, and avoid the disruptive consequences of cascading failures between interdependent and interconnected systems. In this paper we study the Intrusion Detection, Prevention and Response Systems (IDPRS) that can offer this type of protection mechanisms, their constituting elements and their applicability to critical contexts. We design a methodological framework determining the essential elements present in the IDPRS, while evaluating each of their sub-components in terms of adequacy for critical contexts. We review the different types of active and passive countermeasures available, categorizing them and assessing whether or not they are suitable for Critical Infrastructure Protection (CIP). Through our study we look at different reaction systems and learn from them how to better create IDPRS solutions for CIP.\ 

}, keywords = {Control systems, Countermeasures, Critical Infrastructure Protection, Intrusion Detection and Response Systems}, issn = {0045-7906}, doi = {10.1016/j.compeleceng.2015.08.010}, author = {Lorena Cazorla and Cristina Alcaraz and Javier Lopez} } @inproceedings {1729, title = {Addressing Situational Awareness in Critical Domains of a Smart Grid}, booktitle = {6th International Conference on Network and System Security (NSS 2012)}, series = {LNCS 7645}, volume = {7645}, year = {2012}, month = {November 2012}, pages = {58-71}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Wu Yi Shan, Fujian, China}, abstract = {

Control and situational awareness are two very important aspects within critical control systems, since potential faults or anomalous behaviors could lead to serious consequences by hiding the real status of supervised critical infrastructures. Examples of these infrastructures are energy generation, transmission or distribution systems that belong to Smart Grid systems. Given the importance of these systems for social welfare and its economy, a situational awareness-based model, composed of a set of current technologies, is proposed in this paper. The model focuses on addressing and offering a set of minimum services for protection, such as prevention, detection, response, self-evaluation and maintenance, thereby providing a desirable protection in unplanned situations.

}, issn = {978-3-642-34600-2}, doi = {http://dx.doi.org/10.1007/978-3-642-34601-9_5}, author = {Cristina Alcaraz and Javier Lopez} } @article {1730, title = {Analysis of Requirements for Critical Control Systems}, journal = {International Journal of Critical Infrastructure Protection (IJCIP)}, volume = {5}, year = {2012}, month = {2012}, pages = {137{\textendash}145}, publisher = {Elsevier}, abstract = {

The use of modern information and communications technologies in supervisory control and data acquisition (SCADA) systems used in the critical infrastructure has become an important topic of research. The modernization significantly enhances operational performance, but also introduces security issues and the associated risks. This paper formally analyzes how the introduction of new technologies can impact control systems and ultimately affect the performance of the critical infrastructure systems being controlled. Five control system requirements are identified with the goal of proposing new operational requirements that trade-off performance and security.

}, issn = {1874-5482}, doi = {10.1016/j.ijcip.2012.08.003}, url = {http://www.sciencedirect.com/science/article/pii/S1874548212000455}, author = {Cristina Alcaraz and Javier Lopez} } @inproceedings {Alcaraz2010, title = {Acceso seguro a redes de sensores en SCADA a trav{\'e}s de Internet}, booktitle = {XI Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2010)}, year = {2010}, month = {September}, pages = {337-342}, address = {Tarragona (Spain)}, abstract = {

Las Infraestructuras Cr\íticas (ICs) son monitorizadas por sistemas altamente complejos, conocidos como sistemas SCADA (Sistemas de Control y Adquisici\ón de Datos), cuyo principal soporte se encuentra en las subestaciones, las cuales miden de primera instancia el estado real de tales ICs. Para mejorar este control, la industria est\á actualmente demandando la integraci\ón en el modelo tradicional de dos avances tecnol\ógicos: Internet y las redes de sensores inal\ámbricas. Sin embargo, su incorporaci\ón requiere analizar los requisitos de seguridad que surgen en dicho contexto, as\í como diversos aspectos correlacionados (ej. mantenimiento, rendimiento, seguridad y optimizaci\ón) y, en base a estos, la estrategia de integraci\ón m\ás adecuada para satisfacer dichos requisitos. Este art\ículo proporciona dicho an\álisis en profundidad con el fin de ofrecer un modelo de integraci\ón seguro adecuado para entornos cr\íticos.

