Search

Your search keyword '"González-Granadillo, Gustavo"' showing total 14 results
Start Over Author "González-Granadillo, Gustavo"

Refine your results

more »

more »

14 results on '"González-Granadillo, Gustavo"'

2. An n-sided polygonal model to calculate the impact of cyber security events

Author

Gonzalez-Granadillo, Gustavo, Garcia-Alfaro, Joaquin, and Debar, Hervé

Subjects
Computer Science - Cryptography and Security
Abstract

This paper presents a model to represent graphically the impact of cyber events (e.g., attacks, countermeasures) in a polygonal systems of n-sides. The approach considers information about all entities composing an information system (e.g., users, IP addresses, communication protocols, physical and logical resources, etc.). Every axis is composed of entities that contribute to the execution of the security event. Each entity has an associated weighting factor that measures its contribution using a multi-criteria methodology named CARVER. The graphical representation of cyber events is depicted as straight lines (one dimension) or polygons (two or more dimensions). Geometrical operations are used to compute the size (i.e, length, perimeter, surface area) and thus the impact of each event. As a result, it is possible to identify and compare the magnitude of cyber events. A case study with multiple security events is presented as an illustration on how the model is built and computed., Comment: 16 pages, 5 figures, 2 tables, 11th International Conference on Risks and Security of Internet and Systems, (CRiSIS 2016), Roscoff, France, September 2016

Published
2017
Full Text
View/download PDF

5. Combining Technical and Financial Impacts for Countermeasure Selection

Author

Gonzalez-Granadillo, Gustavo, Ponchel, Christophe, Blanc, Gregory, and Debar, Hervé

Subjects
Computer Science - Cryptography and Security, Computer Science - Computers and Society
Abstract

Research in information security has generally focused on providing a comprehensive interpretation of threats, vulnerabilities, and attacks, in particular to evaluate their danger and prioritize responses accordingly. Most of the current approaches propose advanced techniques to detect intrusions and complex attacks but few of these approaches propose well defined methodologies to react against a given attack. In this paper, we propose a novel and systematic method to select security countermeasures from a pool of candidates, by ranking them based on the technical and financial impact associated to each alternative. The method includes industrial evaluation and simulations of the impact associated to a given security measure which allows to compute the return on response investment for different candidates. A simple case study is proposed at the end of the paper to show the applicability of the model., Comment: In Proceedings AIDP 2014, arXiv:1410.3226

Published
2014
Full Text
View/download PDF

6. Towards a Security Event Data Taxonomy

Author

Gonzalez-Granadillo, Gustavo, Rubio-Hernán, José, Garcia-Alfaro, Joaquin, Hutchison, David, Series Editor, Kanade, Takeo, Series Editor, Kittler, Josef, Series Editor, Kleinberg, Jon M., Series Editor, Mattern, Friedemann, Series Editor, Mitchell, John C., Series Editor, Naor, Moni, Series Editor, Pandu Rangan, C., Series Editor, Steffen, Bernhard, Series Editor, Terzopoulos, Demetri, Series Editor, Tygar, Doug, Series Editor, Weikum, Gerhard, Series Editor, Cuppens, Nora, editor, Cuppens, Frédéric, editor, Lanet, Jean-Louis, editor, Legay, Axel, editor, and Garcia-Alfaro, Joaquin, editor

Published
2018
Full Text
View/download PDF

7. Attack Graph-Based Countermeasure Selection Using a Stateful Return on Investment Metric

Author

Gonzalez-Granadillo, Gustavo, Doynikova, Elena, Kotenko, Igor, Garcia-Alfaro, Joaquin, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Weikum, Gerhard, Series editor, Imine, Abdessamad, editor, Fernandez, José M., editor, Marion, Jean-Yves, editor, Logrippo, Luigi, editor, and Garcia-Alfaro, Joaquin, editor

Published
2018
Full Text
View/download PDF

8. Choosing Models for Security Metrics Visualization

Author

Kolomeec, Maxim, Gonzalez-Granadillo, Gustavo, Doynikova, Elena, Chechulin, Andrey, Kotenko, Igor, Debar, Hervé, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Weikum, Gerhard, Series editor, Rak, Jacek, editor, Bay, John, editor, Kotenko, Igor, editor, Popyack, Leonard, editor, Skormin, Victor, editor, and Szczypiorski, Krzysztof, editor

Published
2017
Full Text
View/download PDF

9. Towards an Automated and Dynamic Risk Management Response System

Author

Gonzalez-Granadillo, Gustavo, Alvarez, Ender, Motzek, Alexander, Merialdo, Matteo, Garcia-Alfaro, Joaquin, Debar, Hervé, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Weikum, Gerhard, Series editor, Brumley, Billy Bob, editor, and Röning, Juha, editor

Published
2016
Full Text
View/download PDF

10. An Ontology-Based Model for SIEM Environments

Author

Gonzalez Granadillo, Gustavo, Ben Mustapha, Yosra, Hachem, Nabil, Debar, Herve, Akan, Ozgur, Series editor, Bellavista, Paolo, Series editor, Cao, Jiannong, Series editor, Dressler, Falko, Series editor, Ferrari, Domenico, Series editor, Gerla, Mario, Series editor, Kobayashi, Hisashi, Series editor, Palazzo, Sergio, Series editor, Sahni, Sartaj, Series editor, Shen, Xuemin (Sherman), Series editor, Stan, Mircea, Series editor, Xiaohua, Jia, Series editor, Zomaya, Albert, Series editor, Coulson, Geoffrey, Series editor, Georgiadis, Christos K., editor, Jahankhani, Hamid, editor, Pimenidis, Elias, editor, Bashroush, Rabih, editor, and Al-Nemrat, Ameer, editor

