@article {Roman2023a, title = {Current Perspectives on Securing Critical Infrastructures{\textquoteright} Supply Chains}, journal = {IEEE Security \& Privacy}, year = {In Press}, publisher = {IEEE}, issn = {1540-7993}, author = {Rodrigo Roman and Cristina Alcaraz and Javier Lopez and Kouichi Sakurai} } @article {MUNOZ2023103180, title = {A survey on the (in)security of Trusted Execution Environments}, journal = {Computers \& Security}, year = {2023}, pages = {103-180}, publisher = {Elsevier}, address = {In Press}, abstract = {

As the number of security and privacy attacks continue to grow around the world, there is an ever increasing need to protect our personal devices. As a matter of fact, more and more manufactures are relying on Trusted Execution Environments (TEEs) to shield their devices. In particular, ARM TrustZone (TZ) is being widely used in numerous embedded devices, especially smartphones, and this technology is the basis for secure solutions both in industry and academia. However, as shown in this paper, TEE is not bullet-proof and it has been successfully attacked numerous times and in very different ways. To raise awareness among potential stakeholders interested in this technology, this paper provides an extensive analysis and categorization of existing vulnerabilities in TEEs and highlights the design flaws that led to them. The presented vulnerabilities, which are not only extracted from existing literature but also from publicly available exploits and databases, are accompanied by some effective countermeasures to reduce the likelihood of new attacks. The paper ends with some appealing challenges and open issues.

}, keywords = {Computer security, Hardware attacks, Secure hardware, Side-channel attacks, Software attacks, Trusted Execution Environments}, issn = {0167-4048}, doi = {https://doi.org/10.1016/j.cose.2023.103180}, url = {https://www.sciencedirect.com/science/article/pii/S0167404823000901}, author = {Mu{\~n}oz, Antonio and Ruben Rios and Rodrigo Roman and Javier Lopez} } @inproceedings {2016, title = {AndroCIES: Automatizaci{\'o}n de la certificaci{\'o}n de seguridad para aplicaciones Android}, booktitle = {XVII Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2022)}, volume = {265}, year = {2022}, month = {10/2022}, pages = {192-197}, publisher = {Ediciones Universidad Cantabria}, organization = {Ediciones Universidad Cantabria}, address = {Santander, Spain}, abstract = {

El auge de las plataformas m{\'o}viles est{\'a} impulsando el desarrollo de un gran n{\'u}mero de aplicaciones, muchas de las cuales salen al mercado sin las convenientes comprobaciones de seguridad. Recientemente, Google est{\'a} apostando por hacer este problema m{\'a}s visible y concienciar a los usuarios de la necesidad de instalar aplicaciones verificadas por laboratorios independientes. Sin embargo, la certificaci{\'o}n de aplicaciones suele ser una tarea ardua y no exenta de errores. Por ello, en este trabajo, presentamos la herramienta AndroCIES, que es capaz de automatizar en gran medida las evaluaciones necesarias para la certificaci{\'o}n de aplicaciones m{\'o}viles, reduciendo en torno a un 20\% el tiempo empleado en este proceso.

}, keywords = {an{\'a}lisis est{\'a}tico, aplicaciones, certificaci{\'o}n, seguridad}, author = {Manuel Ruiz and Ruben Rios and Rodrigo Roman and Mu{\~n}oz, Antonio and Juan Manuel Mart{\'\i}nez and Jorge Wallace} } @article {rios2022pmec, title = {Personal IoT Privacy Control at the Edge}, journal = {IEEE Security \& Privacy }, volume = {20}, year = {2022}, month = {01/2022}, pages = {23 - 32}, publisher = {IEEE}, abstract = {

This article introduces a privacy manager for IoT data based on Edge Computing. This poses the advantage that privacy is enforced before data leaves the control of the user, who is provided with a tool to express data sharing preferences based on a novel context-aware privacy language.

}, issn = {1540-7993}, doi = {10.1109/MSEC.2021.3101865}, author = {Ruben Rios and Jose A. Onieva and Rodrigo Roman and Javier Lopez} } @inproceedings {1979, title = {Privacidad Contextual en entornos Edge}, booktitle = {VII Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2022)}, year = {2022}, month = {06/2022}, pages = {122-129}, address = {Bilbao, Spain}, abstract = {

La privacidad contextual se refiere a la protecci{\'o}n de toda aquella informaci{\'o}n que puede desprenderse de la interacci{\'o}n entre usuarios y/o servicios, exceptuando los datos que el propio usuario elige transmitir. La localizaci{\'o}n, el tiempo, los patrones de uso y los diferentes par{\'a}metros necesarios para realizar la comunicaci{\'o}n son algunos ejemplos. Este tipo de privacidad es extremadamente importante en la computaci{\'o}n edge debido al acercamiento de los recursos de la infraestructura a los usuarios. Por ello, el objetivo de este trabajo es ofrecer un an{\'a}lisis y clasificaci{\'o}n de las diferentes soluciones propuestas en la literatura respecto a la privacidad contextual en entornos edge, mostrando tanto las capacidades de los mecanismos actuales como los desaf{\'\i}os en este campo.

}, keywords = {Computaci{\'o}n edge, Privacidad, Privacidad contextual}, isbn = {978-84-88734-13-6 }, author = {Manuel Ruiz and Ruben Rios and Rodrigo Roman and Javier Lopez} } @inproceedings {1846, title = {Distributed Detection of APTs: Consensus vs. Clustering}, booktitle = {25th European Symposium on Research in Computer Security (ESORICS 2020)}, volume = {12308}, year = {2020}, month = {09/2020}, pages = {174-192}, keywords = {Advanced Persistent Threat, clustering, consensus, distributed detection, Opinion Dynamics, Traceability}, isbn = {978-3-030-58951-6}, doi = {https://doi.org/10.1007/978-3-030-58951-6_9}, author = {Juan E. Rubio and Cristina Alcaraz and Ruben Rios and Rodrigo Roman and Javier Lopez} } @article {Rubio2020IIoT, title = {Integration of a Threat Traceability Solution in the Industrial Internet of Things}, journal = {IEEE Transactions on Industrial Informatics}, volume = {16}, number = {6575-6583}, year = {2020}, month = {10/2020}, publisher = {IEEE}, abstract = {In Industrial Internet of Things (IIoT) scenarios, where a plethora of IoT technologies coexist with consolidated industrial infrastructures, the integration of security mechanisms that provide protection against cyber-security attacks becomes a critical challenge. Due to the stealthy and persistent nature of some of these attacks, such as Advanced Persistent Threats, it is crucial to go beyond traditional Intrusion Detection Systems for the traceability of these attacks. In this sense, Opinion Dynamics poses a novel approach for the correlation of anomalies, which has been successfully applied to other network security domains. In this paper, we aim to analyze its applicability in the IIoT from a technical point of view, by studying its deployment over different IIoT architectures and defining a common framework for the acquisition of data considering the computational constraints involved. The result is a beneficial insight that demonstrates the feasibility of this approach when applied to upcoming IIoT infrastructures. }, keywords = {Detection, Dynamics, IIoT, Industry, Intrusion, Opinion, Traceability}, issn = {1551-3203}, doi = {10.1109/TII.2020.2976747}, author = {Juan E. Rubio and Rodrigo Roman and Javier Lopez} } @article {rub2019cose, title = {Current Cyber-Defense Trends in Industrial Control Systems}, journal = {Computers \& Security Journal}, volume = {87}, year = {2019}, month = {11/2019}, publisher = {Elsevier}, type = {SECRYPT 2017 Special Issue}, abstract = {

Advanced Persistent Threats (APTs) have become a serious hazard for any critical infrastructure, as a single solution to protect all industrial assets from these complex attacks does not exist. It is then essential to understand what are the defense mechanisms that can be used as a first line of defense. For this purpose, this article will firstly study the spectrum of attack vectors that APTs can use against existing and novel elements of an industrial ecosystem. Afterwards, this article will provide an analysis of the evolution and applicability of Intrusion Detection Systems (IDS) that have been proposed in both the industry and academia.

}, keywords = {APT, Industrial Control, Industry 4.0, Intrusion Detection, SCADA}, issn = {0167-4048}, doi = {https://doi.org/10.1016/j.cose.2019.06.015}, author = {Juan E. Rubio and Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @article {onieva2019vec, title = {Edge-Assisted Vehicular Networks Security}, journal = {IEEE Internet of Things Journal}, volume = {6}, year = {2019}, month = {10/2019}, pages = {8038-8045}, publisher = {IEEE Computer Society}, abstract = {

Edge Computing paradigms are expected to solve some major problems affecting current application scenarios that rely on Cloud computing resources to operate. These novel paradigms will bring computational resources closer to the users and by doing so they will not only reduce network latency and bandwidth utilization but will also introduce some attractive context-awareness features to these systems. In this paper we show how the enticing features introduced by Edge Computing paradigms can be exploited to improve security and privacy in the critical scenario of vehicular networks (VN), especially existing authentication and revocation issues. In particular, we analyze the security challenges in VN and describe three deployment models for vehicular edge computing, which refrain from using vehicular- to-vehicular communications. The result is that the burden imposed to vehicles is considerably reduced without sacrificing the security or functional features expected in vehicular scenarios.

}, keywords = {Critical Infrastructures, Internet of Things, privacy, security, Vehicular Networks}, issn = {2327-4662}, doi = {10.1109/JIOT.2019.2904323}, author = {Jose A. Onieva and Ruben Rios and Rodrigo Roman and Javier Lopez} } @article {roman2018VIS, title = {Immune System for the Internet of Things using Edge Technologies}, journal = {IEEE Internet of Things Journal}, volume = {6}, year = {2019}, month = {06/2019}, pages = {4774-4781}, publisher = {IEEE Computer Society}, abstract = {

The Internet of Things (IoT) and Edge Computing are starting to go hand in hand. By providing cloud services close to end-users, edge paradigms enhance the functionality of IoT deployments, and facilitate the creation of novel services such as augmented systems. Furthermore, the very nature of these paradigms also enables the creation of a proactive defense architecture, an immune system, which allows authorized immune cells (e.g., virtual machines) to traverse edge nodes and analyze the security and consistency of the underlying IoT infrastructure. In this article, we analyze the requirements for the development of an immune system for the IoT, and propose a security architecture that satisfies these requirements. We also describe how such a system can be instantiated in Edge Computing infrastructures using existing technologies. Finally, we explore the potential application of immune systems to other scenarios and purposes.

}, keywords = {Edge computing, Immune Systems, Internet of Things, security}, issn = {2327-4662}, doi = {10.1109/JIOT.2018.2867613}, url = {https://ieeexplore.ieee.org/document/8449989/}, author = {Rodrigo Roman and Ruben Rios and Jose A. Onieva and Javier Lopez} } @article {RubioSIJCS19, title = {Tracking APTs in Industrial Ecosystems: A Proof of Concept}, journal = {Journal of Computer Security}, volume = {27}, year = {2019}, month = {09/2019}, pages = {521-546}, publisher = {Elsevier}, type = {ESORICS 2018 Special Issue }, issn = {0167-4048}, author = {Juan E. Rubio and Rodrigo Roman and Cristina Alcaraz and Yan Zhang} } @inproceedings {1666, title = {Analysis of cybersecurity threats in Industry 4.0: the case of intrusion detection}, booktitle = {The 12th International Conference on Critical Information Infrastructures Security}, volume = {Lecture Notes in Computer Science, vol 10707}, year = {2018}, month = {08/2018}, pages = {119-130}, publisher = {Springer}, organization = {Springer}, author = {Juan E. Rubio and Rodrigo Roman and Javier Lopez} } @article {RomanIoT18, title = {Evolution and Trends in the Security of the Internet of Things}, journal = {IEEE Computer}, volume = {51}, year = {2018}, month = {07/2018}, pages = {16-25}, publisher = {IEEE Computer Society}, address = {New Jersey, USA}, keywords = {Evolution, Internet of Things, IoT, security, Trends}, issn = {0018-9162}, doi = {10.1109/MC.2018.3011051}, url = {https://ieeexplore.ieee.org/document/8423133/}, author = {Rodrigo Roman and Javier Lopez and Stefanos Gritzalis} } @article {Hiroshi18IoT, title = {Feasibility of Societal Model for Securing Internet of Things}, journal = {KSII Transactions on Internet and Information Systems}, volume = {12}, number = {8}, year = {2018}, month = {08/2018}, pages = {3567-3588}, publisher = {KSII}, abstract = {

In the Internet of Things (IoT) concept, devices communicate autonomously with applications in the Internet. A significant aspect of IoT that makes it stand apart from present-day networked devices and applications is a) the very large number of devices, produced by diverse makers and used by an even more diverse group of users; b) the applications residing and functioning in what were very private sanctums of life e.g. the car, home, and the people themselves. Since these diverse devices require high-level security, an operational model for an IoT system is required, which has built-in security. We have proposed the societal model as a simple operational model. The basic concept of the model is borrowed from human society {\textendash} there will be infants, the weak and the handicapped who need to be protected by guardians. This natural security mechanism works very well for IoT networks which seem to have inherently weak security mechanisms. In this paper, we discuss the requirements of the societal model and examine its feasibility by doing a proof-of-concept implementation.

