P. Nespoli, M. Zago, A. Huertas Celdrán, M. Gil Pérez, F. Gómez Mármol, and F. J. García Clemente, "A Dynamic Continuous Authentication Framework in IoT-Enabled Environments," in 2018 Fifth International Conference on Internet of Things: Systems, Management and Security, 2018, pp. 131–138.
Conference Abstract BibTeX Full Text

Modern authentication systems still suffer of some limitations that threaten users' data protection. To strengthen the overall security of authentication processes, the continuous authentication paradigm has been increasingly employed. Nonethe-less, this fresh methodology still poses a number of challenges that remain unsolved. In this paper, we present a novel framework that is able to provide context-aware IoT-based continuous and non-intrusive authentication and authorization services. To do so, we propose a collection of ontologies that represents the defined information model. Hence, these ontologies are combined together with efficient authentication and authorization policies to build a full-fledged IoT Continuous Authentication Framework (IoTCAF). The conducted experiments demonstrate the feasibility and scalability of the proposed framework leveraging the characteristics of IoT pervasiveness.

M. Zago, V. M. Ruiz Sánchez, M. Gil Pérez, and G. Martínez Pérez, " Tackling Cyber Threats with Automatic Decisions and Reactions Based on Machine-Learning Techniques,"" Presented at EuCNC'17, 2nd Conference on Network Management, Quality of Service and Security for 5G Networks, held at European Conference on Networks and Communications, At Oulu (Finland), 2017, no. September.
Conference Abstract BibTeX Full Text

Despite the important effort dedicated to maximise the security of network infrastructures and the services provided on top of them some major cyberthreats, such as botnets, persist. If classic botnets are nowadays difficult to track due to the amount of devices that may potentially be subjugated, at the dawn of the 5G era, with an even increased number of devices powered by ultra-wide broadband, this problem seems to be even more relevant. In this context, the paper at hand describes a system designed considering the integration of multiple machine-learning algorithms with some other technologies like Software-Defined Networks (SDN) and Network Virtual Functions (NFV) that are usually being considered as enablers in 5G. The intention of this system is to analyse, detect and react against existing and new coming cyber threats, including botnets.

Manuel Gil Pérez, Alberto Huertas Celdrán, Fabrizio Ippoliti, Mattia Zago, Víctor Manuel Ruiz Sánchez, Alberto Hernández Chillón, Félix J. García Clemente, Lorenzo Fernández Maimó, Diego Sevilla Ruiz, and Gregorio Martínez Pérez, " Despliegue automático de aplicaciones NFV y SDN para detectar y mitigar ciberamenazas en redes 5G, " in JNIC'17: Proceedings of the III Jornadas Nacionales de Investigación en Ciberseguridad, pp. 59-66, Madrid (Spain), 31 May-2 June 2017.
Conference Abstract BibTeX Full Text

Se vaticina que las nuevas redes móviles 5G van a dar soporte a grandes y nuevas características donde se va a ver significativamente incrementado tanto el ancho de banda, y por ende la transmisión de gran cantidad de información, como un alto número de dispositivos conectados. En este contexto se hacen necesarias soluciones innovadoras frente a la automatización de las redes 5G para la gestión eficiente y escalable de sus redes y de sus servicios, protegiendo a sus usuarios e infraestructuras de un gran número de amenazas de seguridad. Este artículo presenta un enfoque novedoso para la gestión de redes móviles 5G, donde se combinan tecnologías Network Functions Virtualization (NFV) y Software Defined Networking (SDN) para desplegar, instanciar o reconfigurar automáticamente las capacidades de detección y mitigación con la que dar respuesta a ciberamenazas como, entre otras, las redes botnet causantes de grandes ciberataques.