1st Kassel Student Workshop on Security in Distributed Systems

With this document, we provide a compilation of in-depth discussions on some of the most current security issues in distributed systems. The six contributions have been collected and presented at the 1st Kassel Student Workshop on Security in Distributed Systems (KaSWoSDS’08). We are pleased to present a collection of papers not only shedding light on the theoretical aspects of their topics, but also being accompanied with elaborate practical examples. In Chapter 1, Stephan Opfer discusses Viruses, one of the oldest threats to system security. For years there has been an arms race between virus producers and anti-virus software providers, with no end in sight. Stefan Triller demonstrates how malicious code can be injected in a target process using a buffer overflow in Chapter 2. Websites usually store their data and user information in data bases. Like buffer overflows, the possibilities of performing SQL injection attacks targeting such data bases are left open by unwary programmers. Stephan Scheuermann gives us a deeper insight into the mechanisms behind such attacks in Chapter 3. Cross-site scripting (XSS) is a method to insert malicious code into websites viewed by other users. Michael Blumenstein explains this issue in Chapter 4. Code can be injected in other websites via XSS attacks in order to spy out data of internet users, spoofing subsumes all methods that directly involve taking on a false identity. In Chapter 5, Till Amma shows us different ways how this can be done and how it is prevented. Last but not least, cryptographic methods are used to encode confidential data in a way that even if it got in the wrong hands, the culprits cannot decode it. Over the centuries, many different ciphers have been developed, applied, and finally broken. Ilhan Glogic sketches this history in Chapter 6.

Plant genetic diversity, irrigation and nutrient cycling in traditional mountain oases of northern Oman

Little is known about plant biodiversity, irrigation management and nutrient fluxes as criteria to assess the sustainability of traditional irrigation agriculture in eastern Arabia. Therefore interdisciplinary studies were conducted over 4 yrs on flood-irrigated fields dominated by wheat (Triticum spp.), alfalfa (Medicago sativa L.) and date palm (Phoenix dactylifera L.) in two mountain oases of northern Oman. In both oases wheat landraces consisted of varietal mixtures comprising T. aestivum and T. durum of which at least two botanical varieties were new to science. During irrigation cycles of 6-9 days on an alfalfa-planted soil, volumetric water contents ranged from 30-13%. For cropland, partial oasis balances (comprising inputs of manure, mineral fertilizers, N2-fixation and irrigation water, and outputs of harvested products) were similar for both oases, with per hectare annual surpluses of 131 kg N, 37 kg P and 84 kg K at Balad Seet and of 136 kg N, 16 kg P and 66 kg K at Maqta. Respective palm grove surpluses, in contrast were with 303 kg N, 38 kg P, and 173 kg K ha^-1 yr^-1 much higher at Balad Seet than with 84 kg N, 14 kg P and 91 kg K ha^-1 yr^-1 at Maqta. The results show that the sustainability of these irrigated landuse systems depends on a high quality of the irrigation water with low Na but high CaCO3, intensive recycling of manure and an elaborate terrace structure with a well tailored water management system that allows adequate drainage.

Adaptive Real-time Anomaly-based Intrusion Detection using Data Mining and Machine Learning Techniques

