Computer Sciences Commons^™

Are Existing Security Models Suitable For Teleworking?, Peter James

Australian Information Security Management Conference

The availability of high performance broadband services from the home will allow a growing number of organisations to offer teleworking as an employee work practice. Teleworking delivers cost savings, improved productivity and provides a recruitment policy to attract and retain personnel. Information security is one of the management considerations necessary before an effective organisational teleworking policy can be implemented. The teleworking computing environment presents a different set of security threats to those present in an office environment. Teleworking requires a security model to provide security policy enforcement to counter the set of security threats present in the teleworking computing environment. …

Security Aspects Of Sensor-Based Defence Systems, Michael N. Johnstone

Australian Information Security Management Conference

The Australian Defence Force (ADF) has IMAP and JMAP to perform planning prior to the deployment of forces, but there is a knowledge gap for on-ground forces during the execution of an operation. Multi-agent based sensor systems can provide on-ground forces with a significant amount of real-time information that can be used to modify planning due to changed conditions. The issue with such sensor systems is the degree to which they are vulnerable to attack by opposing forces. This paper explores the types of attack that could be successful and proposes defences that could be put in place to circumvent …

Privacy-Preserving Pki Design Based On Group Signature, Sokjoon Lee, Hyeok Chan Kwon, Dong-Il Seo

Australian Information Security Management Conference

Nowadays, Internet becomes a part of our life. We can make use of numerous services with personal computer, Lap-top, tablet, smart phone or smart TV. These devices with network make us enjoy ubiquitous computing life. Sometimes, on-line services request us authentication or identification for access control and authorization, and PKI technology is widely used because of its security. However the possibility of privacy invasion will increase, if We’re identified with same certificate in many services and these identification data are accumulated. For privacy-preserving authentication or anonymous authentication, there have been many researches such as Group signatures, anonymous credentials, etc. Among …

An Empirical Study Of Challenges In Managing The Security In Cloud Computing, Bupesh Mansukhani, Tanveer A. Zia

Australian Information Security Management Conference

Cloud computing is being heralded as an important trend in information technology throughout the world. Benefits for business and IT include reducing costs and increasing productivity. The downside is that many organizations are moving swiftly to the cloud without making sure that the information they put in the cloud is secure. The purpose of this paper is to learn from IT and IT security practitioners in the Indian Continent the current state of cloud computing security in their organizations and the most significant changes anticipated by respondents as computing resources migrate from on-premise to the cloud. As organizations grapple with …

Stakeholders In Security Policy Development, S B. Maynard, A B. Ruighaver, A Ahmad

Australian Information Security Management Conference

The Information Security Policy (ISP) of an organisation is expected to specify for employees their behaviour towards security, and the security ethos of the organisation. However, there are a wide range of opinions and expertise that should be considered by organisations when developing an ISP. This paper aims to identify the stakeholders that should be utilised in an ISP development process and how this may differ based on organisational size. The research identifies from literature nine stakeholder roles that are suggested to be required in an ISP development process. Contextual interviews are then used to validate these nine stakeholder roles …

Trusted Interoperability And The Patient Safety Issues Of Parasitic Health Care Software, Vincent B. Mccauley, Patricia A H Williams

Australian Information Security Management Conference

With the proliferation of software systems and products in the healthcare environment, it is increasingly common for such software products to be constructed in a modular design. However, for modular software to be securely interoperable with other software products requires agreed consistent and accountable interfaces. This agreement may take the form of bilateral vendor to vendor arrangements or via a trusted external third-party who coordinates agreed interaction methods, such as a jurisdiction. Standards are a particular form of mutually trusted third party. Unfortunately, this agreed method of interoperability is not always present in vendor software. Where one software product or …

Analysis Of Bgp Security Vulnerabilities, Muhammad Mujtaba, Priyadarsi Nanda

Australian Information Security Management Conference

Border Gateway Protocol (BGP) is a dynamic routing protocol in the Internet that allows Autonomous System (AS) to exchange information with other networks. The main goal of BGP is to provide a loop free path to the destination. Security has been a major issue for BGP and due to a large number of attacks on routers; it has resulted in router misconfiguration, power failure and Denial of Service (DoS) attacks. Detection and prevention of attacks in router at early stages of implementation has been a major research focus in the past few years. In this research paper, we compare three …

Experimental Study Of Dns Performance, Ananya Tripathi, Farhat Khan, Akhilesh Sisodia

