@inproceedings {morales2023metacom, title = {Integration of MPC into Besu through an extended private transaction model}, booktitle = {IEEE International Conference on Metaverse Computing, Networking and Applications}, year = {2023}, month = {06/2023}, address = {Kyoto, Japan}, abstract = {In the last few years we have seen many different approaches to incorporate privacy features to blockchains. In the area of cryptocurrencies that would normally mean protecting the identity of the owner of some funds, but there are other applications where privacy is even more important, especially in permissioned blockchains. Permissioned blockchain platforms, such as Hyperledger Besu or Hyperledger Fabric, already include the concept of private transactions, which essentially defines a sub-group of the blockchain where their participants share some private data. We want to go one step ahead and propose an extended model for private transactions where the different participants can have a separated view of the same transaction, allowing the integration of Multi-party Computation protocols in the blockchain. Our work extends Hyperledger Besu{\textquoteright}s design for private transactions, offering better security properties and a finer grain customization. We cover two specific MPC examples, Private Set Intersection and Byzantine Fault-Tolerant Random Number Generation, and propose a mechanism to run them using smart contract interfaces. }, keywords = {blockchain, hyperledger besu, privacy, secure multi-party computation}, author = {Daniel Morales and Isaac Agudo and Javier Lopez} } @inproceedings {1989, title = {Implicaciones de seguridad en MAS Desplegados en Infraestructuras de Carga basadas en OCPP}, booktitle = {VII Jornadas Nacionales en Investigaci{\'o}n en Ciberseguridad (JNIC 2022)}, year = {2022}, month = {06/2022}, pages = {172-179}, abstract = {

El inter{\'e}s actual por desplegar infraestructuras de carga de veh{\'\i}culos el{\'e}ctricos para el ahorro energ{\'e}tico y la sostenibilidad es cada vez m{\'a}s palpable, lo que llama la atenci{\'o}n a muchas comunidades, especialmente a la cient{\'\i}fica, para explorar, entre otras cosas, la influencia de las nuevas tecnolog{\'\i}as de informaci{\'o}n en los procesos operacionales. Teniendo en cuenta este escenario, este art{\'\i}culo, por tanto, analiza c{\'o}mo el uso de los sistemas de multi-agente pueden beneficiar las tareas de monitorizaci{\'o}n, mantenimiento y de seguridad, y propone una arquitectura espec{\'\i}fica en base a los actores especificados en el protocolo OCPP (Open Charge Point Protocol). Esta arquitectura constituye la base para analizar los diversos tipos de amenazas que agentes software pueden sufrir, clasific{\'a}ndolas de acuerdo a las caracter{\'\i}sticas funcionales e interacciones con los diversos elementos de la infraestructura. Esta agrupaci{\'o}n y el conjunto de ataques abordados est{\'a}n basados en el SP-800-19 definido por el National Institute of Standards and Technology, y formalizados siguiendo la metodolog{\'\i}a de {\'a}rboles de ataque. El estudio revela la importancia que tiene analizar los riesgos que esta tecnolog{\'\i}a puede traer a este escenario, proporcionando, adem{\'a}s, un conjunto de recomendaciones que sirvan de gu{\'\i}a para aplicaciones futuras.

