@article {Roman2010, title = {A Cross-layer Approach for Integrating Security Mechanisms in Sensor Networks Architectures}, journal = {Wireless Communications and Mobile Computing}, volume = {11}, year = {2011}, pages = {267-276}, publisher = {Wiley}, abstract = {

The wireless sensor networks (WSN) paradigm is especially vulnerable against external and internal attacks. Therefore, it is necessary to develop security mechanisms and protocols to protect them. These mechanisms must become an integral part of the software architecture and network stack of a sensor node. A question that remains is how to achieve this integration. In this paper we check how both academic and industrial solutions tackle this issue, and we present the concept of a transversal layer, where all the different security mechanisms could be contained. This way, all the elements of the architecture can interact with the security mechanisms, and the security mechanisms can have a holistic point of view of the whole architecture. We discuss the advantages of this approach, and also present how the transversal layer concept was applied to a real middleware architecture.

}, keywords = {architecture, cross-layer, middleware, security, Sensor Networks}, issn = {1530-8669}, doi = {10.1002/wcm.1006}, url = {http://dx.doi.org/10.1002/wcm.1006}, author = {Rodrigo Roman and Javier Lopez and Pablo Najera} } @article {Alcaraz2011a, title = {Secure SCADA Framework for the Protection of Energy Control Systems}, journal = {Concurrency and Computation Practice \& Experience}, volume = {23}, number = {12}, year = {2011}, month = {Aug 2011}, pages = {1414-1430}, publisher = {John Wiley \& Sons, Inc.}, abstract = {

Energy distribution systems are becoming increasingly widespread in today{\textquoteright}s society.\ One of the elements that is used to monitor and control these systems are the SCADA\ (Supervisory Control and Data Acquisition) systems. In particular, these control systems\ and their complexities, together with the emerging use of the Internet and wireless\ technologies, bring new challenges that must be carefully considered. Examples of such\ challenges are the particular bene{\textasciimacron}ts of the integration of those new technologies, and\ also the e{\textregistered}ects they may have on the overall SCADA security. The main task of this\ paper is to provide a framework that shows how the integration of di{\textregistered}erent state-of-the-art technologies in an energy control system, such as Wireless Sensor Networks (WSNs),\ Mobile Ad-Hoc Networks (MANETs), and the Internet, can bring some interesting\ benefits such as status management and anomaly prevention, while maintaining the\ security of the whole system.

}, keywords = {Energy Distribution and Control Systems, SCADA Systems, Sensor Networks}, isbn = {23(12)1311-1464 (2011)}, issn = {1532-0626}, doi = {10.1002/cpe.1679}, author = {Cristina Alcaraz and Javier Lopez and Jianying Zhou and Rodrigo Roman} } @inproceedings {Roman2007c, title = {Featuring Trust and Reputation Management Systems for Constrained Hardware Devices}, booktitle = {1st International Conference on Autonomic Computing and Communication Systems (Autonomics{\textquoteright}07)}, year = {2007}, month = {October}, publisher = {ICST}, organization = {ICST}, address = {Rome (Italy)}, abstract = {

Research on trust management systems for wireless sensor networks is still at a very early stage and few works have done so far. It seems that for those works which deal with the topic general features of how these systems should be are not clearly identified. In this paper we try to identify the main features that a trust management system should have and justify their importance for future developments.

}, keywords = {Sensor Networks, Trust Management}, isbn = {978-963-9799-09-7}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez} } @article {Roman2007, title = {A Survey of Cryptographic Primitives and Implementations for Hardware-Constrained Sensor Network Nodes}, journal = {Mobile Networks and Applications}, volume = {12}, number = {4}, year = {2007}, month = {August}, pages = {231-244}, publisher = {Springer}, abstract = {

In a wireless sensor network environment, a sensor node is extremely constrained in terms of hardware due to factors such as maximizing lifetime and minimizing physical size and overall cost. Nevertheless, these nodes must be able to run cryptographic operations based on primitives such as hash functions, symmetric encryption and public key cryptography in order to allow the creation of secure services. Our objective in this paper is to survey how the existing research-based and commercial-based sensor nodes are suitable for this purpose, analyzing how the hardware can influence the provision of the primitives and how software implementations tackles the task of implementing instances of those primitives. As a result, it will be possible to evaluate the influence of provision of security in the protocols and applications/scenarios where sensors can be used.

}, keywords = {Cryptography, Hardware, Sensor Networks}, issn = {1383-469X}, doi = {10.1007/s11036-007-0024-2}, url = {http://www.springerlink.com/content/3785k818327456gq/}, author = {Rodrigo Roman and Cristina Alcaraz and Javier Lopez} }