@proceedings {345, title = {Identity Management in IoT Clouds: a FIWARE Case of Study}, journal = {2015 IEEE Conference on Communications and Network Security (CNS) - 1st Workshop on Security and Privacy in the Cloud (SPC 2015)}, year = {2015}, pages = {680-684}, publisher = {IEEE Computer Society}, address = {Florence, Italy, September 30th, 2015}, abstract = {

Nowadays, the combination between Cloud computing and Internet of Things (IoT) is pursuing new levels of efficiency in delivering services, representing a tempting business opportunity for ICT operators of increasing their revenues. However, security is seen as one of the major factors that slows down the rapid and large scale adoption and deployment of both the IoT and Cloud computing.\ 
In this paper, considering such an IoT Cloud scenario, we present an authentication model that allow IoT devices to join IoT Clouds and users to access the system. Moreover, we discuss the issues involved in applying our authentication models in a real IoT Cloud based on the FIWARE technology.

}, keywords = {authentication, cloud computing, FIWARE, Internet of Things, security}, issn = {978-1-4673-7876-5}, url = {http://www.zurich.ibm.com/spc2015/}, author = {Luciano Barreto and Antonio Celesti and Massimo Villari and Maria Fazio and Antonio Puliafito} } @proceedings {355, title = {A Secure Self-Identification Mechanism for Enabling IoT Devices to Join Cloud Computing}, journal = {Internet of Things. IoT Infrastructures - First International Summit IoT360}, volume = {151}, year = {2015}, pages = {306-311}, publisher = {Springer International Publishing}, edition = {Internet of Things. IoT Infrastructures}, address = {Rome}, keywords = {cloud computing, Configuration, Identification, IoT, security}, isbn = {978-3-319-19742-5}, doi = {10.1007/978-3-319-19743-2_41}, url = {http://dx.doi.org/10.1007/978-3-319-19743-2_41}, author = {Villari, Massimo and Celesti, Antonio and Fazio, Maria and Puliafito, Antonio} } @article {351, title = {Towards the Integration Between IoT and Cloud Computing: An Approach for the Secure Self-Configuration of Embedded Devices}, journal = {International Journal of Distributed Sensor Networks}, volume = {2015}, year = {2015}, month = {2016}, pages = {1-9}, abstract = {

The secure boot up and setup of Internet of Things\ (IoT) devices connected over the Cloud represents a challenging open issue. This paper deals with the automatic configuration\ of IoT devices in a secure way through the Cloud, in order\ to provide new added-value services. After a discussion on the\ limits of current IoT and Cloud solutions in terms of secure selfconfiguration,\ we present a Cloud-based architecture that allows\ IoT devices to interact with several federated Cloud providers.\ In particular, we present two possible scenarios, i.e., single Cloud\ and a federated Cloud environments interacting with IoT devices\ and we address specific issues of both. Moreover, we present\ several design highlights on how to operate considering real open\ hardware and software products already available in the market.

}, keywords = {cloud computing, federation, IoT, security, self-configuration}, doi = {http://dx.doi.org/10.1155/2015/286860}, url = {http://www.hindawi.com/journals/ijdsn/2015/286860/}, author = {Antonio Puliafito and Antonio Celesti and Massimo Villari and Maria Fazio} } @proceedings {Famulari2014, title = {A simple architecture for secure and private data sharing solutions}, journal = {Proceedings of the 19th International Symposium on Computers and Communications (ISCC)}, year = {2014}, note = {cited By 0; Conference of 19th IEEE Symposium on Computers and Communications, ISCC 2014 ; Conference Date: 23 June 2014 Through 26 June 2014; Conference Code:108094}, publisher = {IEEE Computer Society}, address = {Island of Madeira, Funchal, Portugal, 23-26 June 2014}, abstract = {

In recent years, Storage as a Service Cloud gained popularity among both companies and private users. However, security and interoperability issues still have to be adequately faced and solved. In this work, we propose a simple, secure, and privacy-preserving architecture for inter-Cloud data sharing. The proposed solution relies on open standards for both sharing and communication mechanisms, thus ensuring durability, robustness, and compatibility of the approach in the current Internet. {\textcopyright} 2014 IEEE.

}, keywords = {Data Sharing, Interoperability, Private data sharing, security, Storage Clouds}, isbn = {9781479942787}, issn = {15301346}, doi = {10.1109/ISCC.2014.6912518}, url = {http://www.scopus.com/inward/record.url?eid=2-s2.0-84908199088\&partnerID=40\&md5=8e1066f76187a6ea0b2f4239abb3e3f0}, author = {Antonio Famulari and Francesco Longo and Giuseppe Campobello and Thomas Bonald and Marco Scarpa} } @article {51, title = {A Diversified Set Of Security Features For Xmpp Communication Systems Useful In Cloud Computing Federation}, journal = {INTERNATIONAL JOURNAL ON ADVANCES IN SECURITY}, volume = {6}, year = {2013}, pages = {99{\textendash}110}, abstract = {

Nowadays, in the panorama of Cloud Computing, finding a right compromise between interactivity and security is not trivial at all. Currently, most of Cloud providers base their communication systems on the web service technology. The problem is that both Cloud architectures and services have started as simple but they are becoming increasingly complex. Consequently, web services are often inappropriate. Recently, many operators in both academia and industry are evaluating the eXtensible Messaging and Presence Protocol for the implementation of Cloud communication systems. In fact, the XMPP offers many advantages in term of real-time capabilities, efficient data distribution, service discovery, and inter-domain communication compared to web service technologies. Nevertheless, the protocol lacks of native security features. In this paper, we explore such security issues, discussing how they can be mitigated using both SAML/SASL Single Sign-On (SSO) and XEP 0027.

}, keywords = {authentication, cloud computing, data encryption, digital signature, federation, security, sso, XMPP}, url = {http://www.iariajournals.org/security/tocv6n34.html}, author = {A. Celesti and M. Villari and A. Puliafito} }