An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Wireless Sensor Networks for Paddy Field Crop Monitoring Application in Kuttanad

The evolution of wireless sensor network technology has enabled us to develop advanced systems for real time monitoring. In the present scenario wireless sensor networks are increasingly being used for precision agriculture. The advantages of using wireless sensor networks in agriculture are distributed data collection and monitoring, monitor and control of climate, irrigation and nutrient supply. Hence decreasing the cost of production and increasing the efficiency of production.This paper describes the application of wireless sensor network for crop monitoring in the paddy fields of kuttand, a region of Kerala, the southern state of India.

Ecology And Seasonal Variation Of Microalgal Community In An Oil Refinery Effluent Holding Pond: Monitoring And Assessment

The microalgal community as primary producers has to play a significant role in the biotic and abitoic interactions of any aquatic ecosystem. Whenever a community is exposed to a pollutant, responses can occur because individuals acclimate to pollutant caused changes and selection can occur favouring resistant genotypes within a population and selection among species can result in changes in community structure. The microalgal community of industrial effluent treatment systems are continuously exposed to pollutants and there is little data available on the structure and seasonal variation of microalgal community of industrial effluent holding ponds, especially of a complex effluent like that of refinery. The aim of the present study was to investigate the annual variation in the ecology, biomass, productivity and community structure of the algal community of a refinery effluent holding pond. The results of the study showed the pond to be a eutrophic system with a resistant microalgal community with distinct seasonal variation in species composition

Photovoltaic hybrid systems for rural electrification in the Mekong countries

In rural areas of the Mekong Countries, the problem of electricity supplying rural communities is particularly alarming. Supplying power to these areas requires facilities that are not economically viable. However, government programs are under way to provide this product that is vital to community well being. A nation priority of Mekong Countries is to provide electrical power to people in rural areas, within normal budgetary constraints. Electricity must be introduced into rural areas in such a way that maximize the technical, economic and social benefit. Another consideration is the source of electrical generation and the effects on the natural environment. The main research purpose is to implement field tests, monitoring and evaluation of the PV-Diesel Hybrid System (PVHS) at the Energy Park of School of Renewable Energy Technology (SERT) in order to test the PVSH working under the meteorological conditions of the Mekong Countries and to develop a software simulation called RES, which studies the technical and economic performance of rural electrification options. This software must be easy to use and understand for the energy planner on rural electrification projects, to evaluate the technical and economic performance of the PVHS based on the renewable energy potential for rural electrification of the Mekong Country by using RES. Finally, this project aims to give guidance for the possible use of PVHS application in this region, particularly in regard to its technical and economic sustainability. PVHS should be promoted according to the principles of proper design and adequate follow up with maintenance, so that the number of satisfied users will be achieved. PVHS is not the only possible technology for rural electrification, but for the Mekong Countries it is one of the most proper choices. Other renewable energy options such as wind, biomass and hydro power need to be studied in future.

Entwurf und Betrieb von Regelungs- und Monitoringsystemen für dezentrale Energiesysteme auf der Basis von verteilten Embedded Systems

