Journal article - peer reviewed (11)
BELGUITH Sana, KAANICHE Nesrine, LAURENT Maryline, JEMAI Abderrazak , ATTIA Rabah
PHOABE: securely outsourcing multi-authority attribute based encryption with policy hidden for cloud assisted IoT. Computer networks - The international journal of computer and telecommunications networking, march 2018, vol. 133, pp. 141-156
[PDF]
abstract
Attribute based encryption (ABE) is an encrypted access control mechanism that ensures efficient data sharing among dynamic group of users. Nevertheless, this encryption technique presents two main drawbacks, namely high decryption cost and publicly shared access policies, thus leading to possible users' privacy leakage. In this paper, we introduce PHOABE, a Policy-Hidden Outsourced ABE scheme. Our construction presents several advantages. First, it is a multi-attribute authority ABE scheme. Second, the expensive computations for the ABE decryption process is partially delegated to a Semi Trusted Cloud Server. Third, users' privacy is protected thanks to a hidden access policy. Fourth, PHOABE is proven to be selectively secure, verifiable and policy privacy preserving under the random oracle model. Five, estimation of the processing overhead proves its feasibility in IoT constrained environments
BRANDWAJN Alexandre, BEGIN Thomas, CASTEL-TALEB Hind, ATMACA Tülin
A study of systems with multiple operating levels, probabilistic thresholds and hysteresis. IEEE transactions on parallel and distributed systems, april 2018, vol. 29, n° 4, pp. 748-757
URL: https://hal.archives-ouvertes.fr/hal-01670974/document
abstract
Current architecture of many computer systems relies on dynamic allocation of a pool of resources according to workload 5 conditions to meet specific performance objectives while minimizing cost (e.g., energy or billing). In such systems, different levels of 6 operation may be defined, and switching between operating levels occurs at certain thresholds of system congestion. To avoid rapid 7 oscillations between levels of service, "hysteresis" is introduced by using different thresholds for increasing and decreasing workload 8 levels, respectively. We propose a model of such systems with general arrivals, arbitrary number of servers and operating levels where 9 each higher operating level may correspond to an arbitrary number of additional servers and soft (i.e., non-deterministic) thresholds to 10 account for "inertia" in switching between operating levels. In our model, request service times are assumed to be memoryless and 11 server processing rates may be a function of the current operating level and of the number of requests (users) in the system. 12 Additionally, we allow for delays in the activation of additional operating levels. We use simple mathematics to obtain a semi-numerical 13 solution of our model. We illustrate the versatility of our model using several case study examples inspired by features of real systems. 14 In particular, we explore optimal thresholds as a tradeoff between performance and energy consumption.
GENSOLLEN Nicolas, GAUTHIER Vincent, BECKER Monique, MAROT Michel
Stability and performance of coalitions of prosumers through diversification in the smart grid. IEEE transactions on smart grid, march 2018, vol. 9, n° 2, pp. 963-970
[PDF]
abstract
In the context of the smart grid, we propose in this paper an algorithm that forms coalitions of agents, called prosumers, that both produce and consume. It is designed to be used by aggregators that aim at selling aggregated surplus of production of the prosumers they control. We rely on real weather data sampled across stations of a given territory in order to simulate realistic production and consumption patterns for each prosumer. This enables us to capture geographical correlations among the agents while preserving the diversity due to different behaviors. As aggregators are bound to the market operator by a contract, they seek to maximize their offer while minimizing their risk. The proposed graph based algorithm takes the underlying correlation structure of the agents into account and outputs coalitions with both high productivity and low variability. We show that the resulting diversified coalitions are able to generate higher benefits on a constrained energy market, and are more resilient to random failures of the agents
GONZALEZ GRANADILLO Gustavo Daniel, DUBUS Samuel, MOTZEK Alexander, GARCIA-ALFARO Joaquin, ALVAREZ LOPEZ Ender Yesid, MERIALDO Matteo , PAPILLON Serge, DEBAR Hervé
Dynamic risk management response system to handle cyber threats. Future generation computer systems (FGCS), june 2018, vol. 83, pp. 535-552
abstract
Appropriate response strategies against new and ongoing cyber attacks must be able to reduce risks down to acceptable levels, without sacrificing a mission for security. Existing approaches either evaluate impacts without considering missions' negative-side effects, or are manually based on traditional risk assessments, leaving aside technical difficulties. In this paper we propose a dynamic risk management response system (DRMRS) consisting of a proactive and reactive management software aiming at evaluating threat scenarios in an automated manner, as well as anticipating the occurrence of potential attacks. We adopt a quantitative risk-aware approach that provides a comprehensive view of the threats, by considering their likelihood of success, the induced impact, the cost of the possible responses, and the negative side-effects of a response. Responses are selected and proposed to operators based on financial, operational and threat assessments. The DRMRS is applied to a real case study of a critical infrastructure with multiple threat scenarios
