检索结果-内蒙古大学图书馆

Comprehensive Information Security Evaluation Model Based on Multi-Level Decomposition Feedback for IoT

Computers, Materials & Continua 2020年第10期65卷 683-704页

作者： Jinxin Zuo Yueming Lu Hui Gao Ruohan Cao Ziyv Guo Jim Feng School of Cyberspace Security Beijing University of Posts and TelecommunicationsBeijing100876China School of Information and Communication Engineering Beijing University of Posts and Telecommunica-tionsBeijing100876China Key Laboratory of Trustworthy Distributed Computing and Service(BUPT) Ministry of EducationBeijing100876China Amphenol Global Interconnect Systems San JoseCA 95131USA

The development of the Internet of Things(IoT)calls for a comprehensive in-formation security evaluation framework to quantitatively measure the safety score and risk(S&R)value of the network *** this paper,we summarize the architecture and vulnerability in IoT and propose a comprehensive information security evaluation model based on multi-level decomposition *** evaluation model provides an idea for information security evaluation of IoT and guides the security decision maker for dynamic ***,we establish an overall evaluation indicator system that includes four primary indicators of threat information,asset,vulnerability,and management,*** also includes eleven secondary indicators of system protection rate,attack detection rate,confidentiality,availability,controllability,identifiability,number of vulnerabilities,vulnerability hazard level,staff organization,enterprise grading and service continuity,***,we build the core algorithm to enable the evaluation model,wherein a novel weighting technique is developed and a quantitative method is proposed to measure the S&R ***,in order to better supervise the performance of the proposed evaluation model,we present four novel indicators includes residual risk,continuous conformity of residual risk,head-to-tail consistency and decrease ratio,*** results show the advantages of the proposed model in the evaluation of information security for IoT.

关键词： IoT information security quantitative evaluation safety score residual risk

来源：评论

学校读者我要写书评

暂无评论

MaTRICS: a management tool for the remote intelligent configuration of (pervasive) systems

MaTRICS: a management tool for the remote intelligent config...

引用

IEEE/ACS International Conference on Pervasive services (ICPS)

作者： M. Bajohr T. Margaria Chair of Programming Systems University of Dortmund Germany Service Engineering for Distributed Systems Universität Gottingen Germany

With MaTRICS, we describe an architecture for pervasive management of distributed systems. It allows remotely connected users (e.g., system administrators) to modify the configuration of any service provided by a specific (application) server, like email-, news- or Web-servers. Novel to our approach is that the system can manage configuration processes on heterogeneous software- and hardware- platforms, which are performed from a variety of peripherals unmatched in today's practice. In this sense, we realize a sort of pervasive system management, where devices like mobile phones, faxes, PDAs are enabled to be used by system managers as remote system configuration and management tools.

关键词： Remote monitoring Application software Personal digital assistants Mobile handsets Spine Computer architecture Condition monitoring distributed computing Pervasive computing Ubiquitous computing

来源：评论

学校读者我要写书评

暂无评论

Model-based design of distributed collaborative bioinformatics processes in the jABC

Model-based design of distributed collaborative bioinformati...

引用

IEEE International Conference on engineering of Complex Computer systems

作者： T. Margaria C. Kubczak M. Njoku B. Steffen Chair Servce and Software Engineering University of Potsdam Potsdam Germany Chair of Programming Systems University of Dortmund Dortmund Germany Chair of Service Engineering for Distributed Systems University of Göttingen Gottingen Germany

Our approach to the model-driven collaborative design of workflows for bioinformatic applications uses the jABC for model driven mediation and choreography to complement a Web service-based elementary service provision. jABC is a framework for service development based on lightweight process coordination. Users (product developers and system/software designers) develop services and applications by composing reusable building-blocks into (flow-)graph structures that can be animated, analyzed, simulated, verified, executed, and compiled. This way of handling the collaborative design of complex processes has proven to be effective and adequate for the cooperation of non-programmers (in this case biologists) and technical people, and it is now being rolled out in the operative practice

关键词： Collaboration Bioinformatics Collaborative work Application software Mediation Software reusability Software systems Software design Animation Biological system modeling

来源：评论

学校读者我要写书评

暂无评论

A proposal for WS-agreement negotiation

A proposal for WS-agreement negotiation

引用

2010 11th IEEE/ACM International Conference on Grid Computing, Grid 2010

作者： Battré, Dominic Brazierz, Frances M.T. Clarkz, Kassidy P. Oeyz, Michael Papaspyroux, Alexander Wäldrichy, Oliver Wieder, Philipp Zieglery, Wolfgang Technische Universität Berlin Complex and Distributed IT Systems 10587 Berlin Germany Fraunhofer SCAI Schloss Birlinghoven 53754 Sankt-Augustin Germany Systems Engineering Faculty of Technology Policy and Management Delft University of Technology Netherlands Robotics Research Institute TU Dortmund University Dortmund Germany IT Management and Service Computing Group TU Dortmund University Dortmund Germany

