Defending web services against denial of service attacks using client puzzles

The interoperable and loosely-coupled web services architecture, while beneficial, can be resource-intensive, and is thus susceptible to denial of service (DoS) attacks in which an attacker can use a relatively insignificant amount of resources to exhaust the computational resources of a web service. We investigate the effectiveness of defending web services from DoS attacks using client puzzles, a cryptographic countermeasure which provides a form of gradual authentication by requiring the client to solve some computationally difficult problems before access is granted. In particular, we describe a mechanism for integrating a hash-based puzzle into existing web services frameworks and analyze the effectiveness of the countermeasure using a variety of scenarios on a network testbed. Client puzzles are an effective defence against flooding attacks. They can also mitigate certain types of semantic-based attacks, although they may not be the optimal solution.

Data preprocessing for anomaly based network intrusion detection : a review

Data preprocessing is widely recognized as an important stage in anomaly detection. This paper reviews the data preprocessing techniques used by anomaly-based network intrusion detection systems (NIDS), concentrating on which aspects of the network traffic are analyzed, and what feature construction and selection methods have been used. Motivation for the paper comes from the large impact data preprocessing has on the accuracy and capability of anomaly-based NIDS. The review finds that many NIDS limit their view of network traffic to the TCP/IP packet headers. Time-based statistics can be derived from these headers to detect network scans, network worm behavior, and denial of service attacks. A number of other NIDS perform deeper inspection of request packets to detect attacks against network services and network applications. More recent approaches analyze full service responses to detect attacks targeting clients. The review covers a wide range of NIDS, highlighting which classes of attack are detectable by each of these approaches. Data preprocessing is found to predominantly rely on expert domain knowledge for identifying the most relevant parts of network traffic and for constructing the initial candidate set of traffic features. On the other hand, automated methods have been widely used for feature extraction to reduce data dimensionality, and feature selection to find the most relevant subset of features from this candidate set. The review shows a trend toward deeper packet inspection to construct more relevant features through targeted content parsing. These context sensitive features are required to detect current attacks.

The future of the internet economy : addressing challenges facing the implementation of the Australian national broadband network

Innovation is vital for the future of Australia.s internet economy. Innovations rely on businesses. ability to innovate. Businesses. ability to innovate relies on their employees. The more these individual end users engage in the internet economy, the better businesses. engagement will be. The less these individual end users engage, the less likely a business is to engage and innovate. This means, for the internet economy to function at its fullest potential, it is essential that individual Australians have the capacity to engage with it and participate in it. The Australian federal government is working to facilitate the internet economy through policies, legislation and practices that implement high-speed broadband. The National Broadband Network will be a vital tool for Australia.s internet economy. Its .chief importance¡® is that it will provide faster internet access speeds that will facilitate access to internet services and content. However, an appropriate infrastructure and internet speed is only part of the picture. As the Organisation for Economic Co-operation and Development identified, appropriate government policies are also needed to ensure that vital services are more accessible by consumers. The thesis identifies essential theories and principles underpinning the internet economy and from which the concept of connectedness is developed. Connectedness is defined as the ability of end users to connect with internet content and services, other individuals and organisations, and government. That is, their ability to operate in the internet economy. The NBN will be vital in ensuring connectedness into the future. What is not currently addressed by existing access regimes is how to facilitate end user access capacity and participation. The thesis concludes by making recommendations to the federal government as to what the governing principles of the Australian internet economy should include in order to enable individual end user access capacity.

An exploration of the technical, social and macro-societal pressures influencing the adoption of online social networking services by organisations