}, isbn = {978-84-88734-13-6}, author = {Cristina Alcaraz and Alberto Garcia and Javier Lopez} } @inproceedings {munoz2020icitpm, title = {ICITPM: Integrity validation of software in iterative Continuous Integration through the use of Trusted Platform Module (TPM)}, booktitle = {1st Workshop on Dependability and Safety Emerging Cloud and Fog Systems (DeSECSyS) - Colocated with ESORICS, Guildford (United Kingdom). September 2020.}, year = {2020}, pages = {147{\textendash}165}, publisher = {Springer}, organization = {Springer}, author = {Mu{\~n}oz, Antonio}, editor = {Farao, Aristeidis} } @article {Rubio2020IIoT, title = {Integration of a Threat Traceability Solution in the Industrial Internet of Things}, journal = {IEEE Transactions on Industrial Informatics}, volume = {16}, number = {6575-6583}, year = {2020}, month = {10/2020}, publisher = {IEEE}, abstract = {In Industrial Internet of Things (IIoT) scenarios, where a plethora of IoT technologies coexist with consolidated industrial infrastructures, the integration of security mechanisms that provide protection against cyber-security attacks becomes a critical challenge. Due to the stealthy and persistent nature of some of these attacks, such as Advanced Persistent Threats, it is crucial to go beyond traditional Intrusion Detection Systems for the traceability of these attacks. In this sense, Opinion Dynamics poses a novel approach for the correlation of anomalies, which has been successfully applied to other network security domains. In this paper, we aim to analyze its applicability in the IIoT from a technical point of view, by studying its deployment over different IIoT architectures and defining a common framework for the acquisition of data considering the computational constraints involved. The result is a beneficial insight that demonstrates the feasibility of this approach when applied to upcoming IIoT infrastructures. }, keywords = {Detection, Dynamics, IIoT, Industry, Intrusion, Opinion, Traceability}, issn = {1551-3203}, doi = {10.1109/TII.2020.2976747}, author = {Juan E. Rubio and Rodrigo Roman and Javier Lopez} } @article {roman2018VIS, title = {Immune System for the Internet of Things using Edge Technologies}, journal = {IEEE Internet of Things Journal}, volume = {6}, year = {2019}, month = {06/2019}, pages = {4774-4781}, publisher = {IEEE Computer Society}, abstract = {

The Internet of Things (IoT) and Edge Computing are starting to go hand in hand. By providing cloud services close to end-users, edge paradigms enhance the functionality of IoT deployments, and facilitate the creation of novel services such as augmented systems. Furthermore, the very nature of these paradigms also enables the creation of a proactive defense architecture, an immune system, which allows authorized immune cells (e.g., virtual machines) to traverse edge nodes and analyze the security and consistency of the underlying IoT infrastructure. In this article, we analyze the requirements for the development of an immune system for the IoT, and propose a security architecture that satisfies these requirements. We also describe how such a system can be instantiated in Edge Computing infrastructures using existing technologies. Finally, we explore the potential application of immune systems to other scenarios and purposes.

}, keywords = {Edge computing, Immune Systems, Internet of Things, security}, issn = {2327-4662}, doi = {10.1109/JIOT.2018.2867613}, url = {https://ieeexplore.ieee.org/document/8449989/}, author = {Rodrigo Roman and Ruben Rios and Jose A. Onieva and Javier Lopez} } @proceedings {alcaraz2018a, title = {International Workshop on Security and Trust Management 2018}, journal = {International Workshop on Security and Trust Management}, volume = {11091}, year = {2018}, month = {09/2018}, publisher = {Springer International Publishing}, edition = {LNCS}, address = {Springer Nature Switzerland }, isbn = {978-3-030-01141-3}, issn = {1611-3349}, doi = {https://doi.org/10.1007/978-3-030-01141-3}, url = {https://link.springer.com/book/10.1007\%2F978-3-030-01141-3$\#$about}, author = {Sokratis K. Katsikas and Cristina Alcaraz} } @article {nrlSensors2018, title = {IoT-Forensics meets Privacy: Towards Cooperative Digital Investigations}, journal = {Sensors}, volume = {18}, number = {492}, year = {2018}, month = {02/2018}, publisher = {MDPI}, abstract = {
IoT-Forensics is a novel paradigm for the acquisition of electronic evidence whose operation is conditioned by the peculiarities of the Internet of Things (IoT) context. As a branch of computer forensics, this discipline respects the most basic forensic principles of preservation, traceability, documentation, and authorization. The digital witness approach also promotes such principles in the context of the IoT while allowing personal devices to cooperate in digital investigations by voluntarily providing electronic evidence to the authorities. However, this solution is highly dependent on the willingness of citizens to collaborate and they may be reluctant to do so if the sensitive information within their personal devices is not sufficiently protected when shared with the investigators. In this paper, we provide the digital witness approach with a methodology that enables citizens to share their data with some privacy guarantees. We apply the PRoFIT methodology, originally defined for IoT-Forensics environments, to the digital witness approach in order to unleash its full potential. Finally, we show the feasibility of a PRoFIT-compliant digital witness with two use cases.
}, keywords = {digital witness, IoT-Forensics, privacy}, issn = {1424-8220}, doi = {10.3390/s18020492}, url = {http://www.mdpi.com/1424-8220/18/2/492}, author = {Ana Nieto and Ruben Rios and Javier Lopez} } @inproceedings {1637, title = {An Intelligent and Adaptive Live Simulator: A new Concept for Cybersecurity Training}, booktitle = {9th Future Security Conference}, year = {2014}, address = {Berlin}, abstract = {

