@article {Flamini2022, title = {Towards Trustworthy Autonomous Systems: Taxonomies and Future Perspectives}, journal = {IEEE Transactions on Emerging Topics in Computing}, year = {2022}, publisher = {IEEE}, abstract = {

The class of Trustworthy Autonomous Systems (TAS) includes cyber-physical systems leveraging on self-x technologies that make them capable to learn, adapt to changes, and reason under uncertainties in possibly critical applications and evolving environments. In the last decade, there has been a growing interest in enabling artificial intelligence technologies, such as advanced machine learning, new threats, such as adversarial attacks, and certification challenges, due to the lack of sufficient explainability. However, in order to be trustworthy, those systems also need to be dependable, secure, and resilient according to well-established taxonomies, methodologies, and tools. Therefore, several aspects need to be addressed for TAS, ranging from proper taxonomic classification to the identification of research opportunities and challenges. Given such a context, in this paper address relevant taxonomies and research perspectives in the field of TAS. We start from basic definitions and move towards future perspectives, regulations, and emerging technologies supporting development and operation of TAS.

}, keywords = {Arti cial Intelligence, Cyber- Resilience, Cybersecurity, Dependability, Intelligent Systems, Trustworthy Autonomous Systems}, issn = {2168-6750}, doi = {https://doi.org/10.1109/TETC.2022.3227113}, url = {https://ieeexplore.ieee.org/abstract/document/9979717/authors$\#$authors}, author = {Francesco Flammini and Cristina Alcaraz and Emanuele Bellini and Stefano Marrone and Javier Lopez and Andrea Bondavalli} } @inproceedings {1684, title = {A Trust-by-Design Framework for the Internet of Things}, booktitle = {2018 9th IFIP International Conference on New Technologies Mobility and Security (NTMS)}, year = {2018}, month = {04/2018}, publisher = {IEEE}, organization = {IEEE}, address = {Paris}, abstract = {

The Internet of Things (IoT) is an environment of interconnected entities, that are identifiable, usable and controllable via the Internet. Trust is necessary in a system such as IoT as the entities involved should know the effect of interacting with other entities. Moreover, the entities must also be able to trust a system to reliably use it. An IoT system is composed of different entities from different vendors, each of them with a different purpose and a different lifecycle. So considering trust in the whole IoT system lifecycle is useful and necessary to guarantee a good service for the whole system. The heterogeneity and dynamicity of this field make it difficult to ensure trust in IoT. We propose a trust by design framework for including trust in the development of an IoT entity considering all the phases of the life-cycle. It is composed of the K-Model and transversal activities.

}, issn = {2157-4960 }, doi = {10.1109/NTMS.2018.8328674}, url = {http://ieeexplore.ieee.org/document/8328674/}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @article {nrlSIC16, title = {Testificaci{\'o}n Digital}, journal = {Revista SIC}, volume = {122}, year = {2016}, month = {Nov 2016}, pages = {94-98}, publisher = {Ediciones CODA}, abstract = {

El creciente n{\'u}mero de dispositivos interconectados trae consigo problemas de seguridad bien conocidos; por ejemplo, aquellos debidos a las vulnerabilidades en protocolos muy diversos {\textendash}muchos de ellos propietarios{\textendash} y al factor de error humano introducido por los usuarios. Sin embargo, cabe preguntarse c{\'o}mo podemos usar el despliegue de tales dispositivos en beneficio de la ciberseguridad. En el proyecto IoTest se est{\'a} desarrollando una soluci{\'o}n, el Testigo Digital, que permitir{\'a} a los dispositivos personales con arquitectura de seguridad embebida reaccionar ante ataques virtuales, protegi{\'e}ndonos de los ciberataques emergentes.

