Article de revue avec comité de lecture (9)
BELGUITH Sana, KAANICHE Nesrine, LAURENT Maryline, JEMAI Abderrazak , ATTIA Rabah
PHOABE: securely outsourcing multi-authority attribute based encryption with policy hidden for cloud assisted IoT. Computer networks - The international journal of computer and telecommunications networking, march 2018, vol. 133, pp. 141-156
[PDF]
abstract
Attribute based encryption (ABE) is an encrypted access control mechanism that ensures efficient data sharing among dynamic group of users. Nevertheless, this encryption technique presents two main drawbacks, namely high decryption cost and publicly shared access policies, thus leading to possible users' privacy leakage. In this paper, we introduce PHOABE, a Policy-Hidden Outsourced ABE scheme. Our construction presents several advantages. First, it is a multi-attribute authority ABE scheme. Second, the expensive computations for the ABE decryption process is partially delegated to a Semi Trusted Cloud Server. Third, users' privacy is protected thanks to a hidden access policy. Fourth, PHOABE is proven to be selectively secure, verifiable and policy privacy preserving under the random oracle model. Five, estimation of the processing overhead proves its feasibility in IoT constrained environments
BRANDWAJN Alexandre, BEGIN Thomas, CASTEL-TALEB Hind, ATMACA Tülin
A study of systems with multiple operating levels, probabilistic thresholds and hysteresis. IEEE transactions on parallel and distributed systems, april 2018, vol. 29, n° 4, pp. 748-757
URL: https://hal.archives-ouvertes.fr/hal-01670974/document
abstract
Current architecture of many computer systems relies on dynamic allocation of a pool of resources according to workload 5 conditions to meet specific performance objectives while minimizing cost (e.g., energy or billing). In such systems, different levels of 6 operation may be defined, and switching between operating levels occurs at certain thresholds of system congestion. To avoid rapid 7 oscillations between levels of service, "hysteresis" is introduced by using different thresholds for increasing and decreasing workload 8 levels, respectively. We propose a model of such systems with general arrivals, arbitrary number of servers and operating levels where 9 each higher operating level may correspond to an arbitrary number of additional servers and soft (i.e., non-deterministic) thresholds to 10 account for "inertia" in switching between operating levels. In our model, request service times are assumed to be memoryless and 11 server processing rates may be a function of the current operating level and of the number of requests (users) in the system. 12 Additionally, we allow for delays in the activation of additional operating levels. We use simple mathematics to obtain a semi-numerical 13 solution of our model. We illustrate the versatility of our model using several case study examples inspired by features of real systems. 14 In particular, we explore optimal thresholds as a tradeoff between performance and energy consumption.
GENSOLLEN Nicolas, GAUTHIER Vincent, BECKER Monique, MAROT Michel
Stability and performance of coalitions of prosumers through diversification in the smart grid. IEEE transactions on smart grid, march 2018, vol. 9, n° 2, pp. 963-970
[PDF]
abstract
In the context of the smart grid, we propose in this paper an algorithm that forms coalitions of agents, called prosumers, that both produce and consume. It is designed to be used by aggregators that aim at selling aggregated surplus of production of the prosumers they control. We rely on real weather data sampled across stations of a given territory in order to simulate realistic production and consumption patterns for each prosumer. This enables us to capture geographical correlations among the agents while preserving the diversity due to different behaviors. As aggregators are bound to the market operator by a contract, they seek to maximize their offer while minimizing their risk. The proposed graph based algorithm takes the underlying correlation structure of the agents into account and outputs coalitions with both high productivity and low variability. We show that the resulting diversified coalitions are able to generate higher benefits on a constrained energy market, and are more resilient to random failures of the agents
GONZALEZ GRANADILLO Gustavo Daniel, DUBUS Samuel, MOTZEK Alexander, GARCIA-ALFARO Joaquin, ALVAREZ LOPEZ Ender Yesid, MERIALDO Matteo , PAPILLON Serge, DEBAR Hervé
Dynamic risk management response system to handle cyber threats. Future generation computer systems (FGCS), june 2018, vol. 83, pp. 535-552
abstract
