检索结果-内蒙古大学图书馆

Flexible security configuration for virtual machines

Flexible security configuration for virtual machines

2nd ACM Workshop on computer security Architectures, CSAW'08, Co-located with the 15th ACM computer and Communications security Conference, CCS'08

作者： Rueda, Sandra Sreenivasan, Yogesh Jaeger, Trent Systems and Internet Infrastructure Security Laboratory Department of Computer Science and Engineering Pennsylvania State University University Park PA 16802 United States

ISBN: (纸本)9781605583006

Virtualmachines are widely accepted as a promising basis for building secure systems. However, while virtual machines offer effective mechanisms to create isolated environments, mechanisms that offer controlled interaction among VMs are immature. Some VM systems include flexible policy models and some enable MLS enforcement, but the flexible use of policy to control VM interactions has not been developed. In this paper, we propose an architecture that enables administrators to configure virtual machines to satisfy prescribed security goals. We describe the design and implementation of such an architecture using SELinux, Xen and IPsec as the tools to express and enforce policies at the OS, VM and Network layers, respectively. We develop a web application using our architecture and show that we can configure application VMs in such a way that we can verify the enforcement of the security goals of those applications. Copyright 2008 ACM.

关键词： Access control

来源：评论

学校读者我要写书评

暂无评论

Minimizing the Intrusion Detection Modules in Wireless Sensor Networks

Minimizing the Intrusion Detection Modules in Wireless Senso...

引用

International Conference on Computational Science and its Applications (ICCSA)

作者： Tran Hoang Hai Eui-Nam Huh Internet Computing and Security Laboratory Department of Computer Engineering Kyung Hee University South Korea

Intrusion detection is an efficient method against attacks in computer network and system. Most intrusion detection system for sensor networks and ad hoc networks are based on the cooperative of intrusion detection agents and suffered from a computation and memory usage overload. In this paper, we address this problem by proposing a lightweight algorithm to select and activate the intrusion detection modules on particular sensor nodes. We also apply over-hearing mechanism to reduce the redundant sending alert packets thus enhance network lifetimes.

关键词： Intrusion detection Wireless sensor networks Ad hoc networks computer networks Sensor phenomena and characterization Batteries Intelligent sensors Mobile ad hoc networks Condition monitoring Application software

来源：评论

学校读者我要写书评

暂无评论

Propagation Service Decision Method for Web Services Composition in u-Lifecare System

Propagation Service Decision Method for Web Services Composi...

引用

International Conference on Computational Science and its Applications (ICCSA)

作者： Ki-moon Choi Mohammad Mehedi Hassan Eui-Nam Huh Internet Computing and Network Security Laboratory Department of Computer Engineering Kyung Hee University Yongin si Gyeonggi South Korea

In Web environment, multiple Web service(WS)s may provide similar functionalities with different nonfunctional property values (e.g. different QoS metrics). Quality of service (QoS) metrics of WSs are critical factors to select appropriate WSs execution path in WSs composition as it requires expensive computation cost to find out appropriate execution path in Web environment, i.e O(MN) assuming that there will be M candidate services and N WSs in composition model. Thus, it is very important to decide which service execution path will be more suitable to users in execution time. Existing methods find execution path in design time which is inefficient as the QoS metrics of WSs are changed frequently in real time. Thus, in this paper, we propose a dynamic service execution path selection method called PSDM (propagation service decision method) in execution time for web service composition in u-Lifecare system. The proposed scheme is analyzed and experiment results are shown in terms of frequency of service execution path.

关键词： Web services Quality of service computer networks Availability Computational efficiency Frequency Throughput Costs Application software IP networks

来源：评论

学校读者我要写书评

暂无评论

An Efficient Grid Based Metadata Processing And Sharing Architecture For GEOSS

An Efficient Grid Based Metadata Processing And Sharing Arch...

引用

International Conference on Advanced Communication Technology (ICACT)

作者： Mohammad Mehedi Hassan Eui-Nam Huh Internet Computing and Network Security Laboratory Department of Computer Engineering Kyung Hee University Yongin si Gyeonggi South Korea

The global earth observation system of systems (GEOSS) is being developed as a framework for existing and future Earth observation systems which will be comprehensive, coordinated and sustainable. Many earth observation (EO) resources have been created, and are available to the global community, in order to support scientists, decision makers, and the general populace. To realize a successful GEOSS, the key is to provide mechanisms that enable EO data and geospatial data from those resources to be processed, shared and coordinated. In this paper, we propose an architecture for GEOSS which aims at providing a metadata extraction and management system for EO and geospatial data and sharing these data transparently, efficiently and securely in a grid environment.

