@article{gonzalez2020stateful,

title = {Stateful RORI-based countermeasure selection using hypergraphs},

author = {Gustavo Gonzalez-Granadillo and Elena Doynikova and Joaquin Garcia-Alfaro and Igor Kotenko and Andrey Fedorchenko},

url = {https://doi.org/10.1016/j.jisa.2020.102562},

doi = {10.1016/j.jisa.2020.102562},

year  = {2020},

date = {2020-01-01},

journal = {Journal of Information Security and Applications},

volume = {54},

pages = {102562},

publisher = {Elsevier},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{pamies2020real,

title = {A Real-Time Query Log Protection Method for Web Search Engines},

author = {David P`amies-Estrems and Jordi Castell`a-Roca and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1109/ACCESS.2020.2992012},

doi = {10.1109/ACCESS.2020.2992012},

year  = {2020},

date = {2020-01-01},

journal = {IEEE Access},

volume = {8},

pages = {87393--87413},

publisher = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Kabil2019,

title = {Why should we use 3D Collaborative Virtual Environments for Cyber Security?},

author = {Alexandre Kabil and Thierry Duval and Nora Cuppens and Gerard Le Comte and Yoran Halgand and Christophe Ponchel},

doi = {10.1109/3DCVE.2018.8637109},

isbn = {9781538651322},

year  = {2019},

date = {2019-01-01},

journal = {2018 IEEE 4th VR International Workshop on 3D Collaborative Virtual Environments, 3DCVE 2018},

pages = {3--5},

abstract = {Cyber Security data analysis is an important growing domain: more and more data visualization systems are offered to operators in order to improve their threat detection performances or facilitate suspect behaviors characterization. As today Cyber Security trend is to regroup employees in structures such as Security Operations Center (SOC) or Computer Emergency Response Team (CERT), collaborative approach seems to be relevant in this context. We think that 3D Collaborative Virtual Environments (3DCVE) can be used in order to improve users Cyber Situational Awareness, as they can allow them to have a better understanding of a cyber situation by mediating interactions towards them and also by providing different points of view of the same data, on different scales.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Dernaika2019,

title = {Semantic mediation for a posteriori log analysis},

author = {Farah Dernaika and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Olivier Raynaud},

doi = {10.1145/3339252.3340104},

isbn = {9781450371643},

year  = {2019},

date = {2019-01-01},

journal = {ACM International Conference Proceeding Series},

abstract = {The a posteriori access control mode consists in monitoring actions performed by users, to detect possible violations of the security policy and to apply sanctions or reparations. In general, logs are among the first data sources that information security specialists consult for forensics when they suspect that something went wrong. One difficult challenge we face when analyzing logs, is the multiple log file formats. However, normalizing logs in one format needs a lot of processing especially because log files usually contain a high volume of data. Our study proposes then to tackle this problem, by leaving the different log formats as they are, and retrieving information from logs by querying them. A semantic mediator makes it possible to inter-operate various sources of information without modifying their internal functioning. It can be responsible for locating data sources, to transmit queries to each source, or from one source to another, to retrieve the queries responses and possibly send them back to other sources. To the best of our knowledge, semantic mediation techniques have been used to share information from heterogeneous data sources, but they were never used in the context of log analysis.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Bkakria2019,

title = {Optimal Distribution of Privacy Budget in Differential Privacy},

author = {Anis Bkakria and Aimilia Tasidou and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Fatma Bouattour and Feten Ben Fredj},

doi = {10.1007/978-3-030-12143-3_18},

issn = {16113349},

year  = {2019},

date = {2019-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {11391 LNCS},

pages = {222--236},

abstract = {Privacy budget management plays an important role when applying differential privacy, as it sets an upper limit in the ability to utilise the private database. In this paper, we explore the possibility of extending the total allocated privacy budget, taking into consideration the data consumer characteristics and the data utilisation context. To this end, we first study the problem of privacy budget distribution in adaptive multi-data consumer differential privacy use cases. Then, we present an extension of the classic differential privacy formal model that allows taking into consideration data consumers' information disclosure risk when distributing the privacy budget among them. Finally, we define a method that allows to optimally distribute a given privacy budget among a private database's data consumers.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2019c,

title = {VSL: A Data-Centric Internet of Things Overlay},

author = {Marc-Oliver Pahl and Stefan Liebald and Christian L\"{u}bben},

url = {https://s2labs.org/download/publications/2019-03_NetSys_Demo_VSL.pdf%0Ahttps://www.netsys2019.org/proceedings/},

year  = {2019},

date = {2019-01-01},

journal = {International Conference on Networked Systems 2019 (NetSys)},

pages = {1--3},

abstract = {Data-centric service-oriented designs are promising for overcoming the current IoT silos. The Virtual State Layer (VSL) is a data-centric middleware that securely unifies the access to distributed heterogeneous IoT components. The VSL solves key challenge of today's IoT: reducing the complexity, enabling interoperability, and providing security-by-design. The described practical setting enables the interactive exploration of a data- centric middleware including a live performance evaluation.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Khan2019,