}, issn = {1136-0623}, url = {https://revistasic.es/index.php?option=com_content\&view=article\&id=1713\&Itemid=1498}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @inproceedings {1578, title = {Testigo digital: delegaci{\'o}n vinculante de evidencias electr{\'o}nicas para escenarios IoT}, booktitle = {II Jornadas Nacionales de Investigaci{\'o}n en Ciberseguridad (JNIC 2016)}, year = {2016}, month = {06/2016}, pages = {109-116}, abstract = {

En un mundo en el que los usuarios dependen cada vez m{\'a}s de sus dispositivos, {\'e}stos almacenan gran cantidad de datos y son una fuente muy valiosa de informaci{\'o}n sobre su entorno. Sin embargo, la heterogeneidad y la densidad de los objetos conectados, caracter{\'\i}sticas propias de la Internet de las Cosas (IoT), sirven de velo para ocultar conductas maliciosas que afectan a estos dispositivos, sin que quede rastro de tales acciones. En este art{\'\i}culo definimos el concepto de testigo digital: funcionalidad que permitir{\'a} a los dispositivos personales y otros objetos colaborar para implementar una cadena de custodia digital en la IoT. El fin perseguido es ofrecer soluciones que mitiguen los efectos de la ciberdelincuencia, ampar{\'a}ndose en la colaboraci{\'o}n de los dispositivos con arquitecturas de seguridad embebidas para alertar de conductas maliciosas, y dejar constancia de {\'e}stas.

}, keywords = {computaci{\'o}n forense, elemento seguro, Evidencia electr{\'o}nica, IoT, no-repudio}, isbn = {978-84-608-8070-7}, url = {http://ucys.ugr.es/jnic2016/docs/ActasJNIC2016.pdf}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {PATENTDW15, title = {Testigo digital: procedimientos y dispositivos para la gesti{\'o}n segura de evidencias electr{\'o}nicas con credenciales vinculantes}, journal = {Espa{\~n}a, C. Aut{\'o}n./Reg. de explotaci{\'o}n: Andaluc{\'\i}a}, volume = {P201500764}, year = {2015}, month = {10/2015}, publisher = {G06F 21/00}, type = {Invention Patent}, edition = {Invention Patent}, chapter = {WO2017068222}, address = {Spain}, author = {Ana Nieto and Rodrigo Roman and Javier Lopez} } @article {lorena2015c, title = {A Three-Stage Analysis of IDS for Critical Infrastructures}, journal = {Computers \& Security}, volume = {55}, number = {November}, year = {2015}, pages = {235-250}, publisher = {Elsevier}, abstract = {

The correct operation of Critical Infrastructures (CIs) is vital for the well being of society, however these complex systems are subject to multiple faults and threats every day. International organizations around the world are alerting the scientific community to the need for protection of CIs, especially through preparedness and prevention mechanisms. One of the main tools available in this area is the use of Intrusion Detection Systems (IDSs). However, in order to deploy this type of component within a CI, especially within its Control System (CS), it is necessary to verify whether the characteristics of a given IDS solution are compatible with the special requirements and constraints of a critical environment. In this paper, we carry out an extensive study to determine the requirements imposed by the CS on the IDS solutions using the Non-Functional Requirements (NFR) Framework. The outcome of this process are the abstract properties that the IDS needs to satisfy in order to be deployed within a CS, which are refined through the identification of satisficing techniques for the NFRs. To provide quantifiable measurable evidence on the suitability of the IDS component for a CI, we broaden our study using the Goal Question Metric (GQM) approach to select a representative set of metrics. A requirements model, refined with satisficing techniques and sets of metrics which help assess, in the most quantifiable way possible, the suitability and performance of a given IDS solution for a critical scenario, constitutes the results of our analysis.

}, issn = {0167-4048}, author = {Lorena Cazorla and Cristina Alcaraz and Javier Lopez} } @inproceedings {1805, title = {Towards Automatic Critical Infrastructure Protection through Machine Learning}, booktitle = {8th International Conference on Critical Information Infrastructures Security}, volume = {8328}, year = {2013}, pages = {197-203}, publisher = {Springer}, organization = {Springer}, address = {Amsterdam, The Netherlands}, abstract = {