Die zunehmende Vernetzung der Informations- und Kommunikationssysteme führt zu einer weiteren Erhöhung der Komplexität und damit auch zu einer weiteren Zunahme von Sicherheitslücken. Klassische Schutzmechanismen wie Firewall-Systeme und Anti-Malware-Lösungen bieten schon lange keinen Schutz mehr vor Eindringversuchen in IT-Infrastrukturen. Als ein sehr wirkungsvolles Instrument zum Schutz gegenüber Cyber-Attacken haben sich hierbei die Intrusion Detection Systeme (IDS) etabliert. Solche Systeme sammeln und analysieren Informationen von Netzwerkkomponenten und Rechnern, um ungewöhnliches Verhalten und Sicherheitsverletzungen automatisiert festzustellen. Während signatur-basierte Ansätze nur bereits bekannte Angriffsmuster detektieren können, sind anomalie-basierte IDS auch in der Lage, neue bisher unbekannte Angriffe (Zero-Day-Attacks) frühzeitig zu erkennen. Das Kernproblem von Intrusion Detection Systeme besteht jedoch in der optimalen Verarbeitung der gewaltigen Netzdaten und der Entwicklung eines in Echtzeit arbeitenden adaptiven Erkennungsmodells. Um diese Herausforderungen lösen zu können, stellt diese Dissertation ein Framework bereit, das aus zwei Hauptteilen besteht. Der erste Teil, OptiFilter genannt, verwendet ein dynamisches "Queuing Concept", um die zahlreich anfallenden Netzdaten weiter zu verarbeiten, baut fortlaufend Netzverbindungen auf, und exportiert strukturierte Input-Daten für das IDS. Den zweiten Teil stellt ein adaptiver Klassifikator dar, der ein Klassifikator-Modell basierend auf "Enhanced Growing Hierarchical Self Organizing Map" (EGHSOM), ein Modell für Netzwerk Normalzustand (NNB) und ein "Update Model" umfasst. In dem OptiFilter werden Tcpdump und SNMP traps benutzt, um die Netzwerkpakete und Hostereignisse fortlaufend zu aggregieren. Diese aggregierten Netzwerkpackete und Hostereignisse werden weiter analysiert und in Verbindungsvektoren umgewandelt. Zur Verbesserung der Erkennungsrate des adaptiven Klassifikators wird das künstliche neuronale Netz GHSOM intensiv untersucht und wesentlich weiterentwickelt. In dieser Dissertation werden unterschiedliche Ansätze vorgeschlagen und diskutiert. So wird eine classification-confidence margin threshold definiert, um die unbekannten bösartigen Verbindungen aufzudecken, die Stabilität der Wachstumstopologie durch neuartige Ansätze für die Initialisierung der Gewichtvektoren und durch die Stärkung der Winner Neuronen erhöht, und ein selbst-adaptives Verfahren eingeführt, um das Modell ständig aktualisieren zu können. Darüber hinaus besteht die Hauptaufgabe des NNB-Modells in der weiteren Untersuchung der erkannten unbekannten Verbindungen von der EGHSOM und der Überprüfung, ob sie normal sind. Jedoch, ändern sich die Netzverkehrsdaten wegen des Concept drif Phänomens ständig, was in Echtzeit zur Erzeugung nicht stationärer Netzdaten führt. Dieses Phänomen wird von dem Update-Modell besser kontrolliert. Das EGHSOM-Modell kann die neuen Anomalien effektiv erkennen und das NNB-Model passt die Änderungen in Netzdaten optimal an. Bei den experimentellen Untersuchungen hat das Framework erfolgversprechende Ergebnisse gezeigt. Im ersten Experiment wurde das Framework in Offline-Betriebsmodus evaluiert. Der OptiFilter wurde mit offline-, synthetischen- und realistischen Daten ausgewertet. Der adaptive Klassifikator wurde mit dem 10-Fold Cross Validation Verfahren evaluiert, um dessen Genauigkeit abzuschätzen. Im zweiten Experiment wurde das Framework auf einer 1 bis 10 GB Netzwerkstrecke installiert und im Online-Betriebsmodus in Echtzeit ausgewertet. Der OptiFilter hat erfolgreich die gewaltige Menge von Netzdaten in die strukturierten Verbindungsvektoren umgewandelt und der adaptive Klassifikator hat sie präzise klassifiziert. Die Vergleichsstudie zwischen dem entwickelten Framework und anderen bekannten IDS-Ansätzen zeigt, dass der vorgeschlagene IDSFramework alle anderen Ansätze übertrifft. Dies lässt sich auf folgende Kernpunkte zurückführen: Bearbeitung der gesammelten Netzdaten, Erreichung der besten Performanz (wie die Gesamtgenauigkeit), Detektieren unbekannter Verbindungen und Entwicklung des in Echtzeit arbeitenden Erkennungsmodells von Eindringversuchen.

Evolving Distributed Algorithms with Genetic Programming

Distributed systems are one of the most vital components of the economy. The most prominent example is probably the internet, a constituent element of our knowledge society. During the recent years, the number of novel network types has steadily increased. Amongst others, sensor networks, distributed systems composed of tiny computational devices with scarce resources, have emerged. The further development and heterogeneous connection of such systems imposes new requirements on the software development process. Mobile and wireless networks, for instance, have to organize themselves autonomously and must be able to react to changes in the environment and to failing nodes alike. Researching new approaches for the design of distributed algorithms may lead to methods with which these requirements can be met efficiently. In this thesis, one such method is developed, tested, and discussed in respect of its practical utility. Our new design approach for distributed algorithms is based on Genetic Programming, a member of the family of evolutionary algorithms. Evolutionary algorithms are metaheuristic optimization methods which copy principles from natural evolution. They use a population of solution candidates which they try to refine step by step in order to attain optimal values for predefined objective functions. The synthesis of an algorithm with our approach starts with an analysis step in which the wanted global behavior of the distributed system is specified. From this specification, objective functions are derived which steer a Genetic Programming process where the solution candidates are distributed programs. The objective functions rate how close these programs approximate the goal behavior in multiple randomized network simulations. The evolutionary process step by step selects the most promising solution candidates and modifies and combines them with mutation and crossover operators. This way, a description of the global behavior of a distributed system is translated automatically to programs which, if executed locally on the nodes of the system, exhibit this behavior. In our work, we test six different ways for representing distributed programs, comprising adaptations and extensions of well-known Genetic Programming methods (SGP, eSGP, and LGP), one bio-inspired approach (Fraglets), and two new program representations called Rule-based Genetic Programming (RBGP, eRBGP) designed by us. We breed programs in these representations for three well-known example problems in distributed systems: election algorithms, the distributed mutual exclusion at a critical section, and the distributed computation of the greatest common divisor of a set of numbers. Synthesizing distributed programs the evolutionary way does not necessarily lead to the envisaged results. In a detailed analysis, we discuss the problematic features which make this form of Genetic Programming particularly hard. The two Rule-based Genetic Programming approaches have been developed especially in order to mitigate these difficulties. In our experiments, at least one of them (eRBGP) turned out to be a very efficient approach and in most cases, was superior to the other representations.

