@article {Zaazaa2022449,
	title = {Automatic Static Vulnerability Detection Approaches and Tools: State of the Art},
	journal = {Lecture Notes in Networks and Systems},
	volume = {357 LNNS},
	year = {2022},
	note = {cited By 0},
	pages = {449-459},
	abstract = {Software vulnerabilities are behind many cybersecurity threats. In fact, if they are exploited, they could cause severe damage to an organization. Thus, finding vulnerabilities in software is a crucial process. However, it often needs both time and expertise. Fortunately, many researchers have focused on automating this process to accelerate the finding of vulnerabilities. Some have worked on making static vulnerability discovery more effective; others have concentrated their research on developing dynamic analysis techniques. This paper presents some of the research that focuses on static analysis approaches and discusses the main differences between them. At the end of this paper, we experiment and analyze the most popular tools that have implemented these approaches and their main weaknesses. {\textcopyright} 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.},
	doi = {10.1007/978-3-030-91738-8_41},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85124134162\&doi=10.1007\%2f978-3-030-91738-8_41\&partnerID=40\&md5=e3e3f79893f511026534ba162ef13ec5},
	author = {Zaazaa, O. and El Bakkali, H.}
}
@article {Boughrous2022321,
	title = {The Pandemic Impact on Organizations Security and Resiliency: The Workflow Satisfiability Problem},
	journal = {Lecture Notes in Networks and Systems},
	volume = {420 LNNS},
	year = {2022},
	note = {cited By 0},
	pages = {321-329},
	abstract = {The new work model imposed during the pandemic impacted organizations badly, especially those with rigid business strategies. Therefore, they were forced to provide digital platforms for their clients and allow remote work for employees. The rapid shift to remote work increased cyberthreats and attack vectors. Thus, organizations had to enforce their security policy, apply security constraints for a safe and secure inter-organizational collaborations. Consequently, the absence of employees because of the pandemic and the rigid application of the security policy caused the unavailability of collaborating organizations. Thus, the execution of inter-organizational workflow may not be complete, which increases the possibility that the workflow satisfiability problem (WSP) occurs. In this paper, we present an approach to selecting an inter-organizational workflow assignment plan. It uses the multicriteria decision method and Bayesian inference to select organizations for collaboration. The approach aims to ensure resilient and secure inter-organizational workflow execution with a low probability for the WSP. {\textcopyright} 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.},
	doi = {10.1007/978-3-030-96305-7_30},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85126376866\&doi=10.1007\%2f978-3-030-96305-7_30\&partnerID=40\&md5=15bd75caca2d063eff65da1b12210dba},
	author = {Boughrous, M. and El Bakkali, H. and El Kandoussi, A.}
}
@article {ElMajdoubi2022,
	title = {The Systematic Literature Review of Privacy-Preserving Solutions in Smart Healthcare Environment},
	journal = {Security and Communication Networks},
	volume = {2022},
	year = {2022},
	note = {cited By 0},
	abstract = {The rapid development of the Internet of Medical Things (IoMT) technology has resulted in various advances in the smart healthcare field; it improves healthcare systems to offer more complicated real-time services and provides an efficient patient motioning system. However, despite the brilliant side of IoMT, several concerns continue to undercut its adoption. In fact, collecting, transmitting, storing, and using data in IoMT applications raises issues regarding privacy and data protection, especially with the multitude of stakeholders involved during the whole data life cycle. Motivated from these facts, this article is devoted to perform a Systematic Literature Review (SLR) of privacy-preserving solutions used in the smart healthcare ecosystem. The recent research papers disseminated between 2017 and 2021 are selected from multiple databases and a standardized SLR method is conducted. A total of 100 papers were reviewed and a critical analysis was conducted on the selected papers. Moreover, this review study attempts to highlight the limitation of the current approaches and aims to find possible solutions to them. Thus, a detailed analysis was carried out on the selected papers in terms of the privacy techniques they deployed, the data life cycle phase they addressed, the stakeholders needs they met, and the privacy principles they covered according to privacy laws and regulations. Finally, we summarize our results showing privacy-preserving trends and identifying recommendations to involve privacy principles coverage in smart healthcare applications. {\textcopyright} 2022 Driss El Majdoubi et al.},
