@article{Navas2018,

title = {Demo: Do not trust your neighbors! a small iot platform illustrating a man-in-the-middle attack},

author = {Renzo E Navas and H\'{e}l\`{e}ne Le Bouder and Nora Cuppens and Fr\'{e}d\'{e}ric Cuppens and Georgios Z Papadopoulos},

doi = {10.1007/978-3-030-00247-3_11},

issn = {16113349},

year  = {2018},

date = {2018-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {11104 LNCS},

pages = {120--125},

abstract = {This demonstration defines a small IoT wireless network that uses TI CC2538-OpenMote as hardware platform and state-of-the-art IETF network standards such as 6LoWPAN, RPL, and CoAP implemented by ContikiOS. The IoT nodes are controlled from outside the IoT network using end-to-end connectivity provided by IPv6-CoAP messages. We implement a man-in-the-middle attack that disrupts the normal behavior of the system. Our attack leverages on the inherent hierarchical routing topology of RPL-based IoT networks. The demonstration aims at highlighting the need for end-to-end source-authentication and authorization enforcement of information even inside a trusted IoT network. We also provide some insights on how these services can be offered in a IoT-friendly way.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Bkakria2018,

title = {Real-time detection and reaction to activity hijacking attacks in android smartphones (short paper)},

author = {Anis Bkakria and Mariem Graa and Nora Cuppens-Boulahia and Frederic Cuppens and Jean Louis Lanet},

doi = {10.1109/PST.2017.00037},

isbn = {9781538624876},

year  = {2018},

date = {2018-01-01},

journal = {Proceedings - 2017 15th Annual Conference on Privacy, Security and Trust, PST 2017},

pages = {253--258},

publisher = {IEEE},

abstract = {Most Android users are required to communicate sensitive data (passwords, usernames, security codes, and credit card numbers) with applications. Hacker can launch phishing attacks to compromise user data confidentiality. He/She stealthily injects into the foreground a hijacking Activity at the right timing to acquire private information. In this paper, we propose an effective approach that uses the similarity between launched Activities in order to detect and reacts to hijacking attacks during runtime time. We demonstrate the effectiveness of our solution by quantifying the number of false positives that can be generated by our system. We observe that, in the worst case, our solution generates 4.2% of false positives and incurs only 0.39% performance overhead on a CPU-bound micro-benchmark.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Rooney2018,

title = {What users want: Adapting qualitative research methods to security policy elicitation},

author = {Vivien M Rooney and Simon N Foley},

doi = {10.1007/978-3-319-72817-9_15},

issn = {16113349},

year  = {2018},

date = {2018-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {10683 LNCS},

pages = {229--249},

abstract = {Recognising that the codes uncovered during a Grounded Theory analysis of semi-structured interview data can be interpreted as policy attributes, this paper describes how a Qualitative Research-based methodology can be extended to elicit Attribute Based Access Control style policies. In this methodology, user-participants are interviewed, and machine-learning is used to build a Bayesian Network based policy from the subsequent (Grounded Theory) analysis of the interview data.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Kome2018,

title = {CoAP Enhancement for a better IoT centric protocol: CoAP 2.0},

author = {Marco Lobe Kome and Frederic Cuppens and Nora Cuppens-Boulahia and Vincent Frey},

doi = {10.1109/IoTSMS.2018.8554494},

isbn = {9781538695852},

year  = {2018},

date = {2018-01-01},

journal = {2018 5th International Conference on Internet of Things: Systems, Management and Security, IoTSMS 2018},

pages = {139--146},

publisher = {IEEE},

abstract = {The need to connect things is skyrocketing and the Internet of Things is drawing a clear pattern of the need for smarter things. We are proposing an upgrade of Constrained Application Protocol (CoAP) built upon the 3 main networking needs of a connecting thing: The discovery, the synchronous and asynchronous communications and the publish/subscribe. CoAP 2.0 as we call it, will allow building smart things independently of the use-case, with a single protocol, fewer lines of codes and with less impact on the memory.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Rooney2018b,

title = {What You Can Change and What You Can't: Human Experience in Computer Network Defenses},

