@article { ISI:000391049000006,
	title = {A Collaborative Task Role Based Access Control Model},
	journal = {JOURNAL OF INFORMATION ASSURANCE AND SECURITY},
	volume = {11},
	number = {6},
	year = {2016},
	pages = {348-358},
	abstract = {Cloud computing allows to move computing and storage components from individual systems into the cloud, which provides software and hardware services over the Internet. A collaborative application is among software services that can be provided by the cloud computing to enable collaboration among users from the same or different tenants. During such collaborations, the participants need to access and use resources held by other collaborating users. These resources often contain sensitive data. They are meant to be shared only during specific collaborative sessions. This paper proposes a Collaborative Task Role-Based Access Control CTRBAC1 model to ensures access control to the shared resources in a collaborative session in multi-tenants environments. The suggested C-TRBAC model is an extended version of RBAC in which new entities were added in order to support together: Collaboration in multi-tenant environment, active and passive access control and collaborative sessions. The suggested model has been implemented using Swift component in the open source cloud-computing platform {\textquoteleft}{\textquoteleft}OpenStack{{\textquoteright}{\textquoteright}}.},
	issn = {1554-1010},
	author = {Amine Madani, Mohamed and Erradi, Mohammed and Benkaouz, Yahya}
}
@conference { ISI:000389502600004,
	title = {Nearest Neighbors Graph Construction: Peer Sampling to the Rescue},
	booktitle = {Networked Systems, NETYS 2016},
	series = {Lecture Notes in Computer Science},
	volume = {9944},
	year = {2016},
	note = {4th International Conference on Networked Systems (NETYS), Marrakech, MOROCCO, MAY 18-20, 2016},
	pages = {48-62},
	abstract = {In this paper, we propose an efficient KNN service, called KPS (KNN-Peer-Sampling). The KPS service can be used in various contexts e.g. recommendation systems, information retrieval and data mining. KPS borrows concepts from P2P gossip-based clustering protocols to provide a localized and efficient KNN computation in large-scale systems. KPS is a sampling-based iterative approach, combining randomness, to provide serendipity and avoid local minimum, and clustering, to ensure fast convergence. We compare KPS against the state of the art KNN centralized computation algorithm NNDescent, on multiple datasets. The experiments confirm the efficiency of KPS over NNDescent: KPS improves significantly on the computational cost while converging quickly to a close to optimal KNN graph. For instance, the cost, expressed in number of pairwise similarity computations, is reduced by approximate to 23\% and approximate to 49\% to construct high quality KNN graphs for Jester and MovieLens datasets, respectively. In addition, the randomized nature of KPS ensures eventual convergence, not always achieved with NNDescent.},
	isbn = {978-3-319-46140-3; 978-3-319-46139-7},
	issn = {0302-9743},
	doi = {10.1007/978-3-319-46140-3\_4},
	author = {Benkaouz, Yahya and Erradi, Mohammed and Kermarrec, Anne-Marie},
	editor = {Abdulla, PA and DelporteGallet, C}
}
@conference { ISI:000387917500008,
	title = {Work in Progress: K-Nearest Neighbors Techniques for ABAC Policies Clustering},
	booktitle = {ABAC{\textquoteright}16: PROCEEDINGS OF THE 2016 ACM INTERNATIONAL WORKSHOP ON ATTRIBUTE BASED ACCESS CONTROL},
	year = {2016},
	note = {ACM International Workshop on Attribute Based Access Control (ABAC), New Orleans, LA, MAR 11, 2016},
	pages = {72-75},
	publisher = {Assoc Comp Machinery; ACM SIGSAC},
	organization = {Assoc Comp Machinery; ACM SIGSAC},
	abstract = {In this paper, we present an approach based on the K-Nearest Neighbors algorithms for policies clustering that aims to reduce the ABAC policies dimensionality for high scale systems. Since ABAC considers a very large set of attributes for access decisions, it turns out that using such model for large scale systems might be very complicated. To date, researchers have proposed to use data mining techniques to discover roles for RBAC system construction. In this work in progress, we consider the usage of KNN-based techniques for the classification of ABAC policies based on similarity computations of rules in order to enhance the ABAC flexibility and to reduce the number of policy rules.},
