@article {11714990220160901,
	title = {RESOLVING CONFLICTING PRIVACY POLICIES IN M-HEALTH BASED ON PRIORITIZATION.},
	journal = {Scalable Computing: Practice \& Experience},
	volume = {17},
	number = {3},
	year = {2016},
	pages = {207 - 226},
	abstract = {Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient{\textquoteright}s care, conflicts among the privacy policies defined by the different actors can take place. Thus, we present in this paper an approach to resolve the problem of conflicting privacy policies in e-health/m-health environments using AHP (Analytic Hierarchy Process) prioritization technique. Conflicts detection and resolution are facilitated by the adoption of S4P formal privacy policy language used as a standardized language. Finally, a case study is suggested to illustrate how our solution can be applied to resolve such conflicts. [ABSTRACT FROM AUTHOR]},
	keywords = {AHP, Conflicting policies, Data security, Medical policy, Privacy policy, Privacy preference, S4P, Wireless communication systems in medical care},
	issn = {18951767},
	url = {http://search.ebscohost.com/login.aspx?direct=true\&db=iih\&AN=117149902\&site=ehost-live},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@article { ISI:000389146000005,
	title = {RESOLVING CONFLICTING PRIVACY POLICIES IN M-HEALTH BASED ON PRIORITIZATION},
	journal = {Scalable Computing-Practice and Experience},
	volume = {17},
	number = {3, SI},
	year = {2016},
	month = {SEP},
	pages = {207-226},
	abstract = {Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient{\textquoteright}s care, conflicts among the privacy policies defined by the different actors can take place. Thus, we present in this paper an approach to resolve the problem of conflicting privacy policies in e-health/m-health environments using AHP (Analytic Hierarchy Process) prioritization technique. Conflicts detection and resolution are facilitated by the adoption of S4P formal privacy policy language used as a standardized language. Finally, a case study is suggested to illustrate how our solution can be applied to resolve such conflicts.},
	issn = {1895-1767},
	doi = {10.12694/scpe.v17i3.1181},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000391354500008,
	title = {Virtualization in Cloud Computing: NoHype vs HyperWall},
	booktitle = {2016 INTERNATIONAL CONFERENCE ON ELECTRICAL AND INFORMATION TECHNOLOGIES (ICEIT)},
	year = {2016},
	note = {2nd International Conference on Electrical and Information Technologies (ICEIT), Tangier, MOROCCO, MAY 04-07, 2016},
	pages = {49-54},
	abstract = {In the world of Cloud Computing, virtualization and virtual environments are fundamental basics for data sharing. It provides the guest user with the elements needed to execute his request, while it gives the provider the ability to be housing different guests without risking the security and integrity of data. Virtualization is based on a central component, called a hypervisor, having extra-privileges, which makes it the key component capable of managing the sharing of data and resources. In this paper, we will be analyzing different approaches which try to solve the security issues of hypervisors, and we will try to add our own contribution to increase help solving the problem of security of hypervisors based architectures.},
	isbn = {978-1-4673-8469-8},
	author = {Alouane, Meryeme and El Bakkali, Hanan},
	editor = {Essaaidi, M and ElHani, S}
}
@conference { ISI:000380407100022,
	title = {An approach for privacy policies negotiation in mobile health-Cloud environments},
	booktitle = {2015 INTERNATIONAL CONFERENCE ON CLOUD TECHNOLOGIES AND APPLICATIONS (CLOUDTECH 15)},
	year = {2015},
	note = {International Conference on Cloud Computing Technologies and Applications (CloudTech), Marrakech, MOROCCO, JUN 02-04, 2015},
	pages = {179-184},
	abstract = {Mobile technologies continue to improve patients{\textquoteright} quality of care. Particularly, with the emergence of Cloud-based mobile services and applications, patients can easily communicate with their physicians and receive the care they deserve. However, due to the increased number of privacy threats in mobile and Cloud computing environments, maximizing patients{\textquoteright} control over their data becomes a necessity. Thus, formal languages to express their privacy preferences are needed. Besides, because of the diversity of actors involved in patient{\textquoteright}s care, conflict among privacy policies can take place. In this paper, we present an approach that aims to resolve the problem of conflicting privacy policies based on a Security Policy Negotiation Framework. The major particularity of our solution is that it considers the patient to be a crucial actor in the negotiation process. The different steps of our approach are illustrated through an example of three conflicting privacy policies with different privacy languages.},
	isbn = {978-1-4673-8149-9},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000365128500017,
	title = {CIOSOS: Combined Idiomatic-Ontology Based Sentiment Orientation System for Trust Reputation in E-commerce},
