@article {rios2022pmec, title = {Personal IoT Privacy Control at the Edge}, journal = {IEEE Security \& Privacy }, volume = {20}, year = {2022}, month = {01/2022}, pages = {23 - 32}, publisher = {IEEE}, abstract = {

This article introduces a privacy manager for IoT data based on Edge Computing. This poses the advantage that privacy is enforced before data leaves the control of the user, who is provided with a tool to express data sharing preferences based on a novel context-aware privacy language.

}, issn = {1540-7993}, doi = {10.1109/MSEC.2021.3101865}, author = {Ruben Rios and Jose A. Onieva and Rodrigo Roman and Javier Lopez} } @inproceedings {1979, title = {Privacidad Contextual en entornos Edge}, booktitle = {VII Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2022)}, year = {2022}, month = {06/2022}, pages = {122-129}, address = {Bilbao, Spain}, abstract = {

La privacidad contextual se refiere a la protecci{\'o}n de toda aquella informaci{\'o}n que puede desprenderse de la interacci{\'o}n entre usuarios y/o servicios, exceptuando los datos que el propio usuario elige transmitir. La localizaci{\'o}n, el tiempo, los patrones de uso y los diferentes par{\'a}metros necesarios para realizar la comunicaci{\'o}n son algunos ejemplos. Este tipo de privacidad es extremadamente importante en la computaci{\'o}n edge debido al acercamiento de los recursos de la infraestructura a los usuarios. Por ello, el objetivo de este trabajo es ofrecer un an{\'a}lisis y clasificaci{\'o}n de las diferentes soluciones propuestas en la literatura respecto a la privacidad contextual en entornos edge, mostrando tanto las capacidades de los mecanismos actuales como los desaf{\'\i}os en este campo.

}, keywords = {Computaci{\'o}n edge, Privacidad, Privacidad contextual}, isbn = {978-84-88734-13-6 }, author = {Manuel Ruiz and Ruben Rios and Rodrigo Roman and Javier Lopez} } @article {lopez2017ecn, title = {Protecting Industry 4.0 against Advanced Persistent Threats}, journal = {European CIIP Newsletter}, volume = {11}, number = {1}, year = {2017}, month = {03/2017}, pages = {27-29}, publisher = {European CIIP Newsletter}, issn = {NONE}, author = {Javier Lopez and Cristina Alcaraz and Jes{\'u}s Rodriguez and Rodrigo Roman and Juan E. Rubio} } @incollection {Lopez2007, title = {On the Protection and Technologies of Critical Information Infrastructures.}, booktitle = {On Foundations of Security Analysis and Design IV, FOSAD 2006/2007, Springer}, series = {LNCS}, volume = {4677}, year = {2007}, note = {

10.1007/978-3-540-74810-6_6

}, pages = {160-182}, abstract = {

Critical Infrastructures are complex and highly interconnected systems that are crucial for the well-being of the society. Any type of failure can cause significant damage, affecting one or more sectors due to their inherent interdependency. Not only the infrastructures are critical, but also the information infrastructures that manage, control and supervise them. Due to the seriousness of the consequences, the protection of these critical (information) infrastructures must have the highest priority. It is the purpose of this book chapter to review and discuss about these infrastructures, to explain their elements, and to highlight their research and development issues. This chapter will also discuss the role of Wireless Sensor Network (WSN) technology in the protection of these infrastructures.

}, keywords = {Critical Information Infrastructure Protection, wireless sensor networks}, issn = {0302-9743}, doi = {10.1007/978-3-540-74810-6_6}, url = {http://dx.doi.org/10.1007/978-3-540-74810-6_6}, author = {Javier Lopez and Cristina Alcaraz and Rodrigo Roman} } @inproceedings {Roman2005a, title = {Protecci{\'o}n contra el Spam Utilizando Desaf{\'\i}os a Priori}, booktitle = {V Jornadas de Ingenier{\'\i}a Telem{\'a}tica (JITEL{\textquoteright}05)}, year = {2005}, month = {September}, pages = {375-382}, address = {Vigo (Spain)}, abstract = {

Spam is considered to be one of the biggest problems in messaging systems. In the area of email Spam, A high number of anti-spam schemes have been proposed and deployed, but the problem has yet been well addressed. In this paper, we introduce a new scheme, called pre-challenge scheme, which avoids problems that exists in other schemes such as delay of service and denial of service. Some new mechanisms are employed to reach a good balance between security against Spam and convenience to email users. In addition, our scheme can be used for protecting other types of messaging systems, such as Instant Messaging (IM) and Blogs, against Spam.

}, author = {Rodrigo Roman and Javier Lopez and Jianying Zhou} } @inproceedings {Roman2005d, title = {Protection Against Spam using Pre-Challenges}, booktitle = {20th IFIP International Information Security Conference (IFIP-SEC{\textquoteright}05)}, year = {2005}, month = {May}, pages = {281-294}, publisher = {Springer}, organization = {Springer}, address = {Chiba (Japan)}, abstract = {

Spam turns out to be an increasingly serious problem to email users. A number of anti-spam schemes have been proposed and deployed, but the problem has yet been well addressed. One of those schemes is challenge-response, in which a challenge is imposed on an email sender. However, such a scheme introduces new problems for the users, e.g., delay of service and denial of service attacks. In this paper, we introduce a pre-challenge scheme that avoids those problems. It assumes each user has a challenge that is defined by the user himself/herself and associated with his/her email address, in such a way that an email sender can simultaneously retrieve a new receiver{\textquoteright}s email address and challenge before sending an email in the first contact. Some new mechanisms are employed to reach a good balance between security against spam and convenience to email users.

}, isbn = {0-387-25658-X}, author = {Rodrigo Roman and Jianying Zhou and Javier Lopez}, editor = {Ry{\^o}ichi Sasaki and Sihan Qing and Eiji Okamoto and Hiroshi Yoshiura} }