	keywords = {Critical analysis, Data life cycle, Health care, Healthcare environments, Healthcare systems, Information services, Laws and legislation, Life cycle, Paper, Privacy preserving solutions, Privacy principle, Privacy-preserving techniques, Real time service, Real time systems, Recent researches, Research papers, Systematic literature review},
	doi = {10.1155/2022/5642026},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127472073\&doi=10.1155\%2f2022\%2f5642026\&partnerID=40\&md5=8fdf8807c5263ec2fe00933f24b13e2a},
	author = {El Majdoubi, D. and El Bakkali, H. and Sadki, S. and Maqour, Z. and Leghmid, A.}
}
@article {ElKandoussi2021350,
	title = {Automated security driven solution for inter-organizational workflows},
	journal = {Advances in Intelligent Systems and Computing},
	volume = {1179 AISC},
	year = {2021},
	note = {cited By 0},
	pages = {350-361},
	abstract = {This paper presents a new solution to deal with security in dynamic Inter-Organizational Workflow (IOW) Systems. The IOW system aims to support the collaboration between distributed business processes running in several autonomous organizations in order to complete a set of common goals. In such dynamic environments, where participating organizations (partners) in the IOW are not known before its execution, many security breaches could arise. Thus, we propose a new automated security-driven solution based on i) partner selection ii) access control partner negotiation and policy conflict resolution. {\textcopyright} The Editor(s) (if applicable) and The Author(s), under exclusive license to Springer Nature Switzerland AG 2021.},
	keywords = {Access control, Business Process, Dynamic environments, Intelligent systems, Inter-Organizational workflow, Inter-organizational workflows, Partner selection, Policy conflict, Running-in, Security breaches},
	doi = {10.1007/978-3-030-49336-3_35},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85089717314\&doi=10.1007\%2f978-3-030-49336-3_35\&partnerID=40\&md5=b0b03a78e31324087b3748ca67ca2c4d},
	author = {El Kandoussi, A. and El Bakkali, H.}
}
@article {Abou-zbiba2021311,
	title = {A Novel Mobile CrowdSensing Architecture for Road Safety},
	journal = {Lecture Notes in Networks and Systems},
	volume = {183},
	year = {2021},
	note = {cited By 0},
	pages = {311-324},
	abstract = {Intelligent Transportation Systems have become an essential part of today{\textquoteright}s transportation systems as they aim to enhance efficiency, safety and mobility. They rely particularly on various communication and sensing technologies to achieve their objectives. At this level, Mobile CrowdSensing presents a cost-efficient solution and provides interesting features for data collection which is a major component in ITS. However, it still faces some challenges such as lack of incentive mechanisms, data validation, privacy and security. These challenges motivate us to propose a Mobile CrowdSensing architecture for our future SI-CAR (Secure and Intelligent Crowdsensing Application for Road Safety) application that integrates deep learning-based data validation, edge computing-based local processing for data privacy and gamification based-incentive mechanism. {\textcopyright} 2021, The Author(s), under exclusive license to Springer Nature Switzerland AG.},
	doi = {10.1007/978-3-030-66840-2_24},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85102625921\&doi=10.1007\%2f978-3-030-66840-2_24\&partnerID=40\&md5=625844bcb30cf1f884057c1415e851e2},
	author = {Abou-zbiba, W. and El Gadi, H. and El Bakkali, H. and Benbrahim, H. and Benhaddou, D.}
}
@book {ElOuazzani20211503,
	title = {Privacy Preserving in Digital Health: Main Issues, Technologies, and Solutions},
	series = {Research Anthology on Privatizing and Securing Data},
	year = {2021},
	note = {cited By 1},
	pages = {1503-1526},
	abstract = {Recently, digital health solutions are taking advantage of recent advances in information and communication technologies. In this context, patients{\textquoteright} health data are shared with other stakeholders. Moreover, it{\textquoteright}s now easier to collect massive health data due to the rising use of connected sensors in the health sector. However, the sensitivity of this shared healthcare data related to patients may increase the risks of privacy violation. Therefore, healthcare-related data need robust security measurements to prevent its disclosure and preserve patients{\textquoteright} privacy. However, in order to make well-informed decisions, it is often necessary to allow more permissive security policies for healthcare organizations even without the consent of patients or against their preferences. The authors of this chapter concentrate on highlighting these challenging issues related to patient privacy and presenting some of the most significant privacy preserving approaches in the context of digital health. {\textcopyright} 2021, IGI Global.},
