Keyless car sharing system: A security and privacy analysis

By

Interdisciplinary Research Group in Socio-technical CybersecurityKeyless car sharing system: A security and privacy analysisSymeonidis Iraklis, Mustafa Mustafa A., Preneel BartAbstract: This paper proposes a novel physical keyless car sharing system where users can use and share their cars without the need of physical keys. It also provides a comprehensive security and privacy analysis of such … Continued

Security Analysis of the Drone Communication Protocol: Fuzzing the MAVLink protocol

By

Interdisciplinary Research Group in Socio-technical CybersecuritySecurity Analysis of the Drone Communication Protocol: Fuzzing the MAVLink protocolDomin Karel, Symeonidis Iraklis, Marin EduardAbstract: The MAVLink protocol, used for bidirectional communication between a drone and a ground control station, will soon become a worldwide standard. The protocol has been the subject of research many times before. Through this … Continued

A Framework to Reason about the Legal Compliance of Security Standards

By

Interdisciplinary Research Group in Socio-technical CybersecurityA Framework to Reason about the Legal Compliance of Security StandardsBartolini Cesare, Giurgiu Andra, Lenzini Gabriele, Robaldo LivioAbstract:Achieving compliance with legal regulations is no easy task. Normally, laws state general requirements but do not provide clear parameters to determine when such requirements are met. On a different level, industrial standards … Continued

Towards legal compliance by correlating Standards and Laws with a semi-automated methodology

By

Interdisciplinary Research Group in Socio-technical CybersecurityTowards legal compliance by correlating Standards and Laws with a semi-automated methodologyCesare Bartolini, Andra Giurgiu, Gabriele Lenzini, Livio RobaldoAbstract:Since generally legal regulations do not provide clear parameters to determine when their requirements are met, achieving legal compliance is not trivial. The adoption of standards could help create an argument of … Continued

Comparing and Integrating Break-the-Glass and Delegation in Role-based Access Control for Healthcare

By

Interdisciplinary Research Group in Socio-technical CybersecurityComparing and Integrating Break-the-Glass and Delegation in Role-based Access Control for HealthcareAna Ferreira, Gabriele LenziniAbstract:In healthcare security, Role-based Access Control (RBAC) should be flexible and include capabilities such as Break-the-Glass and Delegation. The former is useful in emergencies to overcome otherwise a denial of access, the latter to transfer rights … Continued

High-fidelity spherical cholesteric liquid crystal Bragg reflectors generating unclonable patterns for secure authentication

By

Interdisciplinary Research Group in Socio-technical CybersecurityHigh-fidelity spherical cholesteric liquid crystal Bragg reflectors generating unclonable patterns for secure authenticationGabriele Lenzini, Sjouke Mauw, Samir OuchaniAbstract:A crucial question for an ICT organization wishing to improve its security is whether a security policy together with physical access controls protects from socio-technical threats. We study this question formally. We model … Continued

Analysing the Efficacy of Security Policies in Cyber-Physical Socio-Technical Systems

By

Interdisciplinary Research Group in Socio-technical CybersecurityAnalysing the Efficacy of Security Policies in Cyber-Physical Socio-Technical SystemsGabriele Lenzini, Sjouke Mauw, Samir OuchaniAbstract:A crucial question for an ICT organization wishing to improve its security is whether a security policy together with physical access controls protects from socio-technical threats. We study this question formally. We model the information flow … Continued

Metrics for Transparency

By

Interdisciplinary Research Group in Socio-technical CybersecurityMetrics for TransparencyDayana Spagnuelo, Cesare Bartolini, Gabriele LenziniAbstract:Transparency is a novel non-functional requirement for software systems. It is acclaimed to improve the quality of service since it gives users access to information concerning the system’s processes, clarifying who is responsible if something goes wrong. Thus, it is believed to support … Continued

Transparent Medical Data Systems

By

Interdisciplinary Research Group in Socio-technical CybersecurityTransparent Medical Data SystemsDayana Spagnuelo, Gabriele Lenzini Abstract:Transparency is described as the quality to be open about policies and practices. It is intended to inform end users of what happens to their data. It promotes good quality of service and is believed to sustain people’s demand for privacy. However, at … Continued

Patient-Centred Transparency Requirements for Medical Data Sharing Systems

By

Interdisciplinary Research Group in Socio-technical CybersecurityPatient-Centred Transparency Requirements for Medical Data Sharing SystemsDayana Spagnuelo, Gabriele LenziniAbstract:We compose, propose, and discuss several requirements to support transparency in Medical Data Sharing Systems. Transparency is a property that suggests openness and compliance with policies, practices, and processes employed to secure data, and it is believed to promote good … Continued