Nach einem einleitenden ersten Kapitel wird im zweiten Kapitel der Stand der Technik für Regelungs- und Monitoringsysteme mit vernetzten Systemen dargestellt. Daraus wird die Motivation zur Entwicklung neuer, kostengünstiger Systeme abgeleitet. Im dritten Kapitel folgt eine Darstellung der verschiedenen Arten marktverfügbarer Embedded Systems und dafür geeigneter Betriebs­systeme. Anforderungen an verteilte Regelungssysteme, unterschiedliche Strukturen dieser Systeme und deren Vor- und Nachteile sind Gegenstand des vierten Kapitels. Anhand von Beispielen aus den Bereichen Erzeugungsmanagement für den Betrieb von KWK-Anlagen, Energieverbrauchsmonitoring und Smart-Metering wird der Einsatz von verteilten Regelungs- und Monitoringsystemen im fünften Kapitel dargestellt. Im folgenden sechsten Kapitel wird die Bedeutung normierter Kommunikation für den Einsatz in verteilten Systemen sowie dafür vorhandene Standards aus der elektrischen Energieversorgungstechnik und der Automatisierungstechnik behandelt. Der Stand der Internet-Technik für verteilte Systeme ist Gegenstand des siebten Kapitels. Dabei werden zunächst die verschiedenen drahtlosen und drahtgebundenen Kommunikationsmedien vorgestellt und ihre Eigenschaften und die Rand­bedingungen für ihren Einsatz erörtert. Ebenso werden technische Probleme beim Einsatz der Internet-Technik aufgezeigt und Lösungsmöglichkeiten für diese Probleme dargestellt. Es folgt eine Übersicht von Netzwerkdiensten, die für den Betrieb von verteilten Systemen notwendig sind. Außerdem werden Techniken zur Überwachung von verteilten Systemen behandelt. Kapitel acht zeigt Sicherheitsrisiken bei der Nutzung des Internets auf und bewertet verschiedene Techniken zur Absicherung des Netzwerkverkehrs. Kapitel neun stellt ein Internet-basiertes Client-Server-System zur Online-Visualisierung von Anlagendaten im Webbrowser mit Hilfe von Java-Applets und XML-RPC vor. Die Visualisierung von Anlagendaten auf Mobiltelefonen mit Hilfe des Wireless Application Protocol sowie die dafür notwendige Software und Infrastruktur ist Gegenstand des zehnten Kapitels. Im elften Kapitel wird eine neuartige Software für die Simulation von dezentralen Energiesystemen und deren Regelungs­systemen auf Basis von virtuellen Maschinen, virtuellen Netzwerken und einer thermischen Simulationsumgebung vorgestellt sowie deren Anwendung für die Reglerentwicklung erklärt. Verschiedene Techniken für die Installation von Betriebssystemen und Software für die Embedded Systems eines verteilten Systems werden im Kapitel zwölf untersucht. Im Kapitel 13 werden verschiedene Technologien zur Konfiguration und Parametrierung von Regelungssystemen in der industriellen Prozess- und Fertigungs­automatisierung hinsichtlich ihrer Eignung für dezentrale Energiesysteme analysiert. Anschließend wird eine Software zur Installation und Parametrierung von Monitoringsystemen sowie der dazugehörigen Infrastruktur vorgestellt. Kapitel 14 beschäftigt sich mit Anforderungen an die Hardware für verteilte Systeme und mit Maßnahmen zur Erhöhung der Betriebs- und der Datensicherheit. Im 15. Kapitel werden die in den bisherigen Kapiteln vorgestellten Techniken anhand eines großen verteilten Monitoringsystems und anhand eines Power Flow and Power Quality Management Systems auf Basis von verteilten Embedded Systems evaluiert. Kapitel 16 fasst die Ergebnisse der Arbeit zusammen und enthält einen Ausblick auf zukünftige Entwicklungen.

Ideotyping integrated aquaculture systems to balance soil nutrients

Due to growing land scarcity and lack of nutrient inputs, African farmers switched from shifting cultivation to continuous cropping and extended crop area by bringing fragile lands such as river banks and hill slopes into production. This accelerated soil fertility decline caused by erosion, harvesting and insufficient nutrient replenishment. We explored the feasibility to reduce nutrient depletion by increasing nutrient utilization efficiencies, while diversifying and increasing food production through the development of integrated aquaculture – agriculture (IAA). Considering the climatic conditions prevailing in Kenyan highlands, aquaculture production scenarios were ideotyped per agro-ecological zone. These aquaculture production scenarios were integrated into existing NUTrient MONitoring (NUTMON) farm survey data for the area. The nutrient balances and flows of the resulting IAA-systems were compared to present land use. The effects of IAA development on nutrient depletion and total food production were evaluated. With the development of IAA systems, nutrient depletion rates dropped by 23–35%, agricultural production increased by 2–26% and overall farm food production increased by 22–70%. The study demonstrates that from a bio-physical point of view, the development of IAA-systems in Africa is technically possible and could raise soil fertility and total farm production. Further studies that evaluate the economic feasibility and impacts on the livelihood of farming households are recommended.