	doi = {10.4018/978-1-7998-8954-0.ch072},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127530934\&doi=10.4018\%2f978-1-7998-8954-0.ch072\&partnerID=40\&md5=79d0013c567793bf90816fc766b5c8c2},
	author = {El Ouazzani, Z. and El Bakkali, H. and Sadki, S.}
}
@article {ElOuazzani2021,
	title = {Proximity Measurement for Hierarchical Categorical Attributes in Big Data},
	journal = {Security and Communication Networks},
	volume = {2021},
	year = {2021},
	note = {cited By 0},
	abstract = {Nearly most of the organizations store massive amounts of data in large databases for research, statistics, and mining purposes. In most cases, much of the accumulated data contain sensitive information belonging to individuals which may breach privacy. Hence, ensuring privacy in big data is considered a very important issue. The concept of privacy aims to protect sensitive information from various attacks that may violate the identity of individuals. Anonymization techniques are considered the best way to ensure privacy in big data. Various works have been already realized, taking into account horizontal clustering. The L-diversity technique is one of those techniques dealing with sensitive numerical and categorical attributes. However, the majority of anonymization techniques using L-diversity principle for hierarchical data cannot resist the similarity attack and therefore cannot ensure privacy carefully. In order to prevent the similarity attack while preserving data utility, a hybrid technique dealing with categorical attributes is proposed in this paper. Furthermore, we highlighted all the steps of our proposed algorithm with detailed comments. Moreover, the algorithm is implemented and evaluated according to a well-known information loss-based criterion which is Normalized Certainty Penalty (NCP). The obtained results show a good balance between privacy and data utility. {\textcopyright} 2021 Zakariae El Ouazzani et al.},
	keywords = {Big data, Categorical attributes, Data utilities, Hierarchical data, Hybrid techniques, Information loss, Large database, Privacy by design, Sensitive informations, Various attacks},
	doi = {10.1155/2021/6612923},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85111105073\&doi=10.1155\%2f2021\%2f6612923\&partnerID=40\&md5=a1855aa8b73f4bcdebad1b181b25c7ac},
	author = {El Ouazzani, Z. and Braeken, A. and El Bakkali, H.}
}
@article {Boughrous2021,
	title = {A Workflow Criticality-Based Approach to Bypass the Workflow Satisfiability Problem},
	journal = {Security and Communication Networks},
	volume = {2021},
	year = {2021},
	note = {cited By 1},
	abstract = {Workflow management systems are very important for any organization to manage and model complex business processes. However, significant work is needed to keep a workflow resilient and secure. Therefore, organizations apply a strict security policy and enforce access control constraints. As a result, the number of available and authorized users for the workflow execution decreases drastically. Thus, in many cases, such a situation leads to a workflow deadlock situation, where there no available authorized user-task assignments for critical tasks to accomplish the workflow execution. In the literature, this problem has gained interest of security researchers in the recent years, and is known as the workflow satisfiability problem (WSP). In this paper, we propose a new approach to bypass the WSP and to ensure workflow resiliency and security. For this purpose, we define workflow criticality, which can be used as a metric during run-time to prevent WSP. We believe that the workflow criticality value will help workflow managers to make decisions and start a mitigation solution in case of a critical workflow. Moreover, we propose a delegation process algorithm (DP) as a mitigation solution that uses workflow instance criticality, delegation, and priority concepts to find authorized and suitable users to perform the critical task with low-security risks. {\textcopyright} 2021 Monsef Boughrous and Hanan El Bakkali.},
	keywords = {Access control, Authorized users, Business Process, Control constraint, Critical tasks, Criticality (nuclear fission), Formal logic, Model complexes, Satisfiability problems, Security policy, Work simplification, Work-flows, Workflow execution, Workflow management systems},
	doi = {10.1155/2021/3330923},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85124874650\&doi=10.1155\%2f2021\%2f3330923\&partnerID=40\&md5=a958e90ff68d41b558bc1c7246398557},
	author = {Boughrous, M. and El Bakkali, H.}
}
@article {ElOuazzani2020142,
	title = {A classification of non-cryptographic anonymization techniques ensuring privacy in big data},