Critical Infrastructure Protection (CIP) faces increasing challenges in number and in sophistication, which makes vital to provide new forms of protection to face every day{\textquoteright}s threats. In order to make such protection holistic, covering all the needs of the systems from the point of view of security, prevention aspects and situational awareness should be considered. Researchers and Institutions stress the need of providing intelligent and automatic solutions for\ protection, calling our attention to the need of providing Intrusion Detection Systems (IDS) with intelligent active reaction capabilities. In this paper, we support the need of automating the processes implicated in the IDS solutions of the critical infrastructures and theorize that the introduction of Machine Learning (ML) techniques in IDS will be helpful for implementing automatic adaptable solutions\ capable of adjusting to new situations and timely reacting in the face of threats and anomalies. To this end, we study the different levels of automation that the IDS can implement, and outline a methodology to endow critical scenarios with preventive automation. Finally, we analyze current solutions presented in the literature and contrast them against the proposed methodology

}, issn = {0302-9743}, doi = {http://link.springer.com/chapter/10.1007\%2F978-3-319-03964-0_18}, author = {Lorena Cazorla and Cristina Alcaraz and Javier Lopez} } @inproceedings {moyano13wisse, title = {Towards Engineering Trust-aware Future Internet Systems}, booktitle = {3rd International Workshop on Information Systems Security Engineering (WISSE 2013)}, series = {LNBIP}, volume = {148}, year = {2013}, month = {Jun 2013}, pages = {490-501}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Valencia}, abstract = {

Security must be a primary concern when engineering Future Internet (FI) systems and applications. In order to achieve secure solutions, we need to capture security requirements early in the Software Development Life Cycle (SDLC). Whereas the security community has traditionally focused on providing tools and mechanisms to capture and express hard security requirements (e.g. confidentiality), little attention has been paid to other important requirements such as trust and reputation. We argue that these soft security requirements can leverage security in open, distributed, heterogeneous systems and applications and that they must be included in an early phase as part of the development process. In this paper we propose a UML extension for specifying trust and reputation requirements, and we apply it to an eHealth case study.

}, keywords = {Reputation, Requirements Engineering, Secure Design, Trust}, isbn = {978-3-642-38489-9}, issn = {1865-1348}, doi = {10.1007/978-3-642-38490-5}, url = {http://link.springer.com/book/10.1007/978-3-642-38490-5/page/3}, author = {Francisco Moyano and Carmen Fernandez-Gago and Javier Lopez}, editor = {Xavier Franch and Pnina Soffer} } @inproceedings {moyano2013ifiptm, title = {Towards Trust-Aware and Self-Adaptive Systems}, booktitle = {7th IFIP WG 11.11 International Conference on Trust Management (IFIPTM 2013)}, series = {AICT}, volume = {401}, year = {2013}, month = {Jun 2013}, pages = {255-262}, publisher = {Springer}, organization = {Springer}, address = {Malaga}, abstract = {

The Future Internet (FI) comprises scenarios where many heterogeneous and dynamic entities must interact to provide services (e.g., sensors, mobile devices and information systems in smart city scenarios). The dynamic conditions under which FI applications must execute call for self-adaptive software to cope with unforeseeable changes in the application environment. Software engineering currently provides frameworks to develop reasoning engines that automatically take reconfiguration decisions and that support the runtime adaptation of distributed, heterogeneous applications. However, these frameworks have very limited support to address security concerns of these application, hindering their usage for FI scenarios. We address this challenge by enhancing self-adaptive systems with the concepts of trust and reputation. Trust will improve decision-making processes under risk and uncertainty, in turn improving security of self-adaptive FI applications. This paper presents an approach that includes a trust and reputation framework into a platform for adaptive, distributed component-based systems, thus providing software components with new abilities to include trust in their reasoning process.

