Flexible deterministic packet marking: an IP traceback system to find the real source of attacks

Internet Protocol (IP) traceback is the enabling technology to control Internet crime. In this paper, we present a novel and practical IP traceback system called Flexible Deterministic Packet Marking (FDPM) which provides a defense system with the ability to find out the real sources of attacking packets that traverse through the network. While a number of other traceback schemes exist, FDPM provides innovative features to trace the source of IP packets and can obtain better tracing capability than others. In particular, FDPM adopts a flexible mark length strategy to make it compatible to different network environments; it also adaptively changes its marking rate according to the load of the participating router by a flexible flow-based marking scheme. Evaluations on both simulation and real system implementation demonstrate that FDPM requires a moderately small number of packets to complete the traceback process; add little additional load to routers and can trace a large number of sources in one traceback process with low false positive rates. The built-in overload prevention mechanism makes this system capable of achieving a satisfactory traceback result even when the router is heavily loaded. The motivation of this traceback system is from DDoS defense. It has been used to not only trace DDoS attacking packets but also enhance filtering attacking traffic. It has a wide array of applications for other security systems.

Multiple camera coordination in a surveillance system

We present a distributed surveillance system that uses multiple cheap static cameras to track multiple people in indoor environments. The system has a set of Camera Processing Modules and a Central Module to coordinate the tracking tasks among the cameras. Since each object in the scene can be tracked by a number of cameras, the problem is how to choose the most appropriate camera for each object. This is important given the need to deal with limited resources (CPU, power etc.). We propose a novel algorithm to allocate objects to cameras using the object-to-camera distance while taking into account occlusion. The algorithm attempts to assign objects in the overlapping field of views to the nearest camera, which can see the object without occlusion. Experimental results show that the system can coordinate cameras to track people and can deal well with occlusion.

A distributed directory scheme for information access in mobile computers

In this paper, we discuss the design aspects of a dynamic distributed directory scheme (DDS) to facilitate efficient and transparent access to information files in mobile environments. The proposed directory interface enables users of mobile computers to view a distributed file system on a network of computers as a globally shared file system. In order to counter some of the limitations of wireless communications, we propose improvised invalidation schemes that avoid false sharing and ensure uninterrupted usage under disconnected and low bandwidth conditions.

Modeling the propagation of worms in networks: a survey

There are the two common means for propagating worms: scanning vulnerable computers in the network and spreading through topological neighbors. Modeling the propagation of worms can help us understand how worms spread and devise effective defense strategies. However, most previous researches either focus on their proposed work or pay attention to exploring detection and defense system. Few of them gives a comprehensive analysis in modeling the propagation of worms which is helpful for developing defense mechanism against worms' spreading. This paper presents a survey and comparison of worms' propagation models according to two different spreading methods of worms. We first identify worms characteristics through their spreading behavior, and then classify various target discover techniques employed by them. Furthermore, we investigate different topologies for modeling the spreading of worms, analyze various worms' propagation models and emphasize the performance of each model. Based on the analysis of worms' spreading and the existing research, an open filed and future direction with modeling the propagation of worms is provided. © 2014 IEEE.

Secure distributed deduplication systems with improved reliability

Data deduplication is a technique for eliminating duplicate copies of data, and has been widely used in cloud storage to reduce storage space and upload bandwidth. However, there is only one copy for each file stored in cloud even if such a file is owned by a huge number of users. As a result, deduplication system improves storage utilization while reducing reliability. Furthermore, the challenge of privacy for sensitive data also arises when they are outsourced by users to cloud. Aiming to address the above security challenges, this paper makes the first attempt to formalize the notion of distributed reliable deduplication system. We propose new distributed deduplication systems with higher reliability in which the data chunks are distributed across multiple cloud servers. The security requirements of data confidentiality and tag consistency are also achieved by introducing a deterministic secret sharing scheme in distributed storage systems, instead of using convergent encryption as in previous deduplication systems. Security analysis demonstrates that our deduplication systems are secure in terms of the definitions specified in the proposed security model. As a proof of concept, we implement the proposed systems and demonstrate that the incurred overhead is very limited in realistic environments.

