@inproceedings {1709, title = {Analyzing cross-platform attacks: towards a three-actor approach}, booktitle = {The 16th IEEE International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)}, year = {2018}, month = {08/2018}, pages = {536-543}, abstract = {


In the current telecommunications landscape, different devices, systems and platforms are constantly communicating with each other. This heterogeneous environment creates the perfect situation for attacks to pass from one platform to another. This is a particularly worrying scenario, because of the new technologies being used (such as network slicing in 5G), the increasing importance of connected devices in our lives (IoT), and the unpredictable consequences that an attack of this type could have. The current approaches in attack analysis do not take into account these sitations, and the attacker/victim paradigm usually followed may fall short when dealing with these attacks. Thus, in this paper, an architecture for the analysis of cross-platform attacks will be presented, aiming to help understand better this kind of threats and offering solutions to mitigate and track them.

}, isbn = {978-1-5386-7518-2}, doi = {10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00102}, author = {Antonio Acien and Ana Nieto and Javier Lopez} } @inproceedings {CRAT2018, title = {Capture the RAT: Proximity-based Attacks in 5G using the Routine Activity Theory}, booktitle = {The 16th IEEE International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)}, year = {2018}, month = {08/2018}, pages = {520-527}, publisher = {IEEE}, organization = {IEEE}, address = {Athens, Greece}, abstract = {

The fifth generation of cellular networks (5G) will enable different use cases where security will be more critical than ever before (e.g. autonomous vehicles and critical IoT devices). Unfortunately, the new networks are being built on the certainty that security problems can not be solved in the short term. Far from reinventing the wheel, one of our goals is to allow security software developers to implement and test their reactive solutions for the capillary network of 5G devices. Therefore, in this paper a solution for analysing proximity-based attacks in 5G environments is modelled and tested using OMNET++. The solution, named CRAT, is able to decouple the security analysis from the hardware of the device with the aim to extend the analysis of proximity-based attacks to different use-cases in 5G. We follow a high-level approach, in which the devices can take the role of victim, offender and guardian following the principles of the routine activity theory.\ 

}, isbn = {978-1-5386-7518-2}, doi = {10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00100}, url = {https://ieeexplore.ieee.org/document/8511943}, author = {Ana Nieto and Antonio Acien and Javier Lopez} } @article {NAFMONET2018, title = {Crowdsourcing analysis in 5G IoT: Cybersecurity Threats and Mitigation}, journal = {Mobile Networks and Applications (MONET)}, year = {2018}, month = {10/2018}, pages = {881-889}, publisher = {Springer US}, abstract = {
Crowdsourcing can be a powerful weapon against cyberattacks in 5G networks. In this paper we analyse this idea in detail, starting from the use cases in crowdsourcing focused on security, and highlighting those areas of a 5G ecosystem where crowdsourcing could be used to mitigate local and remote attacks, as well as to discourage criminal activities and cybercriminal behaviour. We pay particular attention to the capillary network, where an infinite number of IoT objects coexist. The analysis is made considering the different participants in a 5G IoT ecosystem.
}, keywords = {5G security, Cybersecurity, digital witness, Proactive security}, issn = {1383-469X}, doi = {https://doi.org/10.1007/s11036-018-1146-4}, author = {Ana Nieto and Antonio Acien and Gerardo Fernandez} } @inproceedings {1699, title = {Modelo para la clasificaci{\'o}n y an{\'a}lisis de ataques Cross-Platform}, booktitle = {IV Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2018)}, year = {2018}, month = {06/2018}, publisher = {Servicio Editorial de Mondragon Unibertsitatea}, organization = {Servicio Editorial de Mondragon Unibertsitatea}, address = {Donostia-San Sebasti{\'a}n (Espa{\~n}a)}, abstract = {