}, keywords = {Internet of Things, IoT, network architecture, operational model, security, SNMP}, issn = {1976-7277}, doi = {10.3837/tiis.2018.08.003}, url = {http://www.itiis.org/digital-library/manuscript/2082}, author = {Hiroshi Tsunoda and Rodrigo Roman and Javier Lopez and Glenn Mansfield Keeni} } @article {RomanFog16, title = {Mobile edge computing, Fog et al.: A survey and analysis of security threats and challenges}, journal = {Future Generation Computer Systems}, volume = {78}, year = {2018}, month = {01/2018}, pages = {680-698}, publisher = {Elsevier}, abstract = {

For various reasons, the cloud computing paradigm is unable to meet certain requirements (e.g. low latency and jitter, context awareness, mobility support) that are crucial for several applications (e.g. vehicular networks, augmented reality). To fulfil these requirements, various paradigms, such as fog computing, mobile edge computing, and mobile cloud computing, have emerged in recent years. While these edge paradigms share several features, most of the existing research is compartmentalised; no synergies have been explored. This is especially true in the field of security, where most analyses focus only on one edge paradigm, while ignoring the others. The main goal of this study is to holistically analyse the security threats, challenges, and mechanisms inherent in all edge paradigms, while highlighting potential synergies and venues of collaboration. In our results, we will show that all edge paradigms should consider the advances in other paradigms.

}, keywords = {Cloud Computing, Fog computing, Mobile cloud computing, Mobile edge computing, privacy, security}, issn = {0167-739X}, doi = {10.1016/j.future.2016.11.009}, url = {https://authors.elsevier.com/c/1VmhQ,3q5xKgZZ}, author = {Rodrigo Roman and Javier Lopez and Masahiro Mambo} } @inproceedings {RubioRomanAlcarazZhang2018, title = {Tracking Advanced Persistent Threats in Critical Infrastructures through Opinion Dynamics}, booktitle = {European Symposium on Research in Computer Security (ESORICS 2018)}, volume = {11098}, year = {2018}, month = {08/2018}, pages = {555-574}, publisher = {Springer}, organization = {Springer}, address = {Barcelona, Spain}, abstract = {

Advanced persistent threats pose a serious issue for modern industrial environments, due to their targeted and complex attack vectors that are difficult to detect. This is especially severe in critical infrastructures that are accelerating the integration of IT technologies. It is then essential to further develop effective monitoring and response systems that ensure the continuity of business to face the arising set of cyber-security threats. In this paper, we study the practical applicability of a novel technique based on opinion dynamics, that permits to trace the attack throughout all its stages along the network by correlating different anomalies measured over time, thereby taking the persistence of threats and the criticality of resources into consideration. The resulting information is of essential importance to monitor the overall health of the control system and correspondingly deploy accurate response procedures.

}, keywords = {Advanced Persistent Threat, Detection, Opinion Dynamics, Traceability}, doi = {10.1007/978-3-319-99073-6_27}, url = {https://link.springer.com/chapter/10.1007/978-3-319-99073-6_27}, author = {Juan E. Rubio and Rodrigo Roman and Cristina Alcaraz and Yan Zhang} } @inproceedings {1662, title = {Analysis of Intrusion Detection Systems in Industrial Ecosystems}, booktitle = {14th International Conference on Security and Cryptography (SECRYPT 2017)}, volume = {6}, year = {2017}, pages = {116-128}, publisher = {SciTePress}, organization = {SciTePress}, isbn = {978-989-758-259-2}, doi = {10.5220/0006426301160128}, author = {Juan E. Rubio and Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @inproceedings {Ruben2017smog, title = {From Smog to Fog: A Security Perspective}, booktitle = {2nd IEEE International Conference on Fog and Edge Mobile Computing (FMEC 2017)}, year = {2017}, month = {06/2017}, pages = {56-61}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Valencia, Spain. 8-11 May 2017}, abstract = {

Cloud computing has some major limitations that hinder its application to some specific scenarios (e.g., Industrial IoT, and remote surgery) where there are particularly stringent requirements, such as extremely low latency. Fog computing is a specialization of the Cloud that promises to overcome the aforementioned limitations by bringing the Cloud closer to end-users. Despite its potential benefits, Fog Computing is still a developing paradigm which demands further research, especially on security and privacy aspects. This is precisely the focus of this paper: to make evident the urgent need for security mechanisms in Fog computing, as well as to present a research strategy with the necessary steps and processes that are being undertaken within the scope of the SMOG project, in order to enable a trustworthy and resilient Fog ecosystem.

}, isbn = {978-1-5386-2859-1}, doi = {10.1109/FMEC.2017.7946408}, author = {Ruben Rios and Rodrigo Roman and Jose A. Onieva and Javier Lopez} } @article {lopez2017ecn, title = {Protecting Industry 4.0 against Advanced Persistent Threats}, journal = {European CIIP Newsletter}, volume = {11}, number = {1}, year = {2017}, month = {03/2017}, pages = {27-29}, publisher = {European CIIP Newsletter}, issn = {NONE}, author = {Javier Lopez and Cristina Alcaraz and Jes{\'u}s Rodriguez and Rodrigo Roman and Juan E. Rubio} } @inproceedings {1582, title = {Arquitectura funcional para la cadena de custodia digital en objetos de la IoT}, booktitle = {XIV Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n}, year = {2016}, month = {10/2016}, pages = {168-173}, abstract = {
En la Internet de los Objetos (IoT, por sus siglas en ingl{\'e}s), los ataques pueden ser perpetrados desde dispositivos que enmascaran su rastro ayud{\'a}ndose de la densidad de objetos y usuarios. Actualmente la idea de que los dispositivos de usuario almacenan evidencias que pueden ser muy valiosas para frenar ataques es bien conocida. Sin embargo, la colaboraci{\'o}n de {\'e}stos para denunciar posibles abusos telem{\'a}ticos a{\'u}n est{\'a} por definir. Los testigos digitales son dispositivos concebidos para definir la participaci{\'o}n de dispositivos de usuario en una cadena de custodia digital. La idea es que las evidencias se generan, almacenan y transfieren siguiendo los requisitos marcados por las normas actuales (p.ej. UNE 71505), pero respetando las restricciones en recursos de los dispositivos. En este art{\'\i}culo proponemos una arquitectura funcional para la implementaci{\'o}n del concepto de testigo digital en dispositivos heterog{\'e}neos de la IoT.
}, keywords = {Cadena de custodia digital, Identidad de las cosas, Testigo digital}, isbn = {978-84-608-9470-4}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {ercim-nrl16, title = {Digital Witness: Digital Evidence Management Framework for the Internet of Things}, journal = {ERCIM News}, number = {106}, year = {2016}, month = {07/2016}, pages = {9-9}, publisher = {ERCIM EEIG}, issn = {0926-4981}, url = {http://ercim-news.ercim.eu/images/stories/EN106/EN106-web.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {ieeenet16-nrl, title = {Digital Witness: Safeguarding Digital Evidence by using Secure Architectures in Personal Devices}, journal = {IEEE Network}, year = {2016}, pages = {12-19}, publisher = {IEEE Communications Society}, abstract = {

Personal devices contain electronic evidence associated with the behaviour of their owners and other devices in their environment, which can help clarify the facts of a cyber-crime scene. These devices are usually analysed as containers of proof. However, it is possible to harness the boom of personal devices to define the concept of digital witnesses, where personal devices are able to actively acquire, store, and transmit digital evidence to an authorised entity, reliably and securely. This article introduces this novel concept, providing a preliminary analysis on the management of digital evidence and the technologies that can be used to implement it with security guarantees in IoT environments. Moreover, the basic building blocks of a digital witness are defined.

}, keywords = {Digital Evidence, Identity Delegation, IoT-Forensics, Secure Element}, issn = {0890-8044}, doi = {10.1109/MNET.2016.1600087NM}, url = {http://ieeexplore.ieee.org/document/7764297/$\#$full-text-section}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {nrlSIC16, title = {Testificaci{\'o}n Digital}, journal = {Revista SIC}, volume = {122}, year = {2016}, month = {Nov 2016}, pages = {94-98}, publisher = {Ediciones CODA}, abstract = {

El creciente n{\'u}mero de dispositivos interconectados trae consigo problemas de seguridad bien conocidos; por ejemplo, aquellos debidos a las vulnerabilidades en protocolos muy diversos {\textendash}muchos de ellos propietarios{\textendash} y al factor de error humano introducido por los usuarios. Sin embargo, cabe preguntarse c{\'o}mo podemos usar el despliegue de tales dispositivos en beneficio de la ciberseguridad. En el proyecto IoTest se est{\'a} desarrollando una soluci{\'o}n, el Testigo Digital, que permitir{\'a} a los dispositivos personales con arquitectura de seguridad embebida reaccionar ante ataques virtuales, protegi{\'e}ndonos de los ciberataques emergentes.

}, issn = {1136-0623}, url = {https://revistasic.es/index.php?option=com_content\&view=article\&id=1713\&Itemid=1498}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @inproceedings {1578, title = {Testigo digital: delegaci{\'o}n vinculante de evidencias electr{\'o}nicas para escenarios IoT}, booktitle = {II Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2016)}, year = {2016}, month = {06/2016}, pages = {109-116}, abstract = {

En un mundo en el que los usuarios dependen cada vez m{\'a}s de sus dispositivos, {\'e}stos almacenan gran cantidad de datos y son una fuente muy valiosa de informaci{\'o}n sobre su entorno. Sin embargo, la heterogeneidad y la densidad de los objetos conectados, caracter{\'\i}sticas propias de la Internet de las Cosas (IoT), sirven de velo para ocultar conductas maliciosas que afectan a estos dispositivos, sin que quede rastro de tales acciones. En este art{\'\i}culo definimos el concepto de testigo digital: funcionalidad que permitir{\'a} a los dispositivos personales y otros objetos colaborar para implementar una cadena de custodia digital en la IoT. El fin perseguido es ofrecer soluciones que mitiguen los efectos de la ciberdelincuencia, ampar{\'a}ndose en la colaboraci{\'o}n de los dispositivos con arquitecturas de seguridad embebidas para alertar de conductas maliciosas, y dejar constancia de {\'e}stas.

