Improvement of DDoS attack detection and web access anonymity

The thesis has covered a range of algorithms that help to improve the security of web services. The research focused on the problems of DDoS attack and traffic analysis attack against service availability and information privacy respectively. Finally, this research significantly advantaged DDoS attack detection and web access anonymity.

Detecting and mitigating HX-DoS attacks against cloud web services

Cyber-Physical Systems allow for the interaction of the cyber world and physical worlds using as a central service called Cloud Web Services. Cloud Web Services can sit well within three models of Cyber- Physical Systems, Software-as-a-Service (SaaS), Platform-as-a-Service (PaaS), and Infrastructure-as-a- Service (IaaS). With any Cyber-Physical system use Cloud Web Services it inherits a security problem, the HX-DoS attack. HX-DoS attack is a combination of HTTP and XML messages that are intentionally sent to flood and destroy the communication channel of the cloud service provider. The relevance of this research is that TCP/IP flood attacks are a common problem and a lot of research to mitigate them has previously been discussed. But HTTP denial of service and XML denial of service problem has only been addressed in a few papers. In this paper, we get closer to closing this gap on this problem with our new defence system called Pre- Decision, Advance Decision, Learning System (ENDER). In our previous experiments using our Cloud Protector, we were successful at detecting and mitigate 91% with a 9% false positive of HX-DoS attack traffic. In this paper, ENDER was able to improve upon this result by being trained and tested on the same data, but with a greater result of 99% detection and 1% false positive.

Web 2.0 for networked learning : from collaboration to shared cognition and knowledge networking

This poster presents research-in-progress into the educational affordances of so-called Web 2.0 sites, services, with a particular emphasis on those applications that involve forms of shared human-machine cognition and that promote public knowledge networking. This research involves reviewing many hundreds of Web 2.0 tools and selecting approximately 50 for further analysis and exploration as learning applications. In doing so, the research will generate examples of unusual affordances provided by Web 2.0; it will also present a more structured categorisation of the kinds of uses and benefits of these tools. This approach is valuable because much current research and analysis of the impact of Web 2.0 on education, particularly higher education, has emphasised a relatively limited array of tools – principally blogs, wikis and social networking services – that offer educators and students opportunities for student-led collaborative work. Such opportunities involve strong emphasis on constructivist pedagogy: students’ interactions with each other, mediated via the Internet, are viewed as the positive benefit which networked learning can provide. However, Web 2.0 is far more than just collaboration, and associated shared self-expression. In particular, Web 2.0 includes many examples of services that take one form of input from a user and, rather than just sharing it with others, enable the transformation of that input into different forms, either as visualisations, maps, or other re-representations. Web 2.0 is also starting to see the development of knowledge-work engines that embody the concept of shared cognition, in which the service and the user cooperate in the production of some final knowledge output or which present to users knowledge that has already been processed more extensively than through simple searching. Web 2.0 is also closely associated with the idea that knowledge work is now networked and distributed; it involves users appropriating, creating and sharing knowledge products in a very public way, far beyond the narrow ‘audience’ of a particular course or program of study. The research presented in this poster will provide, firstly, examples of the Web 2.0 tools which emphasise these additional ways of exploiting the Internet for networked learning; secondly, the research will provide a first iteration of the overarching structure of categories and classifications which can be used to assess any proposed Web 2.0 application in terms of its affordances for learning as knowledge networking. By understanding these technologies, truly collaborative networked learning can be developed that blends with the emerging cultures of online behaviour increasingly common to contemporary student populations.

Online peer mentoring with pre-service teachers : a learning experience

In 2010, 34 pre-service teachers at Deakin University were invited to use Web 2.0 technologies to support practicum in rural and regional schools. Students in their final year of the Bachelor of Education Primary course were given access to an online forum, a ‗ning‘, to facilitate development of mentoring relationships within a community of peers. Access to the ning was presented as an optional extra available only to students undertaking their professional experience in rural and regional settings. Based on the work of Le Cornu (2005), mentoring was framed as a collaborative and collegial arrangement through which participants could hone the interpersonal and critical reflection skills crucial to practicum. A ning was selected as it: 1) allowed the creation of a closed, protected social network with customised options, and 2) requires little technological skills and investment of time from participants in terms of setting up a profile and participating in the online community. These features seemed to make it an ideal platform for pre-service teachers to analyse and reflect on professional experience. However, the small pre-service cohort did not choose to access the site. This unexpected outcome seems to challenge contemporary discourses about the current generation‘s attitudes to web based technology. It also highlights the importance of coupling use of template-based online tools, such as the ning, with awareness of Bourdieu‘s (1977) social capital to ensure uptake. In capturing the learnings from the project and systematically reviewing relevant literature, this paper provides a set of recommendations for conceptualising and engaging pre-service teachers in the use of online forums.

