Search

Your search keyword '"Rosado, David G."' showing total 29 results
Start Over Author "Rosado, David G." Publication Year Range Last 10 years
29 results on '"Rosado, David G."'

3. Cybersecurity in the Maritime Sector: A Point of Analysis in Risk Management

Author

Martínez, Ferney, Sánchez, Luis Enrique, Santos-Olmo, Antonio, Rosado, David G., Fernández-Medina, Eduardo, Xiros, Nikolas I., Series Editor, Carral, Luis, editor, Vega, Adán, editor, Carreño, Jorge, editor, de Lara, José, editor, Lamas, María Isabel, editor, Cartelle, Juan José, editor, Tarrío, Javier, editor, Carballo, Rodrigo, editor, and Townsed, Patrick, editor

Published
2024
Full Text
View/download PDF

10. Definition and Verification of Security Configurations of Cyber-Physical Systems

Author

Varela-Vaca, Ángel Jesús, Rosado, David G., Sánchez, Luis Enrique, Gómez-López, María Teresa, Gasca, Rafael M., Fernández-Medina, Eduardo, Goos, Gerhard, Founding Editor, Hartmanis, Juris, Founding Editor, Bertino, Elisa, Editorial Board Member, Gao, Wen, Editorial Board Member, Steffen, Bernhard, Editorial Board Member, Woeginger, Gerhard, Editorial Board Member, Yung, Moti, Editorial Board Member, Katsikas, Sokratis, editor, Cuppens, Frédéric, editor, Cuppens, Nora, editor, Lambrinoudakis, Costas, editor, Kalloniatis, Christos, editor, Mylopoulos, John, editor, Antón, Annie, editor, Gritzalis, Stefanos, editor, Meng, Weizhi, editor, and Furnell, Steven, editor

Published
2020
Full Text
View/download PDF

17. Eliciting Security Requirements for Business Processes of Legacy Systems

Author

Argyropoulos, Nikolaos, Márquez Alcañiz, Luis, Mouratidis, Haralambos, Fish, Andrew, Rosado, David G., de Guzmán, Ignacio García-Rodriguez, Fernández-Medina, Eduardo, van der Aalst, Wil, Series editor, Mylopoulos, John, Series editor, Rosemann, Michael, Series editor, Shaw, Michael J., Series editor, Szyperski, Clemens, Series editor, Ralyté, Jolita, editor, España, Sergio, editor, and Pastor, Óscar, editor

Published
2015
Full Text
View/download PDF

18. A Framework for Secure Migration Processes of Legacy Systems to the Cloud

Author

Márquez, Luis, Rosado, David G., Mouratidis, Haralambos, Mellado, Daniel, Fernández-Medina, Eduardo, van der Aalst, Wil, Series editor, Mylopoulos, John, Series editor, Rosemann, Michael, Series editor, Shaw, Michael J., Series editor, Szyperski, Clemens, Series editor, Persson, Anne, editor, and Stirna, Janis, editor

Published
2015
Full Text
View/download PDF

19. 43 MARISMA-BiDa Pattern: Integrated Risk Analysis for Big Data

Author

Rosado, David G., Moreno, Julio, Sánchez, Luis E., Santos-Olmo, Antonio, Serrano, Manuel A., and Fernández-Medina, Eduardo

Subjects
Big data, Risk analysis, Security Standards, Information Security, Risk assessment
Abstract

Data is one of the most important assets for all types of companies, which have undoubtedly grown their quantity and the ways of exploiting them. Big Data appears in this context as a set of technologies that manage data to obtain information that supports decision-making. These systems were not conceived to be secure, resulting in significant risks that must be controlled. Security risks in Big Data must be analyzed and managed in an appropriate manner to protect the system and secure the information and the data being handled. This work proposes a risk analysis approach for Big Data environments, which is based on a security analysis methodology called MARISMA (Methodology for the Analysis of Risks on Information System), supported by a technological environment in the cloud (eMARISMA tool) already used by numerous clients. Our proposal, called MARISMA-BiDa, is based on the main related standards, such as ISO/IEC 27000, or the NIST Big Data reference architecture or ENISA and CSA recommendations for Big Data.

