Publications

@inproceedings{almenarez007,

title = {Integrating an optimised PUF-based authentication scheme in OSCORE},

author = {Jaime Perez-Diaz and Florina Almenares-Mendoza },

doi = {https://doi.org/10.1016/j.adhoc.2022.103038},

issn = {1570-8705},

year  = {2022},

date = {2022-11-23},

urldate = {2022-11-23},

volume = {140},

publisher = {Ad Hoc Networks  Journal},

abstract = {Due to the growth in the amount and type of connected devices, mainly IoT devices, new scalable, lightweight and security-aware protocols, e.g., CoAP and MQTT, have been defined. For the definition of these protocols, the axioms concerning security must cover all the needs regarding authentication, confidentiality, integrity and availability of both devices and servers.



CoAP specifies mainly protocol security based on the transport layer through DTLS. Nevertheless, OSCORE (Object Security for Constrained RESTful Environments) has been recently defined to support end-to-end protection of RESTful interactions over the CoAP protocol. It was designed for constrained devices and networks supporting a range of proxy operations, including translation between different transport protocols. The main challenge presents in OSCORE is the establishment and exchange of pre-shared keys required to protect data. For that, this paper defines how use an optimised version of SRAM-based PUF (Physical Unclonable Functions) for a secure authentication, key establishment and exchanging model. The proposal has been implemented and evaluated in a scenario including IoT devices.},

keywords = {coap, compromise, cynamon, IoT, mqtt, protocol security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa059,

title = {A Framework for Microservice Migration and Performance Assessment},

author = {Eugenio Rubio-Drosdov and Daniel Díaz-Sánchez and Andrés Marín-López and Florina Almenares-Mendoza},

doi = {doi:10.3233/AISE200053},

isbn = {978-1-4503-5988-7},

year  = {2020},

date = {2020-06-25},

urldate = {2020-06-25},

pages = {291 - 299},

abstract = {In a large Smart Grid, smart meters produce tremendous amount of data that are hard to process, analyze and store. Fog computing is an environment that offers a place for collecting, computing and storing smart meter data before transmitting them to the cloud. Due to the distributed, heterogeneous and resource constrained nature of the fog computing nodes, fog applications need to be developed as a collection of interdependent, lightweight modules. Since this concept aligns with the goals of microservices architecture (MSA), efficient placement of microservices-based Smart Grid applications within fog environments has the potential to fully leverage capabilities of fog devices. Microservice architecture is an emerging software architectural style. It is based on microservices to provide several advantages over a monolithic solution, such as autonomy, composability, scalability, and fault-tolerance. However, optimizing the migration of microservices from one fog environment to other while assuring certain quality is still a big issue that needs to be addressed. In this paper, we propose an approach for assisting the migration of microservices in MSA-based Smart Grid systems, based on the analysis of their performance within the possible candidate destinations. Developers create microservices that will be eventually deployed at a given infrastructure. Either the developer, cosidering the design, or the entity deploying the service have a good knowledge of the quality required by the microservice. Due to that, they can create tests that determine if a destination meets the requirements of a given microservice and embed these tests as part of the microservice. Our goal is to automate the execution of performance tests by attaching a specification that contains the test parameters to each microservice.},

keywords = {cynamon, inteligenciafuentesabiertas, IoT, microservices, smart grids, testing},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa055,

title = {DNS-Based Dynamic Authentication for Microservices in IoT},

author = {Daniel Díaz-Sánchez and Andrés Marín-López and Florina Almenares-Mendoza and Patricia Arias-Cabarcos},

url = {https://www.mdpi.com/2504-3900/2/19/1233},

doi = {https://doi.org/10.3390/proceedings2191233},

issn = {2504-3900},

year  = {2018},

date = {2018-10-25},

pages = {1-11},

abstract = {IoT devices provide with real-time data to a rich ecosystems of services and applications that will be of uttermost importance for ubiquitous computing. The volume of data and the involved subscribe/notify signaling will likely become a challenge also for access and core netkworks. Designers may opt for microservice architectures and fog computing to address this challenge while offering the required flexibility for the main players of ubiquitous computing: nomadic users. Microservices require strong security support for Fog computing, to rely on nodes in the boundary of the network for secure data collection and processing. IoT low cost devices face outdated certificates and security support, due to the elapsed time from manufacture to deployment. In this paper we propose a solution based on microservice architectures and DNSSEC, DANE and chameleon signatures to overcome these difficulties. We will show how trap doors included in the certificates allow a secure and flexible delegation for off-loading data collection and processing to the fog. The main result is showing this requires minimal manufacture device configuration, thanks to DNSSEC support.},

keywords = {chameleon signatures, DANE, DNSSEC, inteligenciafuentesabiertas, IoT, microservices},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa006,

title = {Enabling actor model for crowd sensing and IoT},

author = {Daniel Diaz-Sánchez and Simon Sherratt and Patricia Arias and Florina Almenarez and Andrés Marín},

url = {https://ieeexplore.ieee.org/document/7177779},

doi = {https://doi.org/10.1109/ISCE.2015.7177779},

issn = {0747-668X},

year  = {2015},

date = {2015-08-06},

urldate = {2015-08-06},

publisher = {IEEE},

abstract = {The cloud is playing a very important role in wireless sensor network, crowd sensing and IoT data collection and processing. However, current cloud solutions lack of some features that hamper the innovation a number of other new services. We propose a cloud solution that provides these missing features as multi-cloud and device multi-tenancy relying in a whole different fully distributed paradigm, the actor model.},

keywords = {Cloud computing, emrisco, IoT, Wireless communication},

pubstate = {published},

tppubtype = {inproceedings}

}