}, keywords = {computaci{\'o}n forense, elemento seguro, Evidencia electr{\'o}nica, IoT, no-repudio}, isbn = {978-84-608-8070-7}, url = {http://ucys.ugr.es/jnic2016/docs/ActasJNIC2016.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {PATENTDW15, title = {Testigo digital: procedimientos y dispositivos para la gesti{\'o}n segura de evidencias electr{\'o}nicas con credenciales vinculantes}, journal = {Espa{\~n}a, C. Aut{\'o}n./Reg. de explotaci{\'o}n: Andaluc{\'\i}a}, volume = {P201500764}, year = {2015}, month = {10/2015}, publisher = {G06F 21/00}, type = {Invention Patent}, edition = {Invention Patent}, chapter = {WO2017068222}, address = {Spain}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {roman2013iot, title = {On the features and challenges of security and privacy in distributed internet of things}, journal = {Computer Networks}, volume = {57}, year = {2013}, month = {July 2013}, pages = {2266{\textendash}2279}, publisher = {Elsevier}, abstract = {

In the Internet of Things, services can be provisioned using centralized architectures, where central entities acquire, process, and provide information. Alternatively, distributed architectures, where entities at the edge of the network exchange information and collaborate with each other in a dynamic way, can also be used. In order to understand the applicability and viability of this distributed approach, it is necessary to know its advantages and disadvantages {\textendash} not only in terms of features but also in terms of security and privacy challenges. The purpose of this paper is to show that the distributed approach has various challenges that need to be solved, but also various interesting properties and strengths.

}, keywords = {Internet of Things, Wireless Sensor Network}, issn = {1389-1286}, doi = {10.1016/j.comnet.2012.12.018}, url = {http://www.sciencedirect.com/science/article/pii/S1389128613000054}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @article {1752, title = {Security of Industrial Sensor Network-based Remote Substations in the context of the Internet of Things}, journal = {Ad Hoc Networks}, volume = {11}, year = {2013}, month = {2013}, pages = {1091{\textendash}1104}, publisher = {Elsevier}, abstract = {

The main objective of remote substations is to provide the central system with sensitive information from critical infrastructures, such as generation, distribution or transmission power systems. Wireless sensor networks have been recently applied in this particular context due to their attractive services and inherent benefits, such as simplicity, reliability and cost savings. However, as the number of control and data acquisition systems that use the Internet infrastructure to connect to substations increases, it is necessary to consider what connectivity model the sensor infrastructure should follow: either completely isolated from the Internet or integrated with it as part of the Internet of Things paradigm. This paper therefore addresses this question by providing a thorough analysis of both security requirements and infrastructural requirements corresponding to all those TCP/IP integration strategies that can be applicable to networks with constrained computational resources.

}, keywords = {Industrial Control Networks, Internet of Things, Supervisory Control and Data Acquisition (SCADA) Systems, The Internet, wireless sensor networks}, issn = {1570-8705}, doi = {http://dx.doi.org/10.1016/j.adhoc.2012.12.001}, author = {Cristina Alcaraz and Rodrigo Roman and Pablo Najera and Javier Lopez} } @article {1770, title = {Smart Control of Operational Threats in Control Substations}, journal = {Computers \& Security}, volume = {38}, year = {2013}, month = {OCT 2013}, pages = {14-27}, publisher = {Elsevier}, abstract = {

Any deliberate or unsuitable operational action in control tasks of critical infrastructures, such as energy generation, transmission and distribution systems that comprise sub-domains of a Smart Grid, could have a significant impact on the digital economy: without energy, the digital economy cannot live. In addition, the vast majority of these types of critical systems are configured in isolated locations where their control depends on the ability of a few, supposedly trustworthy, human operators. However, this assumption of reliabilty is not always true. Malicious human operators (criminal insiders) might take advantage of these situations to intentionally manipulate the critical nature of the underlying infrastructure. These criminal actions could be not attending to emergency events, inadequately responding to incidents or trying to alter the normal behaviour of the system with malicious actions. For this reason, in\ this paper we propose a smart response mechanism that controls human operators{\textquoteright} operational threats at all times. Moreover, the design of this mechanism allows the system to be able to not only evaluate by itself, the situation of a particular scenario but also to take control when areas are totally unprotected and/or isolated. The response mechanism, which is based on Industrial Wireless Sensor Networks (IWSNs) for the constant monitoring of observed critical\ infrastructures, on reputation for controlling human operators{\textquoteright} actions, and on the ISA100.11a standard for alarm management, has been implemented and simulated to evaluate its feasibility for critical contexts.

}, keywords = {Digital Economy, Energy Control Systems, Reputation, security, Smart grids, wireless sensor networks}, issn = {0167-4048}, doi = {https://doi.org/10.1016/j.cose.2013.03.013}, url = {http://www.sciencedirect.com/science/article/pii/S0167404813000588}, author = {Javier Lopez and Cristina Alcaraz and Rodrigo Roman} } @article {najerascn12, title = {User-centric secure integration of personal RFID tags and sensor networks}, journal = {Security and Communication Networks}, volume = {6}, year = {2013}, month = {Oct 2013}, pages = {1177{\textendash}1197}, publisher = {Wiley-Blackwell}, abstract = {

A personal network (PN) should enable the collaboration of user{\textquoteright}s devices and services in a flexible, self-organizing and friendly manner. For such purpose, the PN must securely accommodate heterogeneous technologies with uneven computational and communication resources. In particular, personal RFID tags can enable seamless recognition of user{\textquoteright}s context, provide user authentication and enable novel services enhancing the quality and quantity of data handled by the PN. However, the highly constrained features of common RFID tags and their passive role in the network highlights the need of an adequate secure communication model with personal tags which enables their participation as a member of the PN. In this paper, we present our concept of PN, with special emphasis on the role of RFID and sensor networks, and define a secure architecture for PNs including methods for the secure access to context-aware technologies from both local PN members and the Internet of Things. The PN architecture is designed to support differentiated security mechanisms to maximize the level of security for each type of personal device. Furthermore, we analyze which security solutions available in the literature can be adapted for our architecture, as well as the challenges and security mechanisms still necessary in the secure integration of personal tags.

}, issn = {1939-0114}, doi = {10.1002/sec.684}, url = {http://dx.doi.org/10.1002/sec.684}, author = {Pablo Najera and Rodrigo Roman and Javier Lopez} } @article {Roman2010a, title = {Advanced Secure Multimedia Services for Digital Homes}, journal = {Information Systems Frontiers}, volume = {14}, year = {2012}, month = {July 2012}, pages = {527-540}, publisher = {Springer}, abstract = {

Our society is becoming increasingly more IT-oriented, and the images and sounds that reflect our daily life are being stored mainly in a digital form. This digital personal life can be part of the home multimedia contents, and users demand access and possibly share these contents (such as photographs, videos, and music) in an ubiquitous way: from any location and with any device. The purpose of this article is twofold. First, we introduce the Feel@Home system, whose main objective is to enable the previously mentioned vision of an ubiquitous digital personal life. Second, we describe the security architecture of Feel@Home, analyzing the security and privacy requirements that identify which threats and vulnerabilities must be considered, and deriving the security building blocks that can be used to protect both IMS-based and VPN-based solutions.

}, keywords = {Content sharing, Digital home, Multimedia, privacy, security}, issn = {1387-3326}, doi = {10.1007/s10796-010-9258-9}, url = {http://www.springerlink.com/content/1785645v5246006u/}, author = {Rodrigo Roman and Javier Lopez and Olivier Dugeon and Marc Lacoste and Pierre Plaza Tron and Marta Bel} } @article {Galindo2010, title = {On the Energy Cost of Authenticated Key Agreement in Wireless Sensor Networks}, journal = {Wireless Communications and Mobile Computing}, volume = {12}, year = {2012}, month = {Jan 2012}, pages = {133-143}, publisher = {Wiley}, abstract = {

Wireless sensors are battery-powered devices which are highly constrained in terms of computational capabilities, memory and communication bandwidth. While battery life is their main limitation, they require considerable energy to communicate data. Due to this, it turns out that the energy saving of computationally inexpensive primitives (like symmetric key cryptography (SKC)) can be nullified by the bigger amount of data they require to be sent. In this work, we study the energy cost of key agreement protocols between peers in a network using asymmetric key cryptography. Our main concern is to reduce the amount of data to be exchanged, which can be done by using special cryptographic paradigms like identity-based and self-certified cryptography. The main news is that an intensive computational primitive for resource-constrained devices, such as non-interactive identity-based authenticated key exchange, performs comparably or even better than traditional authenticated key exchange (AKE) in a variety of scenarios. Moreover, protocols based in this primitive can provide better security properties in real deployments than other simple protocols based on symmetric cryptography. Our findings illustrate to what extent the latest implementation advancements push the efficiency boundaries of public key cryptography (PKC) in wireless sensor networks (WSNs).

}, keywords = {identity-based key agreement, key distribution, pairings, underwater wireless sensor networks, wireless sensor networks}, issn = {1530-8669}, doi = {10.1002/wcm.894}, url = {http://dx.doi.org/10.1002/wcm.894}, author = {David Galindo and Rodrigo Roman and Javier Lopez} } @inproceedings {Najera_STM11, title = {Secure architecure for the integration of RFID and sensors in personal networks}, booktitle = {7th International Workshop on Security and Trust Management (STM{\textquoteright}11)}, series = {LNCS}, volume = {7170}, year = {2012}, pages = {207-222}, publisher = {Springer}, organization = {Springer}, address = {Copenhagen, Denmark}, abstract = {

The secure integration of RFID technology into the personal network paradigm, as a context-aware technology which complements body sensor networks, would provide notable benefits to applications and potential services of the PN. RFID security as an independent technology is reaching an adequate maturity level thanks to research in recent years; however, its integration into the PN model, interaction with other network resources, remote users and service providers requires a specific security analysis and a PN architecture prepared to support these resource-constrained pervasive technologies. This paper provides such PN architecture and analysis. Aspects such as the management of personal tags as members of the PN, the authentication and secure communication of PN nodes and remote users with the context-aware technologies, and the enforcement of security and privacy policies are discussed in the architecture.

}, isbn = {978-3-642-29962-9}, doi = {10.1007/978-3-642-29963-6_15}, author = {Pablo Najera and Rodrigo Roman and Javier Lopez} } @article {AlcarazR2012, title = {Selecting key management schemes for WSN applications}, journal = {Computers \& Security}, volume = {31}, number = {38}, year = {2012}, month = {Nov 2012}, pages = {956{\textendash}966}, publisher = {Elsevier}, abstract = {

Key management in wireless sensor networks (WSN) is an active research topic. Due to the fact that a large number of key management schemes (KMS) have been proposed in the literature, it is not easy for a sensor network designer to know exactly which KMS best fits in a particular WSN application. In this article, we offer a comprehensive review on how the application requirements and the properties of various key management schemes influence each other. Based on this review, we show that the KMS plays a critical role in determining the security performance of a WSN network with given application requirements. We also develop a method that allows the network designers to select the most suitable KMS for a specific WSN network setting. In addition, the article also addresses the issues on the current state-of-the-art research on the KMS for homogeneous (i.e. non-hierarchical) networks to provide solutions for establishing link-layer keys in various WSN applications and scenarios.

}, keywords = {security}, issn = {0167-4048}, doi = {10.1016/j.cose.2012.07.002}, url = {http://www.sciencedirect.com/science/article/pii/S0167404812001034}, author = {Cristina Alcaraz and Javier Lopez and Rodrigo Roman and Hsiao-Hwa Chen} } @inproceedings {Najera_JITEL11, title = {Acceso seguro a nodos RFID en una arquitectura de red personal}, booktitle = {X Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL 2011)}, year = {2011}, month = {09/2011}, pages = {104 - 111}, publisher = {Universidad de Cantabria}, organization = {Universidad de Cantabria}, address = {Santander, Spain}, abstract = {

El paradigma de red personal (PN) permitir\á la interacci\ón y colaboraci\ón del creciente abanico de dispositivos personales. Con tal fin la PN ha de integrar en su seno m\últiples tecnolog\ías heterog\éneas con diversas capacidades computacionales y de comunicaci\ón de forma segura. En particular, la incorporaci\ón de la tecnolog\ía RFID en objetos personales conlleva m\últiples riesgos de seguridad y privacidad que han suscitado un elevado inter\és de la comunidad investigadora en los \últimos a\ños. M\ás all\á de su seguridad de forma aislada, su integraci\ón en la PN y la interacci\ón de \ésta con redes de \área extensa como Internet of Things requieren una arquitectura de red personal adecuada para tal contexto. Este art\ículo proporciona los fundamentos de tal arquitectura segura incluyendo el an\álisis de aspectos como la incorporaci\ón e inicializaci\ón de las restringidas etiquetas RFID en la red personal, la autenticaci\ón tanto de miembros de la PN como de usuarios y servicios remotos en su acceso a las tecnolog\ías de contexto, el control de las pol\íticas de privacidad y el establecimiento de canales seguros de comunicaci\ón supervisados.

