@article {Iraqi2022,
	title = {Communizer: A collaborative cloud-based self-protecting software communities framework - Focus on the alert coordination system},
	journal = {Computers and Security},
	volume = {117},
	year = {2022},
	note = {cited By 0},
	abstract = {Popular software has always been appealing to adversaries, as related vulnerabilities are synonymous with millions of exposed businesses. Collaborative intrusion detection, as well as software self-protection, try to alleviate this situation. However, they lack either autonomy and adaptation, or Internet-scale oversight and mitigation. In this work, we present Communizer: a collaborative cloud-based framework that creates communities of self-protecting software across organizations. It allows community members to turn their common weaknesses into collaborative and proactive self-protection, empowering them to detect intrusions, exchange alerts, and anticipate attacks. We start by integrating multiple autonomic MAPE-K loops through cloud-based coordination, and a novel hierarchical, regional coordination pattern (HRCP), optimizing scalability, resiliency, accuracy and privacy. Then, we design a trust-based multi-level alert coordination system (TMACS), as well as a lightweight alert coordination message exchange format (ACMEF). At its core, TMACS aggregates, validates, and shares security alerts among community members while fostering agreement and managing trust. It also addresses insider attacks by detecting and blacklisting rogue members. Moreover, TMACS identifies and neutralizes selfish members through a specifically designed probabilistic model. The analysis, optimization, and evaluation of TMACS show a good trade-off between the precision and recall of untrustworthy and selfish members detection. More importantly, we demonstrate a drastic reduction of monitoring loads on community members while ensuring a high collaborative attack detection and anticipation rate, even for small-scope attacks. {\textcopyright} 2022 Elsevier Ltd},
	keywords = {Autonomic Computing, collaboration, Coordination systems, Economic and social effects, Intrusion detection, Mape, MAPE-K, Self protecting, Self-protecting software, Selfishness, Software community, Trust, Trusted computing},
	doi = {10.1016/j.cose.2022.102692},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127747467\&doi=10.1016\%2fj.cose.2022.102692\&partnerID=40\&md5=246bfc07692396ec6709a73d31126fb6},
	author = {Iraqi, O. and Bakkali, H.E.}
}
@article {Majdoubi2022,
	title = {A Decentralized Trust Establishment Protocol for Smart IoT Systems},
	journal = {Internet of Things (Netherlands)},
	volume = {20},
	year = {2022},
	note = {cited By 0},
	abstract = {The Internet of Things (IoT) is a widely deployed technology to provide innovative services in many several fields such as industry, logistics, healthcare, and energy management. The integration of artificial intelligence, machine learning, edge/cloud computing, 5G networks, big data analytics, and other emerging technologies in IoT systems is leading to the emergence of Smart Systems that support devices to make autonomous decisions in order to improve and facilitate people{\textquoteright}s lives. These smart IoT devices produce a huge amount of sensitive data. Thus, establishing Trust between these devices is vital to ensure the security of the sensed data and for the normal functionality of smart systems. To address these challenges, several Trust establishment protocols have been proposed, but they have some limitations such as centralization, the need for human intervention, and the lack of adaptability to smart devices with computation and storage constraints. In this paper, a decentralized trust establishment protocol is proposed for smart IoT devices and is applicable for different scenarios. The protocol provides decentralized identity management, mutual authentication, access control, and secure communication by combining Blockchain technology with PV-SAS-MCA message cross-authentication protocol based on Short Authenticated Strings (SAS). To the best of our knowledge, this research is the first to propose a new approach that uses Blockchain as an extra distributed and authenticated channel to exchange Short Authenticated Strings without physical interaction. This helps to allow entities in the Smart IoT environment not only to identify each other but also to exchange their public keys in a secure manner. Moreover, the proposed protocol uses Elliptic Curve Cryptography (ECC) to secure communications with significantly smaller key sizes and lower computation overhead. Experimental results reveal that the time required to complete the authentication process is less than 90 ms which is a superior performance when compared to state-of-the-art decentralized authentication mechanisms. {\textcopyright} 2022 Elsevier B.V.},