Lightweight monitoring of label switched paths for bandwidth management

The purpose of resource management is the efficient and effective use of network resources, for instance bandwidth. In this article, a connection oriented network scenario is considered, where a certain amount of bandwidth is reserved for each label switch path (LSP), which is a logical path, in a MPLS or GMPLS environment. Assuming there is also some kind of admission control (explicit or implicit), these environments typically provide quality of service (QoS) guarantees. It could happen that some LSPs become busy, thus rejecting connections, while other LSPs may be under-utilised. We propose a distributed lightweight monitoring technique, based on threshold values, the objective of which is to detect congestion when it occurs in an LSP and activate the corresponding alarm which will trigger a dynamic bandwidth reallocation mechanism

I-SS: integrated supervision systems approach based on interactive components

Process supervision is the activity focused on monitoring the process operation in order to deduce conditions to maintain the normality including when faults are present Depending on the number/distribution/heterogeneity of variables, behaviour situations, sub-processes, etc. from processes, human operators and engineers do not easily manipulate the information. This leads to the necessity of automation of supervision activities. Nevertheless, the difficulty to deal with the information complicates the design and development of software applications. We present an approach called "integrated supervision systems". It proposes multiple supervisors coordination to supervise multiple sub-processes whose interactions permit one to supervise the global process

Interacting software-agents to support a kind of expert supervision systems

Expert supervision systems are software applications specially designed to automate process monitoring. The goal is to reduce the dependency on human operators to assure the correct operation of a process including faulty situations. Construction of this kind of application involves an important task of design and development in order to represent and to manipulate process data and behaviour at different degrees of abstraction for interfacing with data acquisition systems connected to the process. This is an open problem that becomes more complex with the number of variables, parameters and relations to account for the complexity of the process. Multiple specialised modules tuned to solve simpler tasks that operate under a co-ordination provide a solution. A modular architecture based on concepts of software agents, taking advantage of the integration of diverse knowledge-based techniques, is proposed for this purpose. The components (software agents, communication mechanisms and perception/action mechanisms) are based on ICa (Intelligent Control architecture), software middleware supporting the build-up of applications with software agent features

WAIS seminar: Application Performance Monitoring and Architecture Discovery with Kieker

Wednesday 23rd April 2014 Speaker(s): Willi Hasselbring Organiser: Leslie Carr Time: 23/04/2014 14:00-15:00 Location: B32/3077 File size: 802Mb Abstract The internal behavior of large-scale software systems cannot be determined on the basis of static (e.g., source code) analysis alone. Kieker provides complementary dynamic analysis capabilities, i.e., monitoring/profiling and analyzing a software system's runtime behavior. Application Performance Monitoring is concerned with continuously observing a software system's performance-specific runtime behavior, including analyses like assessing service level compliance or detecting and diagnosing performance problems. Architecture Discovery is concerned with extracting architectural information from an existing software system, including both structural and behavioral aspects like identifying architectural entities (e.g., components and classes) and their interactions (e.g., local or remote procedure calls). In addition to the Architecture Discovery of Java systems, Kieker supports Architecture Discovery for other platforms, including legacy systems, for instance, inplemented in C#, C++, Visual Basic 6, COBOL or Perl. Thanks to Kieker's extensible architecture it is easy to implement and use custom extensions and plugins. Kieker was designed for continuous monitoring in production systems inducing only a very low overhead, which has been evaluated in extensive benchmark experiments. Please, refer to http://kieker-monitoring.net/ for more information.

Sensitivity of large-scale atmospheric analyses to humidity observations and its impact on the global water cycle and tropical and extratropical weather systems in ERA40

Reanalysis data obtained from data assimilation are increasingly used for diagnostic studies of the general circulation of the atmosphere, for the validation of modelling experiments and for estimating energy and water fluxes between the Earth surface and the atmosphere. Because fluxes are not specifically observed, but determined by the data assimilation system, they are not only influenced by the utilized observations but also by model physics and dynamics and by the assimilation method. In order to better understand the relative importance of humidity observations for the determination of the hydrological cycle, in this paper we describe an assimilation experiment using the ERA40 reanalysis system where all humidity data have been excluded from the observational data base. The surprising result is that the model, driven by the time evolution of wind, temperature and surface pressure, is able to almost completely reconstitute the large-scale hydrological cycle of the control assimilation without the use of any humidity data. In addition, analysis of the individual weather systems in the extratropics and tropics using an objective feature tracking analysis indicates that the humidity data have very little impact on these systems. We include a discussion of these results and possible consequences for the way moisture information is assimilated, as well as the potential consequences for the design of observing systems for climate monitoring. It is further suggested, with support from a simple assimilation study with another model, that model physics and dynamics play a decisive role for the hydrological cycle, stressing the need to better understand these aspects of model parametrization. .