Resisting web proxy-based HTTP attacks by temporal and spatial locality behavior

A novel server-side defense scheme is proposed to resist the Web proxy-based distributed denial of service attack. The approach utilizes the temporal and spatial locality to extract the behavior features of the proxy-to-server traffic, which makes the scheme independent of the traffic intensity and frequently varying Web contents. A nonlinear mapping function is introduced to protect weak signals from the interference of infrequent large values. Then, a new hidden semi-Markov model parameterized by Gaussian-mixture and Gamma distributions is proposed to describe the time-varying traffic behavior of Web proxies. The new method reduces the number of parameters to be estimated, and can characterize the dynamic evolution of the proxy-to-server traffic rather than the static statistics. Two diagnosis approaches at different scales are introduced to meet the requirement of both fine-grained and coarse-grained detection. Soft control is a novel attack response method proposed in this work. It converts a suspicious traffic into a relatively normal one by behavior reshaping rather than rudely discarding. This measure can protect the quality of services of legitimate users. The experiments confirm the effectiveness of the proposed scheme.

Reasons for using web-based counselling among family and friends impacted by problem gambling

Despite the range of free services available in Australia, few family and friends of people with problem gambling access them. Over recent years, the Australian gambling help service system has expanded to include web-based counselling. Family and friends make up approximately 15% of people accessing this new modality, however little is known of the reasons for choosing this form of assistance over other interventions. This research aimed to understand the reasons family and friends choose to use single-session web-based counselling over other modes (i.e., face-to-face and telephone), as well as why they would recommend it to other affected people.

The study involved 63 participants (70% intimate partners, 13% children, 6% friends, 5% parents, 6% other family members) who completed openended questions on reasons for using and recommending web-based counselling, with over three-quarters of the sample seeking help for the first time.

A descriptive content analysis revealed multiple overlapping themes, including ease of access (41.3% of reasons for choosing), privacy and anonymity (17.5%), and a preference for the characteristics inherent in the therapeutic medium (23.8%). We also found webbased counselling provided a pathway into services (11.1%) and that the intervention provided was viewed as helpful and a reason for recommendation (34.9% of reasons for recommending).

This research provides important new information on the help seeking preferences of family and friends. Future research is required to understand the relationship between reasons for use, help-seeking preferences and the effectiveness of single-session web-based counselling for people affected by problem gambling.

Web-based counseling for problem gambling: exploring motivations and recommendations

Background:

Yahoo! A mobile news service is a bold move

The investment in Katie Couric and senior reporters from The New York Times signals that Yahoo wants to move into Web TV and mobile video content in an effort to take on the the giants of American network and cable television, and perhaps even Netflix, which is rumoured to also be looking at an Australian launch next yea

Getting everyone on the same page : A staff focus group study for library web site redesign

Purpose - Using staff focus groups in the redevelopment of a library web site deploys their knowledge of user navigation issues and search strategies and addresses the unique needs of library staff. This paper seeks to describe the process of planning, recruiting, and conducting staff focus groups and provide a discussion of lessons learned. Design/methodology/approach - A committee of professionals and non-professionals from the University of Calgary Library conducted a series of five focus groups with library staff. The goals were to determine their content and service priorities for the redesigned library web site, and also to ensure that staff was included in the redesign process. Findings - This paper makes recommendations for library staff focus group interviewing, including planning, formulating questions, recruitment, conducting sessions, and analysis and reporting. Practical implications - Focus group interviews can be effectively conducted in-house, with careful planning and adherence to established guidelines. Focus groups are a very useful method for gathering staff input for web site redesign or any other library-planning project. Originality/value - This paper will be useful to librarians interested in assessing staff needs and priorities through focus group interviews. The paper fills a void in the library literature regarding the use of library staff as both focus group leaders and participants.

