Scalable model-based configuration management of security services in complex enterprise networks

Security administrators face the challenge of designing, deploying and maintaining a variety of configuration files related to security systems, especially in large-scale networks. These files have heterogeneous syntaxes and follow differing semantic concepts. Nevertheless, they are interdependent due to security services having to cooperate and their configuration to be consistent with each other, so that global security policies are completely and correctly enforced. To tackle this problem, our approach supports a comfortable definition of an abstract high-level security policy and provides an automated derivation of the desired configuration files. It is an extension of policy-based management and policy hierarchies, combining model-based management (MBM) with system modularization. MBM employs an object-oriented model of the managed system to obtain the details needed for automated policy refinement. The modularization into abstract subsystems (ASs) segment the system-and the model-into units which more closely encapsulate related system components and provide focused abstract views. As a result, scalability is achieved and even comprehensive IT systems can be modelled in a unified manner. The associated tool MoBaSeC (Model-Based-Service-Configuration) supports interactive graphical modelling, automated model analysis and policy refinement with the derivation of configuration files. We describe the MBM and AS approaches, outline the tool functions and exemplify their applications and results obtained. Copyright (C) 2010 John Wiley & Sons, Ltd.

Formal validation of automated policy refinement in the management of network security systems

Policy hierarchies and automated policy refinement are powerful approaches to simplify administration of security services in complex network environments. A crucial issue for the practical use of these approaches is to ensure the validity of the policy hierarchy, i.e. since the policy sets for the lower levels are automatically derived from the abstract policies (defined by the modeller), we must be sure that the derived policies uphold the high-level ones. This paper builds upon previous work on Model-based Management, particularly on the Diagram of Abstract Subsystems approach, and goes further to propose a formal validation approach for the policy hierarchies yielded by the automated policy refinement process. We establish general validation conditions for a multi-layered policy model, i.e. necessary and sufficient conditions that a policy hierarchy must satisfy so that the lower-level policy sets are valid refinements of the higher-level policies according to the criteria of consistency and completeness. Relying upon the validation conditions and upon axioms about the model representativeness, two theorems are proved to ensure compliance between the resulting system behaviour and the abstract policies that are modelled.

Influence diagnostics in nonlinear mixed-effects elliptical models

In this work we propose and analyze nonlinear elliptical models for longitudinal data, which represent an alternative to gaussian models in the cases of heavy tails, for instance. The elliptical distributions may help to control the influence of the observations in the parameter estimates by naturally attributing different weights for each case. We consider random effects to introduce the within-group correlation and work with the marginal model without requiring numerical integration. An iterative algorithm to obtain maximum likelihood estimates for the parameters is presented, as well as diagnostic results based on residual distances and local influence [Cook, D., 1986. Assessment of local influence. journal of the Royal Statistical Society - Series B 48 (2), 133-169; Cook D., 1987. Influence assessment. journal of Applied Statistics 14 (2),117-131; Escobar, L.A., Meeker, W.Q., 1992, Assessing influence in regression analysis with censored data, Biometrics 48, 507-528]. As numerical illustration, we apply the obtained results to a kinetics longitudinal data set presented in [Vonesh, E.F., Carter, R.L., 1992. Mixed-effects nonlinear regression for unbalanced repeated measures. Biometrics 48, 1-17], which was analyzed under the assumption of normality. (C) 2009 Elsevier B.V. All rights reserved.

DFT study of the electronic, vibrational, and optical properties of SnO(2)

We report results on the electronic, vibrational, and optical properties of SnO(2) obtained using first-principles calculations performed within the density functional theory. All the calculated phonon frequencies, real and imaginary parts of complex dielectric function, the energy-loss spectrum, the refractive index, the extinction, and the absorption coefficients show good agreement with experimental results. Based on our calculations, the SnO(2) electron and hole effective masses were found to be strongly anisotropic. The lattice contribution to the low-frequency region of the SnO(2) dielectric function arising from optical phonons was also determined resulting the values of E > (1aSyen) (latt) (0) = 14.6 and E > (1ayen) (latt) (0) = 10.7 for directions perpendicular and parallel to the tetragonal c-axis, respectively. This is in excellent agreement with the available experimental data. After adding the electronic contribution to the lattice contribution, a total average value of E >(1)(0) = 18.2 is predicted for the static permittivity constant of SnO(2).

Comparative Genetic Diversity of Wild and Captive Populations of the Bare-Faced Curassow (Crax fasciolata) Based on Cross-Species Microsatellite Markers: Implications for Conservation and Management

The bare-faced curassow (Crax fasciolata) is a large Neotropical bird that suffers anthropogenic pressure across much of its range. A captive population is maintained for conservation management, although there has been no genetic screening of stocks. Based on the six microsatellite markers developed for Crax globulosa, the genetic variability of C. fasciolata and possible differences between a wild and a captive population were investigated. Only three loci were polymorphic, with a total of 27 alleles. More than half of these alleles were private to the wild (n = 8) or captive (n = 7) populations. Significant deviations from Hardy-Weinberg equilibrium were restricted to the captive population. Despite the number of private alleles, genetic drift has probably promoted differentiation between populations. Our results indicate that wild C. fasciolata populations are genetically impoverished and structured, but species-specific microsatellite markers will be necessary for a more reliable assessment of the species` genetic diversity.