Threat Modeling and Analysis for the Cloud Ecosystem
Author (ESR):
Salman Manzoor (Technische Universitaet Darmstadt)
Publications
The work described in this website has been conducted within the project NeCS. This project has received funding from the European Union’s Horizon 2020 (H2020) research and innovation programme under the Grant Agreement no 675320. This website and the content displayed in it do not represent the opinion of the European Union, and the European Union is not responsible for any use that might be made of its content.
A Trust-by-Design Framework for the Internet of Things
Author (ESR):
Davide Ferraris (Universidad De Malaga)
Improving MQTT by Inclusion of Usage Control
Due to the increasing pervasiveness of Internet of Things (IoT) and Internet of Everything (IoE) devices, securing both their communications and operations has become of capital importance. Among the several existing IoT protocols, Message Queue Telemetry Transport (MQTT) is a widely-used general purpose one, usable in both constrained and powerful devices, which coordinates data exchanges through a publish/subscribe approach. In this paper, we propose a methodology to increase the security of the MQTT protocol, by including Usage Control in its operative workflow.
Author (ESR):
Athanasios Rizos (Consiglio Nazionale Delle Ricerche)
An Architecture for Privacy-preserving Sharing of CTI with 3rd party Analysis Services
Author (ESR):
Fabio Giubilo (British Telecommunications Public Limited Company)
Estimating the Assessment Difficulty of CVSS Environmental Metrics: An experiment
Author (ESR):
Wagner Medeiros dos Santos (Universita Degli Studi Di Trento)
Mobile Biometrics: Towards A Comprehensive Evaluation Methodology
Smartphones have become the pervasive personal computing platform. Recent years thus have witnessed exponential growth in research and development for secure and usable authentication schemes for smartphones. Several explicit (e.g., PIN-based) and/or implicit (e.g., biometrics-based) authentication methods have been designed and published in the literature. In fact, some of them have been embedded in commercial mobile products as well. However, the published studies report only the brighter side of the proposed scheme(s), e.g., higher accuracy attained by the proposed mechanism.
Author (ESR):
Sandeep Gupta (Universita Degli Studi Di Trento)
Evaluation of Motion-based Touch-typing Biometrics in Online Financial Environments
Author (ESR):
Sandeep Gupta (Universita Degli Studi Di Trento)
Preventing the drop in security investments for non-competitive cyber-insurance market?
Author (ESR):
Ganbayar Uuganbayar (Consiglio Nazionale Delle Ricerche)
Introducing Usage Control in MQTT protocol for IoT
MQTT is a widely-used general purpose IoT application layer protocol, usable in both constrained and powerful devices, which coordinates data exchanges through a publish/subscribe approach. In this paper we propose a methodology to increase the security of the MQTT protocol, by including Usage Control in its operative workflow. The inclusion of Usage Control enables a fine-grained dynamic control of the rights of subscribers to access data and data-streams over time, by monitoring mutable attributes related to the subscriber, the environment or data itself.
Author (ESR):
Athanasios Rizos (Consiglio Nazionale Delle Ricerche)
AttackDive: Diving Deep into the Cloud Ecosystem to Explore Attack Surfaces
Author (ESR):
Salman Manzoor (Technische Universitaet Darmstadt)