Detecting and mitigating HX-DoS attacks against cloud web services

Cyber-Physical Systems allow for the interaction of the cyber world and physical worlds using as a central service called Cloud Web Services. Cloud Web Services can sit well within three models of Cyber- Physical Systems, Software-as-a-Service (SaaS), Platform-as-a-Service (PaaS), and Infrastructure-as-a- Service (IaaS). With any Cyber-Physical system use Cloud Web Services it inherits a security problem, the HX-DoS attack. HX-DoS attack is a combination of HTTP and XML messages that are intentionally sent to flood and destroy the communication channel of the cloud service provider. The relevance of this research is that TCP/IP flood attacks are a common problem and a lot of research to mitigate them has previously been discussed. But HTTP denial of service and XML denial of service problem has only been addressed in a few papers. In this paper, we get closer to closing this gap on this problem with our new defence system called Pre- Decision, Advance Decision, Learning System (ENDER). In our previous experiments using our Cloud Protector, we were successful at detecting and mitigate 91% with a 9% false positive of HX-DoS attack traffic. In this paper, ENDER was able to improve upon this result by being trained and tested on the same data, but with a greater result of 99% detection and 1% false positive.

A survey of approaches and frameworks to carry out genomic data analysis on the cloud

High Performance Computing (HPC) clouds have started to change the way how research in science, in particular medicine and genomics (bioinformatics) is being carried out. Researchers who have taken advantage of this technology can process larger amounts of data and speed up scientific discovery. However, most HPC clouds are provided at an Infrastructure as a Service (IaaS) level, users are presented with a set of virtual servers which need to be put together to form HPC environments via time consuming resource management and software configuration tasks, which make them practically unusable by discipline, non-computing specialists. In response, there is a new trend to expose cloud applications as services to simplify access and execution on clouds. This paper firstly examines commonly used cloud-based genomic analysis services (Tuxedo Suite, Galaxy and Cloud Bio Linux). As a follow up, we propose two new solutions (HPCaaS and Uncinus), which aim to automate aspects of the service development and deployment process. By comparing and contrasting these five solutions, we identify key mechanisms of service creation, execution and access that are required to support genomic research on the SaaS cloud, in particular by discipline specialists. © 2014 IEEE.

A survey of cloud-based service computing solutions for mammalian genomics

Cloud-based service computing has started to change the way how research in science, in particular biology, medicine, and engineering, is being carried out. Researchers in the area of mammalian genomics have taken advantage of cloud computing technology to cost-effectively process large amounts of data and speed up discovery. Mammalian genomics is limited by the cost and complexity of analysis, which require large amounts of computational resources to analyse huge amount of data and biology specialists to interpret results. On the other hand the application of this technology requires computing knowledge, in particular programming and operations management skills to develop high performance computing (HPC) applications and deploy them on HPC clouds. We carried out a survey of cloud-based service computing solutions, as the most recent and promising instantiations of distributed computing systems, in the context their use in research of mammalian genomic analysis. We describe our most recent research and development effort which focuses on building Software as a Service (SaaS) clouds to simplify the use of HPC clouds for carrying out mammalian genomic analysis.

Improving data forwarding in mobile social networks with infrastructure support: a space-crossing community approach

In this paper, we study two tightly coupled issues: space-crossing community detection and its influence on data forwarding in Mobile Social Networks (MSNs) by taking the hybrid underlying networks with infrastructure support into consideration. The hybrid underlying network is composed of large numbers of mobile users and a small portion of Access Points (APs). Because APs can facilitate the communication among long-distance nodes, the concept of physical proximity community can be extended to be one across the geographical space. In this work, we first investigate a space-crossing community detection method for MSNs. Based on the detection results, we design a novel data forwarding algorithm SAAS (Social Attraction and AP Spreading), and show how to exploit the space-crossing communities to improve the data forwarding efficiency. We evaluate our SAAS algorithm on real-life data from MIT Reality Mining and University of Illinois Movement (UIM). Results show that space-crossing community plays a positive role in data forwarding in MSNs in terms of delivery ratio and delay. Based on this new type of community, SAAS achieves a better performance than existing social community-based data forwarding algorithms in practice, including Bubble Rap and Nguyen's Routing algorithms. © 2014 IEEE.

