@incollection {2013, title = {POM: A Trust-based AHP-like Methodology to Solve Conflict Requirements for the IoT}, booktitle = {Collaborative Approaches for Cyber Security in Cyber-Physical Systems}, number = {Part of the Advanced Sciences and Technologies for Security Applications book series (ASTSA)}, year = {2023}, month = {01/2023}, pages = {145-170}, publisher = {Springer}, organization = {Springer}, keywords = {Analytic Hierarchy Process (AHP), Internet of Things (IoT), Multi Criteria Decision Analysis (MCDA), Requirements Engineering, Trust}, issn = {1613-5113}, doi = {https://doi.org/10.1007/978-3-031-16088-2_7}, url = {https://link.springer.com/chapter/10.1007/978-3-031-16088-2_7}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @incollection {1844, title = {Risk Assessment for IoT-Enabled Cyber-Physical Systems}, booktitle = {Advances in Core Computer Science-Based Technologies}, year = {2021}, pages = {157-173}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, address = {Cham}, abstract = {

Internet of Things (IoT) technologies have enabled Cyber-Physical Systems (CPS) to become fully interconnected. This connectivity however has radically changed their threat landscape. Existing risk assessment methodologies often fail to identify various attack paths that stem from the new connectivity/functionality features of IoT-enabled CPS. Even worse, due to their inherent characteristics, IoT systems are usually the weakest link in the security chain and thus many attacks utilize IoT technologies as their key enabler. In this paper we review risk assessment methodologies for IoT-enabled CPS. In addition, based on our previous work (Stellios et al. in IEEE Commun Surv Tutor 20:3453{\textendash}3495, 2018, [47]) on modeling IoT-enabled cyberattacks, we present a high-level risk assessment approach, specifically suited for IoT-enabled CPS. The mail goal is to enable an assessor to identify and assess\ non-obvious(indirect or subliminal) attack paths introduced by IoT technologies, that usually target mission critical components of an CPS.

}, keywords = {Critical Infrastructures, Cyber Physical Systems (CPS), Internet of Things (IoT), Risk assessment Attack paths}, isbn = {978-3-030-41196-1}, doi = {10.1007/978-3-030-41196-1_8}, url = {https://doi.org/10.1007/978-3-030-41196-1_8}, author = {Ioannis Stellios and Panayiotis Kotzanikolaou and Mihalis Psarakis and Cristina Alcaraz} } @incollection {Alcaraz2021d, title = {Situational Awareness for CPS}, booktitle = {Encyclopedia of Cryptography, Security and Privacy}, year = {2021}, month = {08/2021}, pages = {1--3}, publisher = {Springer Berlin Heidelberg}, organization = {Springer Berlin Heidelberg}, type = {Encyclopedia}, address = {Berlin, Heidelberg}, keywords = {Anomaly detection, Attack traceability, Prevention, Response, Visualization}, isbn = {978-3-642-27739-9}, doi = {10.1007/978-3-642-27739-9_1732-1}, url = {https://doi.org/10.1007/978-3-642-27739-9_1732-1}, author = {Cristina Alcaraz} } @incollection {1777, title = {Privacy-Aware Digital Forensics}, booktitle = {Security and Privacy for Big Data, Cloud Computing and Applications}, year = {2019}, month = {09/2019}, publisher = {The Institution of Engineering and Technology (IET) }, organization = {The Institution of Engineering and Technology (IET) }, edition = {Lizhe Wang, Wei Ren, Raymoond Choo and Fatos Xhafa}, address = {United Kingdom}, isbn = {978-1-78561-747-8}, url = {https://www.amazon.es/Security-Privacy-Computing-Applications-Networks/dp/1785617478}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @incollection {alcaraz2019, title = {Secure Interconnection of IT-OT Networks in Industry 4.0}, booktitle = {Critical Infrastructure Security and Resilience: Theories, Methods, Tools and Technologies}, number = {Advanced Sciences and Technologies for Security Applications book series (ASTSA)}, year = {2019}, month = {01/2019}, pages = {201-217}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, abstract = {

Increasingly, the society is witnessing how today{\textquoteright}s industry is adapting\ the new technologies and communication protocols to offer more optimal and reliable\ services to end-users, with support for inter-domain communication belonging\ to diverse critical infrastructures. As a consequence of this technological revolution,\ interconnection mechanisms are required to offer transparency in the connections\ and protection in the different application domains, without this implying a significant\ degradation of the control requirements. Therefore, this book chapter presents\ a reference architecture for the new Industry 4.0 where the interconnection core is\ mainly concentrated in the Policy Decision Points (PDP), which can be deployed\ in high volume data processing and storage technologies such as cloud and fog\ servers. Each PDP authorizes actions in the field/plant according to a set of factors\ (entities, context and risks) computed through the existing access control measures,\ such as RBAC+ABAC+Risk-BAC (Role/Attribute/Risk-Based Access Control, respectively),\ to establish coordinated and constrained accesses in extreme situations.\ Part of these actions also includes proactive risk assessment measures to respond to\ anomalies or intrusive threats in time.

