Técnicas de detecção de Sniffers

A área de Detecção de Intrusão, apesar de muito pesquisada, não responde a alguns problemas reais como níveis de ataques, dim ensão e complexidade de redes, tolerância a falhas, autenticação e privacidade, interoperabilidade e padronização. Uma pesquisa no Instituto de Informática da UFRGS, mais especificamente no Grupo de Segurança (GSEG), visa desenvolver um Sistema de Detecção de Intrusão Distribuído e com características de tolerância a falhas. Este projeto, denominado Asgaard, é a idealização de um sistema cujo objetivo não se restringe apenas a ser mais uma ferramenta de Detecção de Intrusão, mas uma plataforma que possibilite agregar novos módulos e técnicas, sendo um avanço em relação a outros Sistemas de Detecção atualmente em desenvolvimento. Um tópico ainda não abordado neste projeto seria a detecção de sniffers na rede, vindo a ser uma forma de prevenir que um ataque prossiga em outras estações ou redes interconectadas, desde que um intruso normalmente instala um sniffer após um ataque bem sucedido. Este trabalho discute as técnicas de detecção de sniffers, seus cenários, bem como avalia o uso destas técnicas em uma rede local. As técnicas conhecidas são testadas em um ambiente com diferentes sistemas operacionais, como linux e windows, mapeando os resultados sobre a eficiência das mesmas em condições diversas.

SurRFE -Sub-rede de filtragens específicas

The increasing of the number of attacks in the computer networks has been treated with the increment of the resources that are applied directly in the active routers equip-ments of these networks. In this context, the firewalls had been consolidated as essential elements in the input and output control process of packets in a network. With the advent of intrusion detectors systems (IDS), efforts have been done in the direction to incorporate packets filtering based in standards of traditional firewalls. This integration incorporates the IDS functions (as filtering based on signatures, until then a passive element) with the already existing functions in firewall. In opposite of the efficiency due this incorporation in the blockage of signature known attacks, the filtering in the application level provokes a natural retard in the analyzed packets, and it can reduce the machine performance to filter the others packets because of machine resources demand by this level of filtering. This work presents models of treatment for this problem based in the packets re-routing for analysis by a sub-network with specific filterings. The suggestion of implementa- tion of this model aims reducing the performance problem and opening a space for the consolidation of scenes where others not conventional filtering solutions (spam blockage, P2P traffic control/blockage, etc.) can be inserted in the filtering sub-network, without inplying in overload of the main firewall in a corporative network

Proposta de algoritmo para detecção de vazamentos em oleodutos utilizando análise freqüencial de sinais de pressão

Pipeline leak detection is a matter of great interest for companies who transport petroleum and its derivatives, in face of rising exigencies of environmental policies in industrialized and industrializing countries. However, existing technologies are not yet fully consolidated and many studies have been accomplished in order to achieve better levels of sensitivity and reliability for pipeline leak detection in a wide range of flowing conditions. In this sense, this study presents the results obtained from frequency spectrum analysis of pressure signals from pipelines in several flowing conditions like normal flowing, leakages, pump switching, etc. The results show that is possible to distinguish between the frequency spectra of those different flowing conditions, allowing recognition and announce of liquid pipeline leakages from pressure monitoring. Based upon these results, a pipeline leak detection algorithm employing frequency analysis of pressure signals is proposed, along with a methodology for its tuning and calibration. The proposed algorithm and its tuning methodology are evaluated with data obtained from real leakages accomplished in pipelines transferring crude oil and water, in order to evaluate its sensitivity, reliability and applicability to different flowing conditions

Sistema inteligente para detecção de vazamentos em dutos de petróleo usando transformada Wavelet e redes neurais

This work consists in the use of techniques of signals processing and artificial neural networks to identify leaks in pipes with multiphase flow. In the traditional methods of leak detection exists a great difficulty to mount a profile, that is adjusted to the found in real conditions of the oil transport. These difficult conditions go since the unevenly soil that cause columns or vacuum throughout pipelines until the presence of multiphases like water, gas and oil; plus other components as sand, which use to produce discontinuous flow off and diverse variations. To attenuate these difficulties, the transform wavelet was used to map the signal pressure in different resolution plan allowing the extraction of descriptors that identify leaks patterns and with then to provide training for the neural network to learning of how to classify this pattern and report whenever this characterize leaks. During the tests were used transient and regime signals and pipelines with punctures with size variations from ½' to 1' of diameter to simulate leaks and between Upanema and Estreito B, of the UN-RNCE of the Petrobras, where it was possible to detect leaks. The results show that the proposed descriptors considered, based in statistical methods applied in domain transform, are sufficient to identify leaks patterns and make it possible to train the neural classifier to indicate the occurrence of pipeline leaks

An alternative genotyping method using dye-labeled universal primer to reduce unspecific amplifications