	journal = {International Journal of Communication Networks and Information Security},
	volume = {12},
	number = {1},
	year = {2020},
	note = {cited By 6},
	pages = {142-152},
	abstract = {Recently, Big Data processing becomes crucial to most enterprise and government applications due to the fast growth of the collected data. However, this data often includes private personal information that arise new security and privacy concerns. Moreover, it is widely agreed that the sheer scale of big data makes many privacy preserving techniques unavailing. Therefore, in order to ensure privacy in big data, anonymization is suggested as one of the most efficient approaches. In this paper, we will provide a new detailed classification of the most used non-cryptographic anonymization techniques related to big data including generalization and randomization approaches. Besides, the paper evaluates the presented techniques through integrity, confidentiality and credibility criteria. In addition, three relevant anonymization techniques including k-anonymity, l-diversity and t-closeness are tested on an extract of a huge real data set. {\textcopyright} 2020, Kohat University of Science and Technology.},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85087292674\&partnerID=40\&md5=785b0ce48df310cdcdd67ad945490264},
	author = {El Ouazzani, Z. and El Bakkali, H.}
}
@conference {Zaazaa2020,
	title = {Dynamic vulnerability detection approaches and tools: State of the Art},
	booktitle = {4th International Conference on Intelligent Computing in Data Sciences, ICDS 2020},
	year = {2020},
	note = {cited By 0},
	abstract = {Vulnerabilities are everywhere around us. Every device we use in our daily life include a software that may contain vulnerabilities. The growth use of software and devices to automate some of our daily life actions is making these programs more complex and more connected to the internet, which increase the risk of cyber-attacks. To reduce this risk, multiple programming companies are trying to use different approaches to find these vulnerabilities. Some are using static approaches during the software development life cycle while others are using dynamic analysis approaches to find vulnerabilities once the application is correctly working. Unfortunately, both approaches still suffer from multiple limitation and still need improvement. In this paper, we are discussing some of the most recent dynamic approaches and the efficient of the tools that use them. {\textcopyright} 2020 IEEE.},
	keywords = {Analysis approach, Application programs, Cyber-attacks, Daily lives, Data Science, Dynamic approaches, Intelligent computing, Network security, Software design, Software development life cycle, State of the art, Static approach, Vulnerability detection},
	doi = {10.1109/ICDS50568.2020.9268686},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85098666133\&doi=10.1109\%2fICDS50568.2020.9268686\&partnerID=40\&md5=faef5d40937e4c62a3326a3576d0e8e8},
	author = {Zaazaa, O. and El Bakkali, H.}
}
@conference {Iraqi202024,
	title = {Immunizer: A Scalable Loosely-Coupled Self-Protecting Software Framework using Adaptive Microagents and Parallelized Microservices},
	booktitle = {Proceedings of the Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE},
	volume = {2020-September},
	year = {2020},
	note = {cited By 2},
	pages = {24-27},
	abstract = {IT professionals are overwhelmed by rapidly-changing technology and growing complexity. Additional challenges are introduced by cyber-security. Self-protecting software tries to alleviate this situation by combining principles and techniques from both autonomic computing and software security. However, this combination creates scalability issues, as well as cross-cutting concerns. In this work, we present Immunizer: A Scalable Loosely-Coupled Self-Protecting Software Framework. Immunizer extends our Application-level Unsupervised Outlier-based Intrusion Detection and Prevention Framework by leveraging the architectural building blocks of autonomic computing, and adopting a microagent/microservice architectural model, augmented with distributed cluster computing, for maximum scalability and separation of concerns. More specifically, we design each of the Monitor, Analyze, Plan and Execute functions of the autonomic MAPE-K control loop as a parallelized microservice, while we model its Knowledge function as a data streaming, caching and storage infrastructure. Moreover, we design the Sensor and Effector touchpoint modules as adaptive lightweight runtime application instrumentation microagents. {\textcopyright} 2020 IEEE.},
	keywords = {Architectural buildings, Architectural modeling, Cluster computing, Computer programming, Control systems, Cross-cutting concerns, Digital storage, Distributed clusters, Immunization, Intrusion detection, Intrusion detection and prevention, Scalability, Separation of concerns, Software frameworks, Storage infrastructure},