The rapid rate of change in technology and the increasing sophistication of cyber attacks require any organization to have a continuous preparation. However, the resource and time intensive nature of cybersecurity education and training renders traditional approaches highly inefficient. Simulators have attracted the attention in the last years as a potential solution for cybersecurity training. However, in spite of the advances achieved, there is still an urgent need to address some open challenges. In this paper we present a novel simulator that solves some these challenges. First, we analyse the main properties that any cybersecurity training solution should comprise, and evaluate to what extent training simulators can meet them. Next, we introduce the functional architecture and innovative features of the simulator, of which a functional prototype has already been released. Finally, we demonstrate how these capabilities are put into practice in training courses already available in the simulator.

}, keywords = {Cyberdefence, Cybersecurity, Education, Simulation, Training}, author = {Jorge L. Hern{\'a}ndez-Ardieta and David Santos and Pascual Parra and Juan E. Tapiador and Pedro Peris-L{\'o}pez and Javier Lopez and Gerardo Fernandez} } @inproceedings {moyano12qasa, title = {Implementing Trust and Reputation Systems: A Framework for Developers{\textquoteright} Usage}, booktitle = {International Workshop on Quantitative Aspects in Security Assurance}, year = {2012}, address = {Pisa}, abstract = {

During the last decades, a huge amount of trust and reputation models have been proposed, each of them with their own particularities and targeting different domains. While much effort has been made in defining ever-increasing complex models, little attention has been paid to abstract away the particularities of these models into a common set of easily understandable concepts. We propose a conceptual framework for computational trust models that is used for developing a component-oriented development framework that aims to assist developers during the implementation phase.

}, author = {Francisco Moyano and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {Cuellar2012, title = {Indistinguishable Regions in Geographic Privacy}, booktitle = {Proceedings of the 27th Annual ACM Symposium on Applied Computing (SAC 2012)}, year = {2012}, month = {26-30 March 2012}, pages = {1463-1469}, publisher = {ACM}, organization = {ACM}, address = {Riva del Garda (Trento), Italy}, abstract = {

The ubiquity of positioning devices poses a natural security challenge: users want to take advantage of location-related services as well as social sharing of their position but at the same time have security concerns about how much information should be shared about their exact position. This paper discusses different location-privacy problems, their formalization and the novel notion of indistinguishability regions that allows one to proof that a given obfuscation function provides a good trade-off between location sharing and privacy.

}, keywords = {indistinguishability, Location Privacy, obfuscation}, isbn = {978-1-4503-0857-1}, doi = {10.1145/2245276.2232010}, author = {Jorge Cuellar and Martin Ochoa and Ruben Rios}, editor = {Sascha Ossowski and Paola Lecca} } @inproceedings {nunez2012integrating, title = {Integrating OpenID with Proxy Re-Encryption to enhance privacy in cloud-based identity services}, booktitle = {IEEE CloudCom 2012}, year = {2012}, month = {Dec 2012}, pages = {241 - 248}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Taipei, Taiwan}, abstract = {

The inclusion of identity management in the cloud computing landscape represents a new business opportunity for providing what has been called Identity Management as a Service (IDaaS). Nevertheless, IDaaS introduces the same kind of problems regarding privacy and data confidentiality as other cloud services; on top of that, the nature of the outsourced information (users{\textquoteright} identity) is critical. Traditionally, cloud services (including IDaaS) rely only on SLAs and security policies to protect the data, but these measures have proven insufficient in some cases; recent research has employed advanced cryptographic mechanisms as an additional safeguard. Apart from this, there are several identity management schemes that could be used for realizing IDaaS systems in the cloud; among them, OpenID has gained crescent popularity because of its open and decentralized nature, which makes it a prime candidate for this task. In this paper we demonstrate how a privacy-preserving IDaaS system can be implemented using OpenID Attribute Exchange and a proxy re-encryption scheme. Our prototype enables an identity provider to serve attributes to other parties without being able to read their values. This proposal constitutes a novel contribution to both privacy and identity management fields. Finally, we discuss the performance and economical viability of our proposal.