ISBN: (纸本)9781424493487

The Web services Agreement specification defines a normative language to formulate service Level Agreements and a basic protocol to expose service-level descriptions, validate service-level requests, and come to an agreement. This protocol, often called "take-it-or-leave-it", allows a service provider and a service consumer to decide whether to accept or reject a service offer. Although this approach is sufficient for a number of use cases, others exist with requirements for multi-step negotiation or the adaptation of an existing agreement. In this paper, we describe the Web services Agreement Negotiation protocol, a proposal by the Open Grid Forum to extend the existing specification. This proposal is the result of combining various research activities that have been conducted to define protocols for negotiating service levels or to supersede the existing "take-it-or-leave-it" protocol. The main characteristics of this proposal are the multi-round negotiation capability, renegotiation capability, and compliance with the original specification. © 2010 IEEE.

关键词： Web services

来源：评论

学校读者我要写书评

暂无评论

A Taxonomy of Autonomic Application Management in Grids

A Taxonomy of Autonomic Application Management in Grids

引用

International Conference on Parallel and distributed systems (ICPADS)

作者： Mustafizur Rahman Rajiv Ranjan Rajkumar Buyya Cloud Computing and Distributed Systems Laboratory Department of Computer Science and Software Engineering University of Melbourne Australia Service Oriented Computing Research Group School of Computer Science and Engineering University of New South Wales Australia

In this paper, we propose a taxonomy that characterizes and classifies different components of autonomic application management in Grids. We also survey several representative Grid systems developed by various projects world-wide to demonstrate the comprehensiveness of the taxonomy. The taxonomy not only highlights the similarities and differences of state-of-the-art technologies utilized in autonomic application management from the perspective of Grid computing, but also identifies the areas that require further research initiatives.

关键词： Monitoring Resource management Taxonomy Processor scheduling Decision making Dynamic scheduling

来源：评论

学校读者我要写书评

暂无评论

A distributed heuristic for decentralized workflow scheduling in global Grids

A distributed heuristic for decentralized workflow schedulin...

引用

International Workshop on Grid Computing

作者： Mustafizur Rahman Rajiv Ranjan Rajkumar Buyya Grid Computing and Distributed Systems Laboratory Department of Computer Science and Software Engineering University of Melbourne Australia Service Oriented Computing Research Group School of Computer Science and Engineering University of New South Wales Australia

Efficient scheduling is a key concern for the effectual execution of performance driven Grid applications, such as workflows. Many list heuristics have been developed for scheduling workflows in centralized Grid environment. However, in this paper, we present a distributed list heuristic for decentralized scheduling of workflow applications in global Grids. The simulation results show that the proposed scheduling approach is scalable with respect to increased workload on the system.

关键词： Processor scheduling Grid computing Resource management Computer science Scheduling algorithm Laboratories Software engineering distributed computing Application software Peer to peer computing

来源：评论

学校读者我要写书评

暂无评论

Dependable workflow scheduling in global Grids

Dependable workflow scheduling in global Grids

引用

International Workshop on Grid Computing

In this paper, a reputation-based Grid workflow scheduling algorithm is proposed to counter the effect of inherent unreliability and temporal characteristics of computing resources in large scale, decentralized Grid overlays. The proposed approach builds upon structured peer-to-peer indexing and overlay networking techniques to create a scalable wide-area networking of Grid sites for supporting dependable scheduling of applications. The scheduling algorithm considers reliability of a Grid resource as a statistical property, which is globally computed in the decentralized Grid overlay based on dynamic feedbacks or reputation scores assigned by individual service consumers (Grid Resource Brokers). The proposed algorithm can dynamically adapt to changing resource conditions and offer significant performance gains as compared to traditional approaches in the event of unsuccessful job execution or resource failure. We evaluate and demonstrate the feasibility of our approach through an extensive trace driven simulation. The results show that our scheduling technique can reduce the makespan up to 50% and successfully isolate the failure-prone resources from the system.

关键词： Processor scheduling Scheduling algorithm Grid computing Counting circuits Large-scale systems Peer to peer computing Indexing Feedback Heuristic algorithms Performance gain

来源：评论

学校读者我要写书评

暂无评论

PMU-Spill: Performance Monitor Unit Counters Leak Secrets in Transient Executions

PMU-Spill: Performance Monitor Unit Counters Leak Secrets in...