Australian Information Security Management Conference

An abbreviation for Domain Name System, DNS is a system employed for naming computers and network services. This system is organized into a hierarchical scheme of domains. Naming service provided by DNS is used in TCP/IP networks, such as the Internet, to easily locate computers and services like mail exchanger servers, through user-friendly names. When a user enters a DNS name in an application, DNS services resolves this name to other information associated with the name, such as an IP address. This paper presents the evaluation of a DNS server performance in the experimental backgrounds to establish the fact that …

Attack Vectors Against Social Networking Systems: The Facebook Example, Matthew Warren, Shona Leitch, Ian Rosewall

Australian Information Security Management Conference

Social networking systems (SNS’s) such as Facebook are an ever evolving and developing means of social interaction, which is not only being used to disseminate information to family, friends and colleagues but as a way of meeting and interacting with "strangers" through the advent of a large number of social applications. The attractiveness of such software has meant a dramatic increase in the number of frequent users of SNS’s and the threats which were once common to the Internet have now been magnified, intensified and altered as the potential for criminal behaviour on SNS’s increases. Social networking sites including Facebook …

Help Or Hindrance: The Practicality Of Applying Security Standards In Healthcare, Patricia A H Williams

Australian Information Security Management Conference

The protection of patient information is now more important as a national e-health system approaches reality in Australia. The major challenge for health care providers is to understand the importance information security whilst also incorporating effective protection into established workflow and daily activity. Why then, when it is difficult for IT and security professionals to navigate through and apply the myriad of information security standards, do we expect small enterprises such as primary health care providers to also be able to do this. This is an onerous and impractical task without significant assistance. In the development of the new Computer …

Using Checklists To Make Better Best, Craig S. Wright, Tanveer A. Zia

Australian Information Security Management Conference

The more routine a task is we see the greater the need for a checklist. Even the smartest of us can forget where we parked our cars on returning from a long flight. So, the question is, why not create a straightforward checklist that will improve system management and security? In Information Technology operations, the vast majority of skilled people have re-built servers, but in an incident response situation, it can be unforgivable to overlook a serious security configuration simply because in the stress of the environment causes one to lose track of which stage they were on while being …

Source Code Embedded (Scem) Security Framework, Tanveer A. Zia, Aftab Rizvi

Australian Information Security Management Conference

Security in the Software Development Life Cycle (SDLC) has become imperative due to the variety of threats posed during and after system design. In this paper we have studied the security in system design in general and software development in particular, and have proposed strategies for integration of security in the SDLC. The paper highlights the needs of embedding security right from the earlier processes in the SDLC because patches and controls after the software delivery are more expensive to fix. We propose Source Code EMbedded (SCEM) security framework to improve the design of security policies and standards for the …

Seeing The Full Picture: The Case For Extending Security Ceremony Analysis, Giampaolo Bella, Lizzie Coles-Kemp

Australian Information Security Management Conference

The concept of the security ceremony was introduced a few years ago to complement the concept of the security protocol with everything about the context in which a protocol is run. In particular, such context involves the human executors of a protocol. When including human actors, human protocols become the focus, hence the concept of the security ceremony can be seen as part of the domain of socio-technical studies. This paper addresses the problem of ceremony analysis lacking the full view of human protocols. This paper categorises existing security ceremony analysis work and illustrates how the ceremony picture could be …

Designing Cyber Warfare Information Infrastructure Resilience, Semir Daskapan, Jan Van Der Berg

Australian Information Warfare and Security Conference

Due to many cyber attacks in the last years, governments are realizing how vulnerable they have become should there be a break out of a cyberwar. This urged them to establish a cyber warfare information infrastructure in a short time. However, this cyber warfare information infrastructure relies heavily on public infrastructures, like electricity and the Internet, which will be most likely targeted themselves. Therefore, a cyber warfare information infrastructure is by definition a vulnerable infrastructure that needs to be secured against attacks and made resilient. In this paper, we provide a method inspired by the theory of Complex Adaptive Systems …

Designing For The User: Exploring The Interface Design Of Web Services, Katelyn Anne Haw

Honors Program Theses

My thesis investigated the ideas of usability and the design process to create software that is considered usable. I developed a web interface for a Plan of Study Application that would help students make the educated decisions about their studies at UNI. Throughout the development of this application I addressed the following questions: "What makes an interface usable?" and "How does the design process affect a system's usability?" User interface design is an interdisciplinary process and it often involves computer programmers and graphic designers working together. Without clear communication and vision between the groups, the software being developed has little …

Leach-Sm: A Protocol For Extending Wireless Sensor Network Lifetime By Management Of Spare Nodes, Bilal Abu Bakr

Dissertations

Operational lifetime of a wireless sensor network (WSN) depends on its energy resources. Significant improvement of WSN lifetime can be achieved by adding spare sensor nodes to WSN. Spares are ready to be switched on when any primary (a node that is not a spare) exhausts its energy. A spare replacing a primary becomes a primary itself.