}, isbn = {978-3-642-38323-6}, issn = {1868-4238}, doi = {10.1007/978-3-642-38323-6}, author = {Francisco Moyano and Benoit Baudry and Javier Lopez}, editor = {Carmen Fernandez-Gago and Isaac Agudo and Fabio Martinelli and Siani Pearson} } @inproceedings {moyano2013essosds, title = {A Trust and Reputation Framework}, booktitle = {Doctoral Symposium of the International Symposium on Engineering Secure Software and Systems (ESSoS-DS 2013)}, series = {CEUR-WS}, volume = {965}, year = {2013}, pages = {7-12}, publisher = {CEUR-WS}, organization = {CEUR-WS}, address = {Par{\'\i}s}, abstract = {

The Future Internet is posing new security challenges as their scenarios are bringing together a huge amount of stakeholders and devices that must interact under unforeseeable conditions. In addition, in these scenarios we cannot expect entities to know each other beforehand, and therefore, they must be involved in risky and uncertain collaborations. In order to minimize threats and security breaches, it is required that a well-informed decision-making process is in place, and it is here where trust and reputation can play a crucial role. Unfortunately, services and applications developers are often unarmed to address trust and reputation requirements in these scenarios. To overcome this limitation, we propose a trust and reputation framework that allows developers to create trust- and reputation-aware applications.

}, issn = {1613-0073}, url = {http://ceur-ws.org/Vol-965/}, author = {Francisco Moyano and Carmen Fernandez-Gago and Javier Lopez}, editor = {Maritta Heisel and Eda Marchetti} } @inproceedings {Moyano_ESSoS12, title = {A Task Ordering Approach for Automatic Trust Establishment}, booktitle = {Proceedings of the 2012 International Symposium on Engineering Secure Software and Systems (ESSoS 2012)}, series = {LNCS}, volume = {7159}, year = {2012}, month = {Feb 2012}, pages = {76{\textendash}89}, publisher = {Springer}, organization = {Springer}, address = {Eindhoven, The Netherlands}, abstract = {

Trust has become essential in computer science as a way of assisting the process of decision-making, such as access control. In any system, several tasks may be performed, and each of these tasks might pose different associated trust values between the entities of the system. For instance, in a file system, reading and overwriting a file are two tasks that pose different trust values between the users who can carry out these tasks. In this paper, we propose a simple model for automatically establishing trust relationships between entities considering an established order among tasks.

}, keywords = {task ordering, trust evaluation, trust graph}, doi = {10.1007/978-3-642-28166-2_8}, author = {Francisco Moyano and Carmen Fernandez-Gago and Isaac Agudo and Javier Lopez}, editor = {Gilles Barthe and Ben Livshits and Riccardo Scandariato} } @inproceedings {Nieto2012a, title = {Traffic Classifier for Heterogeneous and Cooperative Routing through Wireless Sensor Networks}, booktitle = {Advanced Information Networking and Applications Workshops (WAINA), 2012 26th International Conference on}, year = {2012}, month = {03/2012}, pages = {607-612}, publisher = {IEEE}, organization = {IEEE}, address = {Fukuoka (Japan)}, abstract = {

Wireless Sensor Networks (WSN) are networks composed of autonomous devices manufactured to solve a specific problem, with limited computational capabilities and resource-constrained (e.g. limited battery). WSN are used to monitor physical or environmental conditions within an area (e.g. temperature, humidity). The popularity of the WSN is growing, precisely due to the wide range of sensors available. As a result, these networks are being deployed as part of several infrastructures. However, sensors are designed to collaborate only with sensors of the same type. In this sense, taking advantage of the heterogeneity of WSN in order to provide common services, like it is the case of routing, has not been sufficiently considered. For this reason, in this paper we propose a routing protocol based on traffic classification and role-assignment to enable heterogeneous WSN for cooperation. Our approach considers both QoS requirements and lifetime maximization to allow the coexistence of different applications in the heterogeneous network infrastructure.

}, keywords = {heterogeneous, routing, WSN}, isbn = {978-0-7695-4652-0/12}, doi = {10.1109/WAINA.2012.202}, author = {Ana Nieto and Javier Lopez} } @article {rosado2009, title = {Towards a UML Extension of Reusable Secure Use Cases for Mobile Grid systems}, journal = {IEICE Trans. on Information and Systems}, volume = {E94-D}, year = {2011}, month = {Feb 2011}, pages = {243-254}, publisher = {IEICE}, abstract = {