author = {Vivien M Rooney and Simon N Foley},

doi = {10.1007/978-3-030-03638-6_14},

issn = {16113349},

year  = {2018},

date = {2018-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {11252 LNCS},

pages = {219--235},

abstract = {The work of Computer Network Defense conducted, for instance, in Security Operations Centers and by Computer Security Incident Teams, is dependent not alone on technology, but also on people. Understanding how people experience these environments is an essential component toward achieving optimal functioning. This paper describes a qualitative research study on the human experience of working in these environments. Using Grounded Theory, a psychological understanding of the experience is developed. Results suggest that positive and negative aspects of the work are either amenable or not amenable to change. Areas of tension are identified, and posited as the focus for improving experience. For this purpose, psychological theories of Social Identity Theory, Relational Dialectics, and Cognitive Dissonance, provide a way of understanding and interpreting these components of Computer Network Defence work, and can be used to assess the experience of staff.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Foley2018a,

title = {A grounded theory approach to security policy elicitation},

author = {Simon Foley},

url = {https://doi.org/10.1108/ICS-12-2017-0086},

doi = {10.1108/ICS-12-2017-0086},

year  = {2018},

date = {2018-01-01},

volume = {26},

number = {4},

pages = {454--471},

publisher = {Emerald Publishing Limited},

abstract = {Purpose In this paper, the authors consider how qualitative research techniques that are used in applied psychology to understand a person's feelings and needs provides a means to elicit their security needs.Design/methodology/approach Recognizing that the codes uncovered during a grounded theory analysis of semi-structured interview data can be interpreted as policy attributes, the paper develops a grounded theory-based methodology that can be extended to elicit attribute-based access control style policies. In this methodology, user-participants are interviewed and machine learning is used to build a Bayesian network-based policy from the subsequent (grounded theory) analysis of the interview data.Findings Using a running example - based on a social psychology research study centered around photograph sharing - the paper demonstrates that in principle, qualitative research techniques can be used in a systematic manner to elicit security policy requirements.Originality/value While in principle qualitative research techniques can be used to elicit user requirements, the originality of this paper is a systematic methodology and its mapping into what is actionable, that is, providing a means to generate a machine-interpretable security policy at the end of the elicitation process.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2018c,

title = {Securing IoT microservices with certificates},

author = {Marc Oliver Pahl and Lorenzo Donini},

doi = {10.1109/NOMS.2018.8406189},

isbn = {9781538634165},

year  = {2018},

date = {2018-01-01},

journal = {IEEE/IFIP Network Operations and Management Symposium: Cognitive Management in a Cyber World, NOMS 2018},

pages = {1--5},

abstract = {The Internet of Things (IoT) consists of distributed computing nodes. With increasing processor power such nodes can be used as hosts for microservices. IoT services routinely processes security critical data that affects the privacy, safety, and security of users. However, suitable security mechanisms remain missing. Fundamental open challenges are the authentication of services, securing the metadata of services, and validating the correct functioning of security mechanisms on distributed entities under different authorities. In this paper we present a certificate- based methodology for authenticating services, securely adding information to their executables, and validating the correct functioning of distributed entities of our design. We add X.509 certificates with extended attributes to the service executables. By introducing different trust anchors, services and their metadata are protected through their entire life cycle from developers to the computing nodes running them. Our solution enables distributed nodes to verify the security properties locally. It enables reliably changing certificate properties across the distributed IoT nodes. It features autonomous certificate management. We evaluate the traffic caused by our autonomous certificate management process quantitatively. The presented solution is churn tolerant and applicable to diverse distributed systems.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2018b,

title = {Graph-based IoT microservice security},

author = {Marc Oliver Pahl and Fran\c{c}ois Xavier Aubet and Stefan Liebald},

doi = {10.1109/NOMS.2018.8406118},

isbn = {9781538634165},

year  = {2018},

date = {2018-01-01},

journal = {IEEE/IFIP Network Operations and Management Symposium: Cognitive Management in a Cyber World, NOMS 2018},

pages = {1--3},

abstract = {The Internet of Things (IoT) can be considered as Service Oriented Architecture (SOA) of Microservices ($mu$S). The $mu$Ss inherently process data that affects the privacy, safety, and security of its users. IoT service security is a key challenge. Most state of the art providing IoT system security is policy based. We showcase a graph-based access control that runs as module on IoT nodes, or in the network. Our solution intercepts and firewalls inter-service communication. It automatically creates a model of legitimate communication relationships. The model is interactively updated via a simple-to-understand interface. Our solution adds inevitable IoT security to existing IoT systems .},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Rubio17ETT,