}, keywords = {arquitectura software, red personal, Seguridad RFID}, isbn = {978-84-694-5948-5}, author = {Pablo Najera and Rodrigo Roman and Javier Lopez}, editor = {Klaus Hackbarth and Ram{\'o}n Ag{\"u}ero and Roberto Sanz} } @article {Roman2010, title = {A Cross-layer Approach for Integrating Security Mechanisms in Sensor Networks Architectures}, journal = {Wireless Communications and Mobile Computing}, volume = {11}, year = {2011}, pages = {267-276}, publisher = {Wiley}, abstract = {

The wireless sensor networks (WSN) paradigm is especially vulnerable against external and internal attacks. Therefore, it is necessary to develop security mechanisms and protocols to protect them. These mechanisms must become an integral part of the software architecture and network stack of a sensor node. A question that remains is how to achieve this integration. In this paper we check how both academic and industrial solutions tackle this issue, and we present the concept of a transversal layer, where all the different security mechanisms could be contained. This way, all the elements of the architecture can interact with the security mechanisms, and the security mechanisms can have a holistic point of view of the whole architecture. We discuss the advantages of this approach, and also present how the transversal layer concept was applied to a real middleware architecture.

}, keywords = {architecture, cross-layer, middleware, security, Sensor Networks}, issn = {1530-8669}, doi = {10.1002/wcm.1006}, url = {http://dx.doi.org/10.1002/wcm.1006}, author = {Rodrigo Roman and Javier Lopez and Pablo Najera} } @book {RomFatH11, title = {Digital Home Networking}, year = {2011}, publisher = {Wiley-ISTE}, organization = {Wiley-ISTE}, issn = {1848213212}, url = {http://as.wiley.com/WileyCDA/WileyTitle/productCd-1848213212.html}, author = {Romain Carbou and Michel Diaz and Ernesto Exposito and Rodrigo Roman} } @incollection {Alcaraz2011_ChapterBook, title = {Digital Home Networking: Standards}, booktitle = {Digital Home Networking}, number = {7130}, year = {2011}, pages = {60-96}, publisher = {John Wiley \& Sons Inc.}, organization = {John Wiley \& Sons Inc.}, address = {Reino Unido}, keywords = {Standards, ZigBee}, issn = {978-1-84821-321-0}, author = {Remi Bars and Jorge Gomez and Mohamed Mahdi and Cristina Alcaraz and Rodrigo Roman}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman and Michel Diaz} } @article {roman2011, title = {Key management systems for sensor networks in the context of the Internet of Things}, journal = {Computers \& Electrical Engineering}, volume = {37}, year = {2011}, month = {Mar 2011}, pages = {147-159}, publisher = {Elsevier}, abstract = {

If a wireless sensor network (WSN) is to be completely integrated into the Internet as part of the Internet of Things (IoT), it is necessary to consider various security challenges, such as the creation of a secure channel between an Internet host and a sensor node. In order to create such a channel, it is necessary to provide key management mechanisms that allow two remote devices to negotiate certain security credentials (e.g. secret keys) that will be used to protect the information flow. In this paper we will analyse not only the applicability of existing mechanisms such as public key cryptography and pre-shared keys for sensor nodes in the IoT context, but also the applicability of those link-layer oriented key management systems (KMS) whose original purpose is to provide shared keys for sensor nodes belonging to the same WSN.

}, issn = {0045-7906}, doi = {10.1016/j.compeleceng.2011.01.009}, url = {http://www.sciencedirect.com/science/article/B6V25-527FRSD-1/2/62661c595153993639c43b9b331d8d66}, author = {Rodrigo Roman and Cristina Alcaraz and Javier Lopez and Nicolas Sklavos} } @incollection {Najera_DHNChapter, title = {Network Technologies}, booktitle = {Digital Home Networking}, year = {2011}, pages = {17 - 58}, publisher = {Wiley-ISTE}, organization = {Wiley-ISTE}, isbn = {978-1848213210}, author = {Pablo Najera and Ana Nieto}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman} } @article {Alcaraz2011a, title = {Secure SCADA Framework for the Protection of Energy Control Systems}, journal = {Concurrency and Computation Practice \& Experience}, volume = {23}, number = {12}, year = {2011}, month = {Aug 2011}, pages = {1414-1430}, publisher = {John Wiley \& Sons, Inc.}, abstract = {

Energy distribution systems are becoming increasingly widespread in today{\textquoteright}s society.\ One of the elements that is used to monitor and control these systems are the SCADA\ (Supervisory Control and Data Acquisition) systems. In particular, these control systems\ and their complexities, together with the emerging use of the Internet and wireless\ technologies, bring new challenges that must be carefully considered. Examples of such\ challenges are the particular bene{\textasciimacron}ts of the integration of those new technologies, and\ also the e{\textregistered}ects they may have on the overall SCADA security. The main task of this\ paper is to provide a framework that shows how the integration of di{\textregistered}erent state-of-the-art technologies in an energy control system, such as Wireless Sensor Networks (WSNs),\ Mobile Ad-Hoc Networks (MANETs), and the Internet, can bring some interesting\ benefits such as status management and anomaly prevention, while maintaining the\ security of the whole system.

}, keywords = {Energy Distribution and Control Systems, SCADA Systems, Sensor Networks}, isbn = {23(12)1311-1464 (2011)}, issn = {1532-0626}, doi = {10.1002/cpe.1679}, author = {Cristina Alcaraz and Javier Lopez and Jianying Zhou and Rodrigo Roman} } @article {1633, title = {Securing the Internet of Things}, journal = {IEEE Computer}, volume = {44}, number = {9}, year = {2011}, month = {Sept 2011}, pages = {51 -58}, publisher = {IEEE}, abstract = {

This paper presents security of Internet of things. In the Internet of Things vision, every physical object has a virtual component that can produce and consume services Such extreme interconnection will bring unprecedented convenience and economy, but it will also require novel approaches to ensure its safe and ethical use. The Internet and its users are already under continual attack, and a growing economy-replete with business models that undermine the Internet{\textquoteright}s ethical use-is fully focused on exploiting the current version{\textquoteright}s foundational weaknesses.

}, keywords = {business models, computer network security, Internet, Internet of Things, Internet security, IoT, virtual component}, issn = {0018-9162}, doi = {10.1109/MC.2011.291}, url = {http://dx.doi.org/10.1109/MC.2011.291}, author = {Rodrigo Roman and Pablo Najera and Javier Lopez} } @incollection {Moyano_DHNChapter, title = {Security}, booktitle = {Digital Home Networking}, year = {2011}, pages = {139-202}, chapter = {Security}, issn = {9781848213210}, author = {Francisco Moyano and Rodrigo Roman and Anas Abou El Kalam and Marc Lacoste and Mohamed Maachaoui}, editor = {Romain Carbou and Michel Diaz and Ernesto Exposito and Rodrigo Roman} } @inproceedings {Roman11SK, title = {SenseKey - Simplifying the Selection of Key Management Schemes for Sensor Networks}, booktitle = {5th International Symposium on Security and Multimodality in Pervasive Environments (SMPE{\textquoteright}11)}, year = {2011}, month = {March}, publisher = {IEEE}, organization = {IEEE}, address = {Singapore}, abstract = {

Key Management Schemes (KMS) are a very important security mechanism for Wireless Sensor Networks (WSN), as they are used to manage the credentials (i.e. secret keys) that are needed by the security primitives. There is a large number of available KMS protocols in the literature, but it is not clear what should network designers do to choose the most suitable protocol for the needs of their applications. In this paper, we consider that given a certain set of application requirements, the network designer can check which properties comply with those requirements and select the KMS protocols that contains those particular properties. Therefore, we study the relationship between requirements and properties, and we provide a web tool, the SenseKey tool, that can be used to automatically obtain an optimal set of KMS protocols.

}, doi = {10.1109/WAINA.2011.78}, url = {http://www.ftrai.org/smpe2011/}, author = {Rodrigo Roman and Javier Lopez and Cristina Alcaraz and Hsiao Hwa Chen} } @inproceedings {Leon11, title = {Towards a Cooperative Intrusion Detection System for Cognitive Radio Networks}, booktitle = {Workshop on Wireless Cooperative Network Security (WCNS{\textquoteright}11)}, series = {LNCS}, year = {2011}, month = {May}, publisher = {Springer}, organization = {Springer}, abstract = {

Cognitive Radio Networks (CRNs) arise as a promising solution to the scarcity of spectrum. By means of cooperation and smart decisions influenced by previous knowledge, CRNs are able to detect and profit from the best spectrum opportunities without interfering primary licensed users. However, besides the well-known attacks to wireless networks, new attacks threat this type of networks. In this paper we analyze these threats and propose a set of intrusion detection modules targeted to detect them. Provided method will allow a CRN to identify attack sources and types of attacks, and to properly react against them.

}, doi = {10.1007/978-3-642-23041-7_22}, url = {http://www.networking2011.org/workshops/WCNS.html}, author = {Olga Leon and Rodrigo Roman and Juan Hernandez Serrano} } @inproceedings {Alcaraz2010, title = {Acceso seguro a redes de sensores en SCADA a trav{\'e}s de Internet}, booktitle = {XI Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI 2010)}, year = {2010}, month = {September}, pages = {337-342}, address = {Tarragona (Spain)}, abstract = {

Las Infraestructuras Cr\íticas (ICs) son monitorizadas por sistemas altamente complejos, conocidos como sistemas SCADA (Sistemas de Control y Adquisici\ón de Datos), cuyo principal soporte se encuentra en las subestaciones, las cuales miden de primera instancia el estado real de tales ICs. Para mejorar este control, la industria est\á actualmente demandando la integraci\ón en el modelo tradicional de dos avances tecnol\ógicos: Internet y las redes de sensores inal\ámbricas. Sin embargo, su incorporaci\ón requiere analizar los requisitos de seguridad que surgen en dicho contexto, as\í como diversos aspectos correlacionados (ej. mantenimiento, rendimiento, seguridad y optimizaci\ón) y, en base a estos, la estrategia de integraci\ón m\ás adecuada para satisfacer dichos requisitos. Este art\ículo proporciona dicho an\álisis en profundidad con el fin de ofrecer un modelo de integraci\ón seguro adecuado para entornos cr\íticos.

}, keywords = {el Internet, Internet of Things, Redes Mesh Inal{\'a}mbrica de Sensores, Sistemas Cr{\'\i}ticos de Control, Sistemas SCADA}, isbn = {978-84-693-3304-4}, url = {http://crises-deim.urv.cat/recsi2010/}, author = {Cristina Alcaraz and Rodrigo Roman and Pablo Najera and Javier Lopez} } @article {jlopez09, title = {Los Desaf{\'\i}os de Seguridad en la Internet de los Objetos}, journal = {Revista SIC}, volume = {88}, year = {2010}, month = {Feb 2010}, pages = {66-73}, publisher = {Ediciones CODA}, abstract = {

El paradigma de la Internet de los Objetos, donde todos aquellos objetos f{\'\i}sicos que nos rodean tendr{\'a}n la capacidad de generar y consumir informaci{\'o}n en el {\'a}mbito de un mundo virtual, se encuentra cada vez m{\'a}s cerca. Es ahora un buen momento para llamar la atenci{\'o}n sobre sus principales desaf{\'\i}os de seguridad, tanto desde un punto de vista global como asociados a sus elementos m{\'a}s importantes (la tecnolog{\'\i}a RFID y las redes de sensores). As{\'\i}, este paradigma puede ser plenamente comprendido y protegido, evolucionando hacia uno de los nuevos pilares del futuro.

