16833900
Securely Sharing Data in Encrypted Databases
Collaborative design and application integration emphasize the demand for database security. Database encryption is widely adopted to ensure data privacy, which can prevent attacks from both outside intruders and inside malicious users. Current researches on this area are mainly focusing on encryption algorithms, key management and encryption efficiency. However, data sharing nature of database system is usually neglected. In this paper, we propose an access control model, 3S-RBAC, which enables data sharing while guaranteeing privacy. The model has many features: the novel concept of strong permission and weak permission; the hierarchy of database objects and keys; the permission and key inheritance; the binding of keys and permissions. Implementation in OSCAR Secure DBMS shows that the model is flexible, secure, practical, and can be integrated easily into existing enterprise applications
15447660
A logical replication-based intrusion detection approach for CSCW system
With the rapid development of CSCW techniques, CSCW system security has been of much attention. Its major challenge comes from malicious attacks, which cannot be handled by traditional security mechanisms, such as authorization, access control, encryption, etc. Although there existed some intrusion detection systems, current researches on intrusion detection are still insufficient in accuracy and efficiency for two reasons: firstly, most of them implement malicious transaction detection only by matching samples with predefined patterns; secondly, most current researches mainly resort to semantic analyzing or even only manual interventions to judge the malicious attacks. Inspired by the replication technique, we propose and implement a novel logical replication-based intrusion detection solution for CSCW system in this paper. It provides an additional layer of defense against application attacks, especially program attacks. The approach entitles the system to detect malicious intrusions efficiently at low false positive rate.
22766407
Watermarking Abstract Tree-Structured Data
Digital watermarking techniques have been successfully applied in multimedia data such as image, audio, video, etc. With the rapid development of Internet, the requirement of copyright and integrity protection over semi-structured data, such as XML documents and complex hypertext content, is becoming more and more urgent. However, it is more challenging to apply the effective watermarking schemes into semi-structured data, because watermark for semi-structured data must have the dual protection feature toward both structure and content. In general, most semi-structured data can be represented as tree. Therefore, in this paper, we propose a novel watermark scheme for tree-structured data based on the value lying both in the tree structure and in the node content, which gives a comprehensive protection for both node content and structure of tree. The experiments on the robustness of the solution against various forms of attacks are conducted. The results highlight correctness and efficiency of our solution.
15894335
An adaptive load balancing framework for parallel database systems based on collaborative agents
Load balancing is a key technique in parallel computer supported collaborative work (CSCW) systems, parallel database system and P2P system for instance, to boost performance and improve scalability. In order to reduce total cost of ownership (TCO), adaptive/self-tuning administration techniques are gradually and extensively expected in the cyberspace. In parallel database systems, adaptive load balancing techniques are proposed to face the change in data storage patterns and access patterns in a dynamic real environment. The techniques utilized in both shared-nothing and shared-disk parallel database systems are discussed, and a general flexible framework based on collaborative agents is studied to support these techniques in both architectures. The framework supports two kinds of load balancing - one is passively executing query statements balancedly, and the other one is proactively adjusting data placement and task execution scheme, by means of data and task migration, whenever load unbalance is detected. Three categories of agents, scheduling agents, monitoring agents and task agents, are identified in the framework. The collaboration protocols and scheduling algorithms to support adaptive load balancing are described. The framework also applies to other parallel systems such as P2P systems and shared file processing systems due to their underlying commonness.
18102767
Resilient Rights Protection for Product Data
With the development of advance manufacture applications, enterprise must interact with their suppliers and customers to share more product data information. Consequently, copyright and integrity protection over product data is becoming an urgent requirement. Product data information consists of two parts: product structure and part content, besides protecting the three-dimensional (3D) model of part by watermarking, we also need to protect product structure information, which describes the relations among product parts and can be represented as a tree. In this paper, based on the 3D polygonal meshes watermark technology, the structure/semi-structure data watermark technologies and the idea of Fractal, we propose a novel watermark scheme for tree-structure product data with the value lying both in product structure and in part node content, which gives a more comprehensive and resilient right protection for both part node content and product structure. Moreover it is particularly effective when resisting invertibility attacks
1262783
An Immunity-Based Intrusion Detection Solution for Database Systems
Database intrusion detection has been an important research area in database security. It focuses on malicious transaction attacks, which cannot be handled by traditional database security mechanisms, such as authorization, access control, integrity control, and so on. Although there have appeared some intrusion detection systems, current researches on malicious transaction detection are limited in accuracy and efficiency. Inspired by natural immune system, we propose a novel immunity-based intrusion detection solution for database system in this paper. It provides an additional layer of defense against DBMS misuse, especially malicious transactions. The ability to learn and to adapt to the environment dynamically entitles the system to detect both known and unknown malicious transaction intrusions efficiently. Simulations show that the database intrusion detection system based on data immunity can accelerate detection of malicious transaction attacks and improve its accuracy without causing any other performance penalty.
