Search

The article discusses SCION (Scalability, Control, and Isolation On Next-generation networks), which is an inter-domain network architecture for the Internet. Topics include the role of transparency and control in SCION architecture, paths available for isolation domain (ISD) building blocks and path-segment construction beacons (PCBs), and the role of autonomous systems (ASes) in preventing distributed denial-of-service (DDoS) attacks.

The article looks at computer and data security, offering recommendations for effective practices to prevent or limit the damage caused by cyber attacks. The author emphasizes the importance of strong internal access controls, also known as defense in depth, particularly in the context of the widespread use of personal devices in the workplace that can offer avenues for attacks on enterprise systems. Topics include determining the appropriate level of granularity in internal data access systems, routinely re-evaluating access configurations, and auditing of access logs.

The Department of Justice recently issued a final rule to improve government website accessibility for people with disabilities, marking the first time the federal government has clarified how the Americans with Disabilities Act applies online. The rule aims to address various accessibility challenges facing government websites, such as small text and a lack of captions for live audio. Governments with 50,000 or more people have two years to comply, while those with fewer than 50,000 have three years. Compliance costs are estimated to be in the millions. Prioritization of the most visited pages and conducting accessibility audits are recommended. The rule also emphasizes user experience, requiring government websites to be both accessible and usable. Some states have already taken steps to improve website accessibility, while others may face a "tsunami" of accessibility lawsuits. Despite the compliance costs, the rule presents an opportunity for governments to make improvements for people with disabilities and others. [Extracted from the article]

The article discusses cloud computing as a service model with a focus on public cloud data security. The article notes business enterprises that are slow to migrate to public clouds due to security concerns and incentives for migration need to go beyond encryption of data processed in the cloud. It also notes real-time auditing by third parties can establish security visibility in the cloud and assure the enterprise that the cloud service is being operated correctly. Topics include extending the trust perimeter from enterprise data center to the public cloud and the Merkle-tree-based structure of the Iris trusted gateway authentication mechanism.

This paper discusses the cluster synchronization problem for a class of complex dynamical networks with coupling time delays. Under the randomly occurring coupling time delays condition, a novel complex network model is established to express the dynamical behavior of the nodes more precisely. An improved event-triggered mechanism is proposed for two purpose containing the reduction of network burden and improvement of cluster synchronization efficiency. The pinning control strategy is adopted for cluster synchronization via controlling a small fraction of the network nodes. By employing Lyapunov–Krasovskii functional method, a stability criterion is obtained to ensure the achievement of cluster synchronization and a event-triggered pinning controller is constructed. Finally, a simulation example is expressed to verify the effectiveness of our main results. [ABSTRACT FROM AUTHOR]

The article discusses OpenFlow technology for Internet Protocol (IP) networks that change traditional computer networks through software-based platforming. Topics include the bidirectional utilization of bandwidth for coordinated data transfer by internal application systems, tenantized networking that preserves virtual machine isolation, and the preservation of IP addresses across subnetworks in game servers. Routing algorithms, smart phone software applications, and global network optimization are mentioned.

The article discusses how Carmel Unified School District in California used software defined networking (SDN) to improve its response related to information technology (IT). Topics include the effort of network administrator Rob Perry for the Project 2020, implementing a SDN for IT, the three components to SDN for school's network such as the mangement console, the network access control, and the application analytics engine, and the selection for switching vendor Extreme Networks Inc. for the project of the school district.

This paper is concerned with the H ∞ filtering problem for a class of networked systems subject to randomly occurring distributed state delays, nonlinearities, sensor saturation as well as missing measurements via unreliable communication channels. The output measurements are affected by sensor saturation which is described by sector-nonlinearities. The missing measurement is modeled as a linear random variable satisfying the Bernoulli distribution, and the nonlinearities with the form of global Lipschitz cover the well-known nonlinear functions. The purpose of the addressed problem is to design a full-order filter such that, in the simultaneous presence of distributed delays, randomly occurring nonlinearities, sensor saturation and missing measurements, the filtering dynamic system is guaranteed to be exponentially mean-square stable, and the H ∞ filtering performance index is achieved. A sufficient condition for the solution of the addressed problem is derived, and the explicit expression of the desired filter gains is described in terms of the solution to linear matrix inequality (LMI). Finally, a numerical example is provided to show the effectiveness of the designed method. [ABSTRACT FROM AUTHOR]