}, issn = {1136-0623}, author = {Javier Lopez and Rodrigo Roman and Pablo Najera} } @article {JavierLopezMunoz2010, title = {Trust Management Systems for Wireless Sensor Networks: Best practices}, journal = {Computer Communications}, volume = {33}, number = {9}, year = {2010}, pages = {0140-3664}, publisher = {Elsevier}, abstract = {

Wireless sensor networks (WSNs) have been proven a useful technology for perceiving information about the physical world and as a consequence has been used in many applications such as measurement of temperature, radiation, flow of liquids, etc. The nature of this kind of technology, and also their vulnerabilities to attacks make the security tools required for them to be considered in a special way. The decision making in a WSN is essential for carrying out certain tasks as it aids sensors establish collaborations. In order to assist this process, trust management systems could play a relevant role. In this paper, we list the best practices that we consider are essential for developing a good trust management system for WSN and make an analysis of the state of the art related to these practices.

}, issn = {0140-3664}, doi = {10.1016/j.comcom.2010.02.006}, author = {Javier Lopez and Rodrigo Roman and Isaac Agudo and Carmen Fernandez-Gago} } @inproceedings {calcaraz10, title = {Wireless Sensor Networks and the Internet of Things: Do We Need a Complete Integration?}, booktitle = {1st International Workshop on the Security of the Internet of Things (SecIoT{\textquoteright}10)}, year = {2010}, month = {December}, pages = {xxxx}, publisher = {IEEE}, organization = {IEEE}, address = {Tokyo (Japan)}, abstract = {

Wireless sensor networks (WSN) behave as a digital skin, providing a virtual layer where the information about the physical world can be accessed by any computational system. As a result, they are an invaluable resource for realizing the vision of the Internet of Things (IoT). However, it is necessary to consider whether the devices of a WSN should be completely integrated into the Internet or not. In this paper, we tackle this question from the perspective of security. While we will mention the different security challenges that may arise in such integration process, we will focus on the issues that take place at the network level.

}, issn = {xxxx}, author = {Cristina Alcaraz and Pablo Najera and Javier Lopez and Rodrigo Roman} } @inproceedings {Alcaraz2009, title = {Adaptive Dispatching of Incidences Based on Reputation for SCADA Systems}, booktitle = {6th International Conference on Trust, Privacy and Security in Digital Business (TrustBus{\textquoteright}09)}, series = {LNCS}, year = {2009}, month = {September}, pages = {86-94}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Linz, Austria}, abstract = {

SCADA systems represent a challenging scenario where the management of critical alarms is crucial. Their response to these alarms should be efficient and fast in order to mitigate or contain undesired effects. This work presents a mechanism, the Adaptive Assignment Manager (AAM) that will aid to react to incidences in a more efficient way by dynamically assigning alarms to the most suitable human operator. The mechanism uses various inputs for identifying the operators such as their availability, workload and reputation. In fact, we also define a reputation component that stores the reputation of the human operators and uses feedback from past experiences.

}, keywords = {Critical Control Systems, Reputation, Supervisory Control and Data Acquisition Systems}, isbn = {978-3-642-03747-4}, doi = {10.1007/978-3-642-03748-1_9}, author = {Cristina Alcaraz and Isaac Agudo and Carmen Fernandez-Gago and Rodrigo Roman and Gerardo Fernandez and Javier Lopez} } @inproceedings {Lopez2009, title = {Analysis of Security Threats, Requirements, Technologies and Standards in Wireless Sensor Networks}, booktitle = {Foundations of Security Analysis and Design 2009}, series = {LNCS}, volume = {5705}, year = {2009}, month = {August}, pages = {289-338}, publisher = {Springer Berlin/Heidelberg}, organization = {Springer Berlin/Heidelberg}, address = {Bertinoro (Italy)}, abstract = {

As sensor networks are more and more being implemented in real world settings, it is necessary to analyze how the different requirements of these real-world applications can influence the security mechanisms. This paper offers both an overview and an analysis of the relationship between the different security threats, requirements, applications, and security technologies. Besides, it also overviews some of the existing sensor network standards, analyzing their security mechanisms.

}, isbn = {978-3-642-03828-0}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/978-3-642-03829-7_10}, url = {http://www.springerlink.com/content/u8h4882831k474n6/}, author = {Javier Lopez and Rodrigo Roman and Cristina Alcaraz} } @inproceedings {roman2009, title = {Do Wireless Sensor Networks Need to be Completely Integrated into the Internet?}, booktitle = {3rd CompanionAble Workshop - Future Internet of People, Things and Services (IoPTS) eco-Systems}, year = {2009}, month = {December}, pages = {xxxx}, publisher = {xxxx}, organization = {xxxx}, address = {Brussels (Belgium)}, abstract = {

Wireless sensor networks are considered as an integral part of the Internet of Things paradigm. Not only they provide a virtual presence to elements of the real world, but also allow any computationalsystem to know about the physical state of those elements thanks to the use of embedded sensors. In order to belong to the Internet of Things, the elements of a sensor network can implement Internet protocols and services such as the TCP/IP stack and web services. Still, a question that must be raised at this point of time is whether all sensor network applications should be completely integrated into the Internet or not. The purpose of this paper is to analyze this question, reviewing the challenges and security requirements of Internet-enabled sensor networks.

}, issn = {xxxx}, author = {Rodrigo Roman and Javier Lopez and Cristina Alcaraz} } @article {roman2009a, title = {Integrating Wireless Sensor Networks and the Internet: A Security Analysis}, journal = {Internet Research}, volume = {19}, number = {2}, year = {2009}, month = {Mar 2009}, pages = {246-259}, publisher = {Emerald}, abstract = {

Purpose: This paper aims to analyze the security issues that arise when integrating wireless sensor networks (WSN) and the internet. Also, it seeks to review whether existing technology mechanisms are suitable and can be applied in this context.

Design/methodology/approach: The paper considers the possible approaches that can be used to connect a WSN with the internet, and analyzes the security of their interactions.

Findings: By providing the services of the network through a front-end proxy, a sensor network and the internet can interact securely. There are other challenges to be solved if the sensor nodes are integrated into the internet infrastructure, although there exists interesting advances on his matter.

Research limitations and implications: The complete integration of sensor networks and the internet still remains as an open issue.

Practical implications: With the current state of the art, it is possible to develop a secure sensor network that can provide its services to internet hosts with certain security properties.

Originality/value: The paper studies the interactions between sensor networks and the internet from the point of view of security. It identifies both solutions and research challenges.

}, keywords = {Computer networks, Data security, Integration, Internet, Wireless}, issn = {1066-2243}, doi = {10.1108/10662240910952373}, author = {Rodrigo Roman and Javier Lopez} } @inproceedings {Benito2009, title = {SMEPP: A Secure Middleware for Embedded P2P}, booktitle = {ICT Mobile and Wireless Communications Summit (ICT-MobileSummit{\textquoteright}09)}, year = {2009}, month = {June}, address = {Santander (Spain)}, abstract = {

The increasing presence of embedded devices with internet access capabilities constitutes a new challenge in software development. These devices are now cooperating in a distributed manner towards what has been called as \"Internet of Things\". In this new scenario the client-server model is sometimes not adequate and dynamic ad-hoc networks are more common than before. However, security poses as a hard issue as these systems are extremely vulnerable. In this paper, we introduce SMEPP project, which aims at developing a middleware designed for P2P systems with a special focus on embedded devices and security. SMEPP is designed to be deployed in a wide range of devices. It tries to ease the development of applications hiding platforms details and other aspects such as scalability, adaptability and interoperability. A full implementation of this middleware is already available that incorporates security features specially designed for low-resource devices. Moreover, we describe two business applications being developed using this middleware in the context of \"Digital Home\" and \"Environmental Monitoring in Industrial Environments\".

}, isbn = {978-1-905824-12-0}, author = {Rafael J. Caro and David Garrido and Pierre Plaza and Rodrigo Roman and Nuria Sanz and Jose L. Serrano} } @incollection {Roman2009b, title = {Trust and Reputation Systems for Wireless Sensor Networks}, booktitle = {Security and Privacy in Mobile and Wireless Networking}, year = {2009}, pages = {105-128}, publisher = {Troubador Publishing Ltd}, organization = {Troubador Publishing Ltd}, abstract = {

The concept of trust has become very relevant in the late years as a consequence of the growth of fields such as internet transactions or electronic commerce. In general, trust has become of paramount importance for any kind of distributed networks, such as wireless sensor networks (WSN in the following). In this chapter of the book, we try to give a general overview of the state of the art on trust management systems for WSN and also try to identify the main features of the architectures of these trust management systems.

}, isbn = {978-1905886-906}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez and Hsiao Hwa Chen}, editor = {Stefanos Gritzalis and Tom Karygiannis and Charalabos Skianis} } @inproceedings {Alcaraz2008, title = {An{\'a}lisis de la Aplicabilidad de las Redes de Sensores para la Protecci{\'o}n de Infraestructuras de Informaci{\'o}n Cr{\'\i}ticas}, booktitle = {VI Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}08)}, year = {2008}, month = {September}, pages = {437}, address = {Alcal{\'a} de Henares (Spain)}, abstract = {

Las infraestructuras cr\íticas, como el sector energ\ético, la banca, el transporte, y muchas otras, son un pilar esencial para en bienestar de la sociedad y la econom\ía de un pa\ís. Estas infraestructuras dependen a su vez de ciertas infraestructuras de informaci\ón, las cuales permiten su correcto funcionamiento. La tarea de proteger esas infraestructuras (de informaci\ón) cr\íticas es compleja y multidimensional, con una gran cantidad de desaf\íos por resolver. Precisamente, las redes de sensores pueden ser de gran ayuda para esta tarea, debido a suscapacidades de control distribuidas y a su habilidad de funcionar en situaciones extremas. Este art\ículo analiza la utilidad de las redes de sensores en este contexto, describiendo tanto sus capacidades como sus posibles roles y mecanismos de integraci\ón para la protecci\ón de infraestructuras (de informaci\ón) cr\íticas.

}, isbn = {978-84-612-5474-3}, url = {http://www.telematica.ws/jitel/2008/default.htm}, author = {Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @inproceedings {Galindo2008a, title = {An Evaluation of the Energy Cost of Authenticated Key Agreement in Wireless Sensor Networks}, booktitle = {X Reuni{\'o}n Espa{\~n}ola sobre Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (RECSI{\textquoteright}08)}, year = {2008}, month = {September}, pages = {231-236}, address = {Salamanca (Spain)}, abstract = {

Wireless sensors are battery-powered devices which are highly constrained in terms of computational capabilities, memory, and communication bandwidth. While battery life is their main limitation, they require considerable energy to communicate data. Due to this, the energy saving of computationally inexpensive security primitives (like those using symmetric key cryptography) can be nullified by the bigger amount of data they require to be sent. In this work we study the energy cost of key agreement protocols between peers in a network using public key cryptography techniques. Our concern is to reduce the amount of data to be exchanged. Our main news is that a computationally very demanding security primitive, such as identity-based authenticated key exchange, can present energy-wise a better performance than traditional public key based key exchange in realistic scenarios such as Underwater Wireless Sensor Networks. Such a result is not to be expected in wired networks.

