@inproceedings{javierblanco003,

title = {Evaluating integration methods of a quantum random number generator in OpenSSL for TLS},

author = {Javier Blanco-Romero and Vicente Lorenzo and Florina Almenares and Daniel Díaz-Sánchez and Carlos García-Rubio and Celeste Campo and Andrés Marín},

url = {https://www.sciencedirect.com/science/article/pii/S1389128624007096?via%3Dihub},

doi = {https://doi.org/10.1016/j.comnet.2024.110877},

isbn = {1389-1286},

year  = {2024},

date = {2024-10-25},

urldate = {2024-10-25},

volume = {255},

publisher = {Computer Networks},

abstract = {The rapid advancement of quantum computing poses a significant threat to conventional cryptography. Whilst post-quantum cryptography (PQC) stands as the prevailing trend for fortifying the security of cryptographic systems, the coexistence of quantum and classical computing paradigms presents an opportunity to leverage the strengths of both technologies, for instance, nowadays the use of Quantum Random Number Generators (QRNGs) – considered as True Random Number Generators (TRNGs) – opens up the possibility of discussing hybrid systems. In this paper, we evaluate both aspects, on the one hand, we use hybrid TLS (Transport Layer Security) protocol that leverages the widely used secure protocol on the Internet and integrates PQC algorithms, and, on the other hand, we evaluate two approaches to integrate a QRNG, i.e., Quantis PCIe-240M, in OpenSSL 3.0 to be used by TLS. Both approaches are compared through a Nginx Web server, that uses OpenSSL’s implementation of TLS 1.3 for secure web communication. Our findings highlight the importance of optimizing such integration method, because while direct integration can lead to performance penalties specific to the method and hardware used, alternative methods demonstrate the potential for efficient QRNG deployment in cryptographic systems.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{campo012,

title = {Inferring mobile applications usage from DNS traffic},

author = {Celeste Campo-Vázquez and Carlos García-Rubio and Andrea Jimenez-Berenguel and Marta Moure-Garrido and Florina Almenares-Mendoza and Daniel Díaz-Sánchez },

url = {https://www.sciencedirect.com/science/article/pii/S1570870524002129#d1e710},

doi = {https://doi.org/10.1016/j.adhoc.2024.103601},

year  = {2024},

date = {2024-07-19},

urldate = {2024-07-19},

booktitle = {Ad Hoc Networks},

publisher = {Elsevier B.V.},

abstract = {In the digital era, our lives are intrinsically linked to the daily use of mobile applications. As a consequence, we generate and transmit a large amount of personal data that puts our privacy in danger. Despite having encrypted communications, the DNS traffic is usually not encrypted, and it is possible to extract valuable information from the traffic generated by mobile applications. This study focuses on the analysis of the DNS traffic behavior found in mobile application traces, developing a methodology capable of identifying mobile applications based on the domains they query. With this methodology, we were able to identify apps with 98% accuracy. Furthermore, we have validated the effectiveness of the characterization obtained with one dataset by identifying traces from other independent datasets. The evaluation showed that the methodology provides successful results in identifying mobile applications.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{javierblanco001,

title = {PQSec-DDS: Integrating Post-Quantum Cryptography into DDS Security for Robotic Applications},

author = {Javier Blanco-Romero and Vicente Lorenzo and Florina Almenares-Mendoza and Daniel Díaz-Sánchez and Adrián Serrano-Navarro},

url = {https://hdl.handle.net/11441/159179

https://idus.us.es/handle/11441/159179

https://idus.us.es/bitstream/handle/11441/159179/ActasJNIC24%20%282%20ed%29.pdf?sequence=4&isAllowed=y},

isbn = {978-84-09-62140-8},

year  = {2024},

date = {2024-05-28},

urldate = {2024-05-28},

booktitle = {IX Jornadas Nacionales de Investigación en Ciberseguridad - JNIC 2024},

pages = {396-403},

publisher = {Universidad de Sevilla },

abstract = {Leading cybersecurity agencies and standardization bodies have globally emphasized the critical need to transition towards Post-Quantum Cryptography (PQC) to defend against

emerging quantum computing threats. They advocate PQC as a practical and cost-effective solution for security systems nowadays. Nevertheless, emerging technologies such as industrial systems, e.g., autonomous vehicles, air traffic management, diagnostic imaging machines, etc., and robotics systems, e.g., ROS2 (Robotic Operating System), have not started their evolution to enhance crypto-agility and security robustness. Some of these emerging technologies use the Data Distribution Service (DDS)

standard as the underlying communication middleware protocol. DDS is a distributed publish-subscribe system that allows sending and receiving data by publishing and subscribing to topics across a network of connected nodes. However, DDS’s security is based on traditional symmetric and asymmetric cryptography, which is vulnerable to quantum computing attacks. To address this issue, we propose the integration of PQC into DDS, through the development of a C/C++ library, called pqsec-dds, which can be integrated across different DDS implementations such as CycloneDDS or OpenDDS. A proof-of-concept demonstrates the viability of our approach in enhancing the security and cryptoagility of DDS-based systems.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}