The systematic processes exactly define the development cycle and help the development team follow the same development strategies and techniques, thus allowing a continuous improvement in the quality of the developed products. Likewise, it is important that the development process used integrates security aspects from the first stages at the same level as other functional and non-functional requirements. Grid systems allow us to build very complex information systems with different and remarkable features (interoperability between multiple security domains, cross-domain authentication and authorization, dynamic, heterogeneous and limited mobile devices, etc). With the development of wireless technology and mobile devices, the Grid becomes the perfect candidate for letting mobile users make complex works that add new computational capacity to the Grid. A methodology of development for secure mobile Grid systems is being defined. One of the activities of this methodology is the requirements analysis which is based in reusable use cases. In this paper, we will present a UML-extension for security use cases and Grid use case which capture the behaviour of this kind of systems. A detailed description of all these new use cases defined in the UML extension is necessary, describing the stereotypes, tagged values, constraints and graphical notation. We show an example of how to apply and use this extension for building the diagram of use cases and incorporating common security aspects for this kind of systems. Also, we will see how the diagrams built can be reused in the construction of others diagrams saving time and effort in this task.

}, issn = {0916-8532}, doi = {10.1587/transinf.E94.D.243}, author = {David G. Rosado and Eduardo Fernandez-Medina and Javier Lopez and Mario Piattini} } @article {JavierLopezMunoz2010, title = {Trust Management Systems for Wireless Sensor Networks: Best practices}, journal = {Computer Communications}, volume = {33}, number = {9}, year = {2010}, pages = {0140-3664}, publisher = {Elsevier}, abstract = {

Wireless sensor networks (WSNs) have been proven a useful technology for perceiving information about the physical world and as a consequence has been used in many applications such as measurement of temperature, radiation, flow of liquids, etc. The nature of this kind of technology, and also their vulnerabilities to attacks make the security tools required for them to be considered in a special way. The decision making in a WSN is essential for carrying out certain tasks as it aids sensors establish collaborations. In order to assist this process, trust management systems could play a relevant role. In this paper, we list the best practices that we consider are essential for developing a good trust management system for WSN and make an analysis of the state of the art related to these practices.

}, issn = {0140-3664}, doi = {10.1016/j.comcom.2010.02.006}, author = {Javier Lopez and Rodrigo Roman and Isaac Agudo and Carmen Fernandez-Gago} } @proceedings {trustbus2010_proc, title = {Trust, Privacy and Security in Digital Business, 7th International Conference, TrustBus 2010, Bilbao, Spain, August 30-31, 2010. Proceedings}, journal = {TrustBus}, volume = {6264}, year = {2010}, publisher = {Springer}, isbn = {978-3-642-15151-4}, doi = {10.1007/978-3-642-15152-1}, editor = {Sokratis K. Katsikas and Javier Lopez and Miguel Soriano} } @incollection {Roman2009b, title = {Trust and Reputation Systems for Wireless Sensor Networks}, booktitle = {Security and Privacy in Mobile and Wireless Networking}, year = {2009}, pages = {105-128}, publisher = {Troubador Publishing Ltd}, organization = {Troubador Publishing Ltd}, abstract = {

The concept of trust has become very relevant in the late years as a consequence of the growth of fields such as internet transactions or electronic commerce. In general, trust has become of paramount importance for any kind of distributed networks, such as wireless sensor networks (WSN in the following). In this chapter of the book, we try to give a general overview of the state of the art on trust management systems for WSN and also try to identify the main features of the architectures of these trust management systems.

}, isbn = {978-1905886-906}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez and Hsiao Hwa Chen}, editor = {Stefanos Gritzalis and Tom Karygiannis and Charalabos Skianis} } @article {SokratisKatsikas2005a, title = {Trust, Privacy and Security in Digital Business}, journal = {International Journal of Computer Systems, Science \& Engineering}, volume = {20}, number = {6}, year = {2005}, publisher = {CRL Publishing}, abstract = {

An important aspect of e-business is the area of e-commerce. According to recent surveys, one of the most severe restraining factors for the proliferation of e-commerce, as measured by the gap between predicted market value and actual development is the (lack of) security measures required to assure both businesses and customers that their business relationship and transactions will be carried out in privacy, correctly, and timely. A large number of individuals are not willing to engage in e-commerce (or are only participating at a reduced level) simply because they do not trust the e-commerce sites and the underlying information and communication technologies to be secure enough. This paper first considers privacy and security requirements for e-commerce applications; it then discusses methods and technologies that can be used to fulfil these requirements.