The LEACH-SM protocol (Low-Energy Adaptive Clustering Hierarchy with Spare Management) proposed by us is a modification of the prominent LEACH protocol. LEACH extends WSN lifetime via rotation of cluster heads but allows for inefficiencies due to redundant sensing target coverage. There are two …

Complexity Of Minimum Corridor Guarding Problems, Ning Xu

Dissertations and Theses

"In this paper, the complexity of minimum corridor guarding problems is discussed. These problem can be described as: given a connected orthogo-nal arrangement of vertical and horizontal line segments and a guard with unlimited visibility along a line segment, find a tree or a closed tour with minimum total length along edges of the arrangement, such that if the guard runs on the tree or on the closed tour, all line segments are visited by the guard. These problems are proved to be NP-complete. Keywords: computational complexity, computational geometry, corridor guarding, NP-complete"

Parallel Computing With Improved Techniques For Monte Carlo Simulation In Var, Ping Hung Wu

Dissertations and Theses

"Value at Risk ( VaR ) is a widely used tool for the assessment of one’s investments. VaR is used to evaluate the risk of loss on a financial portfolio. This metric can be computed in several ways. In the historical approach, past trends of the appropriate combination of stocks is used to estimate current portfolio fluctuations. The variance – covariance method, meanwhile, seeks to discover relationships in price fluctuations for one’s stocks. Finally, Monte Carlo simulation capitalizes upon the stochastic nature of stock prices to predict future value. This latter approach, however, relies heavily on the multiplication of vectors …

Research In High Performance And Low Power Computer Systems For Data-Intensive Environment, Pengju Shang

Electronic Theses and Dissertations

According to the data affinity, DAFA re-organizes data to maximize the parallelism of the affinitive data, and also subjective to the overall load balance. This enables DAFA to realize the maximum number of map tasks with data-locality. Besides the system performance, power consumption is another important concern of current computer systems. In the U.S. alone, the energy used by servers which could be saved comes to 3.17 million tons of carbon dioxide, or 580,678 cars {Kar09}. However, the goals of high performance and low energy consumption are at odds with each other. An ideal power management strategy should be able …

Virtual Router Approach For Wireless Ad Hoc Networks, Ai Hua Ho

Electronic Theses and Dissertations

Wireless networks have become increasingly popular in recent years. There are two variations of mobile wireless networks: infrastructure mobile networks and infrastructureless mobile networks. The latter are also known as mobile ad hoc network (MANET). MANETs have no fixed routers. Instead, mobile nodes function as relay nodes or routers, which discover and maintain communication connections between source nodes and destination nodes for various data transmission sessions. In other words, an MANET is a self-organizing multi-hop wireless network in which all nodes within a given geographical area participate in the routing and data forwarding process. Such networks are scalable and self-healing. …

Construction Of Efficient Authentication Schemes Using Trapdoor Hash Functions, Santosh Chandrasekhar

University of Kentucky Doctoral Dissertations

In large-scale distributed systems, where adversarial attacks can have widespread impact, authentication provides protection from threats involving impersonation of entities and tampering of data. Practical solutions to authentication problems in distributed systems must meet specific constraints of the target system, and provide a reasonable balance between security and cost. The goal of this dissertation is to address the problem of building practical and efficient authentication mechanisms to secure distributed applications. This dissertation presents techniques to construct efficient digital signature schemes using trapdoor hash functions for various distributed applications. Trapdoor hash functions are collision-resistant hash functions associated with a secret trapdoor …

On Simple But Hard Random Instances Of Propositional Theories And Logic Programs, Gayathri Namasivayam