	booktitle = {INTERNATIONAL JOINT CONFERENCE: CISIS{\textquoteright}15 AND ICEUTE{\textquoteright}15},
	series = {Advances in Intelligent Systems and Computing},
	volume = {369},
	year = {2015},
	note = {8th International Conference on Computational Intelligence in Security for Information Systems (CISIS) / 6th International Conference on EUropean Transnational Education (ICEUTE), Burgos, SPAIN, JUN, 2015},
	pages = {189-200},
	publisher = {IEEE Spain Sect; IEEE Syst, Man \& Cybernet Spanish Chapter; Int Federat Computat Log},
	organization = {IEEE Spain Sect; IEEE Syst, Man \& Cybernet Spanish Chapter; Int Federat Computat Log},
	abstract = {Due to the abundant amount of Customer{\textquoteright}s Reviews available in E-commerce platforms, Trust Reputation Systems remain reliable means to determine, circulate and restore the credibility and reputation of reviewers and their provided reviews. In fact before starting the process of Reputation score{\textquoteright}s calculation, we need to develop an accurate Sentiment orientation System able to extract opinion expressions, analyze them and determine the sentiment orientation of the Review and then classify it into positive, negative and objective. In this paper, we propose a novel semi-supervised approach which is a Combined Idiomatic-Ontology based Sentiment Orientation System (CIOSOS) that realizes a domain-dependent sentiment analysis of reviews. The main contribution of the system is to expand the general opinion lexicon SentiWordNet to a custom-made opinion lexicon (SentiWordNet++) with domain-dependent {\textquoteleft}{\textquoteleft}opinion indicators{{\textquoteright}{\textquoteright}} as well as {\textquoteleft}{\textquoteleft}idiomatic expressions{{\textquoteright}{\textquoteright}}. The system relies also on a semi-supervised learning method that uses the general lexicon WordNet to identify synonyms or antonyms of the expanded terms and get their polarities from SentiWordNet and then store them in SentiWordNet++. The Sentiment polarity and the classification of the review provided by the CIOSOS is used as an input of our Reputation Algorithm proposed in previous papers in order to generate the Reputation score of the reviewer. We also provide an improvement in calculation method used to generate a {\textquoteleft}{\textquoteleft}granular{{\textquoteright}{\textquoteright}} reputation score of a feature or subfeature of the product.},
	isbn = {978-3-319-19713-5; 978-3-319-19712-8},
	issn = {2194-5357},
	doi = {10.1007/978-3-319-19713-5\_17},
	author = {Rahimi, Hasnae and El Bakkali, Hanan},
	editor = {Herrero, A and Baruque, B and Sedano, J and Quintian, H and Corchado, E}
}
@conference { ISI:000380407100034,
	title = {Security, Privacy and Trust in Cloud Computing: A Comparative Study},
	booktitle = {2015 INTERNATIONAL CONFERENCE ON CLOUD TECHNOLOGIES AND APPLICATIONS (CLOUDTECH 15)},
	year = {2015},
	note = {International Conference on Cloud Computing Technologies and Applications (CloudTech), Marrakech, MOROCCO, JUN 02-04, 2015},
	pages = {23-30},
	abstract = {{\textquoteleft}{\textquoteleft}Use the computer without a computer,{{\textquoteright}{\textquoteright}} this is the dream of all managers who believe in {\textquoteleft}{\textquoteleft}Cloud Computing{{\textquoteright}{\textquoteright}}. The Cloud has become a dream and an obsession for all fans of the computer because of the many benefits this service offers: availability of services and data is ensured, cost is relative to consumption, ease of deployment, technical infrastructure is adaptable to the volume of business activity, its convenience to the common business applications (CRM, HR, BI, ERP, mail, etc.), the fact that this service provides a business function and not the technical components requiring computer skills. Besides these advantages, there are serious risks related to the use of Cloud computing, such as: temporary or permanent loss of data, security of data, lack of traceability and accountability. These risks are the main challenges faced while adopting a Cloud computing architecture. In this paper, we studied the literature focusing on three major notions on collaborative systems in Cloud computing: Security, privacy and trust. That{\textquoteright}s why we will try to bring out the main requirements regarding these three concepts from both points of view (user{\textquoteright}s and provider{\textquoteright}s), before presenting some related approaches which treat these three concepts.},
	isbn = {978-1-4673-8149-9},
	author = {Alouane, Meryeme and El Bakkali, Hanan}
}
@conference { ISI:000380450300019,
	title = {Towards negotiable privacy policies in Mobile Healthcare},
	booktitle = {FIFTH INTERNATIONAL CONFERENCE ON THE INNOVATIVE COMPUTING TECHNOLOGY (INTECH 2015)},
	year = {2015},
	note = {International Conference on the Innovative Computing Technology (INTECH), Galicia, SPAIN, MAY 20-22, 2015},
	pages = {94-99},