}, issn = {0267-6192}, author = {Sokratis K. Katsikas and Javier Lopez and Guenther Pernul} } @proceedings {1614, title = {Trust, Privacy and Security in Digital Business: Second International Conference, TrustBus 2005, Copenhagen, Denmark, August 22-26, 2005, Proceedings}, journal = {TrustBus}, volume = {3592}, year = {2005}, publisher = {Springer}, isbn = {3-540-28224-6}, editor = {Sokratis K. Katsikas and Javier Lopez and Guenther Pernul} } @inproceedings {SokratisKatsikas2005, title = {Trust, Privacy and Security in E-business: Requirements and Solutions}, booktitle = {10th Panhellenic Conference in Informatics (PCI{\textquoteright}05)}, series = {LNCS}, volume = {3746}, year = {2005}, month = {November}, pages = {548-558}, publisher = {Springer}, organization = {Springer}, address = {Volos, Greece}, abstract = {

An important aspect of e-business is the area of e-commerce. One of the most severe restraining factors for the proliferation of e-commerce, is the lack of trust between customers and sellers, consumer privacy concerns and the lack of security measures required to assure both businesses and customers that their business relationship and transactions will be carried out in privacy, correctly, and timely. This paper considers trust privacy and security issues in e-commerce applications and discusses methods and technologies that can be used to fulfil the pertinent requirements.

}, author = {Sokratis K. Katsikas and Javier Lopez and Guenther Pernul} } @inproceedings {JavierLopez2004a, title = {On a Taxonomy of Systems for Authentication and/or Authorization Services}, booktitle = {TERENA Networking Conference}, year = {2004}, month = {June}, address = {Rhodes, Greece}, abstract = {

In this work we elaborate on a taxonomy of systems that provide either joint solutions for both authentication and authorization problems, or solutions for only one of the problems. Basically, we do not focus our work on theoretical systems that have been proposed only in the literature. On the other hand, we focus on: (i) systems that are already developed; (ii) systems that are under development or deployment; and (iii) systems that are still in the initial stages of design but are supported by international working groups or bodies. More precisely, we elaborate on a taxonomy of systems that are (or will be soon) available to final users.

}, author = {Javier Lopez and Jose A. Montenegro and Rolf Oppliger and Guenther Pernul} } @inproceedings {MildreyCarbonell2004, title = {Timeout Estimation using a Simulation Model for Non-repudiation Protocols}, booktitle = {2nd Workshop on Internet Communications Security (WICS{\textquoteright}04), (within Computational Science and its Applications International Conference)}, series = {LNCS}, volume = {3043}, year = {2004}, month = {May}, pages = {903-914}, publisher = {Springer}, organization = {Springer}, abstract = {

An essential issue for the best operation of non-repudiation protocols is to figure out their timeouts. In this paper, we propose a simulation model for this purpose since timeouts depend on specific scenario features such as network speed, TTP characteristics, number of originators and recipients, etc. Based on a one-to-many Markowicth{\textquoteright}s protocol simulation model as a specific example, we have worked out various simulation experiments.

}, author = {Mildrey Carbonell and Jose A. Onieva and Javier Lopez and Deborah Galpert and Jianying Zhou} } @proceedings {1616, title = {Trust and Privacy in Digital Business, First International Conference, TrustBus 2004, Zaragoza, Spain, August 30 - September 1, 2004, Proceedings}, journal = {TrustBus}, volume = {3184}, year = {2004}, publisher = {Springer}, isbn = {3-540-22919-1}, editor = {Sokratis K. Katsikas and Javier Lopez and Guenther Pernul} } @inproceedings {JoseA.Montenegro2003, title = {Taxonom{\'\i}a de las Infraestructuras de Autorizaci{\'o}n y Autentificaci{\'o}n}, booktitle = {XIII Jornadas TELECOM I+D 2003}, year = {2003}, month = {Noviembre}, author = {Jose A. Montenegro and Javier Lopez} } @inproceedings {josevivas2003, title = {Towards Business Process-Driven Framework for Security Engineering with the UML}, booktitle = {6th International Conference on Information Security (ISC{\textquoteright}03)}, series = {LNCS}, volume = {2851}, year = {2003}, month = {October}, pages = {381-395}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Bristol, U.K.}, abstract = {