This paper studies an improved event-triggered mechanism (ETM) and L ∞ control co-design for network control systems with communication delay and external disturbances. Most existing ETMs only use the state or state-independent information. The drawback of such schemes is that the low transmission rate of sampled data cannot be obtained when the system is running close to or far away from the origin. To solve the issue, an improved ETM that can effectively improve the transmission efficiency during the whole operation time is firstly proposed. This is achieved by using both the state-dependent and the state-independent information. A general system model with communication delay and external disturbances is then presented, and sufficient conditions for both ultimately bounded stability and asymptotic stability are derived. The relationship between the stability criteria and parameters of the improved ETM, controller gain matrices, maximum communication delay, and upper bound of L ∞ -gain is established. Moreover, a co-design scheme is provided to design the desired ETM and controller that render the network load and control performance reach an expected level, which is more convenient than the two-step design method. Finally, numerical examples confirm the effectiveness of the proposed method. [ABSTRACT FROM AUTHOR]

A quality of service (QoS) guaranteed cross-layer resource allocation algorithm with physical layer, medium access control (MAC) layer and call admission control (CAC) considered simultaneously is proposed for the full IP orthogonal frequency division multiple access (OFDMA) communication system, which can ensure the quality of multimedia services in full IP networks. The algorithm converts the physical layer resources such as subcarriers, transmission power, and the QoS metrics into equivalent bandwidth which can be distributed by the base station in all three layers. By this means, the QoS requirements in terms of bit error rate (BER), transmission delay and dropping probability can be guaranteed by the cross-layer optimal equivalent bandwidth allocation. The numerical results show that the proposed algorithm has higher spectrum efficiency compared to the existing systems. [ABSTRACT FROM AUTHOR]

The article discusses the importance of network segmentation according to different views. Designing network segmentation with zones should assign a group or roles according to Andrew Hay of storage provider DataGravity Inc. It can assure security and reduces the headaches in compiling with the regulations according to managing director Eric Cornelius of endpoint protection provider Cylance Inc.

The article describes the author's experience of improving database structures and cleanup routine to maintain institutional repository (IR). It states that the author call for peer-to-peer interactions that allowed staff across the country. It mentions that the author suggests the implementation of an open-source system without formal system selection process.

Understanding the behaviour of attackers once the ‘eagle has landed’ – after they have penetrated your systems – is not about preventing attacks but rather focusing on what happens once hackers gain access to your networks. In the first part of this two-part article we started by reviewing the changing threat vectors and objectives. Now we look at how organisations can classify and counter these developing threats. Understanding the behaviour of attackers after they have penetrated your systems is not about preventing attacks but rather focusing on what happens once they have access to your networks. In this second part of a two-part article, Tracey Caldwell looks at how organisations can classify and counter developing threats. Sharing intelligence is crucial, but it's important to strike a balance between the benefit of information sharing and the risk of tipping off attackers that the organisation is on to them. [ABSTRACT FROM AUTHOR]

The article discusses how software-defined networking (SDN) and software-defined wide area networking (SD-WAN) technologies may benefit organisations with regard to computer networking and security. Topics explored include the increasing adoption of cloud computing services by businesses, the end-to-end security which may be added by organisations to their network controls, and the accessibility and functionalities of SDN and SD-WAN that need to be acknowledged by enterprises.

The article discusses the end of net neutrality in the U.S. as of June 11, 2018 with the repeal of net neutrality rules introduced by U.S. President Barack Obama in 2015.

The article offers information on the introduction of net neutrality rules by the U.S. Federal Communications Commission (FCC). Topics discussed include control of internet download speeds and access to websites by internet service providers and cable companies, negation of free markets concept, and increase in data charges.

The article discusses the role of the increasing accessibility of cloud computing applications for research libraries. It mentions the benefits being offered by the adoption of cloud-based resources and services in research libraries which include collaborative opportunities, cost savings, and lesser need for in-house technical expertise. It suggests that with cloud-based systems, researchers and students can easily recognise research libraries' relevance.

Abstract: In networked control systems, random delays and packet dropouts are inevitable during data transmissions due to the limited communication capacity. The phenomena of random delays and packet dropouts of both sides from a sensor to an estimator and from a controller to an actuator are modeled via employing two groups of Bernoulli random variables. By defining some new variables, the original system with random delays and packet dropouts is equivalently transformed into a stochastic parameterized system. The optimal linear filter, predictor and smoother in the linear minimum variance sense are presented via the orthogonality projection approach. They depend on the probabilities of the stochastic parameters. The solutions to the optimal linear estimators are given by three equations including a Riccati, a Lyapunov and a simple difference. The stability of the proposed estimators is analyzed. At last, a sufficient condition for the existence of the steady-state estimators is given for time-invariant systems. Two examples are provided to verify the effectiveness of the proposed algorithms. [Copyright &y& Elsevier]

The article focuses on software defined networking (SDN), which describes the creation of data centers at businesses, in 2014. Topics include the importance of business agility, how businesses can adjust to changing market conditions using software, and the benefits of improved asset utilization. Information is provided on the democratization of computer networks.