Conceptual information systems discussed through an IT-security tool

Conceptual Information Systems are based on a formalization of the concept of "concept" as it is discussed in traditional philosophical logic. This formalization supports a human-centered approach to the development of Information Systems. We discuss this approach by means of an implemented Conceptual Information System for supporting IT security management in companies and organizations.

Effect of management strategies on the performance of ruminant livestock production systems and the safety of plant and animal products in the city of Sikasso, Mali

The regional population growth in West Africa, and especially its urban centers, will bring about new and critical challenges for urban development policy, especially in terms of ensuring food security and providing employment for the growing population. (Peri-) urban livestock and vegetable production systems, which can contribute significantly to these endeavours, are limited by various constraints, amongst them limited access to expensive production factors and their (in)efficient use. To achieve sustainable production systems with low consumer health risks, that can meet the urban increased demand, this doctoral thesis determined nutrient use efficiencies in representative (peri-) urban livestock production systems in three West African cities, and investigated potential health risks for consumers ensuing from there. The field study, which was conducted during July 2007 to December 2009, undertook a comparative analysis of (peri-) urban livestock production strategies across 210 livestock keeping households (HH) in the three West African cities of Kano/Nigeria (84 HH), Bobo Dioulasso/Burkina Faso (63 HH) and Sikasso/Mali (63 HH). These livestock enterprises were belonging to the following three farm types: commercial gardening plus field crops and livestock (cGCL; 88 HH), commercial livestock plus subsistence field cropping (cLsC; 109 HH) and commercial gardening plus semi-commercial livestock (cGscL; 13 HH) which had been classified in a preceding study; they represented the diversity of (peri-) urban livestock production systems in West Africa. In the study on the efficiency of ruminant livestock production, lactating cowsand sheep herd units were differentiated based on whether feed supplements were offered to the animals at the homestead (Go: grazing only; Gsf: mainly grazing plus some supplement feeding). Inflows and outflows of nutrients were quantified in these herds during 18 months, and the effects of seasonal variations in nutrient availability on animals’ productivity and reproductive performance was determined in Sikasso. To assess the safety of animal products and vegetables, contamination sources of irrigated lettuce and milk with microbiological contaminants, and of tomato and cabbage with pesticide residues in (peri-) urban agriculture systems of Bobo Dioulasso and Sikasso were characterized at three occasions in 2009. Samples of irrigation water, organic fertilizer and ix lettuce were collected in 6 gardens, and samples of cabbage and tomato in 12 gardens; raw and curdled milk were sampled in 6 dairy herds. Information on health risks for consumers of such foodstuffs was obtained from 11 health centers in Sikasso. In (peri-) urban livestock production systems, sheep and goats dominated (P<0.001) in Kano compared to Bobo Dioulasso and Sikasso, while cattle and poultry were more frequent (P<0.001) in Bobo Dioulasso and Sikasso than in Kano. Across cities, ruminant feeding relied on grazing and homestead supplementation with fresh grasses, crop residues, cereal brans and cotton seed cake; cereal grains and brans were the major ingredients of poultry feeds. There was little association of gardens and livestock; likewise field cropping and livestock were rarely integrated. No relation existed between the education of the HH head and the adoption of improved management practices (P>0.05), but the proportion of HH heads with a long-term experience in (peri-) urban agriculture was higher in Kano and in Bobo Dioulasso than in Sikasso (P<0.001). Cattle and sheep fetched highest market prices in Kano; unit prices for goats and chicken were highest in Sikasso. Animal inflow, outflow and dairy herd growth rates were significantly higher (P<0.05) in the Gsf than in the Go cattle herds. Maize bran and cottonseed expeller were the main feeds offered to Gsf cows as dry-season supplement, while Gsf sheep received maize bran, fresh grasses and cowpea pods. The short periodic transhumance of Go dairy cows help them maintaining their live weight, whereas Gsf cows lost weight during the dry season despite supplement feeding at a rate of 1506 g dry matter per cow and day, resulting in low productivity and reproductive performance. The daily live weight gains of calves and lambs, respectively, were low and not significantly different between the Go and the Gsf system. However, the average live weight gains of lambs were significantly higher in the dry season (P<0.05) than in the rainy season because of the high pressure of gastrointestinal parasites and of Trypanosoma sp. In consequence, 47% of the sheep leaving the Go and Gsf herds died due to diseases during the study period. Thermo-tolerant coliforms and Escherichia coli contamination levels of irrigation water significantly exceeded WHO recommendations for the unrestricted irrigation of vegetables consumed raw. Microbial contamination levels of lettuce at the farm gate and the market place in Bobo Dioulasso and at the farm gate in Sikasso were higher than at the market place in Sikasso (P<0.05). Pesticide residues were detected in only one cabbage and one tomato sample and were below the maximum residue limit for consumption. Counts of thermo-tolerant coliforms and Escherichia coli were higher in curdled than in raw milk (P<0.05). From 2006 to x 2009, cases of diarrhea/vomiting and typhoid fever had increased by 11% and 48%, respectively, in Sikasso. For ensuring economically successful and ecologically viable (peri-) urban livestock husbandry and food safety of (peri-) urban foodstuffs of animal and plant origin, the dissemination and adoption of improved feeding practices, livestock healthcare and dung management are key. In addition, measures fostering the safety of animal products and vegetables including the appropriate use of wastewater in (peri-) urban agriculture, restriction to approve vegetable pesticides and the respect of their latency periods, and passing and enforcement of safety laws is required. Finally, the incorporation of environmentally sound (peri-) urban agriculture in urban planning by policy makers, public and private extension agencies and the urban farmers themselves is of utmost importance. To enable an efficient (peri-) urban livestock production in the future, research should concentrate on cost-effective feeding systems that allow meeting the animals’ requirement for production and reproduction. Thereby focus should be laid on the use of crop-residues and leguminous forages. The improvement of the milk production potential through crossbreeding of local cattle breeds with exotic breeds known for their high milk yield might be an accompanying option, but it needs careful supervision to prevent the loss of the local trypanotolerant purebreds.

