@article {ferraris2020b, title = {A model-driven approach to ensure trust in the IoT}, journal = {Human-centric Computing and Information Sciences}, volume = {10}, number = {50}, year = {2020}, month = {12/2020}, publisher = {Springer}, abstract = {

The Internet of Things (IoT) is a paradigm that permits smart entities to be interconnected anywhere and anyhow. IoT opens new opportunities but also rises new issues.
In this dynamic environment, trust is useful to mitigate these issues. In fact, it is important that the smart entities could know and trust the other smart entities in order to collaborate with them.
So far, there is a lack of research when considering trust through the whole System Development Life Cycle (SDLC) of a smart IoT entity.
In this paper, we suggest a new approach that considers trust not only at the end of the SDLC but also at the start of it. More precisely, we explore the modeling phase proposing a model-driven approach extending UML and SysML considering trust and its related domains, such as security and privacy.
We propose stereotypes for each diagram in order to give developers a way to represent trust elements in an effective way.
Moreover, we propose two new diagrams that are very important for the IoT: a traceability diagram and a context diagram.
This model-driven approach will help developers to model the smart IoT entities according to the requirements elicited in the previous phases of the SDLC.
These models will be a fundamental input for the following and final phases of the SDLC.

}, keywords = {Internet of Things (IoT), SysML, System Development Life Cycle (SDLC), Trust, UML}, issn = {2192-1962 }, doi = {10.1186/s13673-020-00257-3}, author = {Davide Ferraris and Carmen Fernandez-Gago and Javier Lopez} } @article {RomanFog16, title = {Mobile edge computing, Fog et al.: A survey and analysis of security threats and challenges}, journal = {Future Generation Computer Systems}, volume = {78}, year = {2018}, month = {01/2018}, pages = {680-698}, publisher = {Elsevier}, abstract = {

For various reasons, the cloud computing paradigm is unable to meet certain requirements (e.g. low latency and jitter, context awareness, mobility support) that are crucial for several applications (e.g. vehicular networks, augmented reality). To fulfil these requirements, various paradigms, such as fog computing, mobile edge computing, and mobile cloud computing, have emerged in recent years. While these edge paradigms share several features, most of the existing research is compartmentalised; no synergies have been explored. This is especially true in the field of security, where most analyses focus only on one edge paradigm, while ignoring the others. The main goal of this study is to holistically analyse the security threats, challenges, and mechanisms inherent in all edge paradigms, while highlighting potential synergies and venues of collaboration. In our results, we will show that all edge paradigms should consider the advances in other paradigms.

}, keywords = {Cloud Computing, Fog computing, Mobile cloud computing, Mobile edge computing, privacy, security}, issn = {0167-739X}, doi = {10.1016/j.future.2016.11.009}, url = {https://authors.elsevier.com/c/1VmhQ,3q5xKgZZ}, author = {Rodrigo Roman and Javier Lopez and Masahiro Mambo} } @article {nieto2013mone, title = {A Model for the Analysis of QoS and Security Tradeoff in Mobile Platforms}, journal = {Mobile Networks and Applications (MONET) Journal}, volume = {19}, year = {2014}, month = {02/2014}, pages = {64-78}, publisher = {Springer US}, abstract = {

Today, mobile platforms are multimedia devices that provide different types of traffic with the consequent particular performance demands and, besides, security concerns (e.g. privacy). However, Security and QoS requirements quite often conflict to a large degree; the mobility and heterogeneous paradigm of the Future Internet makes coexistence even more difficult, posing new challenges to overcome. Probably, one of the main challenges is to identify the specific reasons why Security and QoS mechanisms are so related to each other. In this paper, we present a Parametric Relationship Model (PRM) to identify the Security and QoS dependencies, and to elaborate on the Security and QoS tradeoff. In particular, we perform an analysis that focus on the mobile platform environment and, consequently, also considers subjective parameters such user{\textquoteright}s experience, that is crucial for increasing the usability of new solutions in the Future Internet. The final aim of our contribution is to facilitate the development of secure and efficient services for mobile platforms.

}, keywords = {Dependencies, Parameters, PRM, QoS, Relationships, security, Tradeoff}, issn = {1383-469X}, doi = {10.1007/s11036-013-0462-y}, url = {http://dx.doi.org/10.1007/s11036-013-0462-y}, author = {Ana Nieto and Javier Lopez} }