5841267
The Data Mining Technology Based on CIMS and its Application on Automotive Remanufacturing
Nowadays, with the development of computer technology, data mining has been widely used in various fields. This paper describes a CIMSMINER that combines the data mining with CIMS (computer integrated manufacturing system) and instructs its objectives, model, physical architecture and methods. Considering the characteristics of remanufacturing of automotive products in China, the CIMSMINER is used to get the information concourse together and obtain the data mining results to help the improvement of products. The application in automotive remanufacturing is a reform to make the automotive product information chain be not only an information carrier, but also an information miner. Currently, the government strongly emphasizes energy saving and emission reducing, which is closely related to the sustainable development of China. Obviously, CIMSMINER is an effective tool to support the implementation of this policy.
14448585
Application research of an LFB management and development model in ForCES router
The router based on ForCES (Forwarding and Control Element Separation) meets the open, flexible and programmable demands of the next generation networks. It is one important trend of the next generation routers. Our research team is key participants in the ForCES work and authors of the IETF ForCES protocol. A LFB management and development model based on ForCES router software architecture was illustrated. The ForCES router software structure was first discussed. Based on that, the model was presented. Based on that, the architecture of this model was described. The key technologies on how to manage resource library were described, including the method of LFB resource library management and the mechanism of ForCES LFB resource internal storage. In order to testify the feasibility, an implementation of the model was presented, and an example of an IPv6 forwarding service implementation was given.
15411856
Prediction of the Number of Helices for the Twilight Zone Proteins
Protein structure prediction is one of the core research areas in bioinformatics. This paper addresses the protein secondary structure prediction problem for the twilight zone proteins, which are characterized by low, about 25% homology to the sets of known sequences. The commonly used sequence alignment based algorithms fail to provide accurate prediction for sequences of such low homology, and thus alternative solutions should be sought. We propose a novel method that aims at the prediction of the number of helical structures based on the twilight zone protein sequences. The method is based on a custom designed and compact feature based sequences representation and applies a decision tree prediction algorithm. The performed experimental study shows superiority of the proposed method over three other prediction algorithms and the results provided by YASPIN algorithm, which is a state-of-the-art alignment based secondary structure prediction method designed using low homology sequences
17434449
On Two Multigrid Algorithms for Modeling Variational Multiphase Image Segmentation
In this paper, we present two related multigrid algorithms for multiphase image segmentation. Algorithm I solves the model by Vese-Chan. We first generalize our recently developed multigrid method to this multiphase segmentation model (MG1); we also give a local Fourier analysis for the local smoother which leads to a new and more effective smoother. Although MG1 is found many magnitudes faster than the fast method of additive operator splitting (AOS), both algorithms are not robust with regard to the initial guess. To overcome this dependence on the initial guess, we consider a hierarchical segmentation model which achieves multiphase segmentation by repeated use of the Chan-Vese two-phase model; our algorithm II solves this model by a multigrid algorithm (MG2). Numerical experiments show that both algorithms are efficient and in particular MG2 is more robust than MG1 with respect to initial guesses. AMS subject classifications: 68U10, 65F10, 65K10.
4925614
Combining Competitive Learning Networks of Various Representations for Sequential Data Clustering
A process for the preparation of oil-soluble Mannich condensation products wherein an amine is prereacted with a sulfonic acid or ammonium sulfonate, and the prereaction product is reacted with an aldehyde and an oxidized olefin polymer.