7088840
Communication protection in IP-based video surveillance systems
For decades, video surveillance systems have been crucial in protecting critical infrastructures. Currently the systems are adopting the emerging internetworking digital technology, changing from the traditional isolated analog technology. While there are several advantages of IP-based video surveillance systems, the systems are also exposed to additional new security threats. Security is a critical factor to make the IP-based video surveillance systems practical and usable. In this paper, we address the security threats to the data communications in IP-based video surveillance systems. We first analyze the current approaches, mainly naive and selective methods, to secure real-time video data, and identify their limitations to IP-based video surveillance systems. Then we propose a system design of secure internetworking video surveillance systems. Our proposed approach adopts a randomly adjustable encryption method to provide confidentiality to the data. Our implementation and performance study demonstrate that our approach achieves a good balance of cost-efficiency and security.
34025553
Security as services in active networks
This paper discusses the design and implementation for supporting customized security services in active networks using active networking principles. The customized security services support is based on a secure node architecture that includes an active node operating system security API, an active security guardian, and quality of protection provisions. The support of highly customized security services permits active nodes to satisfy the application-specific dynamic security and protection requirements. It associates quality of protection with network software and application security. Applications can dynamically select the suitable security configurations and services at each active routing node, based on their security and performance requirements. The secure node architecture, together with the support of dynamically customized security services, can provide a fundamental base for securing the active network infrastructure and active applications.
12789585
A Secure Agent Architecture for Sensor Networks
Advances in sensor and wireless technologies will enable thousands, or even millions of small but smart sensors to be deployed for a wide range of monitoring applications. The sensor networks must be dynamically configurable and adaptive in order to response actively to events. Security must also be built into sensor networks at the very initial design stage to prevent any potential threats. This paper presents a design of a generic software architecture based on tiny active agents for sensor networks. The architecture has built-in security components. This architecture will significantly benefit the dynamic and secure deployment and configuration tasks of large sensor networks for various applications.
242170
Active security support for active networks
Active networks aim to provide a software framework that enables network applications to customize the processing of their communication packets. Security is of critical importance to the success of active networking. This paper presents a design and a description of the implementation for securing the node of an active network using active networking principles. The secure node architecture includes an active node operating system security API, an active security guardian, and quality of protection (QoP) provisions. The architecture supports highly customized and situational policies created by users and applications dynamically. It permits active nodes to satisfy the application-specific dynamic security and protection requirements. The secure node architecture can provide a fundamental base for securing the active network infrastructure. We describe the integration of secure node architecture into an active network software system to demonstrate its flexible and innovative features.
11468499
Secure Information Flow in Mobile Bootstrapping Process
The security of bootstrapping is very important for mobile computing. In this paper, we present the bootstrapping process of the Cherubim security system which uses a smartcard to allow a mobile Cherubim client to universally access remote standard services. In order to prevent any leakage of sensitive information, we apply a type system for secure flows to the bootstrapping source codes. The type system guarantees that well-typed programs satisfy a noninterference security property. This means that the program does not ``leak'''' sensitive data. The type system also produces principal types for type-correct programs that characterize how programs can be called securely. The analysis demonstrates that the type system can ensure secure flow enforcement.
27151074
Integrated Support for Location Aware Security Services in Enterprise Wireless Networks
In wireless computing environments limiting network access to authorized users is paramount for the overall security of network. In addition to basic authentication framework, network access is also governed by the context in which it is being used. In this work, we address security issues based on one such context: location. Location sensitivity is increasingly becoming an integral aspect of wireless and pervasive applications. As user moves around in an ubiquitous environment, access rights and other security services provided to her need to be evaluated accordingly. For such purposes we need a security mechanism that controls the authentication and other security services based on location, in addition to basic identity information. In this paper, we present an architecture of location aware security services for enterprise wireless networks. Our implementation is integrated into the RADIUS system, an Authentication, Authorization and Accounting (AAA) framework. Performace evaluation shows that our implementation is efficient for location based security services.
3758350
An Analytical Approach to the Performance Evaluation of Master-Slave Computational Models
Abstract Many stochastic models and analysis techniques have been proposed in the literature during the last two decades for the performance evaluation of parallel and distributed systems. However, few of them are directly applicable to practical systems which are generally too complex. In this paper, we analyze performances of the master–slave computational model, one of the most commonly used models in parallel and distributed computations. We propose a hybrid analytical approach by using techniques from the theories of both stochastic task graphs and queueing networks. We apply this method to the analysis of a computational chemistry application running on a Transputer based system. The proposed method turns out to be not only very efficient in time for large systems but also very accurate compared to measuring.
14342655
Towards a Rigorous Approach to UML-Based Development
We discuss the promises and problems of UML-based development. We then suggest a framework in which UML can be used precisely and more disciplined so as to solve the problems and meet the promises better.
6592348
Scheduling UET-UCT Series-Parallel Graphs on Two Processors
Abstract The scheduling of task graphs on two identical processors is considered. It is assumed that tasks have unit-execution-time, and arcs are associated with unit-communication-time delays. The problem is to assign the tasks to the two processors and schedule their execution in order to minimize the makespan. A quadratic algorithm is proposed to compute an optimal schedule for a class of series-parallel graphs, called SP1 graphs, which includes in particular in-forests and out-forests.
252821
Performance Analysis of Stochastic Timed Petri Nets Using Linear Programming Approach
Stochastic timed Petri nets are a useful tool in the performance analysis of concurrent systems such as parallel computers, communication networks and flexible manufacturing systems. In general, performance measures of stochastic timed Petri nets are difficult to obtain for practical problems due to their sizes. In this paper, we provide a method to efficiently compute upper and lower bounds for the throughputs and mean token numbers for a large class of stochastic timed Petri nets. Our approach is based on uniformization technique and linear programming.
14780024
Fuzzy causal networks: general model, inference, and convergence
In this paper, we first propose a general framework for fuzzy causal networks (FCNs). Then, we study the dynamics and convergence of such general FCNs. We prove that any general FCN with constant weight matrix converges to a limit cycle or a static state, or the trajectory of the FCN is not repetitive. We also prove that under certain conditions a discrete state general FCN converges to its limit cycle or static state in O(n) steps, where n is the number of vertices of the FCN. This is in striking contrast with the exponential running time 2/sup n/, which is accepted widely for classic FCNs.