an analysis for understanding software security requirement methodologies

IEEE Reliabil Soc, Shanghai Jiao Tong Univ

分布式文件系统Hadoop HDFS与传统文件系统Linux FS的比较与分析

对现有HDFS的设计架构进行分析,并借与LinuxFS架构的对比凸显HDFS的分布式特性。通过分析得出:现有的HDFS架构使用Java的Map界面,不利于任务的分解和并行处理,因此HDFS仅在数据的存储上实现分布式,数据处理依然是集中式的,这就形成了对NameNode的依赖,随着集群的扩大,NameNode的性能成为系统瓶颈,并提出了解决方向。

基于ARM Linux的门禁系统的设计与实现

门禁系统主要负责对出入通道进行管制，是社区楼宇安全监控系统的一部分。传统的门禁系统通常采用密码识别、卡片识别的方式进行验证，由于密码、卡片容易被盗用、丢失，系统安全性不高。在通信方式上传统门禁系统通常采用RS485或者RS232连接，传输距离、速度和连接终端数均受限制。本文提出的人像识别门禁系统解决方案采用ARM-Linux系统平台，依靠社区宽带综合业务网的传输和存储能力，结合密码、RFID和人像识别三种识别方式，利用网络技术和生物识别技术达到识别率高、响应速度快、扩展能力强的要求，并能够与驻地网的其它业务集成，提供业务级的联动服务。此外，该门禁系统还支持用户使用电话开门，由服务器完成对用户来电的识别和防伪验证。本文工作的主要贡献是：参与了ARM-Linux系统的裁剪、移植和声卡驱动的修改；建立了ARM-Linux交叉编译环境；完成了门禁前端软件系统的整体设计和实现；完成了服务器软件电话呼叫响应子系统的设计。

Extraction and separation of cadmium(II), iron(III), zinc(II), and europium(III) by Cyanex302 solutions using hollow fiber membrane modules

The mass transfer behaviors of Cd(II), Fe(III), Zn(II), and Eu(III) in sulfuric acid solution using microporous hollow fiber membrane (HFM) containing bis(2,4,4-trimethylpentyl)monothiophosphinic acid (commercial name Cyanex302) were investigated in this paper. The experimental results showed that the values of the mass transfer coefficients (K-w) decreased with an increase of H+ concentration and increased with an increase of extractant Cyanex302 concentration. The mass transfer resistance of Eu3+ was the largest because K-w value of Eu3+ was the smallest. The order of mass transfer rate of metal ions at low pH was Cd > Zn > Fe > Eu. Mixtures of Zn2+ and Eu3+ or of Zn2+ and Cd2+ were well separated in a counter-current circulation experiment using two modules connected in series at different initial acidity and concentration ratio. These results indicate that a hollow fiber membrane extractor is capable of separating the mixture compounds by controlling the acidity of the aqueous solution and by exploiting different mass transfer kinetics. The interfacial activity of Cyanex302 in sulfuric acid solution was measured and interfacial parameters were obtained according to Gibbs adsorption equation.

基于多线程的Linux下并发服务器的实现研究

探讨了Linux平台下多线程技术和套接字网络通讯问题,在此基础上利用互斥锁和条件变量技术设计了一个面向连接的多线程并发服务器的详细算法。最后给出了基于Posix线程库的Linux系统下用C++实现多线程并发服务器的基本程序框架。实际项目应用表明这种基于多线程的并发服务器结构在完善程序功能的同时还可以有效提高其服务性能。

Linux下多线程技术在SPM纳米操作系统中的应用

启动一个新的进程必须分配给它独立的地址空间,建立众多的数据表来维护它的代码段、堆栈段和数据段,这是一种“昂贵”的多任务工作方式。相比之下,多线程技术是一种非常“节俭”的多任务操作方式。本文针对SPM纳米操作系统中的ARM嵌入式开发平台的任务特点,分析比较了Linux系统下多线程和多进程技术的性能,为设计实现ARM开发平台下的多线程程序起到关键的作用。

基于嵌入式实时Linux的远程监控系统

提出了一种基于嵌入式实时Linux的设备远程监控系统,重点针对现有远程监控系统体积、实时性问题加以改进。在自行研发的操作系统基础之上,一方面实现了嵌入式Internet技术;另一方面满足了系统硬实时性需求,为故障的实时预报、诊断、控制提供了强有力的支持。

Instalação e Configuração do PostgreSQL no Linux via código-fonte.

Apesar de exigir maior grau de dificuldade do que a instalação via pacotes, a instalação via código-fonte oferece uma infinidade de recursos em relação à primeira, tais como: definir a estrutura de diretórios para binários, bibliotecas, módulos, manuais e demais arquivos do SGBD conforme o desejado, o que facilita a organização, localização e manutenção do PostgreSQL; ativar suporte a um determinado idioma, para tradução de mensagens; construir suporte a determinadas linguagens ou módulos; definir alguns parâmetros padrões; além de conceber maior controle e segurança nas atualizações de versões do SGBD, evitando assim, atualizações automáticas indesejáveis por meio do sistema operacional e a conseqüente perda de bases de dados; entre outros. Para este trabalho, foi utilizado o sistema operacional Ubuntu Server 8.04.1, contudo, este tutorial é totalmente aplicável e compatível a outras versões Ubuntu, bem como a outras distribuições Linux, respeitando, é claro, as particularidades de algumas distribuições, como a estrutura de diretórios destes. Quanto ao SGBD PostgreSQL, foi adotado a versão 8.3.4, lançada em Setembro/2008, contudo, este tutorial se aplica também à versões inferiores 8.x.x deste SGBD.

Novel information sharing syntax for data sharing between police and community partners, using role-based security.

The exchange of information between the police and community partners forms a central aspect of effective community service provision. In the context of policing, a robust and timely communications mechanism is required between police agencies and community partner domains, including: Primary healthcare (such as a Family Physician or a General Practitioner); Secondary healthcare (such as hospitals); Social Services; Education; and Fire and Rescue services. Investigations into high-profile cases such as the Victoria Climbié murder in 2000, the murders of Holly Wells and Jessica Chapman in 2002, and, more recently, the death of baby Peter Connelly through child abuse in 2007, highlight the requirement for a robust information-sharing framework. This paper presents a novel syntax that supports information-sharing requests, within strict data-sharing policy definitions. Such requests may form the basis for any information-sharing agreement that can exist between the police and their community partners. It defines a role-based architecture, with partner domains, with a syntax for the effective and efficient information sharing, using SPoC (Single Point-of-Contact) agents to control in-formation exchange. The application of policy definitions using rules within these SPoCs is inspired by network firewall rules and thus define information exchange permissions. These rules can be imple-mented by software filtering agents that act as information gateways between partner domains. Roles are exposed from each domain to give the rights to exchange information as defined within the policy definition. This work involves collaboration with the Scottish Police, as part of the Scottish Institute for Policing Research (SIPR), and aims to improve the safety of individuals by reducing risks to the community using enhanced information-sharing mechanisms.

The Organization for Security and Co-operation in Europe and European Security Law

Odello, Marco, The Organization for Security and Co-operation in Europe and European Security Law, In: European Security Law, Oxford University Press, pp. 295-328, 2007. RAE2008

International Security in the Western Hemisphere: Legal and Institutional Developments

Odello, Marco, 'International Security in the Western Hemisphere: Legal and Institutional Developments', Anuario de Derecho Internacional, (2005) 21, pp.379-411 RAE2008