关键词： Global Earth Observation System of Systems computer networks Grid computing Data mining computer architecture Environmental management Information technology Power system management Distributed computing IP networks

来源：评论

学校读者我要写书评

暂无评论

Reliable Data Dissemination with Diversity Multi-Hop Protocol for Wireless Sensors Network

Reliable Data Dissemination with Diversity Multi-Hop Protoco...

引用

International Conference on Advanced Communication Technology (ICACT)

作者： Salman Khan Eui-Nam Huh Imran Rao Department of Computer Engineering Internet Computing and Network Security Laboratory Kyung Hee University South Korea Department of Computer Science and Software Engineering University of Melbourne Australia

The growing needs to support efficient data communications in wireless sensor networks (WSN) cannot be ignored. The resource constrained nature of WSN requires it to efficiently transmit the data with little consumption of network resources. We present a gossip based K - BackTrack (KBT) reliable data dissemination protocol for unstructured ad-hoc WSNs 1 . The goal of our proposed protocol is to ensure reliable data delivery and, at the same time, keeping the overhead associated with reliability low. The basic idea we employ is that each node to delay the acknowledgement message until it reaches K th hop in the WSN. Then the K th node then acknowledge the receipt of the message to the source directly. By increasing the value of K, we can minimize the network traffic. Moreover, the data dissemination in our proposed protocol exhibits low bandwidth cost (by minimizing the acknowledgement) and increases network lifetime (since critical sensors, ie. close to the control center are not overused). Through extensive experimental evaluation and comparison, our findings demonstrate that our protocol achieves significant improvements in energy efficiency and network lifetime.

关键词： Spread spectrum communication Wireless application protocol Wireless sensor networks Telecommunication network reliability Data communication Delay Communication system traffic control Bandwidth Costs Energy efficiency

来源：评论

学校读者我要写书评

暂无评论

A Grid-enabled framework of expertise search engine using Web-based online communities

A Grid-enabled framework of expertise search engine using We...

引用

International Conference on computer and Information Technology (ICCIT)

作者： Mohammad Mehedi Hassan Pil-Woo Lee Eui-Nam Huh Department of Computer Engineering Internet Computing and Network Security Laboratory Kyung Hee University South Korea KISTI Daejeon South Korea

Existing search engines like Google, Yahoo!, Live etc. are not yet capable to answer queries that require deep semantic understanding of the query or the document. Instead, it is preferable to find and ask someone who has related expertise or experience on a topic and thus Web-based online communities have become important places for people to seek and share expertise. We need to gather the data that describes these online communities. But extracting, aggregating and analyzing data from these communities for finding experts on a single framework is a challenging task. Also there is no universal standard data structure for the outline of user participation in these communities. In this paper, we present a Grid-enabled framework of expertise search (GREFES) engine which utilizes online communities as sources for experts on various topics. This is a work in progress. We also propose an open data structure called SNML (Social Network Markup Language) to outline user participation in online communities. The architecture addresses major challenges in crawling of community data and query processing by utilizing Grid. An expert ranking algorithm is also discussed and evaluated.

关键词： Search engines Distributed computing computer networks Grid computing Data analysis Data structures Social network services Query processing Online Communities/Technical Collaboration IP networks

来源：评论

学校读者我要写书评

暂无评论

A Peer-to-Peer Resource Sharing Scheme Using Trusted computing Technology

引用

Wuhan University Journal of Natural Sciences 2008年第5期13卷 523-527页

作者： CHEN Lu ZHANG Huanguo ZHANG Liqiang LI Song CAI Liang School of Computer Wuhan University/Key Laboratory ofAerospace Information Security and Trusted Computing of Ministryof Education Wuhan 430072 Hubei China State Key Laboratory of Software Engineering WuhanUniversity Wuhan 430072 Hubei China Department of Information Security Information EngineeringUniversity Zhengzhou 450004 Henan China

Facing the increasing security issues in P2P networks, a scheme for resource sharing using trusted computing technologies is proposed in this paper. We advance a RS-UCON model with decision continuity and attribute mutability to control the usage process and an architecture to illustrate how TC technologies support policy enforcement with bidirectional attestation. The properties required for attestation should include not only integrity measurement value of platform and related application, but also reputation of users and access history, in order to avoid the limitation of the existing approaches. To make a permission, it is required to evaluate both the authorization and conditions of the subject and the object in resource usage to ensure trustable resources to be transferred to trusted users and platform.