Appropriate response strategies against new and ongoing cyber attacks must be able to reduce risks down to acceptable levels, without sacrificing a mission for security. Existing approaches either evaluate impacts without considering missions' negative-side effects, or are manually based on traditional risk assessments, leaving aside technical difficulties. In this paper we propose a dynamic risk management response system (DRMRS) consisting of a proactive and reactive management software aiming at evaluating threat scenarios in an automated manner, as well as anticipating the occurrence of potential attacks. We adopt a quantitative risk-aware approach that provides a comprehensive view of the threats, by considering their likelihood of success, the induced impact, the cost of the possible responses, and the negative side-effects of a response. Responses are selected and proposed to operators based on financial, operational and threat assessments. The DRMRS is applied to a real case study of a critical infrastructure with multiple threat scenarios
GONZALEZ GRANADILLO Gustavo Daniel, RUBIO-HERNAN Jose, GARCIA-ALFARO Joaquin
Using an event data taxonomy to represent the impact of cyber events as geometrical instances. IEEE access, 2018, vol. 6, pp. 8810-8828
[PDF]
abstract
Visualization and simulation models used for the evaluation and selection of security countermeasures need accurate data to compute the impact of cyber events (e.g., malicious and benign actions). The information required to build appropriate impact models depends directly on the nature of the system. The information dealt by water supply systems, for instance, is particularly different from the information obtained by energy, telecommunication, transportation, or finance systems. It is therefore important to properly classify the data of security events according to the nature of the system. This paper proposes an event data taxonomy based on the system's criticality, the geographical location of the target, the time at which the information is obtained by the attacker, and the nature of the data. A use case on the impact assessment of events originated in a critical infrastructure is presented to show the applicability of the proposed taxonomy
HASSINE Kawther, FRIKHA Mounir, CHAHED Tijani
Access point backhaul capacity aggregation as a matching game in the context of wireless local area networks. Computer networks - The international journal of computer and telecommunications networking, july 2018, vol. 139, pp. 92-108
abstract
We propose, in this paper, a novel approach of Access Point (AP) backhaul capacity aggregation in the context of Wireless Local Area Networks (WLAN). Our purpose is to optimize the Available Backhaul Resource (ABR) allocation between APs belonging to different Basic Service Sets (BSSs), so as to relieve pressure of traffic offloaded from non-WiFi networks. In this context, we define two different sets of APs within the same WLAN: the ones with spare backhaul resources (Providers) and those in lack of it (Beneficiaries). Considering the two sided nature of this system, we model our assignment problem using matching games: one-to-one, many-to-one and many-to-many, and solve it using the so-called Deferred Acceptance (DA) algorithm leading to an optimal pairwise stable matching. Our results show that, compared to a legacy WLAN, the overall performance is substantially improved in terms of AP throughput gain, AP satisfaction percentage and load balancing between different APs
NGUYEN Kim Thuat, OUAHLA Nouha, LAURENT Maryline
Securely outsourcing the ciphertext-policy attribute-based encryption. World wide web, january 2018, vol. 21, n° 1, pp. 169-183
abstract
Attribute-based Encryption (ABE) is a new and promising public key encryption that allows fine-grained authorization on data based on user attributes. Such property is favorable for multiple applications that require encrypted storage or access control on data, in particular: eHealth applications. However, ABE schemes are known not to be efficient in the encryption phase because ciphertext size and the time required to encrypt grow with the complexity of the access policy. Such drawback is critical in the context of pervasive computing, for instance, in the Internet of Things, where data producers are usually resource-constrained devices, e.g. smart phones or sensing platforms. In this work, we propose OEABE standing for Outsourcing mechanism for the Encryption of Ciphertext-Policy ABE (CP-ABE). We show how a user can offload expensive operations of CP-ABE encryption to a semi-trusted party in a secure manner. For illustration, we first conducted a performance estimation on an emulated Wismote sensor platform. Then, to demonstrate the performance gains of our mechanism, we implemented our proposal and did comparison to an existing implementation of CP-ABE on a laptop
RUBIO-HERNAN Jose, DE CICCO Luca, GARCIA-ALFARO Joaquin
Adaptive control-theoretic detection of integrity attacks against cyber-physical industrial systems. Transactions on emerging telecommunications technologies, 2018, pp. 1-17 (document in press - published online 08 Aug 2017)
URL: http://dx.doi.org/10.1002/ett.3209
[PDF]
abstract