}, isbn = {978-3-030-00024-0}, doi = {https//doi.org/10.1007/978-3-030-00024-0_11}, url = {https://doi.org/10.1007/978-3-030-00024-0_11}, author = {Cristina Alcaraz} } @incollection {1590, title = {Cyber-Physical Systems for Wide-Area Situational Awareness}, booktitle = {Cyber-Physical Systems: Foundations, Principles and Applications}, number = {Intelligent Data-Centric Systems}, year = {2017}, month = {2017}, pages = {305 - 317}, publisher = {Academic Press}, organization = {Academic Press}, chapter = {20}, address = {Boston}, abstract = {

Abstract Cyber-physical systems (CPSs), integrated in critical infrastructures, could provide the minimal services that traditional situational awareness (SA) systems demand. However, their application in SA\ solutions for the protection of large control distributions against unforeseen faults may be insufficient. Dynamic protection measures have to be provided not only to locally detect unplanned deviations but also to prevent, respond, and restore from these deviations. The provision of these services as an integral part of the SA\ brings about a new research field known as wide-area situational awareness (WASA), highly dependent on CPSs\ for control from anywhere across multiple interconnections, and at any time. Thus, we review the state-of-the art of this new paradigm, exploring the different preventive and corrective measures considering the heterogeneity of CPSs, resulting in a guideline for the construction of automated WASA\ systems.

}, keywords = {Control systems, Critical Infrastructure Protection, cyber-physical systems, Detection, Response, restoration, Wide-Area Situational Awareness}, isbn = {978-0-12-803801-7}, doi = {http://dx.doi.org/10.1016/B978-0-12-803801-7.00020-1}, author = {Cristina Alcaraz and Lorena Cazorla and Javier Lopez} } @incollection {1603, title = {Secure Interoperability in Cyber-Physical Systems}, booktitle = {Security Solutions and Applied Cryptography in Smart Grid Communications, IGI Global, USA}, year = {2017}, pages = {137-158}, publisher = { IGI Global}, organization = { IGI Global}, chapter = {8}, address = {USA}, abstract = {

Transparency in control transactions under a secure network architecture is a key topic that must be discussed when aspects related to interconnection between heterogeneous cyber-physical systems (CPSs) arise. The interconnection of these systems can be addressed through an enforcement policy system responsible for managing access control according to the contextual conditions. However, this architecture is not always adequate to ensure a rapid interoperability in extreme crisis situations, and can require an interconnection strategy that permits the timely authorized access from anywhere at any time. To do this, a set of interconnection strategies through the Internet must be studied to explore the ability of control entities to connect to the remote CPSs and expedite their operations, taking into account the context conditions. This research constitutes the contribution of this chapter, where a set of control requirements and interoperability properties are identified to discern the most suitable interconnection strategies.

}, keywords = {authentication, authorization, Control Access, Control systems, cyber-physical systems, Internet of Things, Interoperability, Secure Interconnection}, isbn = {9781522518297}, doi = {10.4018/978-1-5225-1829-7.ch008}, author = {Cristina Alcaraz and Javier Lopez} } @incollection {1512, title = {Metrics for Accountability in the Cloud}, booktitle = {Accountability and Security in the Cloud}, volume = {8937}, number = {LNCS Tutorial}, year = {2015}, pages = {129-153}, author = {Carmen Fernandez-Gago and David Nu{\~n}ez} } @incollection {nunez15privacy, title = {Privacy-Preserving Identity Management as a Service}, booktitle = {Accountability and Security in the Cloud}, series = {Lecture Notes in Computer Science}, volume = {8937}, year = {2015}, pages = {114-125}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, abstract = {

In this paper we tackle the problem of privacy and confidentiality in Identity Management as a Service (IDaaS). The adoption of cloud computing technologies by organizations has fostered the externalization of the identity management processes, shaping the concept of Identity Management as a Service. However, as it has happened to other cloud-based services, the cloud poses serious risks to the users, since they lose the control over their data. As part of this work, we analyze these concerns and present a model for privacy-preserving IDaaS, called BlindIdM, which is designed to provide data privacy protection through the use of cryptographic safeguards.