title = {Adaptive Control-Theoretic Detection of Integrity Attacks against Cyber-Physical Industrial Systems},

author = {Jose Rubio-Hernan and Luca De Cicco and Joaquin Garcia-Alfaro},

url = {http://dx.doi.org/10.1002/ett.3209},

doi = {10.1002/ett.3209},

year  = {2018},

date = {2018-01-01},

journal = {Transactions on Emerging Telecommunications Technologies},

volume = {32},

number = {9},

pages = {1--17},

publisher = {Wiley},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{aubet2018graph,

title = {Graph-based anomaly detection for iot microservices},

author = {Fran\c{c}ois-Xavier Aubet and Marc-Oliver Pahl and Stefan Liebald and Mohammad Reza Norouzian},

year  = {2018},

date = {2018-01-01},

journal = {Measurements},

volume = {120},

number = {140},

pages = {160},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{aubet2018ds2os,

title = {DS2OS traffic traces},

author = {FX Aubet and MO Pahl},

year  = {2018},

date = {2018-01-01},

journal = {Retrieved April},

volume = {23},

pages = {2022},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Motzek2017EurasipPareto,

title = {Selection of Pareto-efficient Response Plans based on Financial and Operational Assessments},

author = {Alexander Motzek and Gustavo Gonzalez-Granadillo and Herv\'{e} Debar and Joaquin Garcia-Alfaro and Ralf M\"{o}ller},

url = {https://dx.doi.org/10.1186/s13635-017-0063-6},

doi = {10.1186/s13635-017-0063-6},

year  = {2017},

date = {2017-07-01},

journal = {EURASIP Journal on Information Security},

volume = {2017},

issue = {12},

pages = {1--22},

publisher = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{rubio2017EurasipWatermak,

title = {On the use of Watermark-based Schemes to Detect Cyber-Physical Attacks},

author = {Jose Rubio-Hernan and Luca De Cicco and Joaquin Garcia-Alfaro},

url = {http://dx.doi.org/10.1186/s13635-017-0060-9},

doi = {10.1186/s13635-017-0060-9},

year  = {2017},

date = {2017-06-01},

journal = {EURASIP Journal on Information Security},

volume = {2017},

issue = {8},

pages = {1--25},

publisher = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{garcia2017introductionCEESI,

title = {Introduction to the special section on critical systems modelling and security},

author = {Joaquin Garcia-Alfaro and Gregorio Martinez-Perez},

url = {http://dx.doi.org/10.1016/j.compeleceng.2017.05.027},

doi = {10.1016/j.compeleceng.2017.05.027},

year  = {2017},

date = {2017-04-01},

journal = {Computers and Electrical Engineering},

volume = {59},

pages = {73--75},

publisher = {Elsevier},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Foley2017,

title = {Getting security objectives wrong: A cautionary tale of an industrial control system},

author = {Simon N Foley},

doi = {10.1007/978-3-319-71075-4_3},

issn = {16113349},

year  = {2017},

date = {2017-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {10476 LNCS},

pages = {18--29},

abstract = {We relate a story about an Industrial Control System in order to illustrate that simple security objectives can be deceptive: there are many things that can and do go wrong when deploying the system. Rather than trying to define security explicitly, this paper takes the position that one should consider the security of a system by comparing it against others whose security we consider to be acceptable: Alice is satisfied if her system is no less secure than Bob's system.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Foley2017a,

title = {Getting security objectives wrong: A cautionary tale of an industrial control system},

author = {Simon N Foley},

doi = {10.1007/978-3-319-71075-4_3},

issn = {16113349},

year  = {2017},

date = {2017-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {10476 LNCS},

pages = {18--29},

abstract = {We relate a story about an Industrial Control System in order to illustrate that simple security objectives can be deceptive: there are many things that can and do go wrong when deploying the system. Rather than trying to define security explicitly, this paper takes the position that one should consider the security of a system by comparing it against others whose security we consider to be acceptable: Alice is satisfied if her system is no less secure than Bob's system.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pieczul2017,