}, keywords = {Cloud Computing, Cryptography, identity management, OpenID, privacy, proxy re-encryption}, isbn = {978-1-4673-4511-8}, issn = {978-1-4673-4509-5}, doi = {10.1109/CloudCom.2012.6427551}, author = {David Nu{\~n}ez and Isaac Agudo and Javier Lopez} } @inproceedings {DNunez11, title = {Identity Management Challenges for Intercloud Applications}, booktitle = {1st International Workshop on Security and Trust for Applications in Virtualised Environments (STAVE 2011)}, volume = {187}, year = {2011}, month = {June}, pages = {198-204}, address = {Crete (Greece)}, abstract = {

Intercloud notion is gaining a lot of attention lately from both enterprise and academia, not only because of its benefits and expected results but also due to the challenges that it introduces regarding interoperability and standardisation. Identity management services are one of the main candidates to be outsourced into the Intercloud, since they are one of the most common services needed by companies and organisations. This paper addresses emerging identity management challenges that arise in intercloud formations, such as naming, identification, interoperability, identity life cycle management and single sign-on.

}, doi = {10.1007/978-3-642-22365-5_24}, author = {David Nu{\~n}ez and Isaac Agudo and Prokopios Drogkaris and Stefanos Gritzalis} } @inproceedings {Rios2010a, title = {Implementaci{\'o}n de un esquema de localizaci{\'o}n privada y segura para interiores}, booktitle = {IX Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}10)}, year = {2010}, month = {Sept.}, pages = {237 - 244}, address = {Valladolid (Spain)}, abstract = {

Las aplicaciones basadas en localizaci\ón proporcionan a los usuarios servicios personalizados dependiendo de su ubicaci\ón. Las estimaciones prev\én que estos servicios se extender\án enormemente en los pr\óximos a\ños reportando grandes beneficios tanto a la industria como a los usuarios finales. Sin embargo, para que estos avances sean posibles se hace necesario analizar en profundidad las distintas implicaciones de seguridad y privacidad que la utilizaci\ón de tales servicios pueden traer consigo a los usuarios. En este trabajo proponemos un sistema de localizaci\ón que da soporte a la provisi\ón de servicios basados en localizaci\ón para entornos indoor y que se fundamenta en la tecnolog\ía de redes de sensores inal\ámbricos. En este esquema hemos tenido en cuenta diversos aspectos de seguridad y privacidad, prestando especial atenci\ón a la limitaci\ón extrema de recursos caracter\ística de las redes de sensores. Finalmente hemos desarrollado una prueba de concepto para comprobar la viabilidad de nuestro esquema dentro del \ámbito del proyecto OSAmI.

}, isbn = {978-84-693-5398-1}, author = {Ruben Rios and Isaac Agudo and Jose L. Gonzalez}, editor = {Yannis Dimitriadis and Mar{\'\i}a Jes{\'u}s Verd{\'u} P{\'e}rez} } @article {roman2009a, title = {Integrating Wireless Sensor Networks and the Internet: A Security Analysis}, journal = {Internet Research}, volume = {19}, number = {2}, year = {2009}, month = {Mar 2009}, pages = {246-259}, publisher = {Emerald}, abstract = {

Purpose: This paper aims to analyze the security issues that arise when integrating wireless sensor networks (WSN) and the internet. Also, it seeks to review whether existing technology mechanisms are suitable and can be applied in this context.

Design/methodology/approach: The paper considers the possible approaches that can be used to connect a WSN with the internet, and analyzes the security of their interactions.

Findings: By providing the services of the network through a front-end proxy, a sensor network and the internet can interact securely. There are other challenges to be solved if the sensor nodes are integrated into the internet infrastructure, although there exists interesting advances on his matter.

Research limitations and implications: The complete integration of sensor networks and the internet still remains as an open issue.

Practical implications: With the current state of the art, it is possible to develop a secure sensor network that can provide its services to internet hosts with certain security properties.

Originality/value: The paper studies the interactions between sensor networks and the internet from the point of view of security. It identifies both solutions and research challenges.