	isbn = {978-1-4503-4079-3},
	doi = {10.1145/2875491.2875497},
	author = {Benkaouz, Yahya and Erradi, Mohammed and Freisleben, Bernd}
}
@article {10895165620150901,
	title = {A distributed protocol for privacy preserving aggregation with non-permanent participants.},
	journal = {Computing},
	volume = {97},
	number = {9},
	year = {2015},
	pages = {893 - 912},
	abstract = {Recent advances in techniques that combine and analyze data collected from multiple partners led to many new promising distributed collaborative applications. Such collaborative computations could occur between trusted partners, between partially trusted partners, or between competitors. Therefore preserving privacy is an important issue in this context. This paper presents a distributed protocol for privacy-preserving aggregation to enable computing a class of aggregation functions that can be expressed as Abelian group. The proposed protocol is based on an overlay structure that enables secret sharing without the need of any central authority or heavyweight cryptography. It preserves data privacy such that participant data is only known to their owner with a given probability. The aggregation result is computed by participants themselves without interacting with a specific aggregator. The aggregation result is accurate when there is no data loss. A strategy to handle the problem of},
	keywords = {68M14 Distributed systems, 68W15 Distributed algorithms, Acquisition of data, Aggregation protocol, Computer simulation, Distributed polling application, Privacy, Probability theory, Security, Subroutines (Computer programs)},
	issn = {0010485X},
	url = {http://search.ebscohost.com/login.aspx?direct=true\&db=bth\&AN=108951656\&site=ehost-live},
	author = {Benkaouz, Yahya and Erradi, Mohammed}
}
@article { ISI:000359820400003,
	title = {A distributed protocol for privacy preserving aggregation with non-permanent participants},
	journal = {COMPUTING},
	volume = {97},
	number = {9, SI},
	year = {2015},
	note = {International Conference on Network Systems (NETYS 2013), mARRAKECH, MOROCCO, MAY 02-04, 2013},
	month = {SEP},
	pages = {893-912},
	abstract = {Recent advances in techniques that combine and analyze data collected from multiple partners led to many new promising distributed collaborative applications. Such collaborative computations could occur between trusted partners, between partially trusted partners, or between competitors. Therefore preserving privacy is an important issue in this context. This paper presents a distributed protocol for privacy-preserving aggregation to enable computing a class of aggregation functions that can be expressed as Abelian group. The proposed protocol is based on an overlay structure that enables secret sharing without the need of any central authority or heavyweight cryptography. It preserves data privacy such that participant data is only known to their owner with a given probability. The aggregation result is computed by participants themselves without interacting with a specific aggregator. The aggregation result is accurate when there is no data loss. A strategy to handle the problem of nodes failures is given, along with a study of the privacy ensured by the suggested protocol.},
	issn = {0010-485X},
	doi = {10.1007/s00607-013-0373-6},
	author = {Benkaouz, Yahya and Erradi, Mohammed}
}
@conference { ISI:000373842900038,
	title = {Towards a decentralized OSN for a privacy-preserving e-health system},
	booktitle = {6TH INTERNATIONAL CONFERENCE ON EMERGING UBIQUITOUS SYSTEMS AND PERVASIVE NETWORKS (EUSPN 2015)/THE 5TH INTERNATIONAL CONFERENCE ON CURRENT AND FUTURE TRENDS OF INFORMATION AND COMMUNICATION TECHNOLOGIES IN HEALTHCARE (ICTH-2015)},
	series = {Procedia Computer Science},
	volume = {63},
	year = {2015},
	note = {6th International Conference on Emerging Ubiquitous Systems and Pervasive Networks (EUSPN) / 5th International Conference on Current and Future Trends of Information and Communication Technologies in Healthcare (ICTH), Berlin, GERMANY, SEP 27-30, 2015},
	pages = {284-291},