Aplicação do método de análise hierárquica na tomada de decisão para adoção de computação em nuvem: um estudo de caso na federação das indústrias do RN

The progresses of the Internet and telecommunications have been changing the concepts of Information Technology IT, especially with regard to outsourcing services, where organizations seek cost-cutting and a better focus on the business. Along with the development of that outsourcing, a new model named Cloud Computing (CC) evolved. It proposes to migrate to the Internet both data processing and information storing. Among the key points of Cloud Computing are included cost-cutting, benefits, risks and the IT paradigms changes. Nonetheless, the adoption of that model brings forth some difficulties to decision-making, by IT managers, mainly with regard to which solutions may go to the cloud, and which service providers are more appropriate to the Organization s reality. The research has as its overall aim to apply the AHP Method (Analytic Hierarchic Process) to decision-making in Cloud Computing. There to, the utilized methodology was the exploratory kind and a study of case applied to a nationwide organization (Federation of Industries of RN). The data collection was performed through two structured questionnaires answered electronically by IT technicians, and the company s Board of Directors. The analysis of the data was carried out in a qualitative and comparative way, and we utilized the software to AHP method called Web-Hipre. The results we obtained found the importance of applying the AHP method in decision-making towards the adoption of Cloud Computing, mainly because on the occasion the research was carried out the studied company already showed interest and necessity in adopting CC, considering the internal problems with infrastructure and availability of information that the company faces nowadays. The organization sought to adopt CC, however, it had doubt regarding the cloud model and which service provider would better meet their real necessities. The application of the AHP, then, worked as a guiding tool to the choice of the best alternative, which points out the Hybrid Cloud as the ideal choice to start off in Cloud Computing. Considering the following aspects: the layer of Infrastructure as a Service IaaS (Processing and Storage) must stay partly on the Public Cloud and partly in the Private Cloud; the layer of Platform as a Service PaaS (Software Developing and Testing) had preference for the Private Cloud, and the layer of Software as a Service - SaaS (Emails/Applications) divided into emails to the Public Cloud and applications to the Private Cloud. The research also identified the important factors to hiring a Cloud Computing provider

Espacialização de informações na gestão de sistemas de abastecimento de água utilizando sistema de informação geográfica

Avaliar a espacialização de informações na gestão de Sistema de Abastecimento de Água (SAA). Para isso, foram definidos e adotados os dados da pesquisa (Fase 1), sendo dividido em dados de perdas reais, comerciais e Despesas de exploração. Na Fase 2, a base cartográfica da área de estudo e os dados adotados foram armazenados e organizados em Sistema de Informação Geográfica (SIG), utilizando o software ArcGis 9.3, onde foi construído o modelo de dados para a pesquisa, e definida a topologia a ser utilizada para identificação dos dados espacializados, a construção do banco de dados georreferenciado e a criação dos layers. Na fase 3 foi realizado o cálculo do balanço hídrico nas principais unidades dos SAAs estudados sendo determinadas as perdas na adução de água bruta, no tratamento, na reservação, e na distribuição. Na fase 4 foram calculados indicadores para avaliar o desempenho dos SAAs, como: índice de cobertura, índice total de perda real, índice de perda na arrecadação, índice de perda de faturamento, índice de consumo de energia em SAA, índice de despesas com energia elétrica, entre outros. Na fase 5 foi proposta a espacialização e apresentação em SIG dos resultados obtidos nas fases anteriores. Com isso, considerando os dados adotados, foi possível identificar os valores das perdas reais e dos indicadores de desempenho em cada setor do SAA estudado, sendo, por exemplo, o setor 9, o que apresentou maior índice de perda total, chegando a 59,10%, seguido dos setores 4, 8 e 5. A perda mais significante para o sistema foi a perda na distribuição, com o setor 9 apresentando perda de 57%; a perda no tratamento foi de 3,4%, no setor 3; e os setores com maior índice de perda na adução, foram os setores 6 e 8, com 3,5%. Os percentuais de água não faturada, foram maiores nos setores 1 e 5. Os setores 1, 3, 4 e 6 são os que apresentaram maior consumo de energia elétrica por volume de água produzido. Portanto, a espacialização dos dados em SIG facilitou a visualização e análise dos dados adotados na pesquisa.