Published
2021

21. Security Reference Architecture for Cyber-Physical Systems (CPS).

Author

Moreno, Julio, Rosado, David G., Sánchez, Luis E., Serrano, Manuel A., and Fernández-Medina, Eduardo

Abstract

Cyber-physical systems (CPS) are the next generation of engineered systems into which computing, communication, and control technologies are now being closely integrated. They play an increasingly important role in critical infrastructures, governments and everyday life. Security is crucial in CPS, but they were not, unfortunately, initially conceived as a secure environment, and if these security issues are to be incorporated, then security must be considered from the very beginning of the system design. One way in which to solve this problem is by having a global perspective, which can be achieved by employing a Reference Architecture (RA), since it is a high-level abstraction of a system that could be useful in the implementation of complex systems. It is widely accepted that adding elements in order to address many security factors (integrity, confidentiality, availability, etc.) and facilitate the definition of the security requirements of a Security Reference Architecture (SRA) is a good starting point when attempting to solve these kinds of cybersecurity problems and protect the system from the beginning of the development. An SRA makes it possible to define the key elements of a specific environment, thus allowing a better understanding of the inherent elements of the environments, while promoting the integration of security aspects and mechanisms. The present paper, therefore, presents the definition of an SRA for CPS by using UML models in an attempt to facilitate secure CPS implementations. [ABSTRACT FROM AUTHOR]

Published
2021
Full Text
View/download PDF

22. Formación integral en la intensificación de Ingeniería del Software en el grado en Ingeniería Informática

Author

García, Félix, Rosado, David G., Moraga, María Ángeles, and Serrano, Manuel Ángel

Subjects
Aprendizaje basado en proyectos, Formación integral, Ingeniería del software, Coordinación
Abstract

Tradicionalmente, los estudiantes de Ingeniería del Software adquieren las competencias de cada asignatura mediante trabajos no reales que están acotados en complejidad y alcance. En este artículo se presenta una propuesta de formación con un enfoque transversal, uniendo varias asignaturas para plantear casos de desarrollo de software más complejos y realistas. Como primera aproximación se ha realizado una experiencia que engloba 3 asignaturas de la intensificación, abordando tanto la perspectiva técnica como la gestión en un proyecto común. Se abordan las principales restricciones como la temporalidad de las asignaturas, matriculación de los estudiantes, sistema de evaluación homogéneo, formación de equipos, calendario, revisiones conjuntas con los estudiantes, etc. Además, se presentan unas primeras evidencias de la viabilidad de la propuesta, mostrando los resultados de su aplicación en el curso 2017/2018 así como la opinión de los estudiantes matriculados, demostrando una buena aceptación. Traditionally, Software Engineering students have acquired competencies basing their learning in not real projects due to constrains in effort and time are limited in complexity and extent. In this paper, we propose a transversal approach for Software Engineering Education integrating related subjects and with special emphasis in proposing more complex and realistic assignments. As a starting approach we have carried out a experience of transversal education encompassing three Software Engineering subjects, forcing the students to work in a complex common project from both technical and management perspectives. In this approach, we have faced new challenges and restrictions, such as time ordering of the subjects, students’ enrollment, homogeneous evaluation system, team creation and management, common schedule, common reviews, and so on. Also, here we present the first evidences of proposal feasibility, showing the results of the project application during the 2017/2018 course along with the students’ opinion, which demonstrated a good acceptance.

Published
2018

23. Lecciones aprendidas tras varias convocatorias de un programa para el fortalecimiento y mejora de las competencias de empleabilidad de los graduados en Informática

Author

Rosado, David G., Caballero, Ismael, Cruz-Lemus, José A., Serrano, Manuel, Sánchez, Luis E., and Fernández-Medina, Eduardo

Subjects
Fortalecimiento, Informàtica [Àrees temàtiques de la UPC], TFG, Competencias de empleabilidad, Prácticas en empresas, Ensenyament i aprenentatge [Àrees temàtiques de la UPC], Informàtica -- Ensenyament, Computer science -- Study and teaching, Inserción y perfil laboral
Abstract

Este artículo describe la implantación real de un convenio llamado convenio FORTE, que persigue el fortalecimiento de las competencias de empleabilidad de los graduados en Ingeniería Informática. El objetivo del convenio es acercar los graduados a las empresas mediante un enfoque orientado a las necesidades específicas de las compañías participantes. El artículo describe los resultados y pasos seguidos durante dos convocatorias (2014 y 2015) y cómo se han ido llevando las diferentes tareas, acuerdos, selección y preparación tanto de alumnos, profesores y empresas para la realización de los convenios FORTE y cuál ha sido la aceptación por parte de todos los implicados. This paper describes the implementation of an agreement. This project aims to strengthen the employability skills of our students enrolled in the Computer Science Engineering Degree by bringing them to companies through an approach oriented towards the specific needs of the companies. It also describes the process and results after the two first editions (2014 and 2015) and the different tasks performed for reaching agreements, selecting and preparing students, teachers and companies, as well as the acceptance level by the different roles involved. Este trabajo ha sido financiado por el proyecto VILMA (Consejería de Educación, Ciencia y Cultura de la Junta de Comunidades de Castilla La Mancha, y Fondo Europeo de Desarrollo Regional FEDER, PEII-2014-048-P) y por el proyecto SEQUOIA (Ministerio de Economía y Competitividad y Fondo Europeo de Desarrollo Regional FEDER, TIN2015- 63502-C3-1-R).

