@inproceedings {1701, title = {A comprehensive methodology for deploying IoT honeypots}, booktitle = {15th International Conference on Trust, Privacy and Security in Digital Business (TrustBus 2018)}, volume = {LNCS 11033}, year = {2018}, month = {09/2018}, pages = {229{\textendash}243}, publisher = {Springer Nature Switzerland AG}, organization = {Springer Nature Switzerland AG}, address = {Regensburg (Germany)}, abstract = {

Recent news have raised concern regarding the security on the IoT field. Vulnerabilities in devices are arising and honeypots are an excellent way to cope with this problem. In this work, current solutions for honeypots in the IoT context, and other solutions adaptable to it are analyzed in order to set the basis for a methodology that allows deployment of IoT honeypot.

}, keywords = {Honeypot, IoT, methodology, security}, doi = {https://doi.org/10.1007/978-3-319-98385-1_16}, author = {Antonio Acien and Ana Nieto and Gerardo Fernandez and Javier Lopez} } @article {RomanIoT18, title = {Evolution and Trends in the Security of the Internet of Things}, journal = {IEEE Computer}, volume = {51}, year = {2018}, month = {07/2018}, pages = {16-25}, publisher = {IEEE Computer Society}, address = {New Jersey, USA}, keywords = {Evolution, Internet of Things, IoT, security, Trends}, issn = {0018-9162}, doi = {10.1109/MC.2018.3011051}, url = {https://ieeexplore.ieee.org/document/8423133/}, author = {Rodrigo Roman and Javier Lopez and Stefanos Gritzalis} } @article {Hiroshi18IoT, title = {Feasibility of Societal Model for Securing Internet of Things}, journal = {KSII Transactions on Internet and Information Systems}, volume = {12}, number = {8}, year = {2018}, month = {08/2018}, pages = {3567-3588}, publisher = {KSII}, abstract = {

In the Internet of Things (IoT) concept, devices communicate autonomously with applications in the Internet. A significant aspect of IoT that makes it stand apart from present-day networked devices and applications is a) the very large number of devices, produced by diverse makers and used by an even more diverse group of users; b) the applications residing and functioning in what were very private sanctums of life e.g. the car, home, and the people themselves. Since these diverse devices require high-level security, an operational model for an IoT system is required, which has built-in security. We have proposed the societal model as a simple operational model. The basic concept of the model is borrowed from human society {\textendash} there will be infants, the weak and the handicapped who need to be protected by guardians. This natural security mechanism works very well for IoT networks which seem to have inherently weak security mechanisms. In this paper, we discuss the requirements of the societal model and examine its feasibility by doing a proof-of-concept implementation.

}, keywords = {Internet of Things, IoT, network architecture, operational model, security, SNMP}, issn = {1976-7277}, doi = {10.3837/tiis.2018.08.003}, url = {http://www.itiis.org/digital-library/manuscript/2082}, author = {Hiroshi Tsunoda and Rodrigo Roman and Javier Lopez and Glenn Mansfield Keeni} } @inproceedings {1578, title = {Testigo digital: delegaci{\'o}n vinculante de evidencias electr{\'o}nicas para escenarios IoT}, booktitle = {II Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2016)}, year = {2016}, month = {06/2016}, pages = {109-116}, abstract = {

En un mundo en el que los usuarios dependen cada vez m{\'a}s de sus dispositivos, {\'e}stos almacenan gran cantidad de datos y son una fuente muy valiosa de informaci{\'o}n sobre su entorno. Sin embargo, la heterogeneidad y la densidad de los objetos conectados, caracter{\'\i}sticas propias de la Internet de las Cosas (IoT), sirven de velo para ocultar conductas maliciosas que afectan a estos dispositivos, sin que quede rastro de tales acciones. En este art{\'\i}culo definimos el concepto de testigo digital: funcionalidad que permitir{\'a} a los dispositivos personales y otros objetos colaborar para implementar una cadena de custodia digital en la IoT. El fin perseguido es ofrecer soluciones que mitiguen los efectos de la ciberdelincuencia, ampar{\'a}ndose en la colaboraci{\'o}n de los dispositivos con arquitecturas de seguridad embebidas para alertar de conductas maliciosas, y dejar constancia de {\'e}stas.

}, keywords = {computaci{\'o}n forense, elemento seguro, Evidencia electr{\'o}nica, IoT, no-repudio}, isbn = {978-84-608-8070-7}, url = {http://ucys.ugr.es/jnic2016/docs/ActasJNIC2016.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {nietoscn13, title = {Analysis and Taxonomy of Security/QoS tradeoff solutions for the Future Internet}, journal = {Security and Communication Networks (SCN) Journal}, volume = {7}, year = {2013}, pages = {2778-2803}, publisher = {Wiley-Blackwell}, abstract = {

Motivated by the growing convergence of diverse types of networks and the rise of concepts such as Future Internet (FI), in this paper we analyse the coexistence of security mechanisms and Quality of Service (QoS) mechanisms in resourceconstrained networks, that are relevant types of networks within the FI environment. More precisely, we analyse the current state of the research on security and QoS in the integration of Wireless Sensor Networks (WSNs), Mobile Ad-Hoc Networks (MANETs) and cellular networks. Furthermore, we propose a taxonomy to identify similarities among these technologies, as well as the requirements for network interconnection. As a result, we define a dependency-based model for the analysis of Security and QoS tradeoff, and also define a high-level integration architecture for networks in the FI setting. The final goal is to provide a critical point of view that allows to assess whether such an integration of networks can be both secure and efficient.

}, keywords = {cellular networks, IoT, MANET, QoS, security, WSN}, issn = {1939-0114}, doi = {10.1002/sec.809}, url = {http://onlinelibrary.wiley.com/doi/10.1002/sec.809/abstract?deniedAccessCustomisedMessage=\&userIsAuthenticated=false}, author = {Ana Nieto and Javier Lopez} } @article {1633, title = {Securing the Internet of Things}, journal = {IEEE Computer}, volume = {44}, number = {9}, year = {2011}, month = {Sept 2011}, pages = {51 -58}, publisher = {IEEE}, abstract = {

This paper presents security of Internet of things. In the Internet of Things vision, every physical object has a virtual component that can produce and consume services Such extreme interconnection will bring unprecedented convenience and economy, but it will also require novel approaches to ensure its safe and ethical use. The Internet and its users are already under continual attack, and a growing economy-replete with business models that undermine the Internet{\textquoteright}s ethical use-is fully focused on exploiting the current version{\textquoteright}s foundational weaknesses.

}, keywords = {business models, computer network security, Internet, Internet of Things, Internet security, IoT, virtual component}, issn = {0018-9162}, doi = {10.1109/MC.2011.291}, url = {http://dx.doi.org/10.1109/MC.2011.291}, author = {Rodrigo Roman and Pablo Najera and Javier Lopez} }