	abstract = {With the increased use of mobile technologies in the health sector, patients are more and more concerned about their privacy protection. Particularly, due to the diversity of actors (physicians, healthcare organizations, Cloud providers.) and the heterogeneity of privacy policies defined by each actor, conflicts among these policies may occur. We believe that negotiation is one of the best techniques for resolving the issue of conflicting privacy policies. From this perspective, we present an approach and algorithm to negotiate privacy policies based on an extension of the bargaining model. Besides, in order to show how our solution can be applied, we present an example of conflicting privacy policies expressed using S4P, a generic language for specifying privacy preferences and policies.},
	isbn = {978-1-4673-7551-1},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000380428300031,
	title = {PPAMH: A Novel Privacy-Preserving Approach for Mobile Healthcare},
	booktitle = {2014 9TH INTERNATIONAL CONFERENCE FOR INTERNET TECHNOLOGY AND SECURED TRANSACTIONS (ICITST)},
	year = {2014},
	note = {International Conference for Internet Technology and Secured Transactions{*}, London, ENGLAND, DEC 08-10, 2014},
	pages = {209-214},
	abstract = {Mobile technologies are transforming the way providers and patients communicate. Thanks to mobile devices such as smartphones, tablets and patient monitoring devices, real time patient information is easily provided to physicians; patients are integrated in managing their own health by measuring their blood pressure, exercise and food diaries, setting reminders on when to take medicines and so on. However, although mobile healthcare offers many benefits, there is also a downside to using these mobile technologies. Privacy is among the primary issues to address. In effect, Patients{\textquoteright} sensitive medical data can be exchanged between different parties including physicians, patients with the same diseases, laboratories, pharmacies. Furthermore, since mobile devices are not only used for healthcare purposes, new privacy breaches may occur. Thus, patients become very concerned about {\textquoteleft}{\textquoteleft}what happen{{\textquoteright}{\textquoteright}} to their data. In this paper, we present a Privacy-Preserving Approach for Mobile Healthcare named PPIAMH. The proposed solution allows patients to control the disclosure of their sensitive medical data while using their mobile devices based on an intelligent mobile application which predict their privacy preferences easily.},
	isbn = {978-1-908320-39-1},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000366999600120,
	title = {Towards controlled-privacy in e-health: A comparative study},
	booktitle = {2014 INTERNATIONAL CONFERENCE ON MULTIMEDIA COMPUTING AND SYSTEMS (ICMCS)},
	year = {2014},
	note = {International Conference on Multimedia Computing and Systems (ICMCS), Marrakech, MOROCCO, APR 14-16, 2014},
	pages = {680-685},
	abstract = {Technological advances in electronic services have made it easier than ever before to access and share different kinds of data. In the healthcare sector, the exchange of patients{\textquoteright} information between different actors (hospitals, laboratories, pharmacies...) improves diagnosis and treatment quality and reduces related costs. However, this exchange arise new security concerns and makes patient information subject to privacy breaches. In the literature, several privacy-preserving approaches have been proposed, most of which focus on protecting private data using cryptographic, access control or anonymitization techniques. Thus, the patient becomes a passive actor regarding the disclosure of his personal information. In this paper we consider the following question: should patients only rely on third parties to protect their sensitive data or shall they be granted some kind of control to select the level of privacy and security they want? In this context, we propose a comparative study of some recent work in the area of e-services privacy. The analysis of this study shows that data privacy is not fairly user controlled particularly in the health sector.},
	isbn = {978-1-4799-3824-7},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@article {10115338520131101,
	title = {A New Feedback-Analysis based Reputation Algorithm for E-Commerce Communities.},
	journal = {E-Ti: E-Review in Technologies Information},
	number = {7},
	year = {2013},
	pages = {46 - 58},
	abstract = {Dealing with the ever-growing content generated by users in the e-commerce applications, Trust Reputation Systems (TRS) are widely used online to provide the trust reputation of each product using the customers{\textquoteright} ratings. However, there is also a good number of online customer reviews and feedback that must be used by the TRS. As a result, we propose in this work a new architecture for TRS in e-commerce application which includes feedback{\textquoteright} mining in order to calculate reputation scores. This architecture is based on an intelligent layer that proposes to each user (i.e. {\guillemotleft}feedback provider{\guillemotright}) who has already given his recommendation, a collection of prefabricated feedback to like or dislike. Then the proposed reputation algorithm calculates the trust degree of the user, the feedback{\textquoteright}s trustworthiness and generates the global reputation score of the product according to his {\guillemotleft}likes{\guillemotright} and {\guillemotleft}dislikes{\guillemotright}. In this work, we present also a state of the art of text mining tools and algorithms that can},