Aprendendo xadrez: entre a abordagem metodológica presencial e a tecnológica

Pós-graduação em Desenvolvimento Humano e Tecnologias - IBRC

Progettazione e Sviluppo di Applicazioni Web per Cloud Computing

Negli ultimi anni si sente sempre più spesso parlare di cloud computing. L'idea di fondo di questo concetto è quella di pagare per il solo effettivo utilizzo di un servizio, disponibile sulla rete, avendo a disposizione la possibilità di poter variare le proprie risorse utilizzabili a seconda delle necessità, che potrebbero essere, per esempio, applicazioni standard oppure spazi di storage per i dati. Quando cominciò a diffondersi l'utilizzo del Web, la rete Internet veniva raffigurata come una nuvola (cloud) in modo tale che si rendesse l'idea di un'entità esterna rispetto alla nostra casa o al nostro posto di lavoro, un qualcosa cioè al di fuori dei luoghi abituali in cui vengono utilizzati i PC. Tale rappresentazione diventa ora utile per poter spiegare il concetto di cloud computing. Infatti, grazie a questa nuova tecnologia, dati e programmi normalmente presenti nei nostri computer potranno ora trovarsi sul cloud. Molti reparti IT sono costretti a dedicare una parte significativa del loro tempo a progetti di implementazione, manutenzione e upgrade che spesso non danno un vero valore per l'azienda. I team di sviluppo hanno cominciato quindi a rivolgersi a questa nuova tecnologia emergente per poter minimizzare il tempo dedicato ad attività a basso valore aggiunto per potersi concentrare su quelle attività strategiche che possono fare la differenza per un'azienda. Infatti un'infrastruttura come quella cloud computing promette risparmi nei costi amministrativi che raggiungono addirittura il 50% rispetto ad un software standard di tipo client/server. Questa nuova tecnologia sta dando inizio ad un cambiamento epocale nel mondo dello sviluppo delle applicazioni. Il passaggio che si sta effettuando verso le nuove soluzioni cloud computing consente infatti di creare applicazioni solide in tempi decisamente più brevi e con costi assai inferiori, evitando inoltre tutte le seccature associate a server, soluzioni software singole, aggiornamenti, senza contare il personale necessario a gestire tutto questo. L'obiettivo di questa tesi è quello di mostrare una panoramica della progettazione e dello sviluppo di applicazioni Web nel cloud computing, analizzandone pregi e difetti in relazione alle soluzioni software attuali. Nel primo capitolo viene mostrato un quadro generale in riferimento al cloud, mettendo in luce le sue caratteristiche fondamentali, esaminando la sua architettura e valutando vantaggi e svantaggi di tale piattaforma. Nel secondo capitolo viene presentata la nuova metodologia di progettazione nel cloud, operando prima di tutto un confronto con lo sviluppo dei software standard e analizzando poi l'impatto che il cloud computing opera sulla progettazione. Nel terzo capitolo si entra nel merito della progettazione e sviluppo di applicazioni SaaS, specificandone le caratteristiche comuni ed elencando le piattaforme di rilievo allo stato dell'arte. Si entrerà inoltre nel merito della piattaforma Windows Azure. Nel quarto capitolo viene analizzato nel particolare lo sviluppo di applicazioni SaaS Multi-Tenant, specificando livelli e caratteristiche, fino a spiegare le architetture metadata-driven. Nel quinto capitolo viene operato un confronto tra due possibili approcci di sviluppo di un software cloud, analizzando nello specifico le loro differenze a livello di requisiti non funzionali. Nel sesto capitolo, infine, viene effettuata una panoramica dei costi di progettazione di un'applicazione cloud.