title = {Developer-centered security and the symmetry of ignorance},

author = {Olgierd Pieczul and Simon Foley and Mary Ellen Zurko},

doi = {10.1145/3171533.3171539},

isbn = {9781450363846},

year  = {2017},

date = {2017-01-01},

journal = {ACM International Conference Proceeding Series},

pages = {46--56},

abstract = {In contemporary software development anybody can become a developer, sharing, building and interacting with software components and services in a virtual free for all. In this environment, it is not feasible to expect these developers to be expert in every security detail of the software they use, and we discuss how difficult it can be to build secure software. In this respect, the practical challenges of the emerging paradigm of developer-centered security are explored, where developers would be required to consider security from the perspective of those other developers who use their software. We question whether current user-centered security techniques are adequate for this task and suggest that new thinking will be required. Two directions - symmetry of ignorance and security archaeology - are offered as a new way to consider this challenge.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Kabil2017,

title = {CyberCOP3D : Visualisation Collaborative et Immersive pour la cybers\'{e}curit\'{e} To cite this version : HAL Id : hal-01577868 CyberCOP3D : Visualisation Collaborative et Immersive pour la cybers\'{e}curit\'{e} Immersive Collaborative Visualization for Cyber S\'{e}curity},

author = {Alexandre Kabil and Alexandre Kabil and Cybercopd Visualisation Collaborative and I M T Atlantique and Alexandre Kabil},

year  = {2017},

date = {2017-01-01},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Kome2017,

title = {DIscovery and registration protocol: For device and person identity management in IoT},

author = {Marco Lobe Kome and Mariem Graa and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Vincent Frey},

doi = {10.1007/978-3-319-72598-7_15},

issn = {16113349},

year  = {2017},

date = {2017-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {10717 LNCS},

pages = {243--262},

abstract = {With connected things, one service can be used with more than one device, all sharing the same user identity. In this context, the need to figure out whether the service is being used through a desktop computer, a smartphone, or a more constrained device is essential in order to better manage user identity. Given that constrained devices are less tamper resistant, they are more vulnerable to attacks than other appliances. We identified two challenges which make it difficult to apply robusts security mechanisms: the limited resources available on devices and the sharing of a user's identity with the device. To address these challenges, we propose, a DIscovery and REgistration (DIRE) protocol that ensures secure device and person identities management. Our protocol has been formally proven and implemented. The runtime of the whole protocol is short and the code the device must embed is lightweight. As a result of our experiment, we produced a command line client for a user, a device firmware and a server handling the filiation of a user and its devices.},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2017a,

title = {The iLab Concept: Making Teaching Better, at Scale},

author = {Marc Oliver Pahl},

doi = {10.1109/MCOM.2017.1700394},

issn = {01636804},

year  = {2017},

date = {2017-01-01},

journal = {IEEE Communications Magazine},

volume = {55},

number = {11},

pages = {178--185},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{Gonzalez17IEEEACCESS,

title = {Using an Event Data Taxonomy to Represent the Impact of Cyber Events as Geometrical Instances},

author = {Gustavo Gonzalez-Granadillo and Jose Rubio-Hernan and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1109/ACCESS.2017.2740402},

doi = {10.1109/ACCESS.2017.2740402},

year  = {2017},

date = {2017-01-01},

journal = {IEEE Access},

volume = {6},

pages = {8810--8828},

publisher = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{gonzalez2017polytope,

title = {A polytope-based approach to measure the impact of events against critical infrastructures},

author = {Gustavo Gonzalez-Granadillo and Joaquin Garcia-Alfaro and Herv\'{e} Debar},

url = {http://dx.doi.org/10.1016/j.jcss.2016.02.004},

doi = {10.1016/j.jcss.2016.02.004},

year  = {2017},

date = {2017-01-01},

journal = {Journal of Computer and System Sciences},

volume = {83},

number = {1},

pages = {3--21},

publisher = {Elsevier},

keywords = {},

pubstate = {published},

tppubtype = {article}

}

@article{pahl2017ilab,

title = {The ilab concept: Making teaching better, at scale},

author = {Marc-Oliver Pahl},

year  = {2017},

date = {2017-01-01},

journal = {IEEE Communications Magazine},

volume = {55},

number = {11},

pages = {178\textendash185},

publisher = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {article}

}