}, author = {David Galindo and Rodrigo Roman and Javier Lopez} } @article {Alcaraz2008a, title = {Gesti{\'o}n segura de redes SCADA}, journal = {Nuevas tendencias en gesti{\'o}n de redes, Nov{\'a}tica}, number = {196}, year = {2008}, month = {December}, pages = {20-25}, publisher = {CEPIS}, abstract = {

En el momento que se introduce en el mercado nuevas tecnolog\ías basadas en entornos distribuidos comienzan a surgir en paralelo nuevos problemas de seguridad en los sistemas SCADA (Supervisory Control and Data Acquisition), los cuales monitorizan y gestionan otras infraestructuras de gran complejidad y escala. Un fallo o una interrupci\ón en uno de sus componentes podr\ía suponer un impacto negativo sobre la funcionalidad de otras infraestructuras, por lo que se hace necesario realizar frecuentes an\álisis de seguridad para as\í mantener actualizado el conocimiento y proveer recomendaciones y/o soluciones para mitigar o evitar futuras ocurrencias, garantizando una gesti\ón de red fiable y siempre disponible.

}, keywords = {An{\'a}lisis de Seguridad, Gesti{\'o}n de red SCADA, Supervisory Control and Data Acquisition Systems}, issn = {0211-2124}, url = {http://www.ati.es/novatica/indice.html$\#$196}, author = {Cristina Alcaraz and Gerardo Fernandez and Rodrigo Roman and Angel Balastegui and Javier Lopez} } @incollection {Roman2008, title = {On the Hardware Implementation Efficiency of Cryptographic Primitives}, booktitle = {Wireless Sensor Network Security}, year = {2008}, publisher = {IOS Press}, organization = {IOS Press}, abstract = {

Security has been proven a crucial factor in the provision of data services and especially in the computer-related environments. While wired and wireless networks come to all sectors of everyday life, security tries to satisfy the growing needs for confidentiality, integrity and non-repudiation. There are many instances of security primitives and each one of them has different requirements in terms of processing power, word size, etc. Therefore, it is important to review the functionality of the less resource-demanding encryption algorithms in order to analyze their theoretical suitability to the existent sensor node hardware. Still, the constraints inherent to the sensor nodes advise against the total dependence on software-based implementations, even more in the case of expensive primitives.

}, isbn = {978-1-58603-813-7}, author = {Rodrigo Roman and Cristina Alcaraz and Nicolas Sklavos}, editor = {Javier Lopez and Jianying Zhou} } @inproceedings {Roman2008b, title = {KeyLED - Transmitting Sensitive Data over out-of-band Channels in Wireless Sensor Networks}, booktitle = {5th IEEE International Conference on Mobile Ad Hoc and Sensor Systems (MASS{\textquoteright}08)}, year = {2008}, month = {September}, pages = {796-801}, publisher = {IEEE}, organization = {IEEE}, address = {Atlanta (USA)}, abstract = {

An out-of-band (OoB) channel can be defined as an extra channel, different from the main wireless channel, that has additional security properties. They are specially suitable for protecting spontaneous interactions and exchanging sensitive data between previously unknown devices. Due to the vulnerable nature of wireless sensor networks (WSN), these kind of channels might be useful for protecting certain sensor network operations. In this paper we analyze the applicability of out-of-band channels to wireless sensor networks, and specify why an optical channel should be a good candidate for implementing an extra channel in sensor nodes. Also, we analyze how the existing security threats may affect this type of channel. Finally, the suitability and usability of optical channels for sensor networks is demonstrated by means of a prototype.

}, keywords = {Out-of-Band Channel, security, wireless sensor networks}, isbn = {978-1-4244-2574-7}, doi = {10.1109/MAHSS.2008.4660128}, author = {Rodrigo Roman and Javier Lopez} } @inproceedings {Galindo2008aa, title = {A Killer Application for Pairings: Authenticated Key Establishment in Underwater Wireless Sensor Networks}, booktitle = {Proceedings of the 7th International Conference on Cryptology and Network Security (CANS{\textquoteright}08)}, series = {LNCS}, volume = {5339}, year = {2008}, month = {December}, pages = {120-132}, publisher = {Springer}, organization = {Springer}, address = {Hong Kong (China)}, abstract = {

Wireless sensors are low power devices which are highly constrained in terms of computational capabilities, memory, and communication bandwidth. While battery life is their main limitation, they require considerable energy to communicate data. The latter is specially dramatic in underwater wireless sensor networks (UWSN), where the acoustic transmission mechanisms are less reliable and more energy-demanding. Saving in communication is thus the primary concern in underwater wireless sensors. With this constraint in mind, we argue that non-interactive identity-based key agreement built on pairings provides the best solution for key distribution in large UWSN when compared to the state of the art. At first glance this claim is surprising, since pairing computation is very demanding. Still, pairing-based non-interactive key establishment requires minimal communication and at the same time enjoys excellent properties when used for key distribution.

}, keywords = {identity-based key agreement, key distribution, pairings, underwater wireless sensor networks}, isbn = {978-3-540-89640-1}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/978-3-540-89641-8_9}, url = {http://www.springerlink.com/content/g26h0115ngt12331/}, author = {David Galindo and Rodrigo Roman and Javier Lopez} } @inproceedings {Benito2008, title = {Middleware Seguro EP2P: un Desaf{\'\i}o para las Redes Sociales}, booktitle = {XVIII Jornadas Telecom I+D}, year = {2008}, month = {October}, address = {Bilbao (Spain)}, abstract = {

Los sistemas distribuidos en dispositivos embebidos representan un nuevo reto en el desarrollo de software. Estos sistemas han supuesto una importante revoluci{\'o}n en el paradigma de la computaci{\'o}n distribuida donde se intenta fragmentar un problema grande en m{\'u}ltiples problemas m{\'a}s peque{\~n}os. El nuevo escenario tiende entonces hacia sistemas en los cuales todos los elementos de la red se consideran iguales y los mecanismos de comunicaci{\'o}n est{\~a}n basados en redes ad-hoc que se forman din{\'a}micamente. De esta forma cualquier usuario de la red (en realidad cualquier elemento, hasta el m{\'a}s simple dispositivo) adquiere valor, a mayor colaboraci{\'o}n, mayor {\'e}xito del sistema. Sin embargo, desde el punto de vista de la seguridad, estos sistemas son extremadamente vulnerables. En este art{\'\i}culo se presenta SMEPP, un middleware dise{\~n}ado especialmente para sistemas P2P incluyendo aspectos de seguridad. SMEPP est{\'a} dise{\~n}ado para poder ser ejecutado en un amplio rango de dispositivos (desde redes de sensores hasta PC), y trata de facilitar el desarrollo de aplicaciones ocultando los detalles de la plataforma y otros aspectos tales como escalabilidad, adaptabilidad e interoperabilidad. Adem{\'a}s el art{\'\i}culo presenta dos aplicaciones de alto nivel que utilizando este middleware pasan a ser m{\'a}s personales, m{\'a}s sociales y m{\'a}s baratas, haciendo que todos los usuarios de la red cobren mayor importancia.

}, author = {Rafael J. Caro and David Garrido and Pierre Plaza and Rodrigo Roman and Nuria Sanz and Jose L. Serrano} } @article {Alcaraz2008b, title = {Secure Management of SCADA Networks}, journal = {Novatica, New Trends in Network Management}, volume = {9}, number = {6}, year = {2008}, month = {December}, pages = {22-28}, publisher = {Cepis UPGRADE}, abstract = {

When a Supervisory Control and Data Acquisition (SCADA) system monitors and manages other complex infrastructures through the use of distributed technologies, it becomes a critical infrastructure by itself: A failure or disruption in any of its components could implicate a serious impact on the performance of the other infrastructures. The connection with other systems makes a SCADA system more vulnerable against attacks, generating new security problems. As a result, it is essential to perform diverse security analysis frequently in order to keep an updated knowledge and to provide recommendations and/or solutions to mitigate or avoid anomalous events. This will facilitate the existence of a suitable, reliable, and available control network.

}, keywords = {SCADA network management, Security Analysis, Supervisory Control and Data Acquisition Systems}, issn = {1684-5285}, url = {http://www.upgrade-cepis.org/issues/2008/6/up9-6Alcaraz.pdf}, author = {Cristina Alcaraz and Gerardo Fernandez and Rodrigo Roman and Angel Balastegui and Javier Lopez} } @article {Roman2008a, title = {Situation Awareness Mechanisms for Wireless Sensor Networks}, journal = {IEEE Communications Magazine}, volume = {46}, number = {4}, year = {2008}, month = {April}, pages = {102-107}, publisher = {IEEE}, abstract = {

A wireless sensor network should be able to operate for long periods of time with little or no external management. There is a requirement for this autonomy: the sensor nodes must be able to configure themselves in the presence of adverse situations. Therefore, the nodes should make use of situation awareness mechanisms to determine the existence of abnormal events in their surroundings. This work approaches the problem by considering the possible abnormal events as diseases, thus making it possible to diagnose them through their symptoms, namely, their side effects. Considering these awareness mechanisms as a foundation for high-level monitoring services, this article also shows how these mechanisms are included in the blueprint of an intrusion detection system.

}, issn = {0163-6804}, doi = {10.1109/MCOM.2008.4481348}, author = {Rodrigo Roman and Javier Lopez and Stefanos Gritzalis} } @inproceedings {Alcaraz2007, title = {An{\'a}lisis de primitivas criptogr{\'a}ficas para redes de sensores}, booktitle = {VI Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}07)}, year = {2007}, month = {September}, pages = {401-408}, address = {M{\'a}laga (Spain)}, abstract = {

Security in wireless sensor networks is very limited due to highly-constrained hardware of sensor nodes. To protect services is necessary to use secure foundations, known as security primitives, like part of a protocol. Theses primitives must assure at least confidentiality in the communication channel, authentication of the peers involved in an information exchange, and integrity of the messages. There are many primitives such as symmetric encryption, hash functions and public key cryptography, but not all of them can be supported by sensor nodes since require high resource levels, for example memory. This paper contains a deep analysis of available and suitable security primitives for sensor nodes, as well as an analysis of hardware and software implementations. Besides, it has been developed an experiment with two implementations, and it has been created a new and improved version using the optimizations of each.

}, isbn = {978-84-690-6670-6}, url = {http://www.telematica.ws/jitel/2007/}, author = {Cristina Alcaraz and Rodrigo Roman and Javier Lopez} } @inproceedings {Roman2007b, title = {Applicability of Public Key Infrastructures in Wireless Sensor Networks}, booktitle = {European PKI Workshop: Theory and Practice (EuroPKI{\textquoteright}07)}, series = {LNCS}, volume = {4582}, year = {2007}, month = {June}, pages = {313-320}, publisher = {Springer}, organization = {Springer}, address = {Mallorca (Spain)}, abstract = {

Wireless Sensor Networks (WSN) are becoming a key technology in the support of pervasive and ubiquitous services. The previous notion of PKC is too expensive for WSN has changed partially due to the existence of new hardware and software prototypes based on Elliptic Curve Cryptography and other PKC primitives. Then, it is necessary to analyze whether it is both feasible and convenient to have a Public Key Infrastructure for sensor networks that would allow the creation of PKC-based services like Digital Signatures.

}, keywords = {Public Key Cryptography, Public Key Infrastructure, wireless sensor networks}, isbn = {978-3-540-73407-9}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/978-3-540-73408-6_22}, url = {http://www.springerlink.com/content/q4l10ww348010131/}, author = {Rodrigo Roman and Cristina Alcaraz} } @article {Zhou2007, title = {An Effective Multi-layered Defense Framework Against Spam}, journal = {Information Security Technical Report}, volume = {12}, number = {3}, year = {2007}, pages = {179-185}, publisher = {Elsevier}, abstract = {

Spam is a big problem for email users. The battle between spamming and anti-spamming technologies has been going on for many years. Though many advanced anti-spamming technologies are progressing significantly, spam is still able to bombard many email users. The problem worsens when some anti-spamming methods unintentionally filtered legitimate emails instead! In this paper, we first review existing anti-spam technologies, then propose a layered defense framework using a combination of anti-spamming methods. Under this framework, the server-level defense is targeted for common spam while the client-level defense further filters specific spam for individual users. This layered structure improves on filtering accuracy and yet reduces the number of false positives. A sub-system using our pre-challenge method is implemented as an add-on in Microsoft Outlook 2002. In addition, we extend our client-based pre-challenge method to a domain-based solution thus further reducing the individual email users{\textquoteright} overheads.