University of Kentucky Doctoral Dissertations

In the last decade, Answer Set Programming (ASP) and Satisfiability (SAT) have been used to solve combinatorial search problems and practical applications in which they arise. In each of these formalisms, a tool called a solver is used to solve problems. A solver takes as input a specification of the problem – a logic program in the case of ASP, and a CNF theory for SAT – and produces as output a solution to the problem. Designing fast solvers is important for the success of this general-purpose approach to solving search problems. Classes of instances that pose challenges to solvers …

Cross-Layer Design For Cooperative Wireless Sensor Networks With Multiple Optimizations, Wei Chen, Heh Miao, Liang Hong

Computer Science Faculty Research

In virtual MIMO technology, distributed single-antenna radio systems cooperate on information transmission and reception as a multiple-antenna MIMO radio system. In this paper, a cooperative transmission scheme, virtual MIMO network formation and reconfiguration algorithms, and a cooperative routing backbone are cross-layered designed for wireless sensor networks (WSNs) to jointly achieve required reliability, energy efficiency and delay reduction. The proposed cooperative transmission scheme minimizes the number of intra communications among cooperative nodes. It can save energy and reduces latency at transmission links even when the distance between cooperative nodes is large. In the proposed routing backbone, energy consumption and latency are …

Development Of Visualization Facility At The Gis And Remote Sensing Core Lab, University Of Nevada, Las Vegas, Haroon Stephen, William J. Smith, Zhongwei Liu

Public Policy and Leadership Faculty Presentations

Visualization using advanced computational and graphic equipment has become a standard way of present day research. Availability of low cost and fast processing units, high resolution displays with graphic processing units, and specialized software has brought complex visualization capabilities to an office desktop. Nevertheless, when dealing with large datasets such as, global climate, geospatial, and social data the office desktop falls short and calls for a centralized visualization facility with high end computing and graphics equipment.

Visualization Facility at GIS and Remote Sensing Core Lab would be a useful and important addition to the UNLV IT infrastructure. It would provide …

A Survey On Communication Networks In Emergency Warning Systems, Yan Li

All Computer Science and Engineering Research

No abstract provided.

End-To-End Communication Delay Analysis In Wirelesshart Networks, Abusayeed Saifullah, You Xu, Chenyang Lu, Yixin Chen

All Computer Science and Engineering Research

WirelessHART is a new standard specifically designed for real-time and reliable communication between sensor and actuator devices for industrial process monitoring and control applications. End-to-end communication delay analysis for WirelessHART networks is required to determine the schedulability of real-time data flows from sensors to actuators for the purpose of acceptance test or workload adjustment in response to network dynamics. In this paper, we map the scheduling of real-time periodic data flows in a WirelessHART network to real-time multiprocessor scheduling. We then exploit the response time analysis for multiprocessor scheduling and propose a novel method for the delay analysis that establishes …

Results Of An Observational Study On Sketching, Cindy Grimm

All Computer Science and Engineering Research

We present the results of an observational study on sketching. Artists were asked to sketch a small number of objects and comment on how and why they made the marks they did. We summarize these findings, from low-level details on individual marks through the drawing construction order. Based on these observations we provide suggestions for future research directions in 3D sketching.

Flux Balance Analysis Of Dynamic Metabolism In Shewanella Oneidensis Mr-1 Using A Static Optimization Approach, Xueyang Feng, You Xu, Yixin Chen, Yinjie Tang

All Computer Science and Engineering Research

Shewanella bacteria are facultative anaerobes isolated from aquatic and sedimentary environments (Hau and Gralnick 2007) with a broad capacity for reduction of multiple electron receptors (Pinchuk et al. 2009; Serres and Riley 2006), including Fe(III), Mn(IV), sulfur, nitrate, and fumarate. With the accomplishment of complete genome sequencing of several Shewanella bacteria, the general pictures of the carbon metabolism have been revealed (Serres and Riley 2006). metabolism. One of the most physiological methods to decipher the time-variant metabolic regulation is to determine the dynamic distribution of intracellular metabolic fluxes since it reveals the final response of cellular metabolism to genomic, transcriptional …

Webcam Image Alignment, Matthew Klein

All Computer Science and Engineering Research

No abstract provided.

Real Time Baseball Augmented Reality, Adam Kraft

All Computer Science and Engineering Research

As computer hardware becomes increasingly powerful, there is an ongoing trend towards integrating complex, legacy real-time systems using fewer hosts through virtualization. Especially in embedded systems domains such as avionics and automotive engineerin