Published
2012
Full Text
View/download PDF

11. Individual Countermeasure Selection Based on the Return On Response Investment Index

Author

Gonzalez Granadillo, Gustavo, Débar, Hervé, Jacob, Grégoire, Gaber, Chrystel, Achemlal, Mohammed, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Doug, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Kotenko, Igor, editor, and Skormin, Victor, editor

Published
2012
Full Text
View/download PDF

13. Cybersecurity and privacy risk assessment of point-of-care systems in healthcare - a use case approach

Author

Universitat Politècnica de Catalunya. Departament de Teoria del Senyal i Comunicacions, Jofre Cruanyes, Marc, Navarro Llobet, Diana, Agulló, Ramon, Puig Domingo, Jordi, González Granadillo, Gustavo, Mora Zamorano, Juan, Romeu, Ramon, Universitat Politècnica de Catalunya. Departament de Teoria del Senyal i Comunicacions, Jofre Cruanyes, Marc, Navarro Llobet, Diana, Agulló, Ramon, Puig Domingo, Jordi, González Granadillo, Gustavo, Mora Zamorano, Juan, and Romeu, Ramon

Abstract

Point-of-care systems are generally used in healthcare to respond rapidly and prevent critical health conditions. Hence, POC systems often handle personal health information; and consequently, their cybersecurity and privacy requirements are of crucial importance. While, assessing these requirements is a significant task. In this work, we propose a use case approach to assess specifications of cybersecurity and privacy requirements of POC systems in a structured and self-contained form. Such an approach is appropriate since use cases are one of the most common means adopted by developers to derive requirements. As a result, we detail a use case approach in the framework of a real-based healthcare IT infrastructure that includes a health information system, integration engines, application servers, web services, medical devices, smartphone apps and medical modalities (all data simulated) together with the interaction with participants. Since our use case also sustains the analysis of cybersecurity and privacy risks in different threat scenarios, it also supports decision making and the analysis of compliance considerations., Peer Reviewed, Postprint (published version)

Published
2021

14. D8.1. Guidelines for Cybersecurity Training Programme across EU (Intermediate)

Author

González-Granadillo, Gustavo, José Crespo, George Baroutas, Thierry Maur, Anna-Mari Heikkila, Sami Noponen, Jarkko Kuusijarvi, Michael Kotras, Jean-Baptiste Rouault, Mathieu Leturcq, Pablo Gimenez, Mercedes de Juan, Fabio Ballini, Monica Canepa, Beatriz Bazzica, Carmen Giordano, Kimberly Tam, Kevin Jones, Vasiliki Palla, Euripides Sakellariou, Panagiotis Athanasopoulos, Luis Sousa, Kamban Parasuraman, Barbara Chang, Julia Mattes, and Bernhard Reinhardt

Abstract

This document provides an analysis on the most relevant external factors that impact the cybersecurity and maritime sectors in Europe. The first part of the analysis focuses on the Political, Economic, Social, Technological, Environmental and Legal (PESTEL) factors affecting directly or indirectly the cybersecurity and maritime domains. In addition, a stakeholder analysis is presented where three main stakeholder groups are identified: cybersecurity, shipping, and port. For each of them, internal and external key stakeholders are identified including consortium partners and external organizations (e.g., clients, providers, competitors, etc.) in the cybersecurity and maritime domain. Furthermore, an analysis of the current cybersecurity and maritime situation in Europe, is presented in the deliverable by focusing on the national strategies and plans developed by several European countries. The Cyber-MAR ecosystem analysis aims to identifying aspects related to the regulatory framework, initiatives, challenges and existing gaps in both, the cybersecurity and the maritime industries. As a result, although the PESTEL analysis indicates that most studied factors fall into the Positive (P) or Very Positive (+P) categories, factors such as global political conflicts, the EU current economic situation, the cybersecurity maturity in the EU, climate change, and environmental challenges (COVID-19) are among the potential negative factors to be considered as threats in Cyber-MAR. In addition, the stakeholder analysis performed in CyberMAR positions key stakeholders into four main categories: key players, context setters, crowd and subjects, for which strategies are proposed to manage and meet their needs. Finally, among the challenges identified in the Cyber-MAR ecosystem analysis, the lack of cybersecurity awareness, lack of qualified personnel and poor bilateral/multilateral collaboration appear to be common in most studied countries. Several initiatives have been identified in both sectors, with the National Cybersecurity Strategy as one of the major actions taken by all studied countries. D8.1 is the initial version of the Cyber-MAR market watch and should be considered as a starting point to define strategies for exploitation and commercialization routes. This document will be continuously updated and complemented with a final version (D8.2) to be released at M36 of the project including actions and recommendations to reduce the supply deficient of cybersecurity training in the maritime domain within the EU.

Published
2020
Full Text
View/download PDF

Catalog

Books, media, physical & digital resources
See catalog results