}, keywords = {Computer networks, Data security, Integration, Internet, Wireless}, issn = {1066-2243}, doi = {10.1108/10662240910952373}, author = {Rodrigo Roman and Javier Lopez} } @proceedings {Onieva2008, title = {Information Security Theory and Practices. Smart Devices, Convergence and Next Generation Networks}, journal = {Workshop in Information Security Theory and Practices}, volume = {5019}, year = {2008}, publisher = {Springer Verlag}, address = {Seville, Spain}, editor = {Jose A. Onieva and Sauveron D. and Chaumette S. and Gollmann D. and Markantonakis K.} } @inproceedings {Agudo2007, title = {Implementation aspects of a delegation system}, booktitle = {3rd international conference on Mobile multimedia communications (MobiMedia {\textquoteright}07)}, year = {2007}, pages = {50:1{\textendash}50:6}, publisher = {ICST}, organization = {ICST}, address = {Nafpaktos, Greece}, abstract = {

In this paper we simulate an authorization and delegation system using knowledge based technology. This proposal is part of a visual tool that is intended to be an implementation of the theoretical model weighted trust graph (WTG). A brief description of WTG Model and its associated tool is included in the text. In essence, the model is based on the inclusion of real numbers between zero and one in certificates to represent the trust level between the entities involved in them. This trust level is used to control delegation. Moreover, attributes from di_erent domains may be interrelated, so attribute delegation is also taken into account. The proposed Simulation Engine supports one directional and bidirectional search algorithms.

}, isbn = {978-963-06-2670-5}, author = {Isaac Agudo and Javier Lopez and Jose A. Montenegro} } @inproceedings {M.MagdalenaPayerasCapella2007, title = {Incompatibilidades entre Propiedades de los Protocolos de Intercambio Equitativo de Valores}, booktitle = {VI Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}07)}, year = {2007}, pages = {605-608}, publisher = {Universidad de Malaga}, organization = {Universidad de Malaga}, abstract = {

Sets of ideal properties are defined for different kinds of protocols designed for e-commerce applications. These sets are used as a start point in the design and then as a tool to evaluate the quality of the protocols. This is the case of fair exchange protocols and their application to electronic contract signing and certified electronic mail. However, in this area does not exist an agreement about which properties are ideal. Instead we can find properties described by different authors to his convenience. We illustrate the contradictions that appear between some of these properties.

}, author = {Magdalena Payeras and Josep L. Ferrer Gomila and Lloren Huguet Rotger and Jose A. Onieva} } @article {JoseA.Onieva2007a, title = {Integration of non-repudiation services in mobile DRM scenarios}, journal = {Telecommunications Systems}, volume = {35}, year = {2007}, month = {September}, pages = {161-176}, abstract = {

In any kind of electronic transaction, it is extremely important to assure that any of the parties involved can not deny their participation in the information exchange. This security property, which is called non-repudiation, becomes more important in Digital Rights Management (DRM) scenarios, where a consumer can freely access to certain contents but needs to obtain the proper Right Object (RO) from a vendor in order to process it. Any breach in this process could result on financial loss for any peer, thus it is necessary to provide a service that allows the creation of trusted evidence. Unfortunately, non-repudiation services has not been included so far in DRM specifications due to practical issues and the type of content distributed. In this paper we analyze how to allow the integration of non-repudiation services to a DRM framework, providing a set of protocols that allows the right objects acquisition to be undeniable, alongside with a proof-of-concept implementation and a validation process.