GONZALEZ GRANADILLO Gustavo Daniel, RUBIO-HERNAN Jose, GARCIA-ALFARO Joaquin
Using an event data taxonomy to represent the impact of cyber events as geometrical instances. IEEE access, 2018, vol. 6, pp. 8810-8828
[PDF]
abstract
Visualization and simulation models used for the evaluation and selection of security countermeasures need accurate data to compute the impact of cyber events (e.g., malicious and benign actions). The information required to build appropriate impact models depends directly on the nature of the system. The information dealt by water supply systems, for instance, is particularly different from the information obtained by energy, telecommunication, transportation, or finance systems. It is therefore important to properly classify the data of security events according to the nature of the system. This paper proposes an event data taxonomy based on the system's criticality, the geographical location of the target, the time at which the information is obtained by the attacker, and the nature of the data. A use case on the impact assessment of events originated in a critical infrastructure is presented to show the applicability of the proposed taxonomy
HASSINE Kawther, FRIKHA Mounir, CHAHED Tijani
Access point backhaul capacity aggregation as a matching game in the context of wireless local area networks. Computer networks - The international journal of computer and telecommunications networking, july 2018, vol. 139, pp. 92-108
abstract
We propose, in this paper, a novel approach of Access Point (AP) backhaul capacity aggregation in the context of Wireless Local Area Networks (WLAN). Our purpose is to optimize the Available Backhaul Resource (ABR) allocation between APs belonging to different Basic Service Sets (BSSs), so as to relieve pressure of traffic offloaded from non-WiFi networks. In this context, we define two different sets of APs within the same WLAN: the ones with spare backhaul resources (Providers) and those in lack of it (Beneficiaries). Considering the two sided nature of this system, we model our assignment problem using matching games: one-to-one, many-to-one and many-to-many, and solve it using the so-called Deferred Acceptance (DA) algorithm leading to an optimal pairwise stable matching. Our results show that, compared to a legacy WLAN, the overall performance is substantially improved in terms of AP throughput gain, AP satisfaction percentage and load balancing between different APs
LABIDI Wael, CHAHED Tijani, ELAYOUBI Salah-Eddine
Optimal battery management strategies in mobile networks powered by a smart grid. IEEE transactions on green communications and networking, 2018, pp. 1-8 (document in press - published online 14 Feb 2018)
abstract
We focus in this paper on energy management strategies for a mobile network equipped with battery storage capacity as well as local energy production capability, and powered by a smart grid. At each time instant, the mobile network operator has to decide whether to operate its network based on its own energy resources or the smart grid ones, with a possibility to sell energy to the smart grid as well. We formulate our problem using Markov Decision Process (MDP) and derive an optimal, offline policy which minimizes the operator energy bill, using dynamic programming algorithm. We show the optimality of our solution by numerical comparison with the solution obtained through linear programming. Our numerical applications allow to further understand when the operator has an incentive to buy energy, whether it is beneficial for it to act as an energy seller, the size of the battery to deploy, as well as the robustness of our offline deterministic policy to estimation errors
MORCOS Mira, CHAHED Tijani, CHEN Lin, ELIAS Jocelyne, MARTIGNON Fabio
A two-level auction for resource allocation in multi-tenant C-RAN. Computer networks - The international journal of computer and telecommunications networking, april 2018, vol. 135, pp. 240-252
abstract
We consider in this paper a dynamic resource allocation scheme between several Mobile Virtual Network Operators (MVNOs), sharing common radio resources at a Cloud-based Radio Access Network (C-RAN) run by a central operator. We specifically propose a two-level coupled auction so as to enhance resource utilization and maximize the revenues both for the central operator and the MVNOs: at the lower level, end users belonging to a given MVNO bid for resources and, at the higher-level, MVNOs compete for resources at the central operator based on the output of the lower-level auction. We show fundamental economic properties of our proposal: truthfulness and individual rationality, and propose a greedy algorithm to enhance its computational efficiency. We prove the existence of Nash equilibrium for the global auction and its uniqueness in a typical duopoly scenario. Further numerical results illustrate the performance of our proposal in various network settings