	abstract = {e-health could be defined as the cost-effective and secure use of information and communication technologies in support of health systems, including healthcare related services and monitoring at both the local site and at a distance. Challenges still need to be resolved to build reliable, secure, and efficient e-health platforms with great flexibility. Recently, social networks have seen a growing importance in different applications and could play a prominent role in healthcare. Online Social Networks (OSN) offer new possibilities such as easy access to medical data anytime from anywhere. Due to the sensitivity of health data exchanged over such networks, a special attention need to be paid to security and privacy aspects of these data. The use of existing centralized OSNs raises the big brother problem. Moreover, the centralized architectures of OSNs are not scalable and have a single point of failure. In this work, we suggest a layered architecture while promoting the usage of decentralized design to ensure the scalability and the privacy of an OSN-based e-health system. (C) 2015 The Authors. Published by Elsevier B.V.},
	issn = {1877-0509},
	doi = {10.1016/j.procs.2015.08.345},
	author = {Benkaouz, Yahya and Erradi, Mohammed},
	editor = {Shakshuki, E}
}
@conference { ISI:000310353000045,
	title = {PERFORMANCE ANALYSIS OF WiFi/WiMAX VERTICAL HANDOVER BASED ON MEDIA INDEPENDENT HANDOVER},
	booktitle = {2012 INTERNATIONAL CONFERENCE ON MULTIMEDIA COMPUTING AND SYSTEMS (ICMCS)},
	year = {2012},
	note = {International Conference on Multimedia Computing and Systems (ICMCS), Tangiers, MOROCCO, MAY 10-12, 2012},
	pages = {239-243},
	publisher = {Morocco Sect MTT/AP Joint Chapter},
	organization = {Morocco Sect MTT/AP Joint Chapter},
	abstract = {Currently, there are several wireless networks deployed around the world. Examples include cellular networks, metropolitan area networks and wireless local area networks. Given the heterogeneity of the existing network technologies, the diversity of mobile applications, and user requirements, ensuring service continuity for a mobile user when changing different access network becomes a mandatory aspect. The aim of this work is to study and analyse a solution based on the IEEE802.21 standard, to enable interoperability between different networks. The assessment takes place in a context of mobility between WiFi and WiMAX networks. The network simulator NS2 is used during this study.},
	isbn = {978-1-4673-1520-3},
	author = {Benkaouz, Yahya and Angoma, Blaise and Erradi, Mohammed},
	editor = {Essaaidi, M and Zaz, Y}
}
@conference { ISI:000300570200017,
	title = {HaVe-2W3G: A Vertical Handoff Solution between WLAN, WiMAX and 3G Networks},
	booktitle = {2011 7TH INTERNATIONAL WIRELESS COMMUNICATIONS AND MOBILE COMPUTING CONFERENCE (IWCMC)},
	series = {International Wireless Communications and Mobile Computing Conference},
	year = {2011},
	note = {7th IEEE International Wireless Communications and Mobile Computing Conference (IWCMC), Istanbul, TURKEY, JUL 04-08, 2011},
	pages = {101-106},
	publisher = {IEEE; IEEE Turkey sect; Huawei},
	organization = {IEEE; IEEE Turkey sect; Huawei},
	abstract = {The demand for the ubiquitous service is increasing due to the rapidly growing demand for increased data rates, mobile Internet and the diversity of wireless communication technologies. Also due to the challenges to interconnect heterogeneous network technologies and to offer ubiquitous services, telecommunications operators look after the best way to provide continuity of service during handover and how to give the mobile client the possibility to get the best connection anywhere and anytime. In this paper we propose an architecture and its implementation which guarantees the continuity of service during a communication in the context of heterogeneous access network technologies. The suggested solution named HaVe-2W3G (Handover Vertical WLAN WiMAX 3G) ensures a Vertical handover between heterogeneous access networks technologies: WLAN, WiMAX and 3G. A performance evaluation of such implementation is shown using a streaming application.},
	isbn = {978-1-4244-9537-5},
	issn = {2376-6492},
	author = {Angoma, Blaise and Erradi, Mohammed and Benkaouz, Yahya and Berqia, Amine and Akalay, Mohammed Charaf}
}