}, keywords = {digital rights management, Mobile applications, Non-repudiation, Secure electronic commerce}, issn = {1572-9451}, author = {Jose A. Onieva and Javier Lopez and Rodrigo Roman and Jianying Zhou and Stefanos Gritzalis} } @proceedings {1611, title = {Information Security, 9th International Conference, ISC 2006, Samos Island, Greece, August 30 - September 2, 2006, Proceedings}, journal = {ISC}, volume = {4176}, year = {2006}, publisher = {Springer}, isbn = {3-540-38341-7}, editor = {Sokratis K. Katsikas and Javier Lopez and Michael Backes and Stefanos Gritzalis and Bart Preneel} } @proceedings {1612, title = {Information and Communications Security, 7th International Conference, ICICS 2005, Beijing, China, December 10-13, 2005, Proceedings}, journal = {ICICS}, volume = {3783}, year = {2005}, publisher = {Springer}, isbn = {3-540-30934-9}, editor = {Sihan Qing and Wenbo Mao and Javier Lopez and Guilin Wang} } @proceedings {1613, title = {Information Security, 8th International Conference, ISC 2005, Singapore, September 20-23, 2005, Proceedings}, journal = {ISC}, volume = {3650}, year = {2005}, publisher = {Springer}, isbn = {3-540-29001-X}, editor = {Jianying Zhou and Javier Lopez and Robert H. Deng and Feng Bao} } @proceedings {1615, title = {Information and Communications Security, 6th International Conference, ICICS 2004, Malaga, Spain, October 27-29, 2004, Proceedings}, journal = {ICICS}, volume = {3269}, year = {2004}, publisher = {Springer}, isbn = {3-540-23563-9}, editor = {Javier Lopez and Sihan Qing and Eiji Okamoto} } @article {JavierLopez2003c, title = {Integrating PMI Services in CORBA Applications}, journal = {Computer Standards \& Interfaces}, volume = {25}, number = {4}, year = {2003}, pages = {391-409}, abstract = {

Application-level access control is an important requirement in many distributed environments. For instance, in new scenarios such as e-commerce, access to resources by previously unknown users is an essential problem to be solved. The integration of Privilege Management Infrastructure (PMI) services in the access control system represents a scalable way to solve this problem. Within the CORBA standards, the Resource Access Decision (RAD) facility is a mechanism used by security-aware applications to obtain authorization decisions and to manage access decision policies. This paper presents PMI-RAD, an approach to integrate the services of an external PMI into CORBA applications using the RAD facility. In particular, the integration of the external PMI in the access control system is based on the semantic description of the PMI services. Our RAD implementation requests and verifies attribute certificates from the PMI in a transparent way for CORBA objects.

}, issn = {0920-5489}, author = {Javier Lopez and Antonio Mana and Juan J. Ortega and Jose M. Troya and Mariemma I. Yague} } @inproceedings {Onieva2003b, title = {Intermediary Non-Repudiation Protocols}, booktitle = {5th Conference on Electronic Commerce}, year = {2003}, month = {June}, pages = {207-214}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, abstract = {

n commercial transactions, an intermediary might be involved to help transacting parties to conduct their business. Nevertheless, the intermediary may not be fully trusted. In this paper, we introduce the concept of intermediary (or agent) in a non-repudiation protocol, define the aims of intermediary non-repudiation protocols, and analyze their security requirements. We present a simple scenario with only one recipient, followed by a more complicated framework where multiple recipients are involved and collusion between them is possible.

}, author = {Jose A. Onieva and Jianying Zhou and Mildrey Carbonell and Javier Lopez} } @inproceedings {SelwynRussell2002, title = {Improving Performance in Global PKI using Virtual Certificates and Synthetic Certificates}, booktitle = {Symposium on Cryptography and Information Security (SCIS{\textquoteright}02)}, year = {2002}, month = {January}, pages = {1149-1154}, abstract = {

A digital certificate may be used to inform the world of the public key of its owner. To guard against impersonations and fraud, the receiver needs to perform a series of checks. When a hierarchy of certificates is involved, and when there are large volumes of messages between two parties, as is frequent in commerce, the repeated validation of the same chain of certificates consume significant resources. This paper presents new concepts of virtual certificate and synthetic certificate which can be used to speed up repetitive processing of a chain with improved efficiency.

}, author = {Selwyn Russell and Eiji Okamoto and Ed Dawson and Javier Lopez} } @inproceedings {JorgeDavila2001, title = {Introducci{\'o}n de Aplicaciones UDP en Redes Privadas Virtuales}, booktitle = {III Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}01)}, year = {2001}, month = {Septiembre}, pages = {397-404}, address = {Barcelona (Spain)}, abstract = {

Virtual Private Network (VPN) solutions mainly focus on security aspects. However, when security is considered the unique problem, some collateral ones arise. VPN users suffer from restrictions in their access to the network. They are not free to use traditional Internet services such as electronic mail exchange and audio/video conference with non-VPN users, and to access Web and Ftp servers external to the organization. In this paper we present a new solution, located at the TCP/IP transport layer and oriented to UDP applications that, while maintaining strong security features, allows the open use of traditional network services. The solution does not require the addition of new hardware because it is an exclusively software solution. As a consequence, the application is totally portable.