}, keywords = {Cloud Computing, Cryptography, Identity Management as a Service, privacy}, isbn = {978-3-319-17198-2}, doi = {10.1007/978-3-319-17199-9_5}, url = {http://dx.doi.org/10.1007/978-3-319-17199-9_5}, author = {David Nu{\~n}ez and Isaac Agudo and Javier Lopez}, editor = {Massimo Felici and Carmen Fernandez-Gago} } @incollection {moyano14esfi, title = {Engineering Trust-Awareness and Self-adaptability in Services and Systems}, booktitle = {Engineering Secure Future Internet Services and Systems}, volume = {LNCS 8431}, number = {8431}, year = {2014}, month = {03/2014}, pages = {180-209}, publisher = {Springer}, organization = {Springer}, chapter = {8}, abstract = {
The Future Internet (FI) comprises scenarios where many heterogeneous and dynamic entities must interact to provide services (e.g., sensors, mobile devices and information systems in smart city scenarios). The dynamic conditions under which FI applications must execute call for self-adaptive software to cope with unforeseeable changes in the application environment. Models@run.time is a promising model-driven approach that supports the runtime adaptation of distributed, heterogeneous systems. Yet frameworks that accommodate this paradigm have limited support to address security concerns, hindering their usage in real scenarios. We address this challenge by enhancing models@run.time with the concepts of trust and reputation. Trust improves decision-making processes under risk and uncertainty and constitutes a distributed and flexible mechanism that does not entail heavyweight administration. This chapter introduces a trust and reputation framework that is integrated into a distributed component model that implements the models@run.time paradigm, thus allowing software components to include trust in their reasoning process. The framework is illustrated in a smart grid scenario.
}, isbn = {978-3-319-07451-1}, issn = {0302-9743}, doi = {10.1007/978-3-319-07452-8_8}, author = {Francisco Moyano and Carmen Fernandez-Gago and Benoit Baudry and Javier Lopez} } @incollection {ruben2014a, title = {Location Privacy in WSNs: Solutions, Challenges, and Future Trends}, booktitle = {Foundations of Security Analysis and Design VII}, volume = {8604}, number = {LNCS}, year = {2014}, pages = {244-282}, publisher = {Springer}, organization = {Springer}, abstract = {

Privacy preservation is gaining popularity in Wireless Sensor Network (WSNs) due to its adoption in everyday scenarios. There are a number of research papers in this area many of which concentrate on the location privacy problem. In this paper we review and categorise these solutions based on the information available to the adversary and his capabilities. But first we analyse whether traditional anonymous communication systems conform to the original requirements of location privacy in sensor networks. Finally, we present and discuss a number of challenges and future trends that demand further attention from the research community.

}, keywords = {Location Privacy, survey, traffic analysis, wireless sensor networks}, isbn = {978-3-319-10081-4}, issn = {0302-9743}, doi = {10.1007/978-3-319-10082-1_9}, author = {Ruben Rios and Javier Lopez and Jorge Cuellar} } @incollection {BC2011Alcaraz, title = {Security Aspects of SCADA and DCS Environments}, booktitle = {Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense}, series = {Advances in Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense. LNCS 7130.}, volume = {7130}, year = {2012}, month = {September 2012}, pages = {120-149}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Heidelberger (Berlin, Alemania)}, abstract = {

SCADA Systems can be seen as a fundamental component in Critical Infrastructures, having an impact in the overall performance of other Critical Infrastructures interconnected. Currently, these systems include in their network designs different types of Information and Communication Technology systems (such as the Internet and wireless technologies), not only to modernize operational processes but also to ensure automation and real-time control. Nonetheless, the use of these new technologies will bring new security challenges, which will have a significant impact on both the business process and home users. Therefore, the main purpose of this Chapter is to address these issues and to analyze the interdependencies of Process Control Systems with ICT systems, to discuss some security aspects and to offer some possible solutions and recommendations.

}, keywords = {Critical Information Infrastructure Protection, SCADA Systems}, isbn = {ISBN:978-3-642-28919-4}, issn = {0302-9743}, author = {Cristina Alcaraz and Gerardo Fernandez and Fernando Carvajal}, editor = {Javier Lopez and Stephen. Wolthunsen and Roberto Setola} } @incollection {Alcaraz2011_ChapterBook, title = {Digital Home Networking: Standards}, booktitle = {Digital Home Networking}, number = {7130}, year = {2011}, pages = {60-96}, publisher = {John Wiley \& Sons Inc.}, organization = {John Wiley \& Sons Inc.}, address = {Reino Unido}, keywords = {Standards, ZigBee}, issn = {978-1-84821-321-0}, author = {Remi Bars and Jorge Gomez and Mohamed Mahdi and Cristina Alcaraz and Rodrigo Roman}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman and Michel Diaz} } @incollection {Najera_DHNChapter, title = {Network Technologies}, booktitle = {Digital Home Networking}, year = {2011}, pages = {17 - 58}, publisher = {Wiley-ISTE}, organization = {Wiley-ISTE}, isbn = {978-1848213210}, author = {Pablo Najera and Ana Nieto}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman} } @incollection {Moyano_DHNChapter, title = {Security}, booktitle = {Digital Home Networking}, year = {2011}, pages = {139-202}, chapter = {Security}, issn = {9781848213210}, author = {Francisco Moyano and Rodrigo Roman and Anas Abou El Kalam and Marc Lacoste and Mohamed Maachaoui}, editor = {Romain Carbou and Michel Diaz and Ernesto Exposito and Rodrigo Roman} } @incollection {1626, title = {Security in the Developments Process of Mobile Grid Systems}, booktitle = {Advances in Grid Computing}, year = {2011}, pages = {173-198}, publisher = {Intech}, organization = {Intech}, edition = {Zoran Constantinescu}, author = {David G. Rosado and E. Fernandez-Medina and Javier Lopez} } @incollection {Roman2009b, title = {Trust and Reputation Systems for Wireless Sensor Networks}, booktitle = {Security and Privacy in Mobile and Wireless Networking}, year = {2009}, pages = {105-128}, publisher = {Troubador Publishing Ltd}, organization = {Troubador Publishing Ltd}, abstract = {