	doi = {10.1016/j.iot.2022.100634},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85141956819\&doi=10.1016\%2fj.iot.2022.100634\&partnerID=40\&md5=09f4ee511269a6c179ffb6176350529b},
	author = {Majdoubi, D.E. and Bakkali, H.E. and Bensaih, M. and Sadki, S.}
}
@article {Majdoubi2021,
	title = {SmartMedChain: A Blockchain-Based Privacy-Preserving Smart Healthcare Framework},
	journal = {Journal of Healthcare Engineering},
	volume = {2021},
	year = {2021},
	note = {cited By 6},
	abstract = {Nowadays, the adoption of Internet of Things (IoT) technology worldwide is accelerating the digital transformation of healthcare industry. In this context, smart healthcare (s-healthcare) solutions are ensuring better and innovative opportunities for healthcare providers to improve patients{\textquoteright} care. However, these solutions raise also new challenges in terms of security and privacy due to the diversity of stakeholders, the centralized data management, and the resulting lack of trustworthiness, accountability, and control. In this paper, we propose an end-to-end Blockchain-based and privacy-preserving framework called SmartMedChain for data sharing in s-healthcare environment. The Blockchain is built on Hyperledger Fabric and stores encrypted health data by using the InterPlanetary File System (IPFS), a distributed data storage solution with high resiliency and scalability. Indeed, compared to other propositions and based on the concept of smart contracts, our solution combines both data access control and data usage auditing measures for both Medical IoT data and Electronic Health Records (EHRs) generated by s-healthcare services. In addition, s-healthcare stakeholders can be held accountable by introducing an innovative Privacy Agreement Management scheme that monitors the execution of the service in respect of patient preferences and in accordance with relevant privacy laws. Security analysis and experimental results show that the proposed SmartMedChain is feasible and efficient for s-healthcare environments. Copyright {\textcopyright} 2021 Driss El Majdoubi et al. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.},
	keywords = {Access control, adult, Article, Block-chain, Blockchain, Centralised, controlled study, Data Management, Delivery of Health Care, Digital storage, Digital transformation, Distributed ledger, electronic health record, Electronic Health Records, Health care, health care delivery, Health care providers, Healthcare environments, Healthcare industry, human, Humans, Information management, information processing, information storage, Internet of things, Internet of things technologies, Network security, patient care, patient preference, Privacy, Privacy preserving, Privacy-preserving techniques, Security and privacy, Smart contract},
	doi = {10.1155/2021/4145512},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85121960725\&doi=10.1155\%2f2021\%2f4145512\&partnerID=40\&md5=0f8afcea0c53e46d9f3863d4ed04b5b8},
	author = {Majdoubi, D.E. and Bakkali, H.E. and Sadki, S.}
}
@book {Ouazzani2020253,
	title = {Privacy preserving in digital health: Main issues, technologies, and solutions},
	series = {Social, Legal, and Ethical Implications of IoT, Cloud, and Edge Computing Technologies},
	year = {2020},
	note = {cited By 2},
	pages = {253-276},
	abstract = {Recently, digital health solutions are taking advantage of recent advances in information and communication technologies. In this context, patients{\textquoteright} health data are shared with other stakeholders. Moreover, it{\textquoteright}s now easier to collect massive health data due to the rising use of connected sensors in the health sector. However, the sensitivity of this shared healthcare data related to patients may increase the risks of privacy violation. Therefore, healthcare-related data need robust security measurements to prevent its disclosure and preserve patients{\textquoteright} privacy. However, in order to make well-informed decisions, it is often necessary to allow more permissive security policies for healthcare organizations even without the consent of patients or against their preferences. The authors of this chapter concentrate on highlighting these challenging issues related to patient privacy and presenting some of the most significant privacy preserving approaches in the context of digital health. {\textcopyright} 2021, IGI Global.},
	doi = {10.4018/978-1-7998-3817-3.ch012},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85104245384\&doi=10.4018\%2f978-1-7998-3817-3.ch012\&partnerID=40\&md5=7b83c4da1344fd81d525a9eacdca6034},
	author = {Ouazzani, Z.E. and Bakkali, H.E. and Sadki, S.}
}
@conference {Ouazzani20181,
