@inproceedings {1846, title = {Distributed Detection of APTs: Consensus vs. Clustering}, booktitle = {25th European Symposium on Research in Computer Security (ESORICS 2020)}, volume = {12308}, year = {2020}, month = {09/2020}, pages = {174-192}, keywords = {Advanced Persistent Threat, clustering, consensus, distributed detection, Opinion Dynamics, Traceability}, isbn = {978-3-030-58951-6}, doi = {https://doi.org/10.1007/978-3-030-58951-6_9}, author = {Juan E. Rubio and Cristina Alcaraz and Ruben Rios and Rodrigo Roman and Javier Lopez} } @article {ercim-nrl16, title = {Digital Witness: Digital Evidence Management Framework for the Internet of Things}, journal = {ERCIM News}, number = {106}, year = {2016}, month = {07/2016}, pages = {9-9}, publisher = {ERCIM EEIG}, issn = {0926-4981}, url = {http://ercim-news.ercim.eu/images/stories/EN106/EN106-web.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {ieeenet16-nrl, title = {Digital Witness: Safeguarding Digital Evidence by using Secure Architectures in Personal Devices}, journal = {IEEE Network}, year = {2016}, pages = {12-19}, publisher = {IEEE Communications Society}, abstract = {

Personal devices contain electronic evidence associated with the behaviour of their owners and other devices in their environment, which can help clarify the facts of a cyber-crime scene. These devices are usually analysed as containers of proof. However, it is possible to harness the boom of personal devices to define the concept of digital witnesses, where personal devices are able to actively acquire, store, and transmit digital evidence to an authorised entity, reliably and securely. This article introduces this novel concept, providing a preliminary analysis on the management of digital evidence and the technologies that can be used to implement it with security guarantees in IoT environments. Moreover, the basic building blocks of a digital witness are defined.

}, keywords = {Digital Evidence, Identity Delegation, IoT-Forensics, Secure Element}, issn = {0890-8044}, doi = {10.1109/MNET.2016.1600087NM}, url = {http://ieeexplore.ieee.org/document/7764297/$\#$full-text-section}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @book {RomFatH11, title = {Digital Home Networking}, year = {2011}, publisher = {Wiley-ISTE}, organization = {Wiley-ISTE}, issn = {1848213212}, url = {http://as.wiley.com/WileyCDA/WileyTitle/productCd-1848213212.html}, author = {Romain Carbou and Michel Diaz and Ernesto Exposito and Rodrigo Roman} } @incollection {Alcaraz2011_ChapterBook, title = {Digital Home Networking: Standards}, booktitle = {Digital Home Networking}, number = {7130}, year = {2011}, pages = {60-96}, publisher = {John Wiley \& Sons Inc.}, organization = {John Wiley \& Sons Inc.}, address = {Reino Unido}, keywords = {Standards, ZigBee}, issn = {978-1-84821-321-0}, author = {Remi Bars and Jorge Gomez and Mohamed Mahdi and Cristina Alcaraz and Rodrigo Roman}, editor = {Romain Carbou and Ernesto Exposito and Rodrigo Roman and Michel Diaz} } @inproceedings {roman2009, title = {Do Wireless Sensor Networks Need to be Completely Integrated into the Internet?}, booktitle = {3rd CompanionAble Workshop - Future Internet of People, Things and Services (IoPTS) eco-Systems}, year = {2009}, month = {December}, pages = {xxxx}, publisher = {xxxx}, organization = {xxxx}, address = {Brussels (Belgium)}, abstract = {

Wireless sensor networks are considered as an integral part of the Internet of Things paradigm. Not only they provide a virtual presence to elements of the real world, but also allow any computationalsystem to know about the physical state of those elements thanks to the use of embedded sensors. In order to belong to the Internet of Things, the elements of a sensor network can implement Internet protocols and services such as the TCP/IP stack and web services. Still, a question that must be raised at this point of time is whether all sensor network applications should be completely integrated into the Internet or not. The purpose of this paper is to analyze this question, reviewing the challenges and security requirements of Internet-enabled sensor networks.

}, issn = {xxxx}, author = {Rodrigo Roman and Javier Lopez and Cristina Alcaraz} } @inproceedings {JavierLopez2002c, title = {Design of a VPN Software Solution Integrating TCP and UDP Services}, booktitle = {International Conference on Infrastructure Security (InfraSec{\textquoteright}02)}, series = {LNCS}, volume = {2437}, year = {2002}, month = {October}, pages = {325-337}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Bristol, U.K.}, abstract = {

The main aims of Virtual Private Network (VPN) are to isolate a distributed network from outsiders, as well as to protect the confidentiality and integrity of sensitive information traversing a non-trusted network such as the Internet. However, some problems arise when security is considered as the unique problem because VPN users suffer from restrictions in their access to the network. They are not free to use traditional Internet services such as electronic mail exchange with non-VPN users, and to access Web and FTP servers external to the organization. This paper presents a new solution that allows the open use of traditional network services running over TCP and UDP layers, while maintaining strong security features. The new scheme works at the TCP/IP transport layer and does not require the addition of new hardware because it is a totally software solution. As a consequence, the application is totally portable. Moreover, and because of its implementation at the transport layer, there is no need to modify any traditional communication applications previously installed in the network system.

}, author = {Javier Lopez and Jose A. Montenegro and Rodrigo Roman and Jorge Davila} }