NGUYEN Kim Thuat, OUAHLA Nouha, LAURENT Maryline
Securely outsourcing the ciphertext-policy attribute-based encryption. World wide web, january 2018, vol. 21, n° 1, pp. 169-183
abstract
Attribute-based Encryption (ABE) is a new and promising public key encryption that allows fine-grained authorization on data based on user attributes. Such property is favorable for multiple applications that require encrypted storage or access control on data, in particular: eHealth applications. However, ABE schemes are known not to be efficient in the encryption phase because ciphertext size and the time required to encrypt grow with the complexity of the access policy. Such drawback is critical in the context of pervasive computing, for instance, in the Internet of Things, where data producers are usually resource-constrained devices, e.g. smart phones or sensing platforms. In this work, we propose OEABE standing for Outsourcing mechanism for the Encryption of Ciphertext-Policy ABE (CP-ABE). We show how a user can offload expensive operations of CP-ABE encryption to a semi-trusted party in a secure manner. For illustration, we first conducted a performance estimation on an emulated Wismote sensor platform. Then, to demonstrate the performance gains of our mechanism, we implemented our proposal and did comparison to an existing implementation of CP-ABE on a laptop
RUBIO-HERNAN Jose, DE CICCO Luca, GARCIA-ALFARO Joaquin
Adaptive control-theoretic detection of integrity attacks against cyber-physical industrial systems. Transactions on emerging telecommunications technologies, 2018, pp. 1-17 (document in press - published online 08 Aug 2017)
URL: http://dx.doi.org/10.1002/ett.3209
[PDF]
abstract
The use of control-theoretic solutions to detect attacks against cyber-physical industrial systems is a growing area of research. Traditional literature proposes the use of control strategies to retain, eg, satisfactory close-loop performance, as well as safety properties, when a communication network connects the distributed components of a physical system (eg, sensors, actuators, and controllers). However, the adaptation of these strategies to handle security incidents is an ongoing challenge. In this paper, we survey the advantages of a watermark-based detector against some integrity attacks as well as the weaknesses against other attacks. To cover these weaknesses, we propose a new control and security strategy that complements the watermark-based detector. We validate the detection efficiency of the new strategy via numeric simulation. Experimental results are also presented by using a laboratory testbed based on supervisory control and data acquisition industrial protocols
WANG Leye, GAUTHIER Vincent, CHEN Guanling, MOREIRA‑MATIAS Luis
Special issue on extracting crowd intelligence from pervasive and social big data. Journal of ambient intelligence and humanized computing, 2018, pp. 1-2 (document in press - published online 15 Jan 2018)
abstract
With the prevalence of ubiquitous computing devices (smartphones, wearable devices, etc.) and social network services (Facebook, Twitter, etc.), humans are generating massive digital traces continuously in their daily life. Considering the invaluable crowd intelligence residing in these pervasive and social big data, a spectrum of opportunities is emerging to enable promising smart applications for easing individual life, increasing company profit, as well as facilitating city development. However, the nature of big data also poses fundamental challenges on the techniques and applications relying on the pervasive and social big data from multiple perspectives such as algorithm effectiveness, computation speed, energy efficiency, user privacy, server security, data heterogeneity and system scalability. This special issue presents the state-of-the-art research achievements in addressing these challenges
Communication in a conference - peer reviewed (7)
DHAMAL Swapnil Vilas, BEN-AMEUR Walid, CHAHED Tijani, ALTMAN Eitan
Resource allocation polytope games: uniqueness of equilibrium, price of stability, and price of anarchy. AAAI 2018 : 32nd AAAI conference on Artificial Intelligence, Palo Alto : Association for the Advancement of Artificial Intelligence, 02-07 february 2018, New Orleans, United States, 2018, pp. 997-1006
abstract
We consider a two-player resource allocation polytope game, in which the strategy of a player is restricted by the strategy of the other player, with common coupled constraints. With respect to such a game, we formally introduce the notions of independent optimal strategy profile, which is the profile when players play optimally in the absence of the other player; and common contiguous set, which is the set of top nodes in the preference orderings of both the players that are exhaustively invested on in the independent optimal strategy profile. We show that for the game to have a unique PSNE, it is a necessary and sufficient condition that the independent optimal strategies of the players do not conflict, and either the common contiguous set consists of at most one node or all the nodes in the common contiguous set are invested on by only one player in the independent optimal strategy profile. We further derive a socially optimal strategy profile, and show that the price of anarchy cannot be bound by a common universal constant. We hence present an efficient algorithm to compute the price of anarchy and the price of stability, given an instance of the game. Under reasonable conditions, we show that the price of stability is 1. We encounter a paradox in this game that higher budgets may lead to worse outcomes