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Quantificação da resoluçao do sistema SPECT-CZT através do uso da função de transferência modulada (MTF)

Pós-graduação em Biologia Geral e Aplicada - IBB

Detecção de intrusão em redes de computadores utilizando Floresta de Caminhos Ótimos

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Kappa-PSO-ARTMAP Fuzzy: uma metodologia para detecção de intrusos baseado em seleção de atributos e otimização de parâmetros numa rede neural ARTMAP Fuzzy

Pós-graduação em Engenharia Elétrica - FEIS

IPSFlow: Um framework para Sistema de Prevenção de Intrusão baseado em Redes Definidas por Software

Os Sistemas de Detecção e Prevenção de Intrusão (Intrusion Detection Systems – IDS e Intrusion Prevention Systems - IPS) são ferramentas bastante conhecidas e bem consagradas no mundo da segurança da informação. Porém, a falta de integração com os equipamentos de rede como switches e roteadores acaba limitando a atuação destas ferramentas e exige um bom dimensionamento de recursos de hardware como processamento, memória e interfaces de rede de alta velocidade, utilizados para implementá-las. Diante de diversas limitações deparadas por pesquisadores e administradores de redes, surgiu o conceito de Rede Definida por Software (Software Defined Network – SDN), que ao separar os planos de controle e de dados, permite adaptar o funcionamento da rede de acordo com as necessidades de cada um. Desta forma, devido à padronização e flexibilidade propostas pelas SDNs, e das limitações apresentadas dos IPSs, esta dissertação de mestrado propõe o IPSFlow, um framework que utiliza uma rede baseada na arquitetura SDN e o protocolo OpenFlow para a criação de um IPS com ampla cobertura e que permite bloquear um tráfego caracterizado pelos IDS(s) como malicioso no equipamento mais próximo da origem. Para validar o framework, experimentos no ambiente virtual Mininet foram realizados utilizando-se o Snort como IDS para analisar tráfego de varredura (scan) gerado pelo Nmap de um host ao outro. Os resultados coletados apresentam que o IPSFlow funcionou conforme planejado ao efetuar o bloqueio de 85% do tráfego de varredura.

Measurement of Wave Attenuation in Buried Plastic Water Distribution Pipes

Leaks in pipes are a common issue encountered in the water industry. Acoustic methods are generally successful in finding and locating leaks in metallic pipes, however, they are less effective when applied to plastic pipes. This is because leak-noise signals are heavily attenuated due to high damping in the pipe-wall and sound radiation into the soil. As result, high frequency leak noise does not travel long distances. To determine how far leak noise may travel in a pipe at any frequency, the attenuation of the wave responsible for leak noise propagation should be known. In this paper a new method to estimate this is described. The method is then applied to some measurements made on a bespoke pipe-test rig in the UK, and the results are compared with theoretical predictions.

Gama Câmara CZT: alteração de paradigmas em aquisição de imagens de medicina nuclear

Nuclear medicine is a medical specialty related to imagery that deals with imaging techniques, diagnosis and therapy, allowing observing the physiological state of tissues noninvasively by marking the molecules participating of these physiological processes with radioactive isotopes, thus creating the called radionuclides. The image of a radionuclide is one of the most important applications of radioactivity in nuclear medicine. The equipment’s of nuclear medicine imaging use the principle of radiation detection, turning it into an electrical signal which, through specific algorithms, allows forming tomographic images that provide information about the functional status of organs. New detection systems have been developed for tomographic acquisitions using solid state detectors. These devices use crystals of cadmium zinc telluride (CdZnTe). Some of the advantages of this detector are a significant improvement of signal to noise ratio, the increased spectral and spatial resolution, which in sum, result in greater clarity of the images obtained, opening new perspectives for imaging protocols previously unattainable. In contrast, all other gamma-cameras equipped with vacuum tubes have remained relatively unchanged for nearly fifty years. In these gamma-cameras, the images are obtained using two steps significantly less efficient: the gamma rays are converted to light through a first device, and then the light is converted into an electrical signal through a second device. One of functions the Medical Physicist is related to the quality control of equipment. This control ensures that the information and images provided are true and thus credible to be used in medical reports. To perform this type of analysis the physicist must understand the performance characteristics and operation of all equipment of the department concerned; besides, in the absence of specific legislation, proposing...(Complete abstract click electronic access below)

Aplicação de conjugado de microesferas de poliestireno para preparo de RNA no diagnóstico da cinomose canina por RT-qPCR

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Segurança em redes sem fio: estudo sobre o desenvolvimento de conjuntos de dados para comparação de IDS

Pós-graduação em Engenharia Elétrica - FEIS

Correlação e visualização de alertas de segurança em redes de computadores

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Classificação de anomalias e redução de falsos positivos em sistemas de detecção de intrusão baseados em rede utilizando métodos de agrupamento

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)