Los ataques cross-platform suponen un serio desaf{\'\i}o para los mecanismos de seguridad cuando los portadores de un ataque dirigido no son conscientes de su participacion en el mismo. Es por ello que, con dispositivos y tecnolog{\'\i}as cada vez mas entrelazadas, en constante comunicaci{\'o}n, numerosos ataques pasan desapercibidos hasta que alcanzan su objetivo final. Estos nuevos escenarios hacen posible una v{\'\i}a de transmision a tener en cuenta, y que se debe abordar cuanto antes, ya que sus consecuencias, especialmente en el panorama de telecomunicaciones actual, podr{\'\i}an ser desoladoras. La rapida transmisi{\'o}n de estos ataques, y la dificultad que supone su prevencion, detecci{\'o}n y mitigaci{\'o}n antes de que se hagan efectivos, hacen que el problema sea particularmente preocupante. En este art{\'\i}culo se presentar{\'a} una arquitectura para el analisis de los ataques cross-platform silenciosos, cuyo objetivo es ayudar a comprender mejor este tipo de amenazas y ofrecer soluciones que permitan mitigarlas y rastrearlas.

}, keywords = {architecture, attack, Cross-platform, security}, isbn = {978-84-09-02697-5}, url = {http://2018.jnic.es/assets/Actas_JNIC2018.pdf}, author = {Antonio Acien and Ana Nieto and Javier Lopez} } @article {NietNLS15, title = {Dynamic Knowledge-based Analysis in non-Secure 5G Green Environments using Contextual Data}, journal = {IEEE Systems Journal}, volume = {11}, number = {99}, year = {2017}, month = {12/2017}, pages = {2479-2489}, publisher = {IEEE}, abstract = {

The growing number of parameters in heteroge- neous networks, as is the case of the fifth generation (5G) Green networks, greatly complicates the analysis of the Security and Quality of Service Tradeoff (SQT). However, studying these types of relationships is crucial in Future Internet scenarios to prevent potential points of failure and to enhance the use of limited resources, increasing the user{\textquoteright}s experience. Therefore, it is fundamental to provide tools and models for training, so that the users understand these dependencies and solve them prior to deploying new solutions. In this paper, a Recommendation System for SQT (SQT-RS) is deployed in 5G Green systems, considering the particular case of relay networks and the impact of eavesdropping and jamming contexts on the models generated by the user, aided by SQT-RS. With this goal in mind, we provide a component for the user to automatically select specific contexts based on 5G Green capabilities.\ 

}, keywords = {cellular networks, Communication system security, Context, Green design, Knowledge-based systems}, issn = {1932-8184}, doi = {10.1109/JSYST.2015.2477782}, author = {Ana Nieto and Nikolaos Nomikos and Javier Lopez and Charalambos Skianis} } @article {NNMSVRLS, title = {Relay Selection for Secure 5G Green Communications}, journal = {Telecommunication Systems }, volume = {59}, year = {2015}, month = {05/2015}, pages = {169-187}, publisher = {Springer US}, abstract = {

In this article, we present relay selection policies in applications with secrecy requirements which are of interest in the fifth generation (5G) of wireless networks. More specifically, we provide a classification of relays based on their distinct communication attributes, such as processing, multiple antennas, storage, channel estimation, density and security level. In addition, we discuss the level of efficiency exhibited by each relay class, regarding their impact in delay-critical applications and green communications applications, while aiming at a specific security level at the physical layer. Then, relay selection policies are proposed taking into consideration the goals set by each application. Numerical evaluation of the proposed policies in terms of the average secrecy rate, average delay and power reduction show improved performance compared to other state-of-the-art solutions.\ 

}, keywords = {5G relays, Delay-critical, Power-efficient communications, Relay selection, security}, issn = {1018-4864}, doi = {10.1007/s11235-014-9890-7}, url = {http://dx.doi.org/10.1007/s11235-014-9890-7}, author = {Nikolaos Nomikos and Ana Nieto and Prodromos Makris and Dimitrios N. Skoutas and Demosthenes Vouyioukas and Panagiotis Rizomiliotis and Javier Lopez and Charalambos Skianis} }