	doi = {10.1109/WETICE49692.2020.00013},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85100768767\&doi=10.1109\%2fWETICE49692.2020.00013\&partnerID=40\&md5=8dd6bb02a0433738b505ad00e964a1af},
	author = {Iraqi, O. and El Bakkali, H.}
}
@article {ElOuazzani2019125,
	title = {Privacy in big data through variable t-closeness for MSN attributes},
	journal = {Lecture Notes in Networks and Systems},
	volume = {49},
	year = {2019},
	note = {cited By 0},
	pages = {125-141},
	doi = {10.1007/978-3-319-97719-5_9},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85063295369\&doi=10.1007\%2f978-3-319-97719-5_9\&partnerID=40\&md5=04a9a65601ac043a62f9401a6b64015f},
	author = {El Ouazzani, Z. and El Bakkali, H.}
}
@article {Boughrous2018361,
	title = {A comparative study on access control models and security requirements in workflow systems},
	journal = {Advances in Intelligent Systems and Computing},
	volume = {735},
	year = {2018},
	pages = {361-373},
	doi = {10.1007/978-3-319-76354-5_33},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85044028585\&doi=10.1007\%2f978-3-319-76354-5_33\&partnerID=40\&md5=851681ec1b732c7bb36870825ef48643},
	author = {Boughrous, M. and El Bakkali, H.}
}
@conference {ElOuazzani201852,
	title = {A new technique ensuring privacy in big data: K-Anonymity without prior value of the threshold k},
	booktitle = {Procedia Computer Science},
	volume = {127},
	year = {2018},
	pages = {52-59},
	doi = {10.1016/j.procs.2018.01.097},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85045639418\&doi=10.1016\%2fj.procs.2018.01.097\&partnerID=40\&md5=7faf56ed974b78a28fd943ceddc84f39},
	author = {El Ouazzani, Z. and El Bakkali, H.}
}
@article {ElUahhabi2018103,
	title = {Trust assessment of X.509 certificate based on certificate authority trustworthiness and its certificate policy},
	journal = {International Journal of Internet Technology and Secured Transactions},
	volume = {8},
	number = {1},
	year = {2018},
	pages = {103-136},
	doi = {10.1504/IJITST.2018.092139},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85048039393\&doi=10.1504\%2fIJITST.2018.092139\&partnerID=40\&md5=001e331c35e77ea672600c17014533a2},
	author = {El Uahhabi, Z. and El Bakkali, H.}
}
@article {ElKandoussi2018350,
	title = {Weighted access control policies cohabitation in distributed systems},
	journal = {Advances in Intelligent Systems and Computing},
	volume = {735},
	year = {2018},
	pages = {350-360},
	doi = {10.1007/978-3-319-76354-5_32},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85044043345\&doi=10.1007\%2f978-3-319-76354-5_32\&partnerID=40\&md5=4518ef85bbd3fa0aece3d49d4340bf97},
	author = {El Kandoussi, A. and El Bakkali, H.}
}
@article {Iraqi2017348,
	title = {Toward third-party immune applications},
	journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},
	volume = {10446 LNCS},
	year = {2017},
	note = {cited By 0},
	pages = {348-359},
	abstract = {Component reuse has become a trend in software engineering. However, third-party components have the potential to introduce vulnerabilities into software applications and become the weakest link in the security chain. In this paper, we discuss the limitations of traditional security practices and controls against vulnerable components. As a solution, we present a software design and development approach, combined with a collaborative, cloud-based vulnerability and threat management system. This combination aims at enabling applications to gain {\textquotedblleft}artificial immunity{\textquotedblright} to third-party components by dynamically identifying and controlling related security risks. It also strives to promote the automatic discovery of, and near real-time information dissemination about emerging threats and zero-day vulnerabilities. At the heart of our solution, we use application-level API sandboxing, as well as adaptive signature-based and anomaly-based API intrusion detection and prevention. The need-to-know, cost-effectiveness, and user acceptance through separation of concerns have been our guiding security engineering principles. {\textcopyright} 2017, Springer International Publishing AG.},
	doi = {10.1007/978-3-319-65127-9_28},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85028464409\&doi=10.1007\%2f978-3-319-65127-9_28\&partnerID=40\&md5=a4030cd1451089f90416806509d76446},
	author = {Iraqi, O. and El Bakkali, H.}
}
@conference {Alouane2017116,
	title = {Virtualization in Cloud Computing: Existing solutions and new approach},
	booktitle = {Proceedings of 2016 International Conference on Cloud Computing Technologies and Applications, CloudTech 2016},
	year = {2017},
	note = {cited By 0},
	pages = {116-123},