The use of control-theoretic solutions to detect attacks against cyber-physical industrial systems is a growing area of research. Traditional literature proposes the use of control strategies to retain, eg, satisfactory close-loop performance, as well as safety properties, when a communication network connects the distributed components of a physical system (eg, sensors, actuators, and controllers). However, the adaptation of these strategies to handle security incidents is an ongoing challenge. In this paper, we survey the advantages of a watermark-based detector against some integrity attacks as well as the weaknesses against other attacks. To cover these weaknesses, we propose a new control and security strategy that complements the watermark-based detector. We validate the detection efficiency of the new strategy via numeric simulation. Experimental results are also presented by using a laboratory testbed based on supervisory control and data acquisition industrial protocols
WANG Leye, GAUTHIER Vincent, CHEN Guanling, MOREIRA‑MATIAS Luis
Special issue on extracting crowd intelligence from pervasive and social big data. Journal of ambient intelligence and humanized computing, 2018, pp. 1-2 (document in press - published online 15 Jan 2018)
abstract
With the prevalence of ubiquitous computing devices (smartphones, wearable devices, etc.) and social network services (Facebook, Twitter, etc.), humans are generating massive digital traces continuously in their daily life. Considering the invaluable crowd intelligence residing in these pervasive and social big data, a spectrum of opportunities is emerging to enable promising smart applications for easing individual life, increasing company profit, as well as facilitating city development. However, the nature of big data also poses fundamental challenges on the techniques and applications relying on the pervasive and social big data from multiple perspectives such as algorithm effectiveness, computation speed, energy efficiency, user privacy, server security, data heterogeneity and system scalability. This special issue presents the state-of-the-art research achievements in addressing these challenges
Communication dans une conférence à comité de lecture (1)
GONZALEZ GRANADILLO Gustavo Daniel, DOYNIKOVA Elena, KOTENKO Igor, GARCIA-ALFARO Joaquin
Attack graph-based countermeasure selection using a stateful return on investment metric. FPS 2017: 10th International Symposium on Foundations and Practice of Security, Cham : Springer, 23-25 october 2017, Nancy, France, 2018, pp. 293-302, ISBN 978-3-319-75649-3
abstract
We propose a mitigation model that evaluates individual and combined countermeasures against multi-step cyber-attack scenarios. The goal is to anticipate the actions of an attacker that wants to disrupt a given system (e.g., an information system). The process is driven by an attack graph formalism, enforced with a stateful return on response investment metric that optimally evaluates, ranks and selects appropriate countermeasures to handle ongoing and potential attacks
Chapitre dans un livre (3)
KHATCHATOUROV Armen, LEVALLOIS-BARTH Claire, LAURENT Maryline, WAELBROECK Patrick
Conclusion . Signes de confiance : l’impact des labels sur la gestion des données personnelles, [Paris] : Institut Mines-Télécom, 2018, pp. 199-202, ISBN 978-2-9557308-4-3
abstract
Dans cet ouvrage, nous avons abordé les questions soulevées par un signe de confiance particulier, le label en matière des données personnelles, ainsi que certaines pistes et tendances dans le paysage en cours de construction. Si la problématique des labels n'est pas nouvelle en soi, comme en atteste leur présence dans les domaines de l'énergie ou de l'alimentation, la spécificité des biens numériques et leur essor exponentiel ne semblent pas permettre de recourir à des solutions déjà éprouvées. La circulation croissante des informations amène donc à poser sous une forme nouvelle la question des modes de gouvernance des données personnelles
LAURENT Maryline
La blockchain est-elle une technologie de confiance. Signes de confiance : l’impact des labels sur la gestion des données personnelles , [Paris] : Institut Mines-Télécom, 2018, pp. 179-198, ISBN 978-2-9557308-4-3
[PDF]
abstract
Le chapitre présente le fonctionnement et les limites du trust by design sur l'exemple de la blockchain
LAURENT Maryline, KHATCHATOUROV Armen
La confiance en informatique par la gestion du risque. Signes de confiance : l’impact des labels sur la gestion des données personnelles, [Paris] : Institut Mines-Télécom, 2018, pp. 47-62, ISBN 978-2-9557308-4-3
abstract
La confiance en informatique repose sur l'évaluation des risques engendrés par l'usage d'un outil (logiciel ou matériel)ou, plus largement, toute forme de prestation informatique (service, site web). Cette évaluation et le niveau de fiabilité associé sont d'autant plus critiques que les enjeux sont élevés. Elle prend tout son sens quand la sécurité du système d'information (SSI) d'une organisation est en jeu