}, keywords = {Network Security, Security service, Spam}, issn = {1363-4127}, doi = {10.1016/j.istr.2007.05.007}, url = {http://www.sciencedirect.com/science/article/B6VJC-4NS2GR9-1/2/d542b6d1b936f796cad17284a6edbc69}, author = {Jianying Zhou and Wee-Yung Chin and Rodrigo Roman and Javier Lopez} } @inproceedings {Roman2007c, title = {Featuring Trust and Reputation Management Systems for Constrained Hardware Devices}, booktitle = {1st International Conference on Autonomic Computing and Communication Systems (Autonomics{\textquoteright}07)}, year = {2007}, month = {October}, publisher = {ICST}, organization = {ICST}, address = {Rome (Italy)}, abstract = {

Research on trust management systems for wireless sensor networks is still at a very early stage and few works have done so far. It seems that for those works which deal with the topic general features of how these systems should be are not clearly identified. In this paper we try to identify the main features that a trust management system should have and justify their importance for future developments.

}, keywords = {Sensor Networks, Trust Management}, isbn = {978-963-9799-09-7}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez} } @article {JoseA.Onieva2007a, title = {Integration of non-repudiation services in mobile DRM scenarios}, journal = {Telecommunications Systems}, volume = {35}, year = {2007}, month = {September}, pages = {161-176}, abstract = {

In any kind of electronic transaction, it is extremely important to assure that any of the parties involved can not deny their participation in the information exchange. This security property, which is called non-repudiation, becomes more important in Digital Rights Management (DRM) scenarios, where a consumer can freely access to certain contents but needs to obtain the proper Right Object (RO) from a vendor in order to process it. Any breach in this process could result on financial loss for any peer, thus it is necessary to provide a service that allows the creation of trusted evidence. Unfortunately, non-repudiation services has not been included so far in DRM specifications due to practical issues and the type of content distributed. In this paper we analyze how to allow the integration of non-repudiation services to a DRM framework, providing a set of protocols that allows the right objects acquisition to be undeniable, alongside with a proof-of-concept implementation and a validation process.

}, keywords = {digital rights management, Mobile applications, Non-repudiation, Secure electronic commerce}, issn = {1572-9451}, author = {Jose A. Onieva and Javier Lopez and Rodrigo Roman and Jianying Zhou and Stefanos Gritzalis} } @incollection {Lopez2007, title = {On the Protection and Technologies of Critical Information Infrastructures.}, booktitle = {On Foundations of Security Analysis and Design IV, FOSAD 2006/2007, Springer}, series = {LNCS}, volume = {4677}, year = {2007}, note = {

10.1007/978-3-540-74810-6_6

}, pages = {160-182}, abstract = {

Critical Infrastructures are complex and highly interconnected systems that are crucial for the well-being of the society. Any type of failure can cause significant damage, affecting one or more sectors due to their inherent interdependency. Not only the infrastructures are critical, but also the information infrastructures that manage, control and supervise them. Due to the seriousness of the consequences, the protection of these critical (information) infrastructures must have the highest priority. It is the purpose of this book chapter to review and discuss about these infrastructures, to explain their elements, and to highlight their research and development issues. This chapter will also discuss the role of Wireless Sensor Network (WSN) technology in the protection of these infrastructures.

}, keywords = {Critical Information Infrastructure Protection, wireless sensor networks}, issn = {0302-9743}, doi = {10.1007/978-3-540-74810-6_6}, url = {http://dx.doi.org/10.1007/978-3-540-74810-6_6}, author = {Javier Lopez and Cristina Alcaraz and Rodrigo Roman} } @article {Roman2007a, title = {The Role of Wireless Sensor Networks in the Area of Critical Information Infrastructure}, journal = {Information Security Technical Report}, volume = {12}, number = {1}, year = {2007}, pages = {24-31}, publisher = {Elsevier}, abstract = {

Critical Infrastructures, such as energy, banking, and transport, are an essential pillar to the well-being of the national and international economy, security and quality of life. These infrastructures are dependent on a spectrum of highly interconnected information infrastructures for their smooth, reliable and continuous operation. The field of protecting such Critical Information Infrastructures, or CIIP, faces numerous challenges, such as managing the secure interaction between peers, assuring the resilience and robustness of the overall system, and deploying warning and alert systems, amongst others. In this tapestry of CIIP, Wireless Sensor Networks can be used as an invaluable tool due to their intelligent distributed control capabilities, alongside with their capability to work under severe conditions. In this paper, we justify why Wireless Sensor Networks technology is suitable for providing security for these scenarios, describing both their advantages and research issues and their role in the overall scheme of protecting the Critical Information Infrastructures.

}, keywords = {Critical Information Infrastructure Protection, Network Security, wireless sensor networks}, issn = {1363-4127}, doi = {10.1016/j.istr.2007.02.003}, url = {http://www.sciencedirect.com/science/article/B6VJC-4N6NK24-1/2/b1462973afe70af30a10b955d96ccbb6}, author = {Rodrigo Roman and Cristina Alcaraz and Javier Lopez} } @article {Roman2007, title = {A Survey of Cryptographic Primitives and Implementations for Hardware-Constrained Sensor Network Nodes}, journal = {Mobile Networks and Applications}, volume = {12}, number = {4}, year = {2007}, month = {August}, pages = {231-244}, publisher = {Springer}, abstract = {

In a wireless sensor network environment, a sensor node is extremely constrained in terms of hardware due to factors such as maximizing lifetime and minimizing physical size and overall cost. Nevertheless, these nodes must be able to run cryptographic operations based on primitives such as hash functions, symmetric encryption and public key cryptography in order to allow the creation of secure services. Our objective in this paper is to survey how the existing research-based and commercial-based sensor nodes are suitable for this purpose, analyzing how the hardware can influence the provision of the primitives and how software implementations tackles the task of implementing instances of those primitives. As a result, it will be possible to evaluate the influence of provision of security in the protocols and applications/scenarios where sensors can be used.

}, keywords = {Cryptography, Hardware, Sensor Networks}, issn = {1383-469X}, doi = {10.1007/s11036-007-0024-2}, url = {http://www.springerlink.com/content/3785k818327456gq/}, author = {Rodrigo Roman and Cristina Alcaraz and Javier Lopez} } @inproceedings {FernandezGago2007, title = {A Survey on the Applicability of Trust Management Systems for Wireless Sensor Networks}, booktitle = {3rd International Workshop on Security, Privacy and Trust in Pervasive and Ubiquitous Computing (SecPerU{\textquoteright}07)}, year = {2007}, pages = {25-30}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Istanbul (Turkey)}, abstract = {

Trust plays an important role in human life environments and virtual organizations. In the context of a network, trust may help its elements to decide whether another member of the same network is being uncooperative or malicious. Trust becomes quite important in self-configurable and autonomous systems, such as wireless sensor networks (WSN). However, very little effort has been done in the field of trust management in WSN. On the other hand, some efforts have been made in quite related fields such as Ad-hoc and P2P networks. In this paper we give an overview of existing trust management solutions, mainly those developed for Ad-Hoc and P2P networks and, more importantly, investigate their suitability to WSN. We also provide some guidelines to aid the development of trust management systems for WSN according to the nature of these networks.

}, doi = {10.1109/SECPERU.2007.3}, author = {Carmen Fernandez-Gago and Rodrigo Roman and Javier Lopez} } @article {Roman2006a, title = {An Anti-spam Scheme Using Pre-challenges}, journal = {Computer Communications}, volume = {29}, number = {15}, year = {2006}, pages = {2739-2749}, publisher = {Elsevier}, abstract = {

Unsolicited Commercial Email, or Spam, is nowadays an increasingly serious problem to email users. A number of anti-spam schemes have been proposed in the literature and some of them have been deployed in email systems, but the problem has yet been well addressed. One of those schemes is challenge-response, in which a challenge, ranging from a simple mathematical problem to a hard-AI problem, is imposed on an email sender in order to forbid machine-based spam reaching receivers{\textquoteright} mailboxes. However, such a scheme introduces new problems for the users, e.g., delay of service and denial of service. In this paper, we introduce the pre-challenge scheme, which is based on the challenge-response mechanism and takes advantage of some features of email systems. It assumes each user has a challenge that is defined by the user himself/herself and associated with his/her email address, in such a way that an email sender can simultaneously retrieve a new receiver{\textquoteright}s email address and challenge before sending an email in the first contact. Some new mechanisms are employed in our scheme to reach a good balance between security against spam and convenience to normal email users. Our scheme can be also used for protecting other messaging systems, like Instant Messaging and Blog comments.

}, keywords = {Anti-spam, Electronic mail, Internet security}, issn = {0140-3664}, doi = {10.1016/j.comcom.2005.10.037}, url = {http://www.sciencedirect.com/science/article/B6TYP-4HYM1T7-1/2/53871c3a06d8e1c9439deda17a05ed2d}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @inproceedings {Roman2006, title = {Applying Intrusion Detection Systems to Wireless Sensor Networks}, booktitle = {IEEE Consumer Communications \& Networking Conference (CCNC 2006)}, year = {2006}, month = {January}, pages = {640-644}, publisher = {IEEE}, organization = {IEEE}, address = {Las Vegas (USA)}, abstract = {

The research of Intrusion Detection Systems (IDS) is a mature area in wired networks, and has also attracted many attentions in wireless ad hoc networks recently. Nevertheless, there is no previous work reported in the literature about IDS architectures in wireless sensor networks. In this paper, we discuss the general guidelines for applying IDS to static sensor networks, and introduce a novel technique to optimally watch over the communications of the sensors{\textquoteright} neighborhood on certain scenarios.

}, isbn = {1-4244-0085-6}, doi = {10.1109/CCNC.2006.1593102}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @inproceedings {Alcaraz2006, title = {Applying Key Infrastructures for Sensor Networks in {CIP/CIIP} Scenarios}, booktitle = {1st International Workshop on Critical Information Infrastructures Security (CRITIS{\textquoteright}06)}, series = {LNCS}, volume = {4347}, year = {2006}, pages = {166-178}, publisher = {Springer Berlin / Heidelberg}, organization = {Springer Berlin / Heidelberg}, abstract = {

It is commonly agreed that Wireless Sensor Networks (WSN) is one of the technologies that better fulfills features like the ones required by Critical (Information) Infrastructures. However, a sensor network is highly vulnerable against any external or internal attacks, thus network designers must know which are the tools that they can use in order to avoid such problems. In this paper we describe in detail a procedure (the KMS Guidelines), developed under our CRISIS project, that allows network designers to choose a certain Key Management System, or at least to know which protocol need to improve in order to satisfy the network requirements.

}, keywords = {Critical Information Infrastructures, Key Infrastructures, Key Management, Sensor Networks}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/11962977_14}, url = {http://www.springerlink.com/content/2458827107n14870/}, author = {Cristina Alcaraz and Rodrigo Roman} } @inproceedings {JoseA.Onieva2006a, title = {Extension de una plataforma DRM basada en OMA con servicios de No Repudio}, booktitle = {IX Reunion Espa{\~n}ola sobre Criptologia y Seguridad de la Informacion (RECSI{\textquoteright}06)}, year = {2006}, pages = {129-141}, publisher = {UOC S.L.}, organization = {UOC S.L.}, abstract = {

Digital Rights Management (DRM) es un t\érmino general para cualesquiera de las soluciones que permite a un vendedor de contenido en forma electr\ónica controlar el material y restringir su uso de distintas maneras. Estas soluciones son posibles, por un lado gracias a t\écnicas de la Seguridad de la Informaci\ón, principalmente cifrado de datos, y por otro a la distribuci\ón, de manera independiente, de contenido y derechos digitales. Esto permite que los consumidores puedan acceder libremente al contenido, pero s\ólo aquellos que adquieran el derecho digital apropiado (RO) podr\án procesarlo. Como servicio de seguridad considerado en diversas capas del marco de seguridad definido por la recomendaci\ón ITU X.805, casi todas las aplicaciones necesitan considerar la propiedad de no repudio en las etapas iniciales de su dise\ño. Desafortunadamente, esto no ha sido as\í en general, y m\ás concretamente en especificaciones DRM; debido a consideraciones en la pr\áctica y al tipo de contenido a distribuir. Analizamos este servicio para un marco de DRM y proporcionamos una soluci\ón que permita que la adquisici\ón de derechos digitales sea un operaci\ón que no pueda repudiarse.