The concept of trust has become very relevant in the late years as a consequence of the growth of fields such as internet transactions or electronic commerce. In general, trust has become of paramount importance for any kind of distributed networks, such as wireless sensor networks (WSN in the following). In this chapter of the book, we try to give a general overview of the state of the art on trust management systems for WSN and also try to identify the main features of the architectures of these trust management systems.

}, isbn = {978-1905886-906}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez and Hsiao Hwa Chen}, editor = {Stefanos Gritzalis and Tom Karygiannis and Charalabos Skianis} } @incollection {Roman2008, title = {On the Hardware Implementation Efficiency of Cryptographic Primitives}, booktitle = {Wireless Sensor Network Security}, year = {2008}, publisher = {IOS Press}, organization = {IOS Press}, abstract = {

Security has been proven a crucial factor in the provision of data services and especially in the computer-related environments. While wired and wireless networks come to all sectors of everyday life, security tries to satisfy the growing needs for confidentiality, integrity and non-repudiation. There are many instances of security primitives and each one of them has different requirements in terms of processing power, word size, etc. Therefore, it is important to review the functionality of the less resource-demanding encryption algorithms in order to analyze their theoretical suitability to the existent sensor node hardware. Still, the constraints inherent to the sensor nodes advise against the total dependence on software-based implementations, even more in the case of expensive primitives.

}, isbn = {978-1-58603-813-7}, author = {Rodrigo Roman and Cristina Alcaraz and Nicolas Sklavos}, editor = {Javier Lopez and Jianying Zhou} } @incollection {vivas2007, title = {Grid Security Architecture: Requirements, Fundamentals, Standards and Models}, booktitle = {Security in Distributed, Grid, Mobile, and Pervasive Computing}, year = {2007}, month = {April}, pages = {255-288}, publisher = {Auerbach Publications}, organization = {Auerbach Publications}, isbn = {9780849379215}, author = {Jose L. Vivas and Jose A. Montenegro and Javier Lopez}, editor = {Y. Xiao} } @incollection {Lopez2007, title = {On the Protection and Technologies of Critical Information Infrastructures.}, booktitle = {On Foundations of Security Analysis and Design IV, FOSAD 2006/2007, Springer}, series = {LNCS}, volume = {4677}, year = {2007}, note = {

10.1007/978-3-540-74810-6_6

}, pages = {160-182}, abstract = {

Critical Infrastructures are complex and highly interconnected systems that are crucial for the well-being of the society. Any type of failure can cause significant damage, affecting one or more sectors due to their inherent interdependency. Not only the infrastructures are critical, but also the information infrastructures that manage, control and supervise them. Due to the seriousness of the consequences, the protection of these critical (information) infrastructures must have the highest priority. It is the purpose of this book chapter to review and discuss about these infrastructures, to explain their elements, and to highlight their research and development issues. This chapter will also discuss the role of Wireless Sensor Network (WSN) technology in the protection of these infrastructures.

}, keywords = {Critical Information Infrastructure Protection, wireless sensor networks}, issn = {0302-9743}, doi = {10.1007/978-3-540-74810-6_6}, url = {http://dx.doi.org/10.1007/978-3-540-74810-6_6}, author = {Javier Lopez and Cristina Alcaraz and Rodrigo Roman} } @incollection {Najera2007, title = {RFID: Technological Issues and Privacy Concerns}, booktitle = {Digital Privacy: Theory, Technologies, and Practices}, year = {2007}, month = {December}, pages = {285-306}, publisher = {Auerbach Publications}, organization = {Auerbach Publications}, isbn = {1420052179}, author = {Pablo Najera and Javier Lopez}, editor = {A. Acquisti and Stefanos Gritzalis and C. Lambrinoudakis and Sabrina De Capitani di Vimercati} }