Wastewater usage in urban and peri-urban agricultural production systems: scenarios from India

The role urban and peri-urban agriculture (UPA) plays in reducing urban poverty and ensuring environmental sustainability was recognized by the Millennium Development Goals (MGDs). India is the world’s largest democratic nation with a population of 1.2 billion. The rapid urbanization and high proportion of people below the poverty line along with higher migration to urban areas make India vulnerable to food crisis and urbanization of poverty. Ensuring jobs and food security among urban poor is a major challenge in India. The role of UPA can be well explained and understood in this context. This paper focuses on the current situation of UPA production in India with special attention to wastewater irrigation. This question is being posed about the various human health risks from wastewater irrigation which are faced by farmers and labourers, and, secondly by consumers. The possible health hazards involve microbial pathogens as well as helminth (intestinal parasites). Based on primary and secondary data, this paper attempts to confirm that UPA is one of the best options to address increasing urban food demand and can serve to complement rural supply chains and reduce ecological food prints in India. “Good practice urban and peri-urban agriculture” necessitates an integrated approach with suitable risk reduction mechanisms to improve the efficiency and safety of UPA production.

Optimising contributions of goat farming to household economic success and food security in three production systems in Ethiopia

The study aims to analyse factors affecting contributions of goat farming to household economic success and food security in three goat production systems of Ethiopia. A study was conducted in three districts of Ethiopia representing arid agro-pastoral (AAP), semi-arid agro-pastoral (SAAP) and highland mixed crop-livestock (HMCL) systems involving 180 goat keeping households. Gross margin (GM) and net benefit (NB1 and NB2) were used as indicators of economic success of goat keeping. NB1 includes in-kind benefits of goats (consumption and manure), while NB2 additionally constitutes intangible benefits (insurance and finance). Household dietary diversity score (HDDS) was used as a proxy indicator of food security. GM was significantly affected by an off-take rate and flock size interaction (P<0.001). The increment of GM due to increased off-take rate was more prominent for farmers with bigger flocks. Interaction between flock size and production system significantly (P<0.001) affected both NB1 and NB2. The increment of NB1 and NB2 by keeping larger flocks was higher in AAP system, due to higher in-kind and intangible benefits of goats in this system. Effect of goat flock size as a predictor of household dietary diversity was not significant (P>0.05). Nevertheless, a significant positive correlation (P<0.05) was observed between GM from goats and HDDS in AAP system, indicating the indirect role of goat production for food security. The study indicated that extent of utilising tangible and intangible benefits of goats varied among production systems and these differences should be given adequate attention in designing genetic improvement programs.