Effect of Bauhinia forficata extract in diabetic pregnant rats: maternal repercussions

Bauhinia forficata, commonly known as paw-of-cow, is widely used in Brazil folk medicine for the treatment of Diabetes mellitus. The purposes of present study were to determine the repercussions of diabetes on the defense system against oxidative stress in pregnant female rats and to characterize the influence of the treatment with Bauhinia forficata extract on the antioxidant system, glycemic control, hepatic glycogen, cholesterol, triglycerides, total proteins and lipids. Virgin female Wistar rats were injected with 40 mg/kg streptozotocin (STZ) before mating. Oral administration of an aqueous extract of Bauhinia forficata leaves was given to non-diabetic and diabetic pregnant rats in 3 doses: 500 mg/kg from 0 to 4(th) day of pregnancy, 600 mg/kg from 5(th) to 14(th) day and 1000 mg/kg from 15(th) to 20(th) day. All the females were killed on the day 21 of pregnancy. A maternal blood sample was collected by venous puncture and the maternal liver was removed for biochemical measurement. The diabetic pregnant rats presented hyperglycemia, hyperlipemia, bypertriglyceridemia, hypercholesterolemia, hyperuricemia, decreased determinations of reduced glutathione (GSH) and superoxide dismutase (SOD). Treatment with B. forficata extract did not interfere in the albumin, total protein and lipid, triglyceride, cholesterol and SOD determinations. Increased hepatic glycogen, decreased uric acid concentration and increased GSH activity was observed. This last fact suggests that the plant may have some action on antioxidant defense system. However, the demonstration of the active component present in B. forficata responsible for its antioxidant effect and the increase in hepatic glycogen deserve further investigation.

Avaliação da atividade imunológica In vitro de Alchornea ssp quanto à produção de peróxido de hidrogênio, óxido nítrico e fator de necrose tumoral-alfa por macrófagos murinos

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Proposta de metodologia para o gerenciamento automático de sistemas fotovoltaicos de geração distribuída

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

RP97-362 File It Easy, Find It Fast: A Home Filing System

A home filing system makes important papers readily available when needed. If managed properly, the filing system can get older papers out of the way, making needed records more accessible. A well-organized filing system for your household can pay big dividends when it comes time to find an important paper you need NOW. There is no one best filing system for everyone; what works for you could be a disaster for someone else. Once set up, a filing system helps you to be a more effective and efficient financial manager and decision maker.

An online data access prediction and optimization approach for distributed systems

Current scientific applications have been producing large amounts of data. The processing, handling and analysis of such data require large-scale computing infrastructures such as clusters and grids. In this area, studies aim at improving the performance of data-intensive applications by optimizing data accesses. In order to achieve this goal, distributed storage systems have been considering techniques of data replication, migration, distribution, and access parallelism. However, the main drawback of those studies is that they do not take into account application behavior to perform data access optimization. This limitation motivated this paper which applies strategies to support the online prediction of application behavior in order to optimize data access operations on distributed systems, without requiring any information on past executions. In order to accomplish such a goal, this approach organizes application behaviors as time series and, then, analyzes and classifies those series according to their properties. By knowing properties, the approach selects modeling techniques to represent series and perform predictions, which are, later on, used to optimize data access operations. This new approach was implemented and evaluated using the OptorSim simulator, sponsored by the LHC-CERN project and widely employed by the scientific community. Experiments confirm this new approach reduces application execution time in about 50 percent, specially when handling large amounts of data.

"Self" and "nonself" manipulation of interferon defense during persistent infection: bovine viral diarrhea virus resists alpha/beta interferon without blocking antiviral activity against unrelated viruses replicating in its host cells