A challenging task in security engineering concerns the specification and integration of security with other requirements at the top level of requirements engineering. Empirical studies show that it is commonly at the business process level that customers and end users are able to express their security needs. In addition, systems are often developed by automating existing manual business processes. Since many security notions belongs conceptually to the world of business processes, it is natural to try to capture and express them in the context of business models in which moreover customers and end users feel most comfortable. In this paper, based on experience drawn from an ongoing work within the CASENET project \cite{CASENET}, we propose a UML-based business process-driven framework for the development of security-critical systems.

}, isbn = {1-4020-7449-2}, author = {Jose L. Vivas and Jose A. Montenegro and Javier Lopez} } @inproceedings {JavierLopez2002g, title = {Towards a Trustful and Flexible Environment for Secure Communications with Public Administrations}, booktitle = {First International Conference on Electronic Government (EGOV{\textquoteright}02)}, series = {LNCS}, volume = {2456}, year = {2002}, month = {September}, pages = {211-214}, publisher = {Springer}, organization = {Springer}, address = {Aix-en-Provence, France)}, abstract = {

Interaction of citizens and private organizations with Public Administrations can produce meaningful benefits in the accessibility, efficiency and availability of documents, regardless of time, location and quantity. Although there are some experiences in the field of e-government there are still some technological and legal difficulties that avoid a higher rate of communications with Public Administrations through Internet, not only from citizens, but also from private companies. We have studied two of the technological problems, the need to work in a trustful environment and the creation of tools to manage electronic versions of the paper-based forms.

}, author = {Javier Lopez and Antonio Mana and Jose A. Montenegro and Juan J. Ortega and Jose M. Troya} } @inproceedings {AntonioMana2001, title = {Ticketing Gen{\'e}rico y Seguro Sobre GSM}, booktitle = {Simposio en Inform{\'a}tica y Telecomunicaciones 2001 (SIT{\textquoteright}01)}, year = {2001}, month = {Septiembre}, pages = {297-305}, address = {La Coru{\~n}a, Espa}, abstract = {
La confianza en el comercio electr\ónico se ha reforzado, sin duda, gracias a la difusi\ón de las tarjetas inteligentes. Estos elementos clave, que mejoran en gran medida la seguridad de los sistemas inform\áticos, tienen usos que van desde la simple identificaci\ón del usuario hasta complejos mecanismos de pago. Dentro del comercio electr\ónico, uno de los servicios de valor a\ñadido m\ás interesantes para cualquier usuario es el de ticketing. La seguridad de este sistema puede beneficiarse del uso de las tarjetas inteligentes en los procesos de venta, almacenamiento y uso de los tickets electr\ónicos. Uno de los puntos cr\íticos para conseguir una amplia aceptaci\ón de este servicio ser\á su capacidad de llegar a la gran mayor\ía de usuarios. En esta l\ínea, parece apropiado pensar en los tel\éfonos m\óviles como la mejor plataforma sobre la que implantar el sistema. Este trabajo presenta los resultados del proyecto GSM-ticket, en el que se introducen, por una parte, un esquema de tickets electr\ónicos seguros, eficientes y f\áciles de usar, y por otra el conjunto de servicios adicionales de venta, pago y distribuci\ón junto con sus protocolos correspondientes.
}, author = {Antonio Mana and Javier Lopez and Jesus Martinez and Sonia Matamoros} } @inproceedings {1723, title = {A Tool for Functions Approximation by Neural Networks}, booktitle = {5th European Congress of Intelligent Techniques and Soft Computing (EUFIT {\textquoteright}97)}, year = {1997}, pages = {557-564}, address = {Aachen (Germany)}, author = {L Pino and Javier Lopez and Francisco Lopez and Carlos Maraval} }