关键词： resource sharing trusted computing virtualization UCON （usage control） chain of trust

来源：评论

学校读者我要写书评

暂无评论

Mitigating energy holes based on transmission range adjustment in wireless sensor networks 5

Mitigating energy holes based on transmission range adjustme...

引用

5th International ICST Conference on Heterogeneous Networking for Quality, Reliability, security and Robustness, QShine 2008

作者： Song, Chao Cao, Jiannong Liu, Ming Zheng, Yuan Gong, Haigang Chen, Guihai School of Computer Science and Engineering University of Electronic Science and Technology of China Chengdu610054 China Department of Computing Internet and Mobile Computing Laboratory Hong Kong Polytechnic University Hong Kong Hong Kong State Key Laboratory for Novel Software Technology Nanjing University Nanjing210093 China

ISBN: (纸本)9789639799264

In a wireless sensor network (WSN), the energy hole problem is a key factor which affects the lifetime of the networks. In a WSN with circular multi-hop deployment (modeled as concentric coronas), sensors in one corona have the same transmission range termed as the transmission range of this corona, and different coronas have different transmission ranges, which compose a list termed as transmission range list. Based on our improved corona model with levels, we propose that a right transmission range of each corona is the decision factor for optimizing network lifetime after nodes deployment. We prove that searching optimal transmission range lists is a multi-objective optimization problem (MOP), which is NP hard. We propose a centralized algorithm and a distributed algorithm to build the transmission range list for different node distributions. The two algorithms can not only reduce the searching complexity but also obtain results approximated to the optimal solution. Furthermore, the simulation results indicate that the network lifetime under our solution approximates to that ensured by the optimal list. Compared with existing algorithms, our solution can make the network lifetime be extended more than two times longer. © Copyright 2008 ICST.

关键词： Sensor nodes

来源：评论

学校读者我要写书评

暂无评论

[ETCTR] Efficient Target Localization by Controlling the Transmission Range in Wireless Sensor Networks

[ETCTR] Efficient Target Localization by Controlling the Tra...

引用

International Conference on Networked computing and Advanced Information Management (NCM)

作者： Sajjad Hussain Chaudhary Ali Kashif Bashir Myong-Soon Park Internet Computing Laboratory Department of Computer Science and Engineering Korea University Seoul South Korea

The applications of sensor networks are getting critical and important particularly in strategic, applications such as corresponding target detection, surveillance, and target localization. To accomplish target detection and localization data from more then three sensors which receive signals from moving targets, measure RSSI, and translate RSSI into the distance between sensor and target. All this process involves more sensor and energy consumption. Whereas the energy is a critical resource in wireless sensor networks and network lifetime needs to be long-drawn out through the use of energy-conscious sensing strategies during system operations. We introduce an efficient-localization algorithm using only one sensor and auto controlling the transmission rage of its one hope neighbor sensors. Algorithm provides the precise location of the target by using signal strength and velocity of the object. It takes minimum resources of networks, which makes the network prolong. Our approach ETCTR adopt the multicasting for transmission settlement rather then broad casting that minimize the communication cost of the network. This algorithm contributes to increase the overall lifetime of sensor networks. Results illustrate that our approach provide better localization of the target utilizing less power consumption, less communication cost and extended network life.

关键词： Wireless sensor networks Radar tracking Target tracking Distance measurement Sensors Energy consumption Hardware

来源：评论

学校读者我要写书评

暂无评论

PinUP: Pinning User Files to Known Applications

PinUP: Pinning User Files to Known Applications

引用

Annual computer security Applications Conference

作者： William Enck Patrick McDaniel Trent Jaeger Systems and Internet Infrastructure Security (SIIS) Laboratory Department of Computer Science and Engineering Pennsylvania State University USA

Users commonly download, patch, and use applications such as email clients, office applications, and media-players from the internet. Such applications are run with the user's full permissions. Because system protections do not differentiate applications, any malcode present in the downloaded software can compromise or otherwise leak all user data. Interestingly, our investigations indicate that common applications often adhere to recognizable workflows on user data. In this paper, we take advantage of this reality by developing protection mechanisms that "pin'' user files to the applications that may use them. These mechanisms restrict access to user data to explicitly stated workflows--thus preventing malcode from exploiting user data not associated with that application. We describe our implementation of PinUP on the Linux security Modules framework, explore its performance, and study several practical use cases. Through these activities, we show that user data can be protected from untrusted applications while retaining the ability to receive the benefits of those applications.

关键词： Protection Application software internet Electronic mail computer security Linux Data security Laboratories computer science Permission

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：