	abstract = {Virtualization and virtual environments are fundamental basics for data sharing in Cloud Computing. It is benefic for both the guest user and the provider: while it provides the first with the elements needed to execute his request, it gives the second the ability to be housing different guests with no additional cost. The central component in a virtual architecture is called hypervisor, having extra-privileges, which makes it able to play fundamental role of managing the sharing of data and resources. This hypervisor has many advantages regarding the cost, the simplicity of execution, the availability... But in the other hand, the major role played by this element makes it the perfect target for malicious users aiming to attack the virtual system. In this paper, we will analyze different approaches which try to solve the security issues of hypervisors, and then we will propose our own contribution to increase security in hypervisor related architectures. {\textcopyright} 2016 IEEE.},
	doi = {10.1109/CloudTech.2016.7847687},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85013858869\&doi=10.1109\%2fCloudTech.2016.7847687\&partnerID=40\&md5=3848d0b00f65c22e3ac3d36e219d9ee9},
	author = {Alouane, M. and El Bakkali, H.}
}
@article {Sadki2016207,
	title = {Resolving conflicting privacy policies in M-health based on prioritization},
	journal = {Scalable Computing},
	volume = {17},
	number = {3},
	year = {2016},
	note = {cited By 1},
	pages = {207-226},
	abstract = {Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient{\textquoteright}s care, conflicts among the privacy policies defined by the different actors can take place. Thus, we present in this paper an approach to resolve the problem of conflicting privacy policies in e-health/m-health environments using AHP (Analytic Hierarchy Process) prioritization technique. Conflicts detection and resolution are facilitated by the adoption of S4P formal privacy policy language used as a standardized language. Finally, a case study is suggested to illustrate how our solution can be applied to resolve such conflicts. {\textcopyright} 2016 SCPE.},
	doi = {10.12694/scpe.v17i3.1181},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84986308427\&doi=10.12694\%2fscpe.v17i3.1181\&partnerID=40\&md5=3bd7feaa7560d5e70202fd7c24907f06},
	author = {Sadki, S. and El Bakkali, H.}
}
@conference {Alouane201649,
	title = {Virtualization in Cloud Computing: NoHype vs HyperWall new approach},
	booktitle = {Proceedings of 2016 International Conference on Electrical and Information Technologies, ICEIT 2016},
	year = {2016},
	note = {cited By 0},
	pages = {49-54},
	abstract = {In the world of Cloud Computing, virtualization and virtual environments are fundamental basics for data sharing. It provides the guest user with the elements needed to execute his request, while it gives the provider the ability to be housing different guests without risking the security and integrity of data. Virtualization is based on a central component, called a hypervisor, having extra-privileges, which makes it the key component capable of managing the sharing of data and resources. In this paper, we will be analyzing different approaches which try to solve the security issues of hypervisors, and we will try to add our own contribution to increase help solving the problem of security of hypervisors based architectures. {\textcopyright} 2016 IEEE.},
	doi = {10.1109/EITech.2016.7519629},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84992192250\&doi=10.1109\%2fEITech.2016.7519629\&partnerID=40\&md5=544c725260cc9a240cc98001c3225484},
	author = {Alouane, M. and El Bakkali, H.}
}
@conference {Sadki2015,
	title = {An approach for privacy policies negotiation in mobile health-Cloud environments},
	booktitle = {Proceedings of 2015 International Conference on Cloud Computing Technologies and Applications, CloudTech 2015},
	year = {2015},
	note = {cited By 0},
	abstract = {Mobile technologies continue to improve patients{\textquoteright} quality of care. Particularly, with the emergence of Cloud-based mobile services and applications, patients can easily communicate with their physicians and receive the care they deserve. However, due to the increased number of privacy threats in mobile and Cloud computing environments, maximizing patients{\textquoteright} control over their data becomes a necessity. Thus, formal languages to express their privacy preferences are needed. Besides, because of the diversity of actors involved in patient{\textquoteright}s care, conflict among privacy policies can take place. In this paper, we present an approach that aims to resolve the problem of conflicting privacy policies based on a Security Policy Negotiation Framework. The major particularity of our solution is that it considers the patient to be a crucial actor in the negotiation process. The different steps of our approach are illustrated through an example of three conflicting privacy policies with different privacy languages. {\textcopyright} 2015 IEEE.},