	keywords = {Algorithms, analyse de sentiment, e-commerce, Electronic commerce, La confiance, le e-commerce, le textmining, les feedback textuels, les syst{\`e}mes de r{\'e}putation, Reliability (Personality trait), Sentiment analysis, text mining, Text mining (Information retrieval), textual feedback, Trust, Trust Reputation Systems, Virtual communities},
	issn = {11148802},
	url = {http://search.ebscohost.com/login.aspx?direct=true\&db=iih\&AN=101153385\&site=ehost-live},
	author = {Rahimi, Hasnae and El Bakkali, Hanan}
}
@conference { ISI:000327787500003,
	title = {A New Reputation Algorithm for Evaluating Trustworthiness in E-Commerce Context},
	booktitle = {2013 NATIONAL SECURITY DAYS (JNS3)},
	year = {2013},
	note = {3rd National Security Days (JNS), Mohammed V Souissi Unvi, Rabat, MOROCCO, APR 26-27, 2013},
	publisher = {Assoc Marocaine ConfiAnace Numerique; Ecole Nationale Superieure Informatique \& Analyse Syst; Informat Secur Res Team; IEEE Morocco Sect; Bank Al Maghrib; Natl Ctr Sci \& Technol Res},
	organization = {Assoc Marocaine ConfiAnace Numerique; Ecole Nationale Superieure Informatique \& Analyse Syst; Informat Secur Res Team; IEEE Morocco Sect; Bank Al Maghrib; Natl Ctr Sci \& Technol Res},
	abstract = {Thanks to their ability to detect fraud, poor quality and ill-intentioned feedbacks and scores in online environments, robust Trust Reputation Systems (TRS) provide actionable information to support relying parties taking the right decision in any electronic transaction. In fact, as security providers in e-services, TRS have to faithfully calculate the most trustworthy score for a targeted product or service. Thus, TRS must rely on a robust architecture and suitable algorithms that are able to select, store, generate and classify scores and feedbacks. In this work, we propose a new architecture for TRS in e-commerce application which includes feedbacks{\textquoteright} analysis in its treatment of scores. In fact, this architecture is based on an intelligent layer that proposes to each user (i.e. {\textquoteleft}{\textquoteleft}feedback provider{{\textquoteright}{\textquoteright}}) who has already given his recommendation, a collection of prefabricated feedbacks summarizing other users{\textquoteright} textual feedbacks. A proposed algorithm is used by this architecture in order to calculate the trust degree of the user, the feedback{\textquoteright}s trustworthiness and generates the global reputation score of the product.},
	isbn = {978-1-4799-0324-5},
	author = {Rahimi, Hasnae and El Bakkali, Hanan}
}
@conference { ISI:000289216200022,
	title = {A New Task Engineering Approach for Workflow Access Control},
	booktitle = {COMPUTATIONAL INTELLIGENCE IN SECURITY FOR INFORMATION SYSTEMS 2010},
	series = {Advances in Intelligent and Soft Computing},
	volume = {85},
	year = {2010},
	note = {3rd International Conference on Computational Intelligence in Security for Information Systems, Leon, SPAIN, NOV 11-12, 2010},
	pages = {203-212},
	publisher = {Junta Castilla Leon; Supercomputing Ctr Castilla Leon; Univ Leon; IEEE SECCION ESPANA; IEEE Syst Man \& Cybernet Spanish Chapter; MIR Lab; Int Fed Comp Logic},
	organization = {Junta Castilla Leon; Supercomputing Ctr Castilla Leon; Univ Leon; IEEE SECCION ESPANA; IEEE Syst Man \& Cybernet Spanish Chapter; MIR Lab; Int Fed Comp Logic},
	abstract = {Security and particularly Access control is a crucial issue for workflow management systems (WFMS). RBAC (Role based Access Control) model seems to be suitable for enforcing access control policies in such systems. However, without an effective role engineering process -at administration time- that aims to reduce conflicting situations. using RBAC could be more complex and less useful. Additionally to role engineering, a {\textquoteleft}task engineering{\textquoteright} process at run time- could be useful to allow the satisfaction of access control constraints in even critical situations. In this paper, we identify task engineering as a process to examine the granularity of each workflow{\textquoteright}s task in a way to meet at run time- the main workflow access control requirements, precisely the least privilege and separation of duties principles. Then, we propose an approach of task engineering to improve security enforcement in WFMS. This approach uses an intelligent method namely the Constraints Satisfaction Problem (CSP) formulation and resolution method.},
	isbn = {978-3-642-16625-9},
	issn = {1867-5662},
	author = {El Bakkali, Hanan and Hatim, Hamid and Berrada, Ilham},
	editor = {Herrero, A and Corchado, E and Redondo, C and Alonso, A}
}
