자연주의적 탐구조사(Naturalistic Inquiry)

In this article we propose a standard for role-based access control (RBAC). Although RBAC models have received broad support as a generalized approach to access control, and are well recognized for their many advantages in performing large-scale authorization management, no single authoritative definition of RBAC exists today. This lack of a widely accepted model results in uncertainty and confusion about RBAC's utility and meaning. The standard proposed here seeks to resolve this situation by unifying ideas from a base of frequently referenced RBAC models, commercial products, and research prototypes. It is intended to serve as a foundation for product development, evaluation, and procurement specification. Although RBAC continues to evolve as users, researchers, and vendors gain experience with its application, we feel the features and components proposed in this standard represent a fundamental and stable set of mechanisms that may be enhanced by developers in further meeting the needs of their customers. As such, this document does not attempt to standardize RBAC features beyond those that have achieved acceptance in the commercial marketplace and research community, but instead focuses on defining a fundamental and stable set of RBAC components. This standard is organized into the RBAC Reference Model and the RBAC System and Administrative Functional Specification. The reference model defines the scope of features that comprise the standard and provides a consistent vocabulary in support of the specification. The RBAC System and Administrative Functional Specification defines functional requirements for administrative operations and queries for the creation, maintenance, and review of RBAC sets and relations, as well as for specifying system level functionality in support of session attribute management and an access control decision process.

/pdf/proposed-nist-standard-for-role-based-access-control-2dc3elpcvo.pdf

Proposed NIST standard for role-based access control

An automated communications system operates to transfer data, metadata and methods from a provider computer to a consumer computer through a communications network. The transferred information controls the communications relationship, including responses by the consumer computer, updating of information, and processes for future communications. Information which changes in the provider computer is automatically updated in the consumer computer through the communications system in order to maintain continuity of the relationship. Transfer of metadata and methods permits intelligent processing of information by the consumer computer and combined control by the provider and consumer of the types and content of information subsequently transferred. Object oriented processing is used for storage and transfer of information. The use of metadata and methods further allows for automating may of the actions underlying the communications, including communication acknowledgements and archiving of information. Service objects and partner servers provide specialized data, metadata, and methods to providers and consumers to automate many common communications services and transactions useful to both providers and consumers. A combination of the provider and consumer programs and databases allows for additional functionality, including coordination of multiple users for a single database.

Computer-based communication system and method using metadata defining a control-structure

Thank you for reading experimental and quasi experimental designs for research. Maybe you have knowledge that, people have search numerous times for their favorite readings like this experimental and quasi experimental designs for research, but end up in malicious downloads. Rather than reading a good book with a cup of tea in the afternoon, instead they cope with some infectious virus inside their laptop.

Experimental And Quasi Experimental Designs For Research

The objective of this paper is to give a comprehensive introduction to applied cryptography with an engineer or computer scientist in mind. The emphasis is on the knowledge needed to create practical systems which supports integrity, confidentiality, or authenticity. Topics covered includes an introduction to the concepts in cryptography, attacks against cryptographic systems, key use and handling, random bit generation, encryption modes, and message authentication codes. Recommendations on algorithms and further reading is given in the end of the paper. This paper should make the reader able to build, understand and evaluate system descriptions and designs based on the cryptographic components described in the paper.

[서평]「Applied Cryptography」

The growing reliance on Commercial-Off-The-Shelf (COTS) components for developing large-scale projects introduces a new paradigm in software engineering, which requires the design of new software development and business processes. Large scale component reuse leads to savings in development resources, enabling these resources to be applied to areas such as quality improvement. These savings come at the price of integration difficulties, performance constraints, and incompatibility of components from multiple vendors. Relying on COTS components also increases the system's vulnerability to risks arising from third-party development, which can negatively affect the quality of the system, as well as causing expenses not incurred in traditional software development. We aim to alleviate such concerns by using a framework based on software metrics to accurately quantify factors contributing to the overall quality of a COTS-Based System (CBS) and guide decisions regarding quality and risk management.

/pdf/metrics-based-framework-for-decision-making-in-cots-based-37lxovbazw.pdf

Metrics-based framework for decision making in COTS-based software systems

Multimedia: Full-Service Impact on Business, Education, and the Home

We propose a proxy-based framework that provides QoS support to mobile users. We describe the overall QoS architecture and implement a number of key QoS functions, including bandwidth allocation and synchronization. In this architecture, admission control is exercised to ensure the long-term availability of resources to mobile clients, where the resources include bandwidth for supporting the required presentation rates and buffer for synchronizing media streams. Bandwidth allocation is implemented in Linux traffic control using stochastic fairness queueing and token bucket filter disciplines to provide bandwidth guarantees for the multimedia connections. An adaptive synchronization technique is also implemented in the proxy to synchronize multiple streams originating from different sources before transmitting them to the clients for presentation. Finally, a number of quality adaptation strategies that accommodate the diverse requirements and capabilities of clients are described.

Real-time resource reservation for synchronized multimedia object over wireless LAN

The role of multimedia applications in our day-to-day life has dramatically increased in the last few years. In this paper, we present an architectural framework for the distributed multimedia systems. The architecture consists of three layers: the application layer, the configuration and synchronization layer, and the network layer. The three layers are backed up by two backbone layers, namely, the database and the computational backbone. We present a precise description of each layer together with formal specifications using finite state automata.

A protocol architecture for guaranteed quality of service in collaborated multimedia applications

Multimedia communications are expected to have a major impact on scientific and technological development in the near future. This area has spawned new research opportunities in diverse areas such as computer networks, storage systems, semiconductor technology, distributed systems, information theory, databases, real-time operating systems, and computer graphics. Many distributed applications involving information management require presentation of different media types—video, audio, text, images, animation and graphics—to the end user. These applications are emerging in diverse areas such as business, education, medicine, and entertainment. For example, various U.S. government organizations have built multimedia libraries that allow users to interactively author, store, and share multimedia documents (MMDs) [4]. Most of these applications/services use stored information in one form or the other. The structure of the information is generally preorchestrated at the time of storage [2, 3]. Conceptually, an MMD can be logically sub-divided into multimedia objects, which may be either isochronous such as video and audio, or discrete, such as text and images. These objects are temporally related at the time of creation of the MMD, in a process known as MMD preorchestration. An example of temporal relations is depicted in Figure 1a, where presentation starts with a concurrent playout of an NTSC-quality video along with a stereo-quality sound. This is immediately followed by the presentation of a high-resolution image along with an animation sequence that is later joined by the other media objects as depicted in the figure. MMDs can be stored on a single server or at different remote sites distributed over a network. In either case, presentation of an MMD requires real-time delivery and transmission of multiple media streams to the end user. The server needs to control the transmission of these streams in order to guarantee the playout of media objects according to the prespecified temporal structure and without heavily penalizing the resources at the client site. In other words, retrieval of media objects requires efficient and flexible end-to-end transport mechanisms. Integrated networks based on the Asynchronous Transfer Mode (ATM) are the ideal

Arif Ghafoor

Papers

Metrics-based framework for decision making in COTS-based software systems

Multimedia: Full-Service Impact on Business, Education, and the Home

Real-time resource reservation for synchronized multimedia object over wireless LAN

A protocol architecture for guaranteed quality of service in collaborated multimedia applications

Synchronized delivery of multimedia information over ATM networks