	doi = {10.1109/CloudTech.2015.7336983},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84962886191\&doi=10.1109\%2fCloudTech.2015.7336983\&partnerID=40\&md5=ee5946b2a8e87fa592145c3a5512d21c},
	author = {Sadki, S. and El Bakkali, H.}
}
@conference {Alouane2015,
	title = {Security, privacy and trust in cloud computing: A comparative study},
	booktitle = {Proceedings of 2015 International Conference on Cloud Computing Technologies and Applications, CloudTech 2015},
	year = {2015},
	note = {cited By 0},
	abstract = {"Use the computer without a computer," this is the dream of all managers who believe in "Cloud Computing". The Cloud has become a dream and an obsession for all fans of the computer because of the many benefits this service offers: availability of services and data is ensured, cost is relative to consumption, ease of deployment, technical infrastructure is adaptable to the volume of business activity, its convenience to the common business applications (CRM, HR, BI, ERP, mail, etc.), the fact that this service provides a business function and not the technical components requiring computer skills..., Besides these advantages, there are serious risks related to the use of Cloud computing, such as: temporary or permanent loss of data, security of data, lack of traceability and accountability... These risks are the main challenges faced while adopting a Cloud computing architecture., In this paper, we studied the literature focusing on three major notions on collaborative systems in Cloud computing: Security, privacy and trust. That{\textquoteright}s why we will try to bring out the main requirements regarding these three concepts from both points of view (user{\textquoteright}s and provider{\textquoteright}s), before presenting some related approaches which treat these three concepts. {\textcopyright} 2015 IEEE.},
	doi = {10.1109/CloudTech.2015.7336995},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84962795004\&doi=10.1109\%2fCloudTech.2015.7336995\&partnerID=40\&md5=18b4f331589250a98e192c8087786f17},
	author = {Alouane, M. and El Bakkali, H.}
}
@conference {Sadki2014674,
	title = {Towards controlled-privacy in e-health: A comparative study},
	booktitle = {International Conference on Multimedia Computing and Systems -Proceedings},
	year = {2014},
	note = {cited By 1},
	pages = {674-679},
	abstract = {Technological advances in electronic services have made it easier than ever before to access and share different kinds of data. In the healthcare sector, the exchange of patients{\textquoteright} information between different actors (hospitals, laboratories, pharmacies...) improves diagnosis and treatment quality and reduces related costs. However, this exchange arise new security concerns and makes patient information subject to privacy breaches. In the literature, several privacy-preserving approaches have been proposed, most of which focus on protecting private data using cryptographic, access control or anonymitization techniques. Thus, the patient becomes a passive actor regarding the disclosure of his personal information. In this paper we consider the following question: should patients only rely on third parties to protect their sensitive data or shall they be granted some kind of control to select the level of privacy and security they want? In this context, we propose a comparative study of some recent work in the area of e-services privacy. The analysis of this study shows that data privacy is not fairly user controlled particularly in the health sector. {\textcopyright} 2014 IEEE.},
	doi = {10.1109/ICMCS.2014.6911323},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84928712879\&doi=10.1109\%2fICMCS.2014.6911323\&partnerID=40\&md5=cbabd84ef94415517785664934541c9f},
	author = {Sadki, S. and El Bakkali, H.}
}
@article {ElBakkali2013267,
	title = {Enhancing workflow systems resiliency by using delegation and priority concepts},
	journal = {Journal of Digital Information Management},
	volume = {11},
	number = {4},
	year = {2013},
	note = {cited By 4},
	pages = {267-276},
	abstract = {Enforcing dynamic access control constraints in workflow management systems (WFMS) is a very important requirement with regard to security issues. However, respecting those constraints may prohibit the completion of a workflow instance in the case of the lack of authorized users. Such situation is known in the literature as a WSP (Workflow Satisfiability Problem). The ability of a WFMS to use different methods to bypass a WSP situation is often seen as a resiliency property. In this work, we propose a new approach that aims to enhance the resiliency of a WFMS while meeting -at run time-the main workflow dynamic access control requirements. In fact, by using both delegation and priority concepts it is possible to find a user which is as suitable as possible to perform the current task instance with lesser security risks.},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84888373794\&partnerID=40\&md5=fedc10e4bf4acaa3224e1a9dfa459fc0},