引用

IEEE Asian Hardware-Oriented Security and Trust (AsianHOST)

作者： Pengfei Qiu Qiang Gao Dongsheng Wang Yongqiang Lyu Chang Liu Xiaoyong Li Chunlu Wang Gang Qu Key Laboratory of Trustworthy Distributed Computing and Service (BUPT) Ministry of Education Tsinghua University Beijing China Department of Computer Science and Technology Beijing National Research Center for Information Science and Technology Tsinghua University Beijing China Ministry of Education Key Laboratory of Trustworthy Distributed Computing and Service (BUPT) Beijing China Department of Electrical and Computer Engineering Institute for Systems Research University of Maryland Maryland USA

ISBN: (纸本)9781665461153

The processor's Performance Monitor Unit (PMU) allows the recording of architectural and microarchitectural events for profiling purposes. In this study, we reveal a security issue caused by the fact that current PMU implementations are capable of recording some events that happened during transient executions. We propose the PMU -Spill attack, a new kind of attack that enables attackers to maliciously leak the secret data in transient executions. We demonstrate on real hardware that PMU -Spill attack can leak the secret data stored in Intel Software Guard Extensions (SGX). In addition, we perform a thorough study to reveal all the vulnerable PMU counters and find that 20 of them can be used to achieve PMU -Spill attack. Our experiments suggest that the throughput of PMU -Spill attack is up to 575.3 bytes per second (Bps) with an average error rate of 1.89% when leaking the SGX-protected secret data.

关键词： Side-channel attacks Throughput Phasor measurement units Hardware Software Recording Security

来源：评论

学校读者我要写书评

暂无评论

Bag2image: A Multi-Instance Network Traffic Representation for Network Security Event Prediction

SSRN

引用

SSRN 2024年

作者： Zhang, Jiachen Han, Daoqi Lv, Zhaoxuan Liu, Yang Lu, Yueming Duan, Junke Zhang, Xinyu School of Cyberspace Security Beijing University of Posts and Telecommunications Beijing China Key Laboratory of Trustworthy Distributed Computing and Service Ministry of Education China School of Automation Beijing Institute of Technology Beijing China Beijing Institute of Astronautical Systems Engineering Beijing China

In practical scenarios, security events triggered by abnormal network traffic often result from the collective behavior of multiple data streams, embodying group security events with collective characteristics. Existing research methods, focusing on individual data streams, lack a macroscopic analysis and struggle with challenges of analyzing massive, imbalanced data sets. To address these challenges, this paper adopts a multi-instance learning approach, mapping multiple data streams into a bag with a coarse-grained approach, where each bag corresponds to a security event label and each data stream represents an instance. We propose a multi-instance network traffic conversion method, Bag2Image, which transforms temporal multi-instance network traffic data into image representations, preserving the spatio-temporal characteristics of instances within the bag through image channels and pixels. This strategy allows the network security event prediction task to be approached as an image classification problem, leveraging advanced image classification techniques for prediction. Our cross-experiments with six advanced multi-instance learning (MIL) algorithms and six different classification models demonstrate the superior performance of our method on both the UNSW-NB15 dataset and a private dataset. Specifically, our method achieved the highest F1 scores of 77.9% and 74.4% on these datasets, respectively, representing improvements of 4.1% and 13.5% over the second-best MIL algorithm. The recall rates also saw increases of 4.1% and 13.2%, respectively. © 2024, The Authors. All rights reserved.

关键词： Network security

来源：评论

学校读者我要写书评

暂无评论

A proposal for WS-Agreement Negotiation

A proposal for WS-Agreement Negotiation

引用

International Workshop on Grid Computing

作者： Dominic Battré Frances M.T. Brazier Kassidy P. Clark Michael Oey Alexander Papaspyrou Oliver Wäldrich Philipp Wieder Wolfgang Ziegler Complex and Distributed IT Systems Technische Universität Berlin Berlin Germany Systems Engineering Faculty of Technology Policy and Management Delft University of Technology The Netherlands Robotics Research Institute TU Dortmund University Dortmund Germany Fraunhofer SCAI Schloss Birlinghoven Sankt-Augustin Germany IT Management and Service Computing Group TU Dortmund University Dortmund Germany

The Web services Agreement specification defines a normative language to formulate service Level Agreements and a basic protocol to expose service-level descriptions, validate service-level requests, and come to an agreement. This protocol, often called “take-it-or-leave-it”, allows a service provider and a service consumer to decide whether to accept or reject a service offer. Although this approach is sufficient for a number of use cases, others exist with requirements for multi-step negotiation or the adaptation of an existing agreement. In this paper, we describe the Web services Agreement Negotiation protocol, a proposal by the Open Grid Forum to extend the existing specification. This proposal is the result of combining various research activities that have been conducted to define protocols for negotiating service levels or to supersede the existing “take-it-or-leave-it” protocol. The main characteristics of this proposal are the multi-round negotiation capability, renegotiation capability, and compliance with the original specification.

关键词： Protocols Context Proposals Web services Production facilities Computational modeling Quality of service

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：