The article focuses on the cost of online social networks. It states the misguided belief that social media is free. It mentions that creating a page and subsequent updates provides no cost, however, companies are forced to pay for social endorsement updates regarding feedbacks of customers and prospects. It also discusses the security challenges of electronic mails (e-mails), the expensive maintenance and monitor of social media channels, and the cost of ownership in creating or not of a social network account.

The article focuses on sic challenges in providing reliable wireless service on campuses and how three universities address these problems. It states that the six challenges include the necessity of access points (APs) and its installation, network security, and how to protect privacy. It discusses the surveys, approaches, and equipment that Utah State University, John Carroll University, and Central Michigan University use for their own wireless networks.

The article focuses on the strategy of the colleges and universities to mitigate the risks of computer network attacks and preserve their academic freedom. It notes that higher education is vulnerable to risk due to open sharing of ideas. The variety of reasons why higher education institutions are vulnerable to hackers than corporations are also discussed.

The article discusses the political impact of social media wherein internet freedom helps to advance civil society in the long run on the same time helps to prevent the abuse of power in the short term. It states that the wireless internet coordination does not guarantee the political success. It highlights the official statement of the U.S. Secretary of State Hilary Clinton concerning on the U.S. policy on internet access and freedom.

The article relates the experiences of Unisys and the Albert Einstein Health Network in implementing smart cards for physical and computer network access. Both companies reiterate the value of having regular communication with executives to enhance project efficiencies and the importance of product piloting and a training program for their employees. They are using smart cards for computer access, payroll, and employee attendance. The benefits of using smart cards to both companies are noted.

The article discusses how an automated provisioning system can be redeveloped to improve access management. It was mentioned that most provisioning systems are focused on granting access to an individual but fails to place emphasis on the deprovisioning of off-boarding services for individuals who change responsibilities or leaves the organization. In order to help protect networks from unauthorized or incorrect access, some organizations use security information and event management (SIEM) tools, data leakage protection tools and log monitoring.

The article discusses the implications of technological advances in web technologies to businesses. It imparts the comparative advantage of Web 2.0 sites, which enables users to interact with each other. It explores how web technologies affect company image, customer relations, and employee performance, and whether it is necessary to restrict employees' access on specific web applications. Moreover, it also discusses the benefits of using web technologies in the recruitment of employees.

Abstract: Wireless access points act as bridges between wireless and wired networks. Since the actually available bandwidth in wireless networks is much smaller than that in wired networks, there is a bandwidth disparity in channel capacity which makes the access point a significant network congestion point. The recently proposed active queue management (AQM) is an effective method used in wired network and wired–wireless network routers for congestion control, and to achieve a tradeoff between channel utilization and delay. The de facto standard, the random early detection (RED) AQM scheme, and most of its variants use average queue length as a congestion indicator to trigger packet dropping. In this paper, we propose a Novel autonomous Proportional and Differential RED algorithm, called NPD-RED, as an extension of RED. NPD-RED is based on a self-tuning feedback proportional and differential controller, which not only considers the instantaneous queue length at the current time point, but also takes into consideration the ratio of the current differential error signal to the buffer size. Furthermore, we give theoretical analysis of the system stability and give guidelines for the selection of feedback gains for the TCP/RED system to stabilize the instantaneous queue length at a desirable level. Extensive simulations have been conducted with ns2. The simulation results have demonstrated that the proposed NPD-RED algorithm outperforms the existing AQM schemes in terms of average queue length, average throughput, and stability. [Copyright &y& Elsevier]

The article offers the author's insights on how to develop personal learning networks (PLN), a community of individuals who are learning together, using Twitter Inc.'s social networking site. She states that developing a PLN on Twitter considers a commitment and a little like commencing a new friendship. The author provides several steps in creating PLN which include setting up a user account on Twitter, choosing people by clicking the follow button, and checking out the lists that other people create to find and choose many people. She also offers tools for Twitter experience improvement such as hashtag to provides more exposures. Moreover, the author encourages teachers, students, and others to join Twitter and create their PLNs to enhance their teaching and learning skills.

