检索结果-内蒙古大学图书馆

3rd DARPA Information Survivability conference and Exposition

作者： Tally, G Whitmore, B Sames, D Matt, B Niebuhr, B Bakken, D Network Associates Laboratories United States Washington State University United States

ISBN: (纸本)0769518974

Intrusion prevention mechanisms and technologies cannot always prevent a well-funded and persistent adversary from penetrating information systems. Middleware is one area where a system can provide intrusion tolerance. Distributed object middleware is considered the most general kind of middleware, and the Common Object Request Broker Architecture (CORBA) is a widely adopted standard for distributed object middleware. The goal of our Intrusion Tolerant Distributed Object Systems (ITDOS) framework is to create an architecture for distributed object systems that can provide high reliability for mission-critical information systems by tolerating Byzantine (arbitrary) faults in object servers. CORBA systems are one of the potential middleware architectures that can be supported by the architecture. From a system-level point of view, this architecture provides additional security in the form of a firewall proxy that can monitor Byzantine fault-tolerant multicast (BFTM) messages at the enclave boundary and minimize the impact of certain denial of service (DoS) attacks. © 2003 ieee.

关键词： Computer architecture Information security Information systems Laboratories Middleware Mission critical systems Monitoring network servers programming profession Voting

来源：评论

学校读者我要写书评

暂无评论

Code revocation for active networks

Code revocation for active networks

引用

ieee conference on open architectures and network programming

作者： S. Murphy A. Hayatnagarkar S. Krishnaswamy W. Morrison R. Watson Network Associates Laboratories Rockville MD USA

Active networks are placed at considerable risk by running code that arrives over the network. Careful crafting of authorization policy and stringent enforcement provide considerable protection against such risks. However, there still might be reasons why a packet that is executing in accordance with the authorization policy might cause damage. For example, the code might have bugs or may have been improperly configured or the packet might have been unintentionally launched. For the safety of the network a mechanism is needed that would permit users and networks to find faulty, misconfigured, or misbehaving active code and revoke its ability to execute. This paper considers the important issues and features of providing for revocation of code and an architecture that will support it in a wide-scale active network. It describes the parameters that identify the entities that issue the revocation notice and the entities that are to be revoked. It also describes an approach for policy composition from multiple entities, which eventually decides whether a revocation notice is authorized to act on a particular piece of code. Finally, this paper presents an innovative approach towards revocation in traditional networks using active networking as the transporting mechanism.

关键词： Authorization Safety Protection Computer bugs Contracts Control systems Humans Viruses (medical) Testing

来源：评论

学校读者我要写书评

暂无评论

On neural network techniques in the secure management of communication systems through improving and quality assessing pseudorandom stream generators

On neural network techniques in the secure management of com...

引用

INNS/ieee International Joint conference on Neural networks (IJCNN 03)

作者： Karras, DA Zorkadis, V Univ Hertfordshire Hellen Aerosp Ind Hatfield AL10 9AB Herts England Hellen Open Univ Athens 16342 Greece Data Protect Autor Athens 10564 Greece

Random components play an especially important role in the management of secure communication systems, with emphasis on the key management of cryptographic protocols. For this reason, the existence of strong pseudo random number generators is highly required. This paper presents novel techniques, which rely on Artificial Neural network (ANN) architectures, to strengthen traditional generators such as IDEA and ANSI X.9 based on 3DES and IDEA. Additionally, this paper proposes a non-linear test method for the quality assessment of the required non-predictability property, which relies on feedforward neural networks. This non-predictability test method along with commonly used empirical tests based on statistics is proposed as a methodology for quality assessing strong pseudorandom stream generators. By means of this methodology, traditional and Neural network based pseudorandom stream generators are evaluated. The results show that the proposed generators behave significantly better than the traditional ones, in particular, in terms of non-predictability. (C) 2003 Elsevier Science Ltd. All rights reserved.

关键词： secure communications systems secure electronic commerce cryptographic protocols security mechanisms authentication key management stream ciphers pseudorandom number generators multi-layer perceptrons recurrent artificial neural network unpredictability test

来源：评论

学校读者我要写书评

暂无评论

Transparent and scalable client-side server selection using Netlets

Transparent and scalable client-side server selection using ...