Monitoring and modelling the three-dimensional flow of water under drip irrigation

The interpretation of soil water dynamics under drip irrigation systems is relevant for crop production as well as on water use and management. In this study a three-dimensional representation of the flow of water under drip irrigation is presented. The work includes analysis of the water balance at point scale as well as area-average, exploring uncertainties in water balance estimations depending on the number of locations sampled. The water flow was monitored by detailed profile water content measurements before irrigation, after irrigation and 24 h later with a dense array of soil moisture access tubes radially distributed around selected drippers. The objective was to develop a methodology that could be used on selected occasions to obtain 'snap shots' of the detailed three-dimensional patterns of soil moisture. Such patterns are likely to be very complex, as spatial variability will be induced for a number of reasons, such as strong horizontal gradients in soil moisture, variations between individual sources in the amount of water applied and spatial variability is soil hydraulic properties. Results are compared with a widely used numerical model, Hydrus-2D. The observed dynamic of the water content distribution is in good agreement with model simulations, although some discrepancies concerning the horizontal distribution of the irrigation bulb are noted due to soil heterogeneity. (c) 2006 Elsevier B.V. All rights reserved.

Nitrate transport in Chalk catchments: monitoring, modelling and policy implications

Rising nitrate levels have been observed in UK Chalk catchments in recent decades, with concentrations now approaching or exceeding legislated maximum values in many areas. In response, strategies seeking to contain concentrations through appropriate land management are now in place. However, there is an increasing consensus that Chalk systems, a predominant landscape type over England and indeed northwest Europe, can retard decades of prior nitrate loading within their deep unsaturated zones. Current levels may not fully reflect the long-term impact of present-day practices, and stringent land management controls may not be enough to avert further medium-term rises. This paper discusses these issues in the context of the EU Water Framework Directive, drawing on data from recent experimental work and a new model (INCA-Chalk) that allows the impacts of different land use management practices to be explored. Results strongly imply that timelines for water quality improvement demanded by the Water Framework directive are not realistic for the Chalk, and give an indication of time-scales over which improvements might be achieved. However, important unresolved scientific issues remain, and further monitoring and targeted data collection is recommended to reduce prediction uncertainties and allow cost effective strategies for mitigation to be designed and implemented. (C) 2007 Elsevier Ltd. All rights reserved.

Nutrient monitoring, simulation and management within a major lowland UK river system: the Kennet

This paper describes an assessment of the nitrogen and phosphorus dynamics of the River Kennet in the south east of England. The Kennet catchment (1200 km(2)) is a predominantly groundwater fed river impacted by agricultural and sewage sources of nutrient (nitrogen and phosphorus) pollution. The results from a suite of simulation models are integrated to assess the key spatial and temporal variations in the nitrogen (N) and phosphorus (P) chemistry, and the influence of changes in phosphorous inputs from a Sewage Treatment Works on the macrophyte and epiphyte growth patterns. The models used are the Export Co-efficient model, the Integrated Nitrogen in Catchments model, and a new model of in-stream phosphorus and macrophyte dynamics: the 'Kennet' model. The paper concludes with a discussion on the present state of knowledge regarding the water quality functioning, future research needs regarding environmental modelling and the use of models as management tools for large, nutrient impacted riverine systems. (C) 2003 IMACS. Published by Elsevier B.V. All rights reserved.

Object displays and control of dynamic systems

Recent work has suggested that for some tasks, graphical displays which visually integrate information from more than one source offer an advantage over more traditional displays which present the same information in a separated format. Three experiments are described which investigate this claim using a task which requires subjects to control a dynamic system. In the first experiment, the integrated display is compared to two separated displays, one an animated mimic diagram, the other an alphanumeric display. The integrated display is shown to support better performance in a control task, but experiment 2 shows that part of this advantage may be due to its analogue nature. Experiment 3 considers performance on a fault detection task, and shows no difference between the integrated and separated displays. The paper concludes that previous claims made for integrated displays may not generalize from monitoring to control tasks.