Measuring the business value that Internet technologies deliver for organisations has proven to be a difficult and elusive task, given their complexity and increased embeddedness within the value chain. Yet, despite the lack of empirical evidence that links the adoption of Information Technology (IT) with increased financial performance, many organisations continue to adopt new technologies at a rapid rate. This is evident in the widespread adoption of Web 2.0 online Social Networking Services (SNSs) such as Facebook, Twitter and YouTube. These new Internet based technologies, widely used for social purposes, are being employed by organisations to enhance their business communication processes. However, their use is yet to be correlated with an increase in business performance. Owing to the conflicting empirical evidence that links prior IT applications with increased business performance, IT, Information Systems (IS), and E-Business Model (EBM) research has increasingly looked to broader social and environmental factors as a means for examining and understanding the broader influences shaping IT, IS and E-Business (EB) adoption behaviour. Findings from these studies suggest that organisations adopt new technologies as a result of strong external pressures, rather than a clear measure of enhanced business value. In order to ascertain if this is the case with the adoption of SNSs, this study explores how organisations are creating value (and measuring that value) with the use of SNSs for business purposes, and the external pressures influencing their adoption. In doing so, it seeks to address two research questions: 1. What are the external pressures influencing organisations to adopt SNSs for business communication purposes? 2. Are SNSs providing increased business value for organisations, and if so, how is that value being captured and measured? Informed by the background literature fields of IT, IS, EBM, and Web 2.0, a three-tiered theoretical framework is developed that combines macro-societal, social and technological perspectives as possible causal mechanisms influencing the SNS adoption event. The macro societal view draws on the concept of Castells. (1996) network society and the behaviour of crowds, herds and swarms, to formulate a new explanatory concept of the network vortex. The social perspective draws on key components of institutional theory (DiMaggio & Powell, 1983, 1991), and the technical view draws from the organising vision concept developed by Swanson and Ramiller (1997). The study takes a critical realist approach, and conducts four stages of data collection and one stage of data coding and analysis. Stage 1 consisted of content analysis of websites and SNSs of many organisations, to identify the types of business purposes SNSs are being used for. Stage 2 also involved content analysis of organisational websites, in order to identify suitable sample organisations in which to conduct telephone interviews. Stage 3 consisted of conducting 18 in-depth, semi-structured telephone interviews within eight Australian organisations from the Media/Publishing and Galleries, Libraries, Archives and Museum (GLAM) industries. These sample organisations were considered leaders in the use of SNSs technologies. Stage 4 involved an SNS activity count of the organisations interviewed in Stage 3, in order to rate them as either Advanced Innovator (AI) organisations, or Learning Focussed (LF) organisations. A fifth stage of data coding and analysis of all four data collection stages was conducted, based on the theoretical framework developed for the study, and using QSR NVivo 8 software. The findings from this study reveal that SNSs have been adopted by organisations for the purpose of increasing business value, and as a result of strong social and macro-societal pressures. SNSs offer organisations a wide range of value enhancing opportunities that have broader benefits for customers and society. However, measuring the increased business value is difficult with traditional Return On Investment (ROI) mechanisms, ascertaining the need for new value capture and measurement rationales, to support the accountability of SNS adoption practices. The study also identified the presence of technical, social and macro-societal pressures, all of which influenced SNS adoption by organisations. These findings contribute important theoretical insight into the increased complexity of pressures influencing technology adoption rationales by organisations, and have important practical implications for practice, by reflecting the expanded global online networks in which organisations now operate. The limitations of the study include the small number of sample organisations in which interviews were conducted, its limited generalisability, and the small range of SNSs selected for the study. However, these were compensated in part by the expertise of the interviewees, and the global significance of the SNSs that were chosen. Future research could replicate the study to a larger sample from different industries, sectors and countries. It could also explore the life cycle of SNSs in a longitudinal study, and map how the technical, social and macro-societal pressures are emphasised through stages of the life cycle. The theoretical framework could also be applied to other social fad technology adoption studies.

Collaboration : developing integration in multi-purpose services in rural New South Wales, Australia

Introduction: The Multi-purpose Service (MPS) Program was introduced to rural Australia in 1991 as a solution to poor health outcomes in rural compared with metropolitan populations, difficulty in attracting healthcare staff and a lack of viability and range of health services in rural areas. The aim of this study was to describe the main concerns of participants involved in the development of multi-purpose services in rural New South Wales (NSW). This article is abstracted from a larger study and discusses the extent to which collaboration occurred within the new multi-purpose service. Methods: A constructivist grounded theory methodology was used. Participants were from 13 multi-purpose services in rural NSW and 30 in-depth interviews were conducted with 6 community members, 11 managers and 13 staff members who had been involved in the process of developing a multi-purpose service. Results: The main concern of all participants was their anticipation of risk. This anticipation of risk manifested itself in either trust or suspicion and explained their progression through a phase of collaborating. Participants who had trust in other stakeholders were more likely to embrace an integrated health service identity. Those participants, who were suspicious that they would lose status or power, maintained that the previous hospital services provided a better health service and described a coexistence of services within the multi-purpose service. Conclusions: This study provided an insight into the perceptions of community members, staff members and managers involved in the process of developing a multi-purpose service. It revealed that the anticipation of risk was intrinsic to a process of changing from a traditional hospital service to collaborating in a new model of health care provided at a multi-purpose service.