}, keywords = {aplicaciones moviles, comercio electronico seguro, digital rights management, no repudio}, author = {Jose A. Onieva and Javier Lopez and Rodrigo Roman and Jianying Zhou} } @inproceedings {JavierLopez2006a, title = {Service-Oriented Security Architecture for CII based on Sensor Networks}, booktitle = {2nd International Workshop on Security Privacy and Trust in Pervasive and Ubiquitous Computing (SecPerU{\textquoteright}06)}, year = {2006}, month = {June}, pages = {1-6}, publisher = {IEEE Press}, organization = {IEEE Press}, address = {Lyon, France}, abstract = {

The extraordinary growth of the Information Society is originating a high dependency on ICT. This provokes that those strongly interrelated technological infrastructures, as well as the information systems that underpin them, become highly critical, since their disruption would lead to high economical, material and, sometimes, human loss. As a consequence, the protection of these Critical Information Infrastructures is becoming a major objective for governments and companies. In this paper, we give an overview of the main challenges and open research issues on Critical Information Infrastructure security, and introduce an on-going research project that, using wireless sensor networks as an underlying technology, is dealing with those problems. Our research project focuses on the development of protection, control, evaluation, maintenance and verification mechanisms, integrated into a secure service-oriented architecture.

}, author = {Javier Lopez and Jose A. Montenegro and Rodrigo Roman} } @inproceedings {R.Roman2005, title = {An{\'a}lisis de Seguridad en Redes Inal{\'a}mbricas de Sensores}, booktitle = {V Jornadas de Ingener{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}05)}, year = {2005}, month = {Septiembre}, pages = {335-343}, address = {Vigo (Spain)}, abstract = {

The design and development of security infrastructures and protocols for Wireless Sensor Networks is a difficult task, due to several factors like the constraints of the sensor nodes and the public nature of the communication channels. The intrinsic features of these networks create numerous security problems. In this paper, we analyze and put into perspective those problems.

}, author = {Rodrigo Roman and Javier Lopez and Jianying Zhou} } @inproceedings {Roman2005b, title = {Aplicaci{\'o}n de Sistemas de Detecci{\'o}n de Intrusiones en Redes de Sensores}, booktitle = {Simposio sobre Computaci{\'o}n Ubicua e Inteligencia Ambiental (UCAmI{\textquoteright}05)}, year = {2005}, month = {September}, pages = {113-120}, address = {Granada (Spain)}, abstract = {

Los sistemas de detecci{\'o}n de intrusiones (IDS) son una herramienta imprescindible de seguridad a la hora de proteger una red. Recientemente se han investigado y desarrollado arquitecturas de IDS para redes inal{\'a}mbricas, en concreto para redes "Ad Hoc". No obstante, no existe un trabajo previo que desarrolle una arquitectura de IDS para una red de sensores. En este art{\'\i}culo, analizamos porque los sistemas IDS de redes "Ad Hoc" no pueden aplicarse a redes de sensores, e introducimos una arquitectura de IDS para redes de sensores que incorpora una nueva t{\'e}cnica para vigilar las comunicaciones de la red en ciertos escenarios.

}, author = {Rodrigo Roman and Javier Lopez and Jianying Zhou} } @article {Roman2005f, title = {Casual Virtual Private Network}, journal = {International Journal of Computer Systems Science \& Engineering}, volume = {3}, year = {2005}, pages = {185-192}, publisher = {CRL Publishing}, abstract = {

Virtual Private Networks (VPNs) provide a cost-effective way for securing communications using public and insecure networks like the Internet. The main purpose of a VPN is to securely and transparently connect two or more remote networks to form virtually a single network, using centralized security policies for better management and protection. However, in certain scenarios, users may not require such a transparent access to the resources within their networks, but only want temporary secure access to internal services based on their own demands. We call the network architecture with such a feature as Casual VPN. In this paper, we present the notion of Casual VPN, and explain why traditional VPN architectures and protocols are unable to offer Casual VPN services. We also propose and define the operation of a particular Casual VPN architecture, C-VPN, which additionally allows the management of TCP and UDP-based protocols.

}, issn = {0267-6192}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @inproceedings {Roman2005c, title = {Especificaci{\'o}n de Sistemas Electr{\'o}nicos de Microdonaciones}, booktitle = {III Simposio Espa{\~n}ol de Comercio Electr{\'o}nico}, year = {2005}, month = {June}, pages = {95-104}, address = {Palma (Spain)}, abstract = {

Los sistemas electr{\'o}nicos de pago permiten que un comprador adquiera a un vendedor una serie de productos y servicios de forma virtual. Sin embargo, estos sistemas no tienen en cuenta el escenario en el que un comprador se convierte en donante, accediendo al servicio de forma gratuita. En este art{\'\i}culo se presenta el concepto y caracter{\'\i}sticas de las microdonaciones, o la donaci{\'o}n de cantidades tan peque{\~n}as como un c{\'e}ntimo de euro en el contexto del comercio electr{\'o}nico. Tambi{\'e}n se muestra como la microdonaci{\'o}n es algo necesario en el contexto actual de Internet, y como es posible su implementaci{\'o}n bas{\'a}ndose en sistemas de micropago.

}, author = {Rodrigo Roman and Javier Lopez} } @inproceedings {Onieva2005, title = {Extending an OMA-based DRM Framework with Non-Repudiation Services}, booktitle = {5th Symposium on Signal Processing and Information Technology (ISSPIT{\textquoteright}05)}, year = {2005}, pages = {472-477}, publisher = {IEEE}, organization = {IEEE}, abstract = {

Digital Rights Management (DRM) is an umbrella term for any of several arrangements which allows a vendor of content in electronic form to control the material and restrict its usage in various ways that can be specified by the vendor. These arrangements are provided through security techniques, mainly encryption, and the distribution, in a detached manner, of content and rights. This allows free access to the content by the consumers, but only those carrying the proper Right Object (RO) will be able to process such content. As a security service considered in different layers of the security framework defined by ITU X.805, almost all applications need to consider non-repudiation in the very beginning of their design. Unfortunately this has not been done so far in DRM specifications due to practical issues and the type of content distributed. We analyze this service for the a DRM framework and provide a solution which allows the right objects acquisition to be undeniable.

}, keywords = {digital rights management, Mobile applications, Non-repudiation, Secure electronic commerce}, author = {Jose A. Onieva and Jianying Zhou and Javier Lopez and Rodrigo Roman} } @inproceedings {Roman2005a, title = {Protecci{\'o}n contra el Spam Utilizando Desaf{\'\i}os a Priori}, booktitle = {V Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}05)}, year = {2005}, month = {September}, pages = {375-382}, address = {Vigo (Spain)}, abstract = {

Spam is considered to be one of the biggest problems in messaging systems. In the area of email Spam, A high number of anti-spam schemes have been proposed and deployed, but the problem has yet been well addressed. In this paper, we introduce a new scheme, called pre-challenge scheme, which avoids problems that exists in other schemes such as delay of service and denial of service. Some new mechanisms are employed to reach a good balance between security against Spam and convenience to email users. In addition, our scheme can be used for protecting other types of messaging systems, such as Instant Messaging (IM) and Blogs, against Spam.

}, author = {Rodrigo Roman and Javier Lopez and Jianying Zhou} } @inproceedings {Roman2005d, title = {Protection Against Spam using Pre-Challenges}, booktitle = {20th IFIP International Information Security Conference (IFIP-SEC{\textquoteright}05)}, year = {2005}, month = {May}, pages = {281-294}, publisher = {Springer}, organization = {Springer}, address = {Chiba (Japan)}, abstract = {

Spam turns out to be an increasingly serious problem to email users. A number of anti-spam schemes have been proposed and deployed, but the problem has yet been well addressed. One of those schemes is challenge-response, in which a challenge is imposed on an email sender. However, such a scheme introduces new problems for the users, e.g., delay of service and denial of service attacks. In this paper, we introduce a pre-challenge scheme that avoids those problems. It assumes each user has a challenge that is defined by the user himself/herself and associated with his/her email address, in such a way that an email sender can simultaneously retrieve a new receiver{\textquoteright}s email address and challenge before sending an email in the first contact. Some new mechanisms are employed to reach a good balance between security against spam and convenience to email users.

}, isbn = {0-387-25658-X}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez}, editor = {Ry{\^o}ichi Sasaki and Sihan Qing and Eiji Okamoto and Hiroshi Yoshiura} } @inproceedings {Roman2005e, title = {On the Security of Wireless Sensor Networks}, booktitle = {Computational Science and Its Applications (ICCSA{\textquoteright}05)}, series = {LNCS}, volume = {3482}, year = {2005}, month = {May}, pages = {681-690}, publisher = {Springer}, organization = {Springer}, address = {Singapore}, abstract = {

Wireless Sensor Networks are extremely vulnerable against any kind of internal or external attacks, due to several factors such as resource-constrained nodes and lack of tamper-resistant packages. As a result, security must be an important factor to have in mind when designing the infrastructure and protocols of sensor networks. In this paper we survey the state-of-the-art security issues in sensor networks and highlight the open areas of research.security issues in sensor networks and highlight the open areas of research.

}, isbn = {978-3-540-25862-9}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/11424857_75}, url = {http://www.springerlink.com/content/pvnd4eu8b7acgtpe/}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez} } @inproceedings {JavierLopez2002c, title = {Design of a VPN Software Solution Integrating TCP and UDP Services}, booktitle = {International Conference on Infrastructure Security (InfraSec{\textquoteright}02)}, series = {LNCS}, volume = {2437}, year = {2002}, month = {October}, pages = {325-337}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Bristol, U.K.}, abstract = {

The main aims of Virtual Private Network (VPN) are to isolate a distributed network from outsiders, as well as to protect the confidentiality and integrity of sensitive information traversing a non-trusted network such as the Internet. However, some problems arise when security is considered as the unique problem because VPN users suffer from restrictions in their access to the network. They are not free to use traditional Internet services such as electronic mail exchange with non-VPN users, and to access Web and FTP servers external to the organization. This paper presents a new solution that allows the open use of traditional network services running over TCP and UDP layers, while maintaining strong security features. The new scheme works at the TCP/IP transport layer and does not require the addition of new hardware because it is a totally software solution. As a consequence, the application is totally portable. Moreover, and because of its implementation at the transport layer, there is no need to modify any traditional communication applications previously installed in the network system.

}, author = {Javier Lopez and Jose A. Montenegro and Rodrigo Roman and Jorge Davila} } @inproceedings {JorgeDavila2001, title = {Introducci{\'o}n de Aplicaciones UDP en Redes Privadas Virtuales}, booktitle = {III Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}01)}, year = {2001}, month = {Septiembre}, pages = {397-404}, address = {Barcelona (Spain)}, abstract = {

Virtual Private Network (VPN) solutions mainly focus on security aspects. However, when security is considered the unique problem, some collateral ones arise. VPN users suffer from restrictions in their access to the network. They are not free to use traditional Internet services such as electronic mail exchange and audio/video conference with non-VPN users, and to access Web and Ftp servers external to the organization. In this paper we present a new solution, located at the TCP/IP transport layer and oriented to UDP applications that, while maintaining strong security features, allows the open use of traditional network services. The solution does not require the addition of new hardware because it is an exclusively software solution. As a consequence, the application is totally portable.

}, author = {Jorge Davila and Javier Lopez and Rodrigo Roman} }