Synthesis and testing of photoaffinity probes for the site-selective chemical modifications of the 5-HT3 receptor

The 5-HT3 receptor (5-HT3R) is an important ion channel responsible for the transmission of nerve impulses in the central nervous system.[1] It is difficult to characterize transmembrane dynamic receptors with classical structural biology approaches like crystallization and x-ray. The use of photoaffinity probes is an alternative approach to identify regions in the protein that are important for the binding of small molecules. Therefore we synthesized a small library of photoaffinity probes by conjugating photolabile building blocks via various linkers to granisetron which is a known antagonist of the 5-HT3R. We were able to obtain several compounds with diverse linker lengths and different photo-labile moieties that show nanomolar binding affinities for the orthosteric binding site. Further on we developed a stable 5-HT3R overexpressing cell line and a purification method to yield the receptor in a high purity. Currently we are investigating crosslinking experiments and subsequent MS – analysis.

Valle d’Aosta section of the Sesia Zone: multi-stage HP metamorphism and assembly of a rifted continental margin

The spectrum characteristic of the EMC ranges from eclogites (containing omphacite and/or jadeite, garnet, phengite, glaucophane, zoisite, chloritoid, rutile) to phengite schists, calcschists, and marbles, as well as a variety of orthogneisses. Despite the intense polyphase deformation and HP-metamorphic recrystallization, it is possible in some locations to recognize pre-Alpine characteristics in some of the protoliths. For instance, two types of felsic orthogneiss can be distinguished in the Aosta Valley, one derived from Permian granitoids (with local preservation of intrusive contacts, magmatic inclusions, leucocratic veins and other magmatic structures; Stop 3), the other derived from pre-Variscan leuco-monzogranite, such as the building stone mined at the “Argentera” quarry near Settimo Vittone / Montestrutto (Stop 2; so-called “Verde Argento” contains jadeite, phengite, K-feldspar, quartz). Polycyclic and more rarely monocyclic metasediments contain evidence of a complex Alpine PTDt-evolution, locally including relics of their prograde history from blueschist, one or more stages at eclogite facies. Recent petrochronological studies have dated this HP-evolution of the Sesia Zone in some detail. In the area visited, clear evidence of HP-cycling has been identified in one km-size tectonic slice (Stop 1), but not in adjacent parts of the EMC, indicating “yo-yo tectonics”. Partial retrogression and attendant ductile to brittle deformation of the HP-rocks is evident in one of the outcrops (Stop 4). Apart from the four localities in the Sesia Zone, a final outcrop introduces HP-rocks of the adjacent Piemonte oceanic unit, specifically calc-schists and ophiolite members of the “Zermatt-Saas” zone. The hilltop outcrop (Stop 5) displays foliated antigorite schist with peridotite relics (clinopyroxene, spinel) containing lenses derived from doleritic dykes. These fine-grained metarodingites and the folded veins containing Mg-chlorite and titanoclinohumite within serpentinite once again indicate equilibration under low-temperature eclogite facies conditions. However, these units reached that HP stage more than 20 Ma after the youngest eclogite facies imprint recognized in the Sesia Zone. Despite nearly half a century of intense study in the Sesia Zone, the complex assembly of its HP-terranes and their relation to more external parts of the Western Alps remains incompletely understood. This field guide merely introduces a few of the classic outcrops and discusses some of the critical evidence they contain, but it could not incorporate details on each stage of the evolution recognized so far.

Modelo de inclusión de la funcionalidad UNDO/REDO

Se propone la utilización de un servicio de software (SaaS) junto a una metodología para realizar en forma ordenada la inclusión de la funcionalidad de Undo/Redo dentro de una aplicación nueva o existente.