Field study of air change and flow rate in six automobiles

For many people, a relatively large proportion of daily exposure to a multitude of pollutants may occur inside an automobile. A key determinant of exposure is the amount of outdoor air entering the cabin (i.e. air change or flow rate). We have quantified this parameter in six passenger vehicles ranging in age from 18 years to <1 year, at three vehicle speeds and under four different ventilation settings. Average infiltration into the cabin with all operable air entry pathways closed was between 1 and 33.1 air changes per hour (ACH) at a vehicle speed of 60 km/h, and between 2.6 and 47.3 ACH at 110 km/h, with these results representing the most (2005 Volkswagen Golf) and least air-tight (1989 Mazda 121) vehicles, respectively. Average infiltration into stationary vehicles parked outdoors varied between ~0 and 1.4 ACH and was moderately related to wind speed. Measurements were also performed under an air recirculation setting with low fan speed, while airflow rate measurements were conducted under two non-recirculate ventilation settings with low and high fan speeds. The windows were closed in all cases, and over 200 measurements were performed. The results can be applied to estimate pollutant exposure inside vehicles.

Service delivery framework : an architectural strategy for next-generation service delivery in business network

The next-generation of service-oriented architecture (SOA) needs to scale for flexible service consumption, beyond organizational and application boundaries, into communities, ecosystems and business networks. In wider and, ultimately, global settings, new capabilities are needed so that business partners can efficiently and reliably enable, adapt and expose services. Those services can then be discovered, ordered, consumed, metered and paid for, through new applications and opportunities, driven by third-parties in the global “village”. This trend is already underway, in different ways, through different early adopter market segments. This paper proposes an architectural strategy for the provisioning and delivery of services in communities, ecosystems and business networks – a Service Delivery Framework (SDF). The SDF is intended to support multiple industries and deployments where a SOA platform is needed for collaborating partners and diverse consumers. Specifically, it is envisaged that the SDF allows providers to publish their services into network directories so that they can be repurposed, traded and consumed, and leveraging network utilities like B2B gateways and cloud hosting. To support these different facets of service delivery, the SDF extends the conventional service provider, service broker and service consumer of the Web Services Architecture to include service gateway, service hoster, service aggregator and service channel maker.

Application of Geographic Modeling Techniques to Quantify Spatial Access to Health Services Before and After an Acute Cardiac Event: The Cardiac ARIA Project

Background: Access to cardiac services is essential for appropriate implementation of evidence-based therapies to improve outcomes. The Cardiac Accessibility and Remoteness Index for Australia (Cardiac ARIA) aimed to derive an objective, geographic measure reflecting access to cardiac services. Methods: An expert panel defined an evidence-based clinical pathway. Using Geographic Information Systems (GIS), a numeric/alpha index was developed at two points along the continuum of care. The acute category (numeric) measured the time from the emergency call to arrival at an appropriate medical facility via road ambulance. The aftercare category (alpha) measured access to four basic services (family doctor, pharmacy, cardiac rehabilitation, and pathology services) when a patient returned to their community. Results: The numeric index ranged from 1 (access to principle referral center with cardiac catheterization service ≤ 1 hour) to 8 (no ambulance service, > 3 hours to medical facility, air transport required). The alphabetic index ranged from A (all 4 services available within 1 hour drive-time) to E (no services available within 1 hour). 13.9 million (71%) Australians resided within Cardiac ARIA 1A locations (hospital with cardiac catheterization laboratory and all aftercare within 1 hour). Those outside Cardiac 1A were over-represented by people aged over 65 years (32%) and Indigenous people (60%). Conclusion: The Cardiac ARIA index demonstrated substantial inequity in access to cardiac services in Australia. This methodology can be used to inform cardiology health service planning and the methodology could be applied to other common disease states within other regions of the world.

Measuring National Accessibility to Cardiac Services using Geographic Information Systems

The Cardiac Access-Remoteness Index of Australia (Cardiac ARIA) used geographic information systems (GIS) to model population level, road network accessibility to cardiac services before and after a cardiac event for all (20,387) population localities in Australia., The index ranged from 1A (access to all cardiac services within 1 h driving time) to 8E (limited or no access). The methodology derived an objective geographic measure of accessibility to required cardiac services across Australia. Approximately 71% of the 2006 Australian population had very good access to acute hospital services and services after hospital discharge. This GIS model could be applied to other regions or health conditions where spatially enabled data were available.