	title = {A new technique ensuring privacy in big data: Variable t-closeness for sensitive numerical attributes},
	booktitle = {Proceedings of 2017 International Conference of Cloud Computing Technologies and Applications, CloudTech 2017},
	volume = {2018-January},
	year = {2018},
	pages = {1-6},
	doi = {10.1109/CloudTech.2017.8284733},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85046690216\&doi=10.1109\%2fCloudTech.2017.8284733\&partnerID=40\&md5=da2dc42ce72099f81271a2cf94c7e2b9},
	author = {Ouazzani, Z.E. and Bakkali, H.E.}
}
@conference {Kandoussi2018345,
	title = {Novel Access Control Approach for Inter-organizational Workflows},
	booktitle = {ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy},
	volume = {2018-January},
	year = {2018},
	pages = {345-352},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85052019761\&partnerID=40\&md5=9c30efc7c6d3b16fc05971865cc45c1a},
	author = {Kandoussi, A.E. and Bakkali, H.E.}
}
@conference {Uahhabi2017196,
	title = {An approach for evaluating trust in X.509 certificates},
	booktitle = {2016 11th International Conference for Internet Technology and Secured Transactions, ICITST 2016},
	year = {2017},
	note = {cited By 0},
	pages = {196-203},
	abstract = {Today, X.509 certificates is largely adopted for the identity verification of an entity. Such organizations and people use it to confirm their identities in online transaction. Then, it is necessary to verify the certificate trustworthiness in order to accept or reject it for a particular transaction. Besides, certificates are issued by the certificate authority based on the procedures which are described in a certificate policy. Any deficiency in these procedures may influence a certificate authority trustworthiness, which creates a trust lack in the certificates signed by this authority. In this context, relying parties need an automated mechanism to evaluate a trust level of certificate which come into question. In this paper, we grant them this mechanism to have information about its trustworthiness. In fact, we propose a trust framework architecture which is composed from the several components involved in the trust level calculation. Then, we suggest a trust level calculation algorithm which is based on three parameters that are the calculated CA trust level, the quality of procedures indicated in the certificate policy and the rating assigned to certification fields content. Our proposed solution allows relying parties to make a decision about certificate trustworthiness. {\textcopyright} 2016 Infonomics Society.},
	doi = {10.1109/ICITST.2016.7856696},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85016048915\&doi=10.1109\%2fICITST.2016.7856696\&partnerID=40\&md5=42f7fb997d91b0a60af3a975522fb836},
	author = {Uahhabi, Z.E. and Bakkali, H.E.}
}
@article {Rahimi2015189,
	title = {CIOSOS: Combined idiomatic-ontology based sentiment orientation system for trust reputation in E-commerce},
	journal = {Advances in Intelligent Systems and Computing},
	volume = {369},
	year = {2015},
	note = {cited By 1},
	pages = {189-200},
	abstract = {Due to the abundant amount of Customer{\textquoteright}s Reviews available in E-commerce platforms, Trust Reputation Systems remain reliable means to determine, circulate and restore the credibility and reputation of reviewers and their provided reviews. In fact before starting the process of Reputation score{\textquoteright}s calculation,we need to develop an accurate Sentiment orientation System able to extract opinion expressions, analyze them and determine the sentiment orientation of the Review and then classify it into positive, negative and objective. In this paper, we propose a novel semi-supervised approach which is a Combined Idiomatic-Ontology based Sentiment Orientation System (CIOSOS) that realizes a domain-dependent sentiment analysis of reviews. The main contribution of the system is to expand the general opinion lexicon SentiWordNet to a custom-made opinion lexicon (SentiWordNet++) with domain-dependent {\textquotedblleft}opinion indicators{\textquotedblright} as well as {\textquotedblleft}idiomatic expressions{\textquotedblright}. The system relies also on a semi-supervised learning method that uses the general lexicon WordNet to identify synonyms or antonyms of the expanded terms and get their polarities from SentiWordNet and then store them in SentiWordNet++. The Sentiment polarity and the classification of the review provided by the CIOSOS is used as an input of our Reputation Algorithm proposed in previous papers in order to generate the Reputation score of the reviewer.We also provide an improvement in calculation method used to generate a {\textquotedblleft}granular{\textquotedblright} reputation score of a feature or subfeature of the product. {\textcopyright} Springer International Publishing Switzerland 2015.},