}, keywords = {el Internet, Internet of Things, Redes Mesh Inal{\'a}mbrica de Sensores, Sistemas Cr{\'\i}ticos de Control, Sistemas SCADA}, isbn = {978-84-693-3304-4}, url = {http://crises-deim.urv.cat/recsi2010/}, author = {Cristina Alcaraz and Rodrigo Roman and Pablo Najera and Javier Lopez} } @inproceedings {Alcaraz2009, title = {Adaptive Dispatching of Incidences Based on Reputation for SCADA Systems}, booktitle = {6th International Conference on Trust, Privacy and Security in Digital Business (TrustBus{\textquoteright}09)}, series = {LNCS}, year = {2009}, month = {September}, pages = {86-94}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Linz, Austria}, abstract = {

SCADA systems represent a challenging scenario where the management of critical alarms is crucial. Their response to these alarms should be efficient and fast in order to mitigate or contain undesired effects. This work presents a mechanism, the Adaptive Assignment Manager (AAM) that will aid to react to incidences in a more efficient way by dynamically assigning alarms to the most suitable human operator. The mechanism uses various inputs for identifying the operators such as their availability, workload and reputation. In fact, we also define a reputation component that stores the reputation of the human operators and uses feedback from past experiences.

}, keywords = {Critical Control Systems, Reputation, Supervisory Control and Data Acquisition Systems}, isbn = {978-3-642-03747-4}, doi = {10.1007/978-3-642-03748-1_9}, author = {Cristina Alcaraz and Isaac Agudo and Carmen Fernandez-Gago and Rodrigo Roman and Gerardo Fernandez and Javier Lopez} } @inproceedings {Lopez2009, title = {Analysis of Security Threats, Requirements, Technologies and Standards in Wireless Sensor Networks}, booktitle = {Foundations of Security Analysis and Design 2009}, series = {LNCS}, volume = {5705}, year = {2009}, month = {August}, pages = {289-338}, publisher = {Springer Berlin/Heidelberg}, organization = {Springer Berlin/Heidelberg}, address = {Bertinoro (Italy)}, abstract = {

As sensor networks are more and more being implemented in real world settings, it is necessary to analyze how the different requirements of these real-world applications can influence the security mechanisms. This paper offers both an overview and an analysis of the relationship between the different security threats, requirements, applications, and security technologies. Besides, it also overviews some of the existing sensor network standards, analyzing their security mechanisms.

}, isbn = {978-3-642-03828-0}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/978-3-642-03829-7_10}, url = {http://www.springerlink.com/content/u8h4882831k474n6/}, author = {Javier Lopez and Rodrigo Roman and Cristina Alcaraz} } @inproceedings {Alcaraz2008, title = {An{\'a}lisis de la Aplicabilidad de las Redes de Sensores para la Protecci{\'o}n de Infraestructuras de Informaci{\'o}n Cr{\'\i}ticas}, booktitle = {VI Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}08)}, year = {2008}, month = {September}, pages = {437}, address = {Alcal{\'a} de Henares (Spain)}, abstract = {

Las infraestructuras cr\íticas, como el sector energ\ético, la banca, el transporte, y muchas otras, son un pilar esencial para en bienestar de la sociedad y la econom\ía de un pa\ís. Estas infraestructuras dependen a su vez de ciertas infraestructuras de informaci\ón, las cuales permiten su correcto funcionamiento. La tarea de proteger esas infraestructuras (de informaci\ón) cr\íticas es compleja y multidimensional, con una gran cantidad de desaf\íos por resolver. Precisamente, las redes de sensores pueden ser de gran ayuda para esta tarea, debido a suscapacidades de control distribuidas y a su habilidad de funcionar en situaciones extremas. Este art\ículo analiza la utilidad de las redes de sensores en este contexto, describiendo tanto sus capacidades como sus posibles roles y mecanismos de integraci\ón para la protecci\ón de infraestructuras (de informaci\ón) cr\íticas.