Bovine viral diarrhea virus (BVDV), together with Classical swine fever virus (CSFV) and Border disease virus (BDV) of sheep, belongs to the genus Pestivirus of the Flaviviridae. BVDV is either cytopathic (cp) or noncytopathic (ncp), as defined by its effect on cultured cells. Infection of pregnant animals with the ncp biotype may lead to the birth of persistently infected calves that are immunotolerant to the infecting viral strain. In addition to evading the adaptive immune system, BVDV evades key mechanisms of innate immunity. Previously, we showed that ncp BVDV inhibits the induction of apoptosis and alpha/beta interferon (IFN-alpha/beta) synthesis by double-stranded RNA (dsRNA). Here, we report that (i) both ncp and cp BVDV block the induction by dsRNA of the Mx protein (which can also be induced in the absence of IFN signaling); (ii) neither biotype blocks the activity of IFN; and (iii) once infection is established, BVDV is largely resistant to the activity of IFN-alpha/beta but (iv) does not interfere with the establishment of an antiviral state induced by IFN-alpha/beta against unrelated viruses. The results of our study suggest that, in persistent infection, BVDV is able to evade a central element of innate immunity directed against itself without generally compromising its activity against unrelated viruses ("nonself") that may replicate in cells infected with ncp BVDV. This highly selective "self" and "nonself" model of evasion of the interferon defense system may be a key element in the success of persistent infection in addition to immunotolerance initiated by the early time point of fetal infection.

Dithiothreitol triggers photooxidative stress and fragmentation of the large subunit of ribulose-1,5-bisphosphate carboxylase/oxygenase in intact pea chloroplasts

In intact chloroplasts isolated from mature pea leaves (Pisum sativum L.), the large subunit (LSU) of ribulose-1,5-bisphosphate carboxylase/oxygenase (Rubisco, EC 4.1.1.39) was rapidly fragmented into several products upon illumination in the presence of 1 mM dithiothreitol (DTT). Very similar effects on LSU stability could be observed when illuminated chloroplasts were poisoned with cyanide which, like DTT, inhibits important plastid antioxidant enzymes, or when a light-dependent hydroxyl radical-producing system was added to the incubation medium. Moreover, DTT-stimulated light degradation of LSU was markedly delayed in the presence of scavengers of active oxygen species (AOS). It is therefore suggested that light degradation of LSU in the presence of DTT is mainly due to inhibition of the chloroplast antioxidant defense system and the subsequent accumulation of AOS in intact organelles. When chloroplasts were isolated from nonsenescent or senescent leaves, LSU remained very stable upon incubation without DTT, indicating that the antioxidant system was still functional in the isolated chloroplasts during leaf ageing. Our data support the notion that AOS might be important for the degradation of Rubisco in vivo under oxidative stress.

A simple approach to distributed objects in prolog

We present the design of a distributed object system for Prolog, based on adding remote execution and distribution capabilities to a previously existing object system. Remote execution brings RPC into a Prolog system, and its semantics is easy to express in terms of well-known Prolog builtins. The final distributed object design features state mobility and user-transparent network behavior. We sketch an implementation which provides distributed garbage collection and some degree of tolerance to network failures. We provide a preliminary study of the overhead of the communication mechanism for some test cases.

ExperNet: An Intelligent Multiagent System for WAN Management

This paper describes ExperNet, an intelligent multi-agent system that was developed under an EU funded project to assist in the management of a large-scale data network. ExperNet assists network operators at various nodes of a WAN to detect and diagnose hardware failures and network traffic problems and suggests the most feasible solution, through a web-based interface. ExperNet is composed by intelligent agents, capable of both local problem solving and social interaction among them for coordinating problem diagnosis and repair. The current network state is captured and maintained by conventional network management and monitoring software components, which have been smoothly integrated into the system through sophisticated information exchange interfaces. For the implementation of the agents, a distributed Prolog system enhanced with networking facilities was developed. The agents’ knowledge base is developed in an extensible and reactive knowledge base system capable of handling multiple types of knowledge representation. ExperNet has been developed, installed and tested successfully in an experimental network zone of Ukraine.

Feasibility of a wireless health monitoring system for prevention and health assessment of elderly people

The work presented in this paper comprises the methodology and results of a pilot study on the feasibility of a wireless health monitoring system designed under main EU challenges for the promotion of healthy and active ageing. The system is focused on health assessment, prevention and lifestyle promotion of elderly people. Over a hundred participants including elderly users and caregivers tested the system in four pilot sites across Europe. Tests covered several scenarios in senior centers and real home environments, including performance and usability assessment. Results indicated strong satisfactoriness on usability, usefulness and user friendliness, and the acceptable level of reliability obtained supports future investigation on the same direction for further improvement and transfer of conclusions to the real world in the healthcare delivery.