@incollection {2013, title = {POM: A Trust-based AHP-like Methodology to Solve Conflict Requirements for the IoT}, booktitle = {Collaborative Approaches for Cyber Security in Cyber-Physical Systems}, number = {Part of the Advanced Sciences and Technologies for Security Applications book series (ASTSA)}, year = {2023}, month = {01/2023}, pages = {145-170}, publisher = {Springer}, organization = {Springer}, keywords = {Analytic Hierarchy Process (AHP), Internet of Things (IoT), Multi Criteria Decision Analysis (MCDA), Requirements Engineering, Trust}, issn = {1613-5113}, doi = {https://doi.org/10.1007/978-3-031-16088-2_7}, url = {https://link.springer.com/chapter/10.1007/978-3-031-16088-2_7}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {1980, title = {Novel Approaches for the Development of Trusted IoT Entities}, booktitle = {37th International Conference on ICT Systems Security and Privacy Protection {\textendash} IFIP SEC 2022}, year = {2022}, month = {06/2022}, pages = {215-230}, publisher = {Springer}, organization = {Springer}, address = {Copenhagen}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC)., Trust, UML}, issn = {1868-4238 }, doi = {https://doi.org/10.1007/978-3-031-06975-8}, url = {https://link.springer.com/content/pdf/10.1007\%2F978-3-031-06975-8_13}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {1981, title = {Verification and Validation Methods for a Trust-by-Design Framework for the IoT}, booktitle = {36th Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSec{\textquoteright}22)}, volume = {13383}, year = {2022}, month = {07/2022}, pages = {183-194}, publisher = {Springer}, organization = {Springer}, address = {Newark, NJ, USA}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC), Trust, UML}, isbn = {978-3-031-10683-5}, doi = {https://doi.org/10.1007/978-3-031-10684-2_11}, url = {https://link.springer.com/chapter/10.1007/978-3-031-10684-2_11}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @article {ferraris2020b, title = {A model-driven approach to ensure trust in the IoT}, journal = {Human-centric Computing and Information Sciences}, volume = {10}, number = {50}, year = {2020}, month = {12/2020}, publisher = {Springer}, abstract = {

The Internet of Things (IoT) is a paradigm that permits smart entities to be interconnected anywhere and anyhow. IoT opens new opportunities but also rises new issues.
In this dynamic environment, trust is useful to mitigate these issues. In fact, it is important that the smart entities could know and trust the other smart entities in order to collaborate with them.
So far, there is a lack of research when considering trust through the whole System Development Life Cycle (SDLC) of a smart IoT entity.
In this paper, we suggest a new approach that considers trust not only at the end of the SDLC but also at the start of it. More precisely, we explore the modeling phase proposing a model-driven approach extending UML and SysML considering trust and its related domains, such as security and privacy.
We propose stereotypes for each diagram in order to give developers a way to represent trust elements in an effective way.
Moreover, we propose two new diagrams that are very important for the IoT: a traceability diagram and a context diagram.
This model-driven approach will help developers to model the smart IoT entities according to the requirements elicited in the previous phases of the SDLC.
These models will be a fundamental input for the following and final phases of the SDLC.

}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC), Trust, UML}, issn = {2192-1962 }, doi = {10.1186/s13673-020-00257-3}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {1814, title = {An Analysis of Trust in Smart Home Devices}, booktitle = {The 20th World Conference on Information Security Applications: WISA-Workshop 2019}, year = {2019}, publisher = {Springer}, organization = {Springer}, address = {Jeju Island, Korea}, abstract = {

In recent times, smart home devices like Amazon Echo and Google Home have reached mainstream popularity. These devices are intrinsically intrusive, being able to access user{\textquoteright}s personal information. There are growing concerns about indiscriminate data collection and invasion of user privacy in smart home devices. Improper trust assumptions and security controls can lead to unauthorized access of the devices, which can have severe consequences (i.e. safety risks). In this paper, we analysed the behaviour of smart home devices with respect to trust relationships. We set up a smart home environment to evaluate how trust is built and managed. Then, we performed a number of interaction tests with different types of users (i.e. owner, guests). As a result, we were able to assess the effectiveness of the provided security controls and identify some relevant security issues. To address them, we defined a trust model and proposed a solution based on it for securing smart home devices.

}, keywords = {Internet of Things (IoT), security, Smart Home., Trust}, author = {Davide Ferraris and Daniel Bastos and Carmen Fernandez-Gago and Fadi El-Moussa and Javier Lopez} } @article {ferraris2019, title = {TrUStAPIS: A Trust Requirements Elicitation Method for IoT}, journal = {International Journal of Information Security }, year = {2019}, month = {01/2020}, pages = {111-127}, publisher = {Springer}, abstract = {

The Internet of Things (IoT) is an environment of interconnected entities, which are identifiable, usable and controllable via the Internet. Trust is useful for a system such as the IoT as the entities involved would like to know how the other entities they have to interact with are going to perform.
When developing an IoT entity, it will be desirable to guarantee trust during its whole life cycle. Trust domain is strongly dependent on other domains such as security and privacy.
To consider these domains as a whole and to elicit the right requirements since the first phases of the System Development Life Cycle (SDLC) is a key point when developing an IoT entity.
This paper presents a requirements elicitation method focusing on trust plus other domains such as security, privacy and usability that increase the trust level of the IoT entity developed. To help the developers to elicit the requirements, we propose a JavaScript Notation Object (JSON) template containing all the key elements that must be taken into consideration.
We emphasize on the importance of the concept of traceability. This property permits to connect all the elicited requirements guaranteeing more control on the whole requirements engineering process.

}, keywords = {Internet of Things (IoT), Requirements Engineering, System Development Life Cycle (SDLC), Trust, \\ JavaScript Notation Object (JSON)}, issn = {1615-5262}, doi = {10.1007/s10207-019-00438-x}, url = {https://link.springer.com/article/10.1007\%2Fs10207-019-00438-x}, author = {Davide Ferraris and Carmen Fernandez-Gago} }