}, author = {Jorge Davila and Javier Lopez and Rodrigo Roman} } @inproceedings {1722, title = {Internet Secure Communications Between Citizens and Public Administrations}, booktitle = {IFIP Conference on Advances in Electronic Government}, year = {2000}, pages = {109-120}, author = {Jorge Davila and Lidia Fuentes and Javier Lopez and Jose maria troya and Antonio Vallecillo} } @inproceedings {AntonioMana1997, title = {Incremento de la Seguridad del Estandar de Cifrado de Datos basado en la Combinaci{\'o}n de Datos y Clave}, booktitle = {III Jornadas de Inform{\'a}tica y Autom{\'a}tica}, year = {1997}, month = {Julio}, pages = {423-432}, address = {El Puerto de Santa Mar{\'\i}a, Espa}, abstract = {

A pesar del gran esfuerzo investigador llevado a cabo, el ataque al DES ha sido infructuoso desde que a mediados de los setenta fue adoptado como est\ándar por el U. S. National Bureau of Standards. El criptoan\álisis diferencial constituye la base de las primeras t\écnicas capaces de acabar con tal invulnerabilidad. Las t\écnicas de criptoan\álisis basadas en modelos de fallos y su adaptaci\ón a DES, el criptoan\álisis de fallos diferencial, son dos de esas t\écnicas que han conseguido recientemente romper sistemas DES (aunque el ataque est\á limitado a ciertos casos especiales, en particular implementaciones hardware). En este art\ículo se presenta un punto d\ébil de DES sobre el cual puede aumentarse la seguridad y se propone una modificaci\ón de la estructura interna de DES con objeto de mejorar su resistencia ante el criptoan\álisis diferencial y por ende de los ataques derivados de este. La modificaci\ón introducida no supone un coste adicional elevado

}, author = {Antonio Mana and Javier Lopez and Lucia Pino and Juan J. Ortega and Carlos Maraval} } @inproceedings {GonzaloRamos1996, title = {ID3f+A. Algoritmo de Aprendizaje Inductivo Borroso con Divisi{\'o}n Intervalar Autom{\'a}tica de los Atributos}, booktitle = {VI Congreso Espa{\~n}ol Sobre Tecnolog{\'\i}as y L{\'o}gica Fuzzy (ESTYLF{\textquoteright}96)}, year = {1996}, month = {Septiembre}, pages = {225-230}, abstract = {

Uno de los campos m\ás prometedores dentro del estudio de la ambig\üedad es el del aprendizaje, tanto por su importancia consusntacial como por su relaci\ón con la Inteligencia Artificial. Esta relaci\ón se hace evidente cuando intentamos resolver, desde una perspectiva borrosa, el problema de la adquisici\ón autom\ática del conocimiento en sistemas expertos. El algoritmo ID3, el m\ás relevante de los utilizados para la inducci\ón de \árboles de decisi\ón, no es utilizable tal cual con un concepto borroso del concepto de pertenencia. Adem\ás se muestra ineficiente cuando no existe un experto humano que defina correctamente los subrangos de actuaci\ón para los atributos que junto a las clases expresan las relaciones entre situaciones que este algoritmo de aprendizaje intenta descubrir. Proponemos como soluci\ón un nuevo algoritmo, el ID3f+A, que posee la capacidad de tratamiento borroso del concepto de pertenencia, gracias a una modificaci\ón del concepto de entrop\ía, y adem\ás realiza la divisi\ón intervalar autom\ática de los atributos, merced al control del proceso inductivo por medio de la utilizaci\ón de experiencias de control.

}, author = {Gonzalo Ramos and Javier Lopez} } @inproceedings {FranciscoLopez1995, title = {Image Compression Based on Competitive Hebbian Learning Neural Networks}, booktitle = {Brain Processes, Theories and Models International Conference}, year = {1995}, month = {October}, pages = {478-482}, address = {Las Palmas, Spain}, author = {Francisco Lopez and Javier Lopez and Carlos Maraval} }