Investigation to enhance high speed rail accessibility

High Speed Rail (HSR) is rapidly gaining popularity worldwide as a safe and efficient transport option for long-distance travel. Designed to win market shares from air transport, HSR systems optimise their productivity between increasing speeds and station spacing to offer high quality service and gain ridership. Recent studies have investigated the effects that the deployment of HSR infrastructure has on spatial distribution and the economic development of cities and regions. Findings appear mostly positive at higher geographical scales, where HSR links connect major urban centres several hundred kilometres apart and already well positioned within a national or international context. Also, at the urban level, studies have shown regeneration and concentration effects around HSR station areas with positive returns on city’s image and economy. However, doubts persist on the effects of HSR at an intermediate scale, where the accessibility trade off on station spacing limits access to many small and medium agglomerations. Thereby, their ability to participate in the development opportunities facilitated by HSR infrastructure is significantly reduced. The locational advantages deriving from transport improvements appear contrasting especially in regions that tend to have a polycentric structure, where cities may present greater accessibility disparities between those served by HSR and those left behind. This thesis fits in this context where intermediate and regional cities do not directly enjoy the presence of an HSR station while having an existing or planned proximate HSR corridor. With the aim of understanding whether there might be a solution to this apparent incongruity, the research investigates strategies to integrate HSR accessibility at the regional level. While current literature recommends to commit with ancillary investments to the uplift of station areas and the renewal of feeder systems, I hypothesised the interoperability between the HSR and the conventional networks to explore the possibilities offered by mixed traffic and infrastructure sharing. Thus, I developed a methodology to quantify the exchange of benefits deriving from this synergistic interaction. In this way, it was possible to understand which level of service quality offered by alternative transit strategies best facilitates the distribution of accessibility benefits for areas far from actual HSR stations. Therefore, strategies were selected for their type of service capable of regional extensions and urban penetrations, while incorporating a combination of specific advantages (e.g. speed, sub-urbanity, capacity, frequency and automation) in order to emulate HSR quality with increasingly efficient services. The North-eastern Italian macro region was selected as case study to ground the research offering concurrently a peripheral polycentric metropolitan form, the presence of a planned HSR corridor with some portions of HSR infrastructure implementation, and the project to develop a suburban rail service extended regionally. Results show significant distributive potential, in terms of network effects produced in relation with HSR, in increasing proportions for all the strategies considered: a regional metro rail strategy (abbreviated RMR), a regional high speed rail strategy (abbreviated RHSR), a regional light rail transit (abbreviated LRT) strategy, and a non-stopping continuous railway system (abbreviated CRS) strategy. The provision of additional tools to value HSR infrastructure against its accessibility benefits and their regional distribution through alternative strategies beyond the actual HSR stations, would have great implications, both politically and technically, in moving towards new dimensions of HSR evaluation and development.

Benefits and issues of urban network travel time prediction

This paper presents the benefits and issues related to travel time prediction on urban network. Travel time information quantifies congestion and is perhaps the most important network performance measure. Travel time prediction has been an active area of research for the last five decades. The activities related to ITS have increased the attention of researchers for better and accurate real-time prediction of travel time. Majority of the literature on travel time prediction is applicable to freeways where, under non-incident conditions, traffic flow is not affected by external factors such as traffic control signals and opposing traffic flows. On urban environment the problem is more complicated due to conflicting areas (intersections), mid-link sources and sinks etc. and needs to be addressed.

Submission to House Standing Committee on Infrastructure and Communications : inquiry into the role and potential of the National Broadband Network

Just as telecommunications has played a key role in the global economy,1 high-speed broadband will have a significant role to play in the future of the digital economy. In particular high-speed broadband will have a role to play in the delivery of applications and services necessary for acquiring, and maintaining into the future Australia and Australians’ appropriate education level; community; health services, information provision and support; government services and engagement and participation by the public in the political process.

Regional and remote airports under stress in Australia

Australia's airline industry was born on connecting regional communities to major cities, but almost a century later, many regional and remote communities are facing the prospect of losing their air transport services. The focus of this paper is to highlight key issues and concerns surrounding remote, rural and regional airports in Australia using a network governance framework. Contributions are focused towards regional and remote airport managers, decision makers, and policy makers to stimulate further discussion towards retaining regional and remote services to communities.