title = {Deep Learning-aided Resource Orchestration for Vehicular Safety Communication C-ITS Decentralized Congestion Control ( DCC )},

author = {Irfan Khan and Fran\c{c}ois-xavier Aubet},

year  = {2019},

date = {2019-01-01},

number = {April},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2019,

title = {Giving IoT services an identity and changeable attributes},

author = {Marc Oliver Pahl and Lorenzo Donini},

isbn = {9783903176157},

year  = {2019},

date = {2019-01-01},

journal = {2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019},

number = {section II},

pages = {455--461},

abstract = {The Internet of Things (IoT) pervades our surroundings. It softwarizes our physical environments. Software controls devices that interface their physical environments. The IoT is often privacy, safety, and security critical. Consequently, it requires adequate mechanisms for securing its services. For reasons such as heterogeneity, complexity, and lack of deployment there is little research on IoT service security.Our work creates a base for IoT service security. We give IoT services secure identities and attributes. Using site-local X.509v3 certificates with short lifetimes, we show how service attributes can securely be changed at runtime. This enables enforcing security policies even on distributed, loosely coupled IoT nodes. Our central mechanisms are pinning certificates to service executables, and autonomously managing the short certificate lifetimes. We assess the resulting renewal traffic and power consumption. textcopyright 2019 IFIP.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2019b,

title = {Machine-learning based IoT data caching},

author = {Marc Oliver Pahl and Stefan Liebald and Lars Wustrich},

isbn = {9783903176157},

year  = {2019},

date = {2019-01-01},

journal = {2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019},

pages = {9--12},

abstract = {he Internet of Things (IoT) continuously produces big amounts of data. Data-centric middleware can therefore help reducing the complexity when orchestrating distributed Things. With its heterogeneity and resource limitations, IoT applications can lack performance, scalability, or resilience. Caching can help overcoming the limitations. We are currently working on establishing data caching within IoT middleware. The paper presents fundamentals of caching, major challenges, relevant state of the art, and a description of our current approaches. We show directions of using machine learning for caching in the IoT.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2019a,

title = {Information-Centric IoT Middleware Overlay: VSL},

author = {Marc-Oliver Pahl and Stefan Liebald},

url = {https://s2labs.org/download/publications/2019-03_NetSys_Designing_a_Data-Centric_Internet_of_Things.pdf%0Ahttps://www.netsys2019.org/proceedings/},

isbn = {9781728105680},

year  = {2019},

date = {2019-01-01},

journal = {International Conference on Networked Systems 2019 (NetSys)},

abstract = {The heart of the Internet of Things (IoT) is data. IoT services processes data from sensors that interface their physical surroundings, and from other software such as Internet weather databases. They produce data to control physical environments via actuators, and offer data to other services. More recently, service-centric designs for managing the IoT have been proposed. Data-centric or name-based communica- tion architectures complement these developments very well. Especially for edge-based or site-local installations, data-centric Internet architectures can be implemented already today, as they do not require any changes at the core. We present the Virtual State Layer (VSL), a site-local data- centric architecture for the IoT. Special features of our solution are full separation of logic and data in IoT services, offering the data-centric VSL interface directly to developers, which significantly reduces the overall system complexity, explicit data modeling, a semantically-rich data item lookup, stream connec- tions between services, and security-by-design. We evaluate our solution regarding usability, performance, scalability, resilience, energy efficiency, and security.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{ahmad2019tuning,

title = {Tuning the demodulation frequency based on a normalized trajectory model for mobile underwater acoustic communications},

author = {Abdel-Mehsen Ahmad and Michel Barbeau and Joaquin Garcia-Alfaro and Jamil Kassem and Evangelos Kranakis},

url = {http://dx.doi.org/10.1002/ett.3712},

doi = {10.1002/ett.3712},

year  = {2019},

date = {2019-01-01},

journal = {Transactions on Emerging Telecommunications Technologies},

volume = {30},

number = {12},

pages = {e3712},

publisher = {Wiley Online Library},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{kaaniche2019anonymous,

title = {Anonymous certification for E-assessment opinion polls},

author = {Nesrine Kaaniche and Chistophe Kiennert and Maryline Laurent and Joaquin Garcia-Alfaro},

url = {https://dx.doi.org/10.1007/s12652-019-01545-2},

doi = {10.1007/s12652-019-01545-2},

year  = {2019},

date = {2019-01-01},

journal = {Journal of Ambient Intelligence and Humanized Computing},

pages = {1--15},

publisher = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{compeleceng2018,

title = {Introduction to the special section on critical systems modelling and security (third edition)},

author = {Joaquin Garcia-Alfaro and Gregorio Martinez-Perez},

doi = {10.1016/j.compeleceng.2018.10.008},

year  = {2018},

date = {2018-10-01},

journal = {Computers \& Electrical Engineering},

volume = {71},

pages = {1040-1042},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{mona2018,

title = {Doppler effect in the acoustic ultra low frequency band for wireless underwater networks},