Published
2016

24. Proyecto profESIonalízate: Mejorando la empleabilidad a través de la mejora de las competencias profesionales

Author

Caballero, Ismael, Rosado, David G., Serrano, Manuel, Cruz-Lemus, Jose A., and Fernández-Medina Patón, Eduardo

Subjects
Informàtica [Àrees temàtiques de la UPC], Prácticas en Empresas, Competency based education, Ensenyament i aprenentatge [Àrees temàtiques de la UPC], Certificación de Competencias Profesionales y Lingüísticas, FORTE, Competències professionals -- Ensenyament, Informàtica -- Ensenyament, Computer science -- Study and teaching
Abstract

Resumen: Este artículo describe el proyecto de innovación docente profESIonalízate, cuyo objetivo es el de establecer un plan transversal para fortalecer las competencias profesionales de los alumnos del Grado en Ingeniería en Informática y del Máster en Ingeniería en Informática. El elemento central del proyecto es el convenio FORTE que se firmará con importantes empresas del sector. Abstract: This paper describes the profESIonalízate project. The aim of this project is setting-up a transversal plan for strengthening the professional skills of our students enrolled in the Computer Science Engineering Degree and Master. The project’s cornerstone is the FORTE agreement, which will be signed with important sectorial companies.

Published
2015

28. Applying the Action-Research Method to Develop a Methodology to Reduce the Installation and Maintenance Times of Information Security Management Systems.

Author

Santos-Olmo, Antonio, Sánchez, Luis Enrique, Rosado, David G., Fernández-Medina, Eduardo, and Piattini, Mario

Subjects
COMPUTER software installation, INFORMATION technology security, BUSINESS enterprises, ECONOMIC development, SECURITY management
Abstract

Society is increasingly dependent on Information Security Management Systems (ISMS), and having these kind of systems has become vital for the development of Small and Medium-Sized Enterprises (SMEs). However, these companies require ISMS that have been adapted to their special features and have been optimized as regards the resources needed to deploy and maintain them, with very low costs and short implementation periods. This paper discusses the different cycles carried out using the 'Action Research (AR)' method, which have allowed the development of a security management methodology for SMEs that is able to automate processes and reduce the implementation time of the ISMS. [ABSTRACT FROM AUTHOR]

Published
2016
Full Text
View/download PDF

29. Enterprise security pattern: a new type of security pattern.

Author

Moral-García, Santiago, Moral-Rubio, Santiago, Rosado, David G., Fernández, Eduardo B., and Fernández-Medina, Eduardo

Subjects
BUSINESS enterprise security, INFORMATION storage & retrieval systems, DIGITAL asset management, TECHNOLOGY, COMPUTER crimes
Abstract

ABSTRACT In recent years, most organizations have suffered attacks against their information systems. For this reason, organizations should seek support from enterprise security architectures (ESAs) in order to secure their information assets. Security patterns can help when building complex ESAs, but they have some limitations that reduce their usability. In this paper, we define the metapattern of a new type of security pattern called Enterprise Security Pattern. This new metapattern provides a model-driven environment and combines all elements that must be considered when designing and building ESAs. We present here a precise meta-model and four diagrams to describe the metapattern of the enterprise security patterns. When avoiding a security problem, organizations could use enterprise security patterns to provide their designers with an optimal and proven security guideline and so standardize the design and building of the ESA for that problem. Enterprise security patterns could also facilitate the selection and tailoring of security policies, patterns, mechanisms, and technologies when a designer is building ESAs. To illustrate our ideas, we present an instance of this new type of pattern, showing how it can be used. Copyright © 2014 John Wiley & Sons, Ltd. [ABSTRACT FROM AUTHOR]

Published
2014
Full Text
View/download PDF

Catalog

Books, media, physical & digital resources
See catalog results