	doi = {10.1007/978-3-319-19713-5_17},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84946722849\&doi=10.1007\%2f978-3-319-19713-5_17\&partnerID=40\&md5=b9fc17e2f3c7a22987b8921b5e4e7f40},
	author = {Rahimi, H. and Bakkali, H.E.}
}
@conference {Sadki201594,
	title = {Towards negotiable privacy policies in mobile healthcare},
	booktitle = {5th International Conference on Innovative Computing Technology, INTECH 2015},
	year = {2015},
	note = {cited By 0},
	pages = {94-99},
	abstract = {With the increased use of mobile technologies in the health sector, patients are more and more concerned about their privacy protection. Particularly, due to the diversity of actors (physicians, healthcare organizations, Cloud providers. ) and the heterogeneity of privacy policies defined by each actor, conflicts among these policies may occur. We believe that negotiation is one of the best techniques for resolving the issue of conflicting privacy policies. From this perspective, we present an approach and algorithm to negotiate privacy policies based on an extension of the bargaining model. Besides, in order to show how our solution can be applied, we present an example of conflicting privacy policies expressed using S4P, a generic language for specifying privacy preferences and policies. {\textcopyright} 2015 IEEE.},
	doi = {10.1109/INTECH.2015.7173478},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84946615432\&doi=10.1109\%2fINTECH.2015.7173478\&partnerID=40\&md5=958dc49fb138ea35d757ba394c168cef},
	author = {Sadki, S. and Bakkali, H.E.}
}
@conference {Sadki2014245,
	title = {Enhancing privacy on mobile health: An integrated privacy module},
	booktitle = {International Conference on Next Generation Networks and Services, NGNS},
	year = {2014},
	note = {cited By 1},
	pages = {245-250},
	abstract = {The evolution of mobile communication in the health sector has improved patients{\textquoteright} quality of care. Nowadays, doctors can make diagnosis even though the patient is miles away using mobile technologies such as smart phones or tablet PCs. Nevertheless, the exchange of medical information through mobile devices brings on serious threats to patients{\textquoteright} privacy. We believe that privacy must be considered during the development of any mobile healthcare system. In this paper we discuss the efficiency of current privacy and security protection mechanisms used in current mobile systems. The nature and the diversity of medical information shared between different entities (physicians, hospitals, laboratories, pharmacies.) increases privacy and security risks. Thus, we introduce a new conceptual module to preserve privacy in mobile healthcare. By integrating this module into current mobile healthcare systems architecture, we obtain a privacy-preserving system enabling patients to monitor and manage the disclosure of their sensitive health information during a mobile transaction. {\textcopyright} 2014 IEEE.},
	doi = {10.1109/NGNS.2014.6990259},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84920023884\&doi=10.1109\%2fNGNS.2014.6990259\&partnerID=40\&md5=13dfe9d4370bb528ce4cd094030a3819},
	author = {Sadki, S. and Bakkali, H.E.}
}
@article {Hatim201255,
	title = {Enforcing access control in workflow systems with a task engineering approach},
	journal = {International Journal of Internet Technology and Secured Transactions},
	volume = {4},
	number = {1},
	year = {2012},
	note = {cited By 0},
	pages = {55-70},
	doi = {10.1504/IJITST.2012.045150},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84878790425\&doi=10.1504\%2fIJITST.2012.045150\&partnerID=40\&md5=102c11f59819a6eff35467ade49c1d55},
	author = {Hatim, H. and Bakkali, H.E. and Berrada, I.}
}
@conference {Khiyaita2012106,
	title = {Load balancing cloud computing: State of art},
	booktitle = {Proceedings of the 2nd National Days of Network Security and Systems, JNS2 2012},
	year = {2012},
	note = {cited By 21},
	pages = {106-109},
	doi = {10.1109/JNS2.2012.6249253},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84866649932\&doi=10.1109\%2fJNS2.2012.6249253\&partnerID=40\&md5=9ec95312041c7ba61c0949ea4dc038cd},
	author = {Khiyaita, A. and Bakkali, H.E. and Zbakh, M. and Kettani, D.E.}
}
@conference {Sadki2012209,
	title = {PPAMH: A novel privacy-preserving approach for mobile healthcare},
	booktitle = {2014 9th International Conference for Internet Technology and Secured Transactions, ICITST 2014},
	year = {2012},
	note = {cited By 3},
	pages = {209-214},
	doi = {10.1109/ICITST.2014.7038807},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84949922689\&doi=10.1109\%2fICITST.2014.7038807\&partnerID=40\&md5=c460de70ba2020750ed03d73979646c3},
	author = {Sadki, S. and Bakkali, H.E.}
}