author = {Abdel-Mehsen Ahmad and Jamil Kassem and Michel Barbeau and Steven Porretta and Joaquin Garcia-Alfaro and Evangelos Kranakis},

doi = {10.1007/s11036-018-1036-9},

year  = {2018},

date = {2018-10-01},

journal = {Mobile Networks \& Applications},

volume = {23},

number = {5},

pages = {1282-1292},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{itlcpsdn,

title = {Cyber-physical architecture assisted by programmable networking},

author = {Jose Rubio-Hernan and Rishikesh Sahay and Luca De Cicco and Joaquin Garcia-Alfaro},

url = {http://dx.doi.org/10.1002/itl2.44},

doi = {10.1002/itl2.44},

year  = {2018},

date = {2018-07-01},

journal = {Internet technology letters},

volume = {1},

number = {4},

pages = {e44-1-e44-7},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{ETTTrubio,

title = {Adaptive control-theoretic detection of integrity attacks against cyber-physical industrial systems},

author = {Jose Rubio-Hernan and Luca De Cicco and Joaquin Garcia-Alfaro},

doi = {10.1002/ett.3209},

year  = {2018},

date = {2018-07-01},

journal = {Transactions on emerging telecommunications technologies},

volume = {9},

number = {7},

pages = {e3209-1-e3209-17},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Gonzalez2018FGCS,

title = {Dynamic Risk Management Response System to handle cyber threats},

author = {Gustavo Gonzalez-Granadillo and Samuel Dubus and Alexander Motzek and Joaquin Garcia-Alfaro and Ender Alvarez and Matteo Merialso and Serge Papillon and Herv\'{e} Debar},

url = {http://dx.doi.org/10.1016/j.future.2017.05.043},

doi = {10.1016/j.future.2017.05.043},

year  = {2018},

date = {2018-06-01},

journal = {Future Generation Computer Systems},

volume = {83},

issue = {1},

pages = {535--552},

publisher = {Elsevier},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Gonzalez2018ITL,

title = {Hypergraph-driven Mitigation of Cyber-Attacks},

author = {Gustavo Gonzalez-Granadillo and Elena Doynikova and Igor Kotenko and Joaquin Garcia-Alfaro},

url = {http://dx.doi.org/10.1002/itl2.38},

doi = {10.1002/itl2.38},

year  = {2018},

date = {2018-05-01},

journal = {Internet Technology Letters},

volume = {1},

issue = {3},

pages = {e38-1-e38-6},

publisher = {Wiley},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{LeBouder2018,

title = {Theoretical security evaluation of the human semantic authentication protocol},

author = {H\'{e}l\`{e}ne Le Bouder and Ga\"{e}l Thomas and Edwin Bourget and Mariem Graa and Nora Cuppens and Jean Louis Lanet},

doi = {10.5220/0006841703320339},

isbn = {9789897583193},

year  = {2018},

date = {2018-01-01},

journal = {ICETE 2018 - Proceedings of the 15th International Joint Conference on e-Business and Telecommunications},

volume = {2},

pages = {332--339},

abstract = {Using a secret password or a PIN (Personal Identification Number) code is a common way to authenticate a user. Unfortunately this protection does not resist an attacker that can eavesdrop on the user (shoulder surfing attack). The Human Semantic Authentication (HSA) protocol proposes a solution against this attack. The main idea is to have concept passwords and to propose images that the user must correctly select in order to authenticate. A concept can be represented by different pictures, so one observation is not enough to retrieve the secret. In this paper, the security/efficiency trade-off in the HSA protocol is evaluated. A probabilistic approach is used. Under the assumption that the picture/concept database is known to the attacker, we show that HSA is barely more resistant to shoulder surfing attacks than a PIN code. More precisely we show that the probability to retrieve the secret concept password increases rapidly with the number of observations. Moreover the constraints on the size of the picture/concept database are very difficult to satisfy in practice.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Navas2018,

title = {Demo: Do not trust your neighbors! a small iot platform illustrating a man-in-the-middle attack},

author = {Renzo E Navas and H\'{e}l\`{e}ne Le Bouder and Nora Cuppens and Fr\'{e}d\'{e}ric Cuppens and Georgios Z Papadopoulos},

doi = {10.1007/978-3-030-00247-3_11},

issn = {16113349},

year  = {2018},

date = {2018-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {11104 LNCS},

pages = {120--125},

abstract = {This demonstration defines a small IoT wireless network that uses TI CC2538-OpenMote as hardware platform and state-of-the-art IETF network standards such as 6LoWPAN, RPL, and CoAP implemented by ContikiOS. The IoT nodes are controlled from outside the IoT network using end-to-end connectivity provided by IPv6-CoAP messages. We implement a man-in-the-middle attack that disrupts the normal behavior of the system. Our attack leverages on the inherent hierarchical routing topology of RPL-based IoT networks. The demonstration aims at highlighting the need for end-to-end source-authentication and authorization enforcement of information even inside a trusted IoT network. We also provide some insights on how these services can be offered in a IoT-friendly way.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}