物件導向軟體之架構(Object-Oriented Software Construction)探討

Open Innovation: The New Imperative for Creating and Profiting from Technology

The Internet of Things (IoT) provides the ability for humans and computers to learn and interact from billions of things that include sensors, actuators, services, and other Internet-connected objects. The realization of IoT systems will enable seamless integration of the cyber world with our physical world and will fundamentally change and empower human interaction with the world. A key technology in the realization of IoT systems is middleware, which is usually described as a software system designed to be the intermediary between IoT devices and applications. In this paper, we first motivate the need for an IoT middleware via an IoT application designed for real-time prediction of blood alcohol content using smartwatch sensor data. This is then followed by a survey on the capabilities of the existing IoT middleware. We further conduct a thorough analysis of the challenges and the enabling technologies in developing an IoT middleware that embraces the heterogeneity of IoT devices and also supports the essential ingredients of composition, adaptability, and security aspects of an IoT system.

IoT Middleware: A Survey on Issues and Enabling Technologies

Looking for competent reading sources? We have secrets and lies digital security in a networked world to read, not only check out, yet likewise download them and even check out online. Discover this excellent book writtern by by now, merely here, yeah only here. Get the data in the types of txt, zip, kindle, word, ppt, pdf, as well as rar. Once more, never ever miss to check out online and also download this book in our website right here. Click the link.

Secrets and Lies: Digital Security in a Networked World

In a provenance-aware system, mechanisms gather and report metadata that describes the history of each object being processed on the system, allowing users to understand how data objects came to exist in their present state. However, while past work has demonstrated the usefulness of provenance, less attention has been given to securing provenance-aware systems. Provenance itself is a ripe attack vector, and its authenticity and integrity must be guaranteed before it can be put to use.

We present Linux Provenance Modules (LPM), the first general framework for the development of provenance-aware systems. We demonstrate that LPM creates a trusted provenance-aware execution environment, collecting complete whole-system provenance while imposing as little as 2.7% performance overhead on normal system operation. LPM introduces new mechanisms for secure provenance layering and authenticated communication between provenance-aware hosts, and also interoperates with existing mechanisms to provide strong security assurances. To demonstrate the potential uses of LPM, we design a Provenance-Based Data Loss Prevention (PB-DLP) system. We implement PBDLP as a file transfer application that blocks the transmission of files derived from sensitive ancestors while imposing just tens of milliseconds overhead. LPM is the first step towards widespread deployment of trustworthy provenance-aware applications.

https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-bates.pdf

Trustworthy whole-system provenance for the Linux kernel

It is widely realised that provenance systems can benefit from greater awareness of security principles and the use of security technology. In this paper, we argue that Trusted Computing, a hardware-based method for establishing platform integrity, is not only useful, but immediately applicable. We demonstrate how existing Trusted Computing mechanisms can be used for provenance, and identify the remarkable similarity and overlap between the two research areas. This is accomplished through presenting architectural ideas for a trusted provenance system, and by comparing the respective requirements and capabilities of trusted systems and provenance systems.

/pdf/trusted-computing-and-provenance-better-together-30l4clac36.pdf

Trusted computing and provenance: better together

Many applications which require provenance are now moving to cloud infrastructures. However, it is not widely realised that clouds have their own need for provenance due to their dynamic nature and the burden this places on their administrators. We analyse the structure of cloud computing to identify the unique challenges facing provenance collection and the scenarios in which additional provenance data could be useful.

/pdf/challenges-for-provenance-in-cloud-computing-3aokd7d905.pdf

Challenges for Provenance in Cloud Computing

The adversarial element is an intrinsic part of the design of secure systems, but our assumptions about attackers and threat is often limited or stereotypical. Although there has been previous work on applying User-Centered Design on Persona development to build personas for possible attackers, such work is only speculative and fails to build upon recent research. This paper presents an approach for developing Attacker Personas which is both grounded and validated by structured data about attackers. We describe a case study example where the personas were developed and used to support the development of a Context of Use description for the EU FP7 webinos project.

/pdf/here-s-johnny-a-methodology-for-developing-attacker-personas-1h3re2qc47.pdf

Here's Johnny: A Methodology for Developing Attacker Personas

This poster paper describes the webinos project and presents the architecture and security features developed in webinos. It highlights the main objectives and concepts of the project and describes the architecture derived to achive the objectives.

The webinos project

People use an increasing number of consumer electronic devices to access their mobile apps. To enhance the applications' immersive user experience, these devices often expose APIs for accessing a wide array of sensors and domain-specific capabilities. Existing mobile application environments, however, only provide limited support for cross-device access of such APIs. To address this limitation, the Webinos platform was designed. Webinos is a virtualized Web-based application platform, aiming to support the collaboration of multiple devices within a single mobile application. In this paper we elaborate on the Webinos platform design. We discuss the encountered design challenges regarding portability, scalability, and privacy, and how these were mitigated.

/pdf/on-the-challenges-of-building-a-web-based-ubiquitous-oyzdgq9alb.pdf

John Lyle

Papers

Trusted computing and provenance: better together

Challenges for Provenance in Cloud Computing

Here's Johnny: A Methodology for Developing Attacker Personas

The webinos project

On the challenges of building a web-based ubiquitous application platform