The article discusses strategies to manage administrator access to Windows servers. A domain user account for each server should be created in a Firecall Accounts organizational unit (OU) before disabling the administrator accounts and randomizing the password. The Microsoft Management Console Active Directory Users and Computers snap-in can be used to delegate specific access to the Firecall Accounts OU. The management of privileged server access with restricted groups policy is also discussed.

The article discusses the significance of the products and computer software that suggest application awareness would be central to how networks function. It mentions that the smart network would play a vital role on how server virtualization sought to decouple computer resources from physical hardware. It states that switch and software vendors wanted to make the network aware of the high demand, and control of what gets accessed.

Abstract: User authority delegation is granting or withdrawing access to computer-based information by entities that own and/or control that information. These entities must consider who should be granted access to specific information in the organization and determine reasonable authority delegation. Role Based Access Control (RBAC) delegation management, where user access authority is granted for the minimum resources necessary for users to perform their tasks, is not suitable for the actual working environment of an organization. Currently, RBAC implementations cannot correctly model inheritance and rules for different delegations are in conflict. Further, these systems require that user roles, positions, and information access be continuously and accurately updated, resulting in a manual, error-prone access delegation system. This paper presents a proposal for a new authority delegation model, which allows users to identify their own function-based delegation requirements as the initial input to the RBAC process. The conditions for delegations are identified and functions to implement these delegations are defined. The criteria for basic authority delegation, authentication and constraints are quantified and formulated for evaluation. An analysis of the proposed model is presented showing that this approach both minimizes errors in delegating authority and is more suitable for authority delegation administration in real organizational applications. [Copyright &y& Elsevier]

The article states that the integration of security information management (SIM) with identity and access management (IAM) can increase an organization's effectiveness. The basic limiting factors that must be addressed before integrating SIM with IAM are cited, including authorized access, reduced functionality while integrating and scope of coverage. It stresses the importance for an organization's management to establish the controls and frameworks around how the technology tools will be used to make the SIM and IAM integration useful.

The article focuses on the new formatting and parsing features of the TimeSpan structure of the Microsoft.NET Framework 4. It states that in the new .NET Framework 4, two overloads were added to support the formatting of the structure, such as the single or custom format string and the IFormattable implementation. Meanwhile, the expanded parsing features of the framework was also added with four new overloads which enhanced the aid for parsing the string representations of time intervals.

The article presents the author's insights on ensuring security in Mac computers. The author cites the threats within network and connections, and says that authentications like username and password are basic steps to bring network securities. Moreover, it discusses the benefits of using firewalls to control services that are prone to attacks. He also mentions physical threats for Mac in cases of lost, in which he suggests ensuring log back passwords to prevent unwanted access of computer data. INSET: TOP 10 SECURITY TIPS.

The article offers information on computer networks. It states that Internet Protocol (IP) addressing has two ways to transmit data including data transmission via Internet or a wide area network (WAN) and local area network (LAN). It notes that machine access control (MAC) is used for LAN while IP addressing for WAN. It also features Transmission Control Protocol/Internet Protocol (TCP/IP) as the most commonly globally used communication protocol to transfer data.

The article focuses on a study by R5 Industries security engineer Rob Fuller on locked computer screens. Topics covered include the discovery that a special USB device can be used in copying an operating system (OS) account password from a locked Windows computer, the use of a flash-drive-size computer called USB Armory and the ability of computers in a locked state to generate network traffic.

Abstract: This paper is concerned with enhancing situation awareness messaging using narrow-band multi-user detection techniques. Situation awareness messaging involves sending short packets of situation update data. Low latency is an important requirement. This paper focuses on using satellite communications which have a substantial propagation delay. These factors favour the use of a random access system such as Aloha. The main draw back of these systems is low channel utilisation. The capacity of an Aloha system using multi-user detection is analysed is this paper. The capacity is substantially improved by using multi-user detectors. Furthermore the distribution of user powers experienced at the ground station enhances the performance of a system based on multi-user detection. [Copyright &y& Elsevier]

These days, it is generally accepted that economic, regulatory and social pressures are coming together to drive growth in remote working in businesses of all sizes and in all sectors. At the same time, organisations have recognised a parallel increase in hacking attacks and other forms of unauthorised access relating to corporate networks. [Copyright &y& Elsevier]

The article offers system guidelines to ensure the availability of consolidated virtual workloads. It highlights several factors to be considered in the consolidation approach to workloads including high availability to storage, network communications and processor and memory resources. It focuses on making access to virtual storage, network access and partitions highly available.

The article presents a research paper regarding the problem of admission control in computer networks with uncertain parameters, in which probabilