@inproceedings {2033, title = {CCBHash (Compound Code Block Hash) para An{\'a}lisis de Malware}, booktitle = {XVII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n}, year = {2022}, month = {11/2022}, pages = {168-173}, author = {Pablo P{\'e}rez Jim{\'e}nez and Jose A. Onieva and Gerardo Fernandez} } @inproceedings {1701, title = {A comprehensive methodology for deploying IoT honeypots}, booktitle = {15th International Conference on Trust, Privacy and Security in Digital Business (TrustBus 2018)}, volume = {LNCS 11033}, year = {2018}, month = {09/2018}, pages = {229{\textendash}243}, publisher = {Springer Nature Switzerland AG}, organization = {Springer Nature Switzerland AG}, address = {Regensburg (Germany)}, abstract = {

Recent news have raised concern regarding the security on the IoT field. Vulnerabilities in devices are arising and honeypots are an excellent way to cope with this problem. In this work, current solutions for honeypots in the IoT context, and other solutions adaptable to it are analyzed in order to set the basis for a methodology that allows deployment of IoT honeypot.

}, keywords = {Honeypot, IoT, methodology, security}, doi = {https://doi.org/10.1007/978-3-319-98385-1_16}, author = {Antonio Acien and Ana Nieto and Gerardo Fernandez and Javier Lopez} } @article {NAFMONET2018, title = {Crowdsourcing analysis in 5G IoT: Cybersecurity Threats and Mitigation}, journal = {Mobile Networks and Applications (MONET)}, year = {2018}, month = {10/2018}, pages = {881-889}, publisher = {Springer US}, abstract = {
Crowdsourcing can be a powerful weapon against cyberattacks in 5G networks. In this paper we analyse this idea in detail, starting from the use cases in crowdsourcing focused on security, and highlighting those areas of a 5G ecosystem where crowdsourcing could be used to mitigate local and remote attacks, as well as to discourage criminal activities and cybercriminal behaviour. We pay particular attention to the capillary network, where an infinite number of IoT objects coexist. The analysis is made considering the different participants in a 5G IoT ecosystem.
}, keywords = {5G security, Cybersecurity, digital witness, Proactive security}, issn = {1383-469X}, doi = {https://doi.org/10.1007/s11036-018-1146-4}, author = {Ana Nieto and Antonio Acien and Gerardo Fernandez} } @inproceedings {1650, title = {Configuraci{\'o}n de honeypots adaptativos para an{\'a}lisis de malware}, booktitle = {III Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2017)}, year = {2017}, month = {06/2017}, pages = {91-98}, publisher = {Servicio de Publicaciones de la URJC}, organization = {Servicio de Publicaciones de la URJC}, address = {Madrid (Spain)}, abstract = {

Este trabajo propone una arquitectura de despliegue de honeypots adaptativos, configurados din{\'a}micamente a partir de los requisitos del malware que intenta infectar los servicios trampa. A diferencia de otros trabajos sobre honeypots adaptativos, los mecanismos de adaptabilidad aqu{\'\i} dise{\~n}ados tomar{\'a}n como base informaci{\'o}n de inteligencia sobre amenazas actuales, indicadores de compromiso (IOCs) conocidos, as{\'\i} como informaci{\'o}n de actividades sospechosas actualmente en estudio por los analistas. Este conocimiento ser{\'a} empleado para configurar honeypots de manera din{\'a}mica, permitiendo satisfacer los requisitos necesarios para que el malware pueda desplegar toda su operativa.\ 

}, keywords = {adaptive, dynamic, Honeypot, intelligence, IOC, malware}, isbn = {978-84-608-4659-8}, url = {https://eciencia.urjc.es/handle/10115/14540}, author = {Gerardo Fernandez and Ana Nieto} } @inproceedings {931, title = {Context-Awareness using Anomaly-based Detectors for Smart Grid Domains}, booktitle = {9th International Conference on Risks and Security of Internet and Systems }, volume = {8924}, year = {2015}, month = {04/2015}, pages = {17-34}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, address = {Trento}, abstract = {

Anomaly-based detection applied in strongly interdependent systems, like Smart Grids, has become one of the most challenging research areas in recent years. Early detection of anomalies so as to detect and prevent unexpected faults or stealthy threats is attracting a great deal of attention from the scientific community because it offers potential solutions for context-awareness. These solutions can also help explain the conditions leading up\ to a given situation and help determine the degree of its severity. However, not all the existing approaches within the literature are equally effective in covering the needs of a particular scenario. It is necessary to explore the control requirements of the domains that comprise a Smart Grid, identify, and even select, those approaches according to these requirements and the intrinsic conditions related to the application context, such as technological heterogeneity and complexity. Therefore, this paper analyses the functional features of existing anomaly-based approaches so as to adapt them, according to the aforementioned conditions. The result of this investigation is a guideline for the construction of preventive solutions that will help improve the context-awareness in the control of Smart Grid domains in the near future.

}, keywords = {Context-Awareness, Control systems, Prevention, Smart Grid}, isbn = {978-3-319-17126-5}, doi = {10.1007/978-3-319-17127-2_2}, url = {http://link.springer.com/chapter/10.1007\%2F978-3-319-17127-2_2$\#$}, author = {Cristina Alcaraz and Lorena Cazorla and Gerardo Fernandez} }