GONZALEZ GRANADILLO Gustavo Daniel, DOYNIKOVA Elena, KOTENKO Igor, GARCIA-ALFARO Joaquin
Attack graph-based countermeasure selection using a stateful return on investment metric. FPS 2017: 10th International Symposium on Foundations and Practice of Security, Cham : Springer, 23-25 october 2017, Nancy, France, 2018, pp. 293-302, ISBN 978-3-319-75649-3
abstract
We propose a mitigation model that evaluates individual and combined countermeasures against multi-step cyber-attack scenarios. The goal is to anticipate the actions of an attacker that wants to disrupt a given system (e.g., an information system). The process is driven by an attack graph formalism, enforced with a stateful return on response investment metric that optimally evaluates, ranks and selects appropriate countermeasures to handle ongoing and potential attacks
HAMMAMI Seif Eddine, AFIFI Hossam, MOUNGLA Hassine
Proactive anomaly detection model for eHealth-enabled data in next generation cellular networks. ICC 2018 : IEEE International Conference on Communications , Etats unis : IEEE, 20 may - 24 june 2018, Kansas City, France, 2018 (document in press)
abstract
Machine learning can provide outlier detection in an efficient manner. We show that in the context of an urban mobility with cellular communications, it is possible to detect anomaly in quality of service
MARILLONNET Paul, ATES Mikaël, LAURENT Maryline
Etat de l'art des technologies de la gestion des données personnelles par l'usager . APVP 2018: Atelier sur la Protection de la Vie Privée, 03-06 juin 2018, Porquerolles, France, 2018
abstract
Plusieurs approches et solutions telles que la certification anonyme, BlindIDM UMA (User-Managed Access)... sont passées en revue et analysées de façon critique
SALEM Fatma Ezzahra, ALTMAN Zwi, GATI Azeddine, CHAHED Tijani, ALTMAN Eitan
Reinforcement learning approach for Advanced Sleep Modes management in 5G networks. VTC-FALL 2018 : 88th Vehicular Technology Conference, Los Alamitos : IEEE Computer Society, 27-30 august 2018, Chicago, United States, 2018 (document in press)
abstract
*
YORO Wilfried, EL TABACH Mamdouh, EN-NAJJARY Taoufik, GATI Azeddine, CHAHED Tijani
Energy efficiency of a network equipment per service category. ICC 2018 : IEEE International Conference on Communications, 20-24 may 2018, Kansas City, United States, 2018 (document in press)
abstract
*
YORO Wilfried, EL TABACH Mamdouh, EN-NAJJARY Taoufik, GATI Azeddine, CHAHED Tijani
Sharing the network end-to-end energy consumption among service categories. VTC-Spring 2018 : 87th Vehicular Technology Conference, IEEE Computer Society, 03-06 june 2018, Porto, Portugal, 2018 (document in press)
abstract
*
Book chapter (3)
KHATCHATOUROV Armen, LEVALLOIS-BARTH Claire, LAURENT Maryline, WAELBROECK Patrick
Conclusion . Signes de confiance : l’impact des labels sur la gestion des données personnelles, [Paris] : Institut Mines-Télécom, 2018, pp. 199-202, ISBN 978-2-9557308-4-3
abstract
Dans cet ouvrage, nous avons abordé les questions soulevées par un signe de confiance particulier, le label en matière des données personnelles, ainsi que certaines pistes et tendances dans le paysage en cours de construction. Si la problématique des labels n'est pas nouvelle en soi, comme en atteste leur présence dans les domaines de l'énergie ou de l'alimentation, la spécificité des biens numériques et leur essor exponentiel ne semblent pas permettre de recourir à des solutions déjà éprouvées. La circulation croissante des informations amène donc à poser sous une forme nouvelle la question des modes de gouvernance des données personnelles
LAURENT Maryline
La blockchain est-elle une technologie de confiance. Signes de confiance : l’impact des labels sur la gestion des données personnelles , [Paris] : Institut Mines-Télécom, 2018, pp. 179-198, ISBN 978-2-9557308-4-3
[PDF]
abstract
Le chapitre présente le fonctionnement et les limites du trust by design sur l'exemple de la blockchain
LAURENT Maryline, KHATCHATOUROV Armen
La confiance en informatique par la gestion du risque. Signes de confiance : l’impact des labels sur la gestion des données personnelles, [Paris] : Institut Mines-Télécom, 2018, pp. 47-62, ISBN 978-2-9557308-4-3
abstract
La confiance en informatique repose sur l'évaluation des risques engendrés par l'usage d'un outil (logiciel ou matériel)ou, plus largement, toute forme de prestation informatique (service, site web). Cette évaluation et le niveau de fiabilité associé sont d'autant plus critiques que les enjeux sont élevés. Elle prend tout son sens quand la sécurité du système d'information (SSI) d'une organisation est en jeu