	author = {El Bakkali, H.}
}
@conference {Rahimi2013,
	title = {A new reputation algorithm for evaluating trustworthiness in e-commerce context},
	booktitle = {2013 National Security Days - 3eme Edition Des Journees Nationales de Securite, JNS3},
	year = {2013},
	note = {cited By 3},
	abstract = {Thanks to their ability to detect fraud, poor quality and ill-intentioned feedbacks and scores in online environments, robust Trust Reputation Systems (TRS) provide actionable information to support relying parties taking the right decision in any electronic transaction. In fact, as security providers in e-services, TRS have to faithfully calculate the most trustworthy score for a targeted product or service. Thus, TRS must rely on a robust architecture and suitable algorithms that are able to select, store, generate and classify scores and feedbacks. In this work, we propose a new architecture for TRS in e-commerce application which includes feedbacks{\textquoteright} analysis in its treatment of scores. In fact, this architecture is based on an intelligent layer that proposes to each user (i.e. {\textquoteright}feedback provider{\textquoteright}) who has already given his recommendation, a collection of prefabricated feedbacks summarizing other users{\textquoteright} textual feedbacks. A proposed algorithm is used by this architecture in order to calculate the trust degree of the user, the feedback{\textquoteright}s trustworthiness and generates the global reputation score of the product. {\textcopyright} 2013 IEEE.},
	doi = {10.1109/JNS3.2013.6595455},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84884781815\&doi=10.1109\%2fJNS3.2013.6595455\&partnerID=40\&md5=ff700df7b3d03e86df3086edf016669d},
	author = {Rahimi, H. and El Bakkali, H.}
}
@article {ElBakkali2012178,
	title = {Bypassing Workflow Satisfiability Problem Due to Access Control Constraints},
	journal = {Communications in Computer and Information Science},
	volume = {294 PART 2},
	year = {2012},
	note = {cited By 0},
	pages = {178-191},
	doi = {10.1007/978-3-642-30567-2_15},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84880504898\&doi=10.1007\%2f978-3-642-30567-2_15\&partnerID=40\&md5=a76ee818c8197bc83bdfb080f176701b},
	author = {El Bakkali, H.}
}
@conference {ElKalam2012,
	title = {Preface [Preface]},
	booktitle = {Proceedings of the 2nd National Days of Network Security and Systems, JNS2 2012},
	year = {2012},
	note = {cited By 0},
	doi = {10.1109/JNS2.2012.6249227},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84866688620\&doi=10.1109\%2fJNS2.2012.6249227\&partnerID=40\&md5=7fd94ebf5742b98414b8aca656a1701c},
	author = {El Kalam, A.A. and El Bakkali, H. and Ouadghiri, D.}
}
@conference {Rahimi201218,
	title = {State of the art of reputation systems in e-commerce [Etat de l{\textquoteright}art des syst{\`e}mes de r{\'e}putation en e-commerce]},
	booktitle = {Proceedings of the 2nd National Days of Network Security and Systems, JNS2 2012},
	year = {2012},
	note = {cited By 0},
	pages = {18-23},
	doi = {10.1109/JNS2.2012.6249233},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84867055626\&doi=10.1109\%2fJNS2.2012.6249233\&partnerID=40\&md5=368c130ee772a86590d0ca7515f35412},
	author = {Rahimi, H. and El Bakkali, H.}
}
@conference {Rahimi2012943,
	title = {Towards a new design for trust reputation system},
	booktitle = {Proceedings of 2012 International Conference on Multimedia Computing and Systems, ICMCS 2012},
	year = {2012},
	note = {cited By 0},
	pages = {943-948},
	doi = {10.1109/ICMCS.2012.6320285},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84869784869\&doi=10.1109\%2fICMCS.2012.6320285\&partnerID=40\&md5=fe02a8d96505fdaaba1b2e568460d8f7},
	author = {Rahimi, H. and El Bakkali, H.}
}
@article {ElBakkali2010203,
	title = {A new task engineering approach for workflow access control},
	journal = {Advances in Intelligent and Soft Computing},
	volume = {85},
	year = {2010},
	note = {cited By 1},
	pages = {203-212},
	doi = {10.1007/978-3-642-16626-6_22},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-80053005691\&doi=10.1007\%2f978-3-642-16626-6_22\&partnerID=40\&md5=b9d1f4d19bd722e72574f0bef90c7cff},
	author = {El Bakkali, H. and Hatim, H. and Berrada, I.}
}
@conference {Hatim2010,
	title = {Workflow access control: From role engineering to task engineering},
	booktitle = {2010 International Conference for Internet Technology and Secured Transactions, ICITST 2010},
	year = {2010},
	note = {cited By 0},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-79951499002\&partnerID=40\&md5=bf2b2a62594c1dd42d3dd1bbef261de3},
	author = {Hatim, H. and El Bakkali, H. and Berrada, I.}
}