}, isbn = {978-84-612-5474-3}, url = {http://www.telematica.ws/jitel/2008/default.htm}, author = {Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @inproceedings {Alcaraz2007, title = {An{\'a}lisis de primitivas criptogr{\'a}ficas para redes de sensores}, booktitle = {VI Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}07)}, year = {2007}, month = {September}, pages = {401-408}, address = {M{\'a}laga (Spain)}, abstract = {

Security in wireless sensor networks is very limited due to highly-constrained hardware of sensor nodes. To protect services is necessary to use secure foundations, known as security primitives, like part of a protocol. Theses primitives must assure at least confidentiality in the communication channel, authentication of the peers involved in an information exchange, and integrity of the messages. There are many primitives such as symmetric encryption, hash functions and public key cryptography, but not all of them can be supported by sensor nodes since require high resource levels, for example memory. This paper contains a deep analysis of available and suitable security primitives for sensor nodes, as well as an analysis of hardware and software implementations. Besides, it has been developed an experiment with two implementations, and it has been created a new and improved version using the optimizations of each.

}, isbn = {978-84-690-6670-6}, url = {http://www.telematica.ws/jitel/2007/}, author = {Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @inproceedings {Roman2007b, title = {Applicability of Public Key Infrastructures in Wireless Sensor Networks}, booktitle = {European PKI Workshop: Theory and Practice (EuroPKI{\textquoteright}07)}, series = {LNCS}, volume = {4582}, year = {2007}, month = {June}, pages = {313-320}, publisher = {Springer}, organization = {Springer}, address = {Mallorca (Spain)}, abstract = {

Wireless Sensor Networks (WSN) are becoming a key technology in the support of pervasive and ubiquitous services. The previous notion of PKC is too expensive for WSN has changed partially due to the existence of new hardware and software prototypes based on Elliptic Curve Cryptography and other PKC primitives. Then, it is necessary to analyze whether it is both feasible and convenient to have a Public Key Infrastructure for sensor networks that would allow the creation of PKC-based services like Digital Signatures.

}, keywords = {Public Key Cryptography, Public Key Infrastructure, wireless sensor networks}, isbn = {978-3-540-73407-9}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/978-3-540-73408-6_22}, url = {http://www.springerlink.com/content/q4l10ww348010131/}, author = {Rodrigo Roman and Cristina Alcaraz} } @inproceedings {Alcaraz2006, title = {Applying Key Infrastructures for Sensor Networks in {CIP/CIIP} Scenarios}, booktitle = {1st International Workshop on Critical Information Infrastructures Security (CRITIS{\textquoteright}06)}, series = {LNCS}, volume = {4347}, year = {2006}, pages = {166-178}, publisher = {Springer Berlin / Heidelberg}, organization = {Springer Berlin / Heidelberg}, abstract = {

It is commonly agreed that Wireless Sensor Networks (WSN) is one of the technologies that better fulfills features like the ones required by Critical (Information) Infrastructures. However, a sensor network is highly vulnerable against any external or internal attacks, thus network designers must know which are the tools that they can use in order to avoid such problems. In this paper we describe in detail a procedure (the KMS Guidelines), developed under our CRISIS project, that allows network designers to choose a certain Key Management System, or at least to know which protocol need to improve in order to satisfy the network requirements.

}, keywords = {Critical Information Infrastructures, Key Infrastructures, Key Management, Sensor Networks}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/11962977_14}, url = {http://www.springerlink.com/content/2458827107n14870/}, author = {Cristina Alcaraz and Rodrigo Roman} }