Detection and defense of application-layer DDoS attacks in backbone web traffic

Web servers are usually located in a well-organized data center where these servers connect with the outside Internet directly through backbones. Meanwhile, the application-layer distributed denials of service (AL-DDoS) attacks are critical threats to the Internet, particularly to those business web servers. Currently, there are some methods designed to handle the AL-DDoS attacks, but most of them cannot be used in heavy backbones. In this paper, we propose a new method to detect AL-DDoS attacks. Our work distinguishes itself from previous methods by considering AL-DDoS attack detection in heavy backbone traffic. Besides, the detection of AL-DDoS attacks is easily misled by flash crowd traffic. In order to overcome this problem, our proposed method constructs a Real-time Frequency Vector (RFV) and real-timely characterizes the traffic as a set of models. By examining the entropy of AL-DDoS attacks and flash crowds, these models can be used to recognize the real AL-DDoS attacks. We integrate the above detection principles into a modularized defense architecture, which consists of a head-end sensor, a detection module and a traffic filter. With a swift AL-DDoS detection speed, the filter is capable of letting the legitimate requests through but the attack traffic is stopped. In the experiment, we adopt certain episodes of real traffic from Sina and Taobao to evaluate our AL-DDoS detection method and architecture. Compared with previous methods, the results show that our approach is very effective in defending AL-DDoS attacks at backbones. © 2013 Elsevier B.V. All rights reserved.

Dynamic cloud service selection using an adaptive learning mechanism in multi-cloud computing

Cloud service selection in a multi-cloud computing environment is receiving more and more attentions. There is an abundance of emerging cloud service resources that makes it hard for users to select the better services for their applications in a changing multi-cloud environment, especially for online real time applications. To assist users to efficiently select their preferred cloud services, a cloud service selection model adopting the cloud service brokers is given, and based on this model, a dynamic cloud service selection strategy named DCS is put forward. In the process of selecting services, each cloud service broker manages some clustered cloud services, and performs the DCS strategy whose core is an adaptive learning mechanism that comprises the incentive, forgetting and degenerate functions. The mechanism is devised to dynamically optimize the cloud service selection and to return the best service result to the user. Correspondingly, a set of dynamic cloud service selection algorithms are presented in this paper to implement our mechanism. The results of the simulation experiments show that our strategy has better overall performance and efficiency in acquiring high quality service solutions at a lower computing cost than existing relevant approaches.

Subtyping based on readiness and confidence: the identification of help-seeking profiles for gamblers accessing web-based counselling

BACKGROUND AND AIMS: Problem gamblers are not a homogeneous group and recent data suggest that subtyping can improve treatment outcomes. This study administered three readiness rulers and aimed to identify subtypes of gamblers accessing a national web-based counselling service based on these rulers. METHODS: Participants were 1204 gamblers (99.4% problem gamblers) who accessed a single session of web-based counselling in Australia. Measures included three readiness rulers (importance, readiness and confidence to resist an urge to gamble), demographics and the Problem Gambling Severity Index (PGSI). RESULTS: Gamblers reported high importance of change [mean = 9.2, standard deviation (SD) = 1.51] and readiness to change (mean = 8.86, SD = 1.84), but lower confidence to resist an urge to gamble (mean = 3.93, SD = 2.44) compared with importance and readiness. The statistical fit indices of a latent class analysis identified a four-class model. Subtype 1 was characterized by a very high readiness to change and very low confidence to resist an urge to gamble (n = 662, 55.0%) and subtype 2 reported high readiness and low confidence (n = 358, 29.7%). Subtype 3 reported moderate ratings on all three rulers (n = 139, 11.6%) and subtype 4 reported high importance of change but low readiness and confidence (n = 45, 3.7%). A multinomial logistic regression indicated that subtypes differed by gender (P < 0.001), age (P = 0.01), gambling activity (P < 0.05), preferred mode of gambling (P < 0.001) and PGSI score (P < 0.001). CONCLUSIONS: Problem gamblers in Australia who seek web-based counselling comprise four distinct subgroups based on self-reported levels of readiness to change, confidence to resist the urge to gamble and importance of change.

Exploring the effectiveness of true abnormal data elimination in context-aware web services recommendation

Recent years have witnessed a growing interest in context-aware recommender system (CARS), which explores the impact of context factors on personalized Web services recommendation. Basically, the general idea of CARS methods is to mine historical service invocation records through the process of context-aware similarity computation. It is observed that traditional similarity mining process would very likely generate relatively big deviations of QoS values, due to the dynamic change of contexts. As a consequence, including a considerable amount of deviated QoS values in the similarity calculation would probably result in a poor accuracy for predicting unknown QoS values. In allusion to this problem, this paper first distinguishes two definitions of Abnormal Data and True Abnormal Data, the latter of which should be eliminated. Second, we propose a novel CASR-TADE method by incorporating the effectiveness of True Abnormal Data Elimination into context-aware Web services recommendation. Finally, the experimental evaluations on a real-world Web services dataset show that the proposed CASR-TADE method significantly outperforms other existing approaches.