引用

ieee conference on open architectures and network programming

作者： K. Dharmalingam M. Collier Research Institute in Networks and Communications Engineering School of Electronic Engineering University of Dublin Ireland

Replication of web content in the Internet has been found to improve service response time, performance and reliability offered by web services. When working with such distributed server systems, the location of servers with respect to client nodes is found to affect service response time perceived by clients in addition to server load conditions. This is due to the characteristics of the network path segments through which client requests get routed. Hence, a number of researchers have advocated making server selection decisions at the client-side of the network. In this paper, we present a transparent approach for client-side server selection in the Internet using Netlet services. Netlets are autonomous, nomadic mobile software components which persist and roam in the network independently, providing predefined network services. In this application, Netlet based services embedded with intelligence to support server selection are deployed by servers close to potential client communities to setup dynamic service decision points within the network. An anycast address is used to identify available distributed decision points in the network. Each service decision point transparently directs client requests to the best performing server based on its in-built intelligence supported by real-time measurements from probes sent by the Netlet to each server. It is shown that the resulting system provides a client-side server selection solution which is server-customisable, scalable and fault transparent.

关键词： network servers Web server Web and internet services Delay Reliability engineering Performance evaluation Probes Electronic mail IP networks Telecommunication network reliability

来源：评论

学校读者我要写书评

暂无评论

OPCA: robust interdomain policy routing and traffic control

OPCA: robust interdomain policy routing and traffic control

引用

ieee conference on open architectures and network programming

作者： S. Agarwal Chen-Nee Chuah R.H. Katz IP & Interworking Division Sprint Advanced Technology Laboratories USA Computer Science Division University of California Berkeley USA Department of Electrical & Computer Engineering University of California Davis USA

An increasing number of ASes have been connecting to the Internet through the BGP inter-domain routing protocol. With increasing stress on the scale of this system and increasing reliance on Internet connectivity, more participants demand additional functionality from interdomain routing that BGP cannot handle. For example, we believe that the recent trend towards multihomed stub networks exhibits a likely intent to achieve fault tolerant and load balanced connectivity to the Internet. However, BGP today offers route fail-over times as long as 15 minutes, and very limited control over incoming traffic across multiple wide area paths. More research literature and news media are calling for stemming malicious or erroneous routing announcements. We propose a policy control architecture, OPCA, that runs as an overlay network on top of BGP. OPCA allows an AS to make route change requests at other, remote ASes to achieve faster route fail-over and provide capabilities to control traffic entering the local AS. The proposed architecture and protocol will co-exist and interact with the existing routing infrastructure and will allow for a scalable rollout of the protocol.

关键词： Robust control Traffic control Routing protocols Internet Communication system traffic control Joining processes Stress Fault tolerance IP networks ieee news

来源：评论

学校读者我要写书评

暂无评论

Dynamic packet processors-a new abstraction for router extensibility

Dynamic packet processors-a new abstraction for router exten...

引用

ieee conference on open architectures and network programming

作者： G. Hjalmtysson H. Sverrisson B. Brynjulfsson O.R. Helgason Department of Computer Science Reykjavík University Reykjavik Iceland

The history of the Internet is one of rapid change and adaptability. The simple IP service model and the informal standardization process have fostered rapid evolution of systems and services. However, as the Internet has transformed from an academic playground to an essential commercial infrastructure the service model and the standardization process have become more complex. While outsourcing and optimizations are driving services into the network, the IETF is increasingly the battleground of vendors. Consequently, introducing new services to the Internet has become increasingly complicated. Active and programmable networking is an effort to reclaim the flexibility of the early Internet and reduce the need for standardization. In this paper we introduce a new abstraction, packet processors, to evolve the lower layer router facilities and to extend the programmable interface in a type safe manner. We show how this abstraction is sufficient to capture all facilities commonly found in data-paths of commodity routers and how it gives the ability to introduce new types of packet processors. Packet processors can add type specific methods thereby extending the programmable interface while maintaining the semantic integrity of the Node OS and the execution environment. We discuss how paths can be constructed from a sequence of packet processors, and how these paths can cross the services/Node OS boundary, and cross hardware processor boundaries. Our measurements show that the added flexibility adds negligible overhead.

关键词： Standardization Web and internet services Hardware IP networks programming profession Kernel History Outsourcing Search engines Computer science

来源：评论

学校读者我要写书评

暂无评论

On neural network techniques in the secure management of communication systems through improving and quality assessing pseudorandom stream generators

引用

NEURAL networkS 2003年第5-6期16卷 899-905页

作者： Karras, DA Zorkadis, V Univ Hertfordshire Hellen Aerosp Ind Hatfield AL10 9AB Herts England Hellen Open Univ Athens 16342 Greece Data Protect Autor Athens 10564 Greece

来源：评论

学校读者我要写书评

暂无评论

Storage management in process networks using the lexicographically maximal preimage

Storage management in process networks using the lexicograph...

引用

International conference on Application Specific Systems (ASAP), architectures and Processors

作者： A. Turjan B. Kienhuis Leiden Institute of Advanced Computer Science Leiden Netherlands

At the Leiden embedded research center, we are developing a compiler called Compaan that automatically translates signal processing applications written in Matlab into Kahn process networks (KPNs). In general, these signal processing applications are data-flow intensive, requiring large storage capacities, usually represented by matrices. An important issue in Compaan is the derivation of a memory management mechanism that allows for efficient interprocess communication. This mechanism has previously been published and is called the extended linearization model (ELM). The controller needed in the ELM is derived using the Ehrhart theory, leading to a computational intensive procedure. We present a new approach to derive the ELM controller, based on the notion of lexicographically maximal preimage. Using polytope manipulations and parametric integer linear programming techniques, we get less computational intensive and easier to be derived controller implementation for the ELM.

关键词： Intelligent networks Signal processing Application software Mathematical model Communication system control Automatic control Array signal processing Computer network management Computer science Electronic mail

来源：评论

学校读者我要写书评

暂无评论

open distributed client server model in an energy management system for power system security

Open distributed client server model in an energy management...

引用

ieee Region 10 International conference TENCON

作者： J.A. Reddy K.S. Swarup Department of Electrical Engineering Indian Institute of Technology Madras Chennai India

The controlling functions in the SCADA/EMS system are increasing with the expansion of the power system network as the demand for power increasing. It is difficult to control the functions with the centralized system and rely on a single vendor. Current technologies employ distributed systems that are open (i.e. vendor independent solution) to control the SCADA/EMS functions. With open systems utilities, it tends to incrementally upgrade rather than completely replace the EMS systems. Various open distributed architectures have been proposed to shoulder the SCADA/EMS functions. This paper introduces the concept of open system and examines one of the distributed hardware configurations for open EMS. The proposed work modeled the above contingency analysis procedure for a case study of 6 bus, 11 line network, which was done by a dedicated application server on the pre-specified port.

关键词： Power system modeling Energy management Power system security network servers Control systems Medical services Hardware SCADA systems Computer aided manufacturing open systems

来源：评论

学校读者我要写书评

暂无评论

On the fusion and transference of knowledge. I

On the fusion and transference of knowledge. I

引用

ieee International conference on Information Reuse and Integration (IRI)

作者： S.H. Rubin SPAWAR Systems Center San Diego CA USA

Contemporary neural architectures having one or more hidden layers suffer from the same deficiencies that genetic algorithms and methodologies for non-trivial automatic programming do; namely, they cannot exploit inherent domain symmetries for the transference of knowledge from an application of lesser to greater rank, or across similar applications. As a direct consequence, no ensemble of contemporary neural architectures allows for the effective codification and transference of knowledge within a society of individuals (i.e., swarm knowledge). These deficiencies stem from the fact that contemporary neural architectures cannot reason symbolically using heuristic ontologies. They cannot directly provide symbolic explanations of what was learned for purposes of inspection and verification. Moreover, they do not allow the knowledge engineer to precondition the internal feature space through the application of domain-specific modeling languages. A symbolic representation can support the heuristic evolution of an ensemble of neural architectures. Each neural network in the ensemble imbues a hidden layer and for this reason is NP-hard in its learning performance. It may be argued that the internal use of a neat representation subsumes the heuristic evolution of a scruffy one. It follows that there is a duality of representation under transformation. The goal of AI then is to find symbolic representations, transformations, and associated heuristic ontologies. This paper provides an introduction to this quest. Consider the game of chess for example. If a neural network or symbolic heuristic is used to evaluate board positions, then the best found iterate (i.e., of weights or symbols) serves as a starting point for iterative refinement. This paper addresses the ordering and similarity of the training instances in refining subsequent iterates. If we fix the learning technology, then we need to focus on reducing the problem, composing intermediate results, and transferring th

关键词： Neural networks Ontologies Genetic algorithms Automatic programming Inspection Knowledge engineering Machine learning Sensor phenomena and characterization USA Councils Domain specific languages

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：