@proceedings {345, title = {Identity Management in IoT Clouds: a FIWARE Case of Study}, journal = {2015 IEEE Conference on Communications and Network Security (CNS) - 1st Workshop on Security and Privacy in the Cloud (SPC 2015)}, year = {2015}, pages = {680-684}, publisher = {IEEE Computer Society}, address = {Florence, Italy, September 30th, 2015}, abstract = {

Nowadays, the combination between Cloud computing and Internet of Things (IoT) is pursuing new levels of efficiency in delivering services, representing a tempting business opportunity for ICT operators of increasing their revenues. However, security is seen as one of the major factors that slows down the rapid and large scale adoption and deployment of both the IoT and Cloud computing.\ 
In this paper, considering such an IoT Cloud scenario, we present an authentication model that allow IoT devices to join IoT Clouds and users to access the system. Moreover, we discuss the issues involved in applying our authentication models in a real IoT Cloud based on the FIWARE technology.

}, keywords = {authentication, cloud computing, FIWARE, Internet of Things, security}, issn = {978-1-4673-7876-5}, url = {http://www.zurich.ibm.com/spc2015/}, author = {Luciano Barreto and Antonio Celesti and Massimo Villari and Maria Fazio and Antonio Puliafito} } @article {51, title = {A Diversified Set Of Security Features For Xmpp Communication Systems Useful In Cloud Computing Federation}, journal = {INTERNATIONAL JOURNAL ON ADVANCES IN SECURITY}, volume = {6}, year = {2013}, pages = {99{\textendash}110}, abstract = {

Nowadays, in the panorama of Cloud Computing, finding a right compromise between interactivity and security is not trivial at all. Currently, most of Cloud providers base their communication systems on the web service technology. The problem is that both Cloud architectures and services have started as simple but they are becoming increasingly complex. Consequently, web services are often inappropriate. Recently, many operators in both academia and industry are evaluating the eXtensible Messaging and Presence Protocol for the implementation of Cloud communication systems. In fact, the XMPP offers many advantages in term of real-time capabilities, efficient data distribution, service discovery, and inter-domain communication compared to web service technologies. Nevertheless, the protocol lacks of native security features. In this paper, we explore such security issues, discussing how they can be mitigated using both SAML/SASL Single Sign-On (SSO) and XEP 0027.

}, keywords = {authentication, cloud computing, data encryption, digital signature, federation, security, sso, XMPP}, url = {http://www.iariajournals.org/security/tocv6n34.html}, author = {A. Celesti and M. Villari and A. Puliafito} }