    @article {Ruben2017trust,
	title = {Modelling Privacy-Aware Trust Negotiations},
	journal = {Computers \& Security},
	volume = {77 },
	year = {2018},
	pages = {773-789},
	publisher = {Elsevier},
	abstract = {<p>Trust negotiations are mechanisms that enable interaction between previously unknown users. After exchanging various pieces of potentially sensitive information, the participants of a negotiation can decide whether or not to trust one another. Therefore, trust negotiations bring about threats to personal privacy if not carefully considered. This paper presents a framework for representing trust negotiations in the early phases of the Software Development Life Cycle (SDLC). The framework can help software engineers to determine the most suitable policies for the system by detecting conflicts between privacy and trust requirements. More precisely, we extend the SI* modelling language and provide a set of predicates for defining trust and privacy policies and a set of rules for describing the dynamics of the system based on the established policies. The formal representation of the model facilitates its automatic verification. The framework has been validated in a distributed social network scenario for connecting drivers with potential passengers willing to share a journey.</p>
},
	keywords = {Goal-Oriented Modelling, Policy, privacy, Requirements Engineering, Secure Software Engineering, Trust},
	issn = {0167-4048},
	doi = {10.1016/j.cose.2017.09.015},
	author = {Ruben Rios and Carmen Fernandez-Gago and Javier Lopez}
}
@inproceedings {1652,
	title = {A Methodology for Privacy-Aware IoT-Forensics},
	booktitle = {16th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom 2017)},
	year = {2017},
	month = {08/2017},
	pages = {626-633},
	publisher = {IEEE},
	organization = {IEEE},
	address = {Sydney (Australia)},
	abstract = {<p>The Internet of Things (IoT) brings new challenges to digital forensics. Given the number and heterogeneity of devices in such scenarios, it bring extremely difficult to carry out investigations without the cooperation of individuals. Even if they are not directly involved in the offense, their devices can yield digital evidence that might provide useful clarification in an investigation. However, when providing such evidence they may leak sensitive personal information. This paper proposes PRoFIT; a new model for IoT-forensics that takes privacy into consideration by incorporating the requirements of ISO/IEC 29100:2011 throughout the investigation life cycle. PRoFIT is intended to lay the groundwork for the voluntary cooperation of individuals in cyber crime investigations.</p>
},
	keywords = {Adaptation models, Forensics, IEC Standards, Information management, ISO Standards, privacy, Software},
	isbn = {978-1-5090-4906-6},
	issn = {2324-9013},
	doi = {10.1109/Trustcom/BigDataSE/ICESS.2017.293},
	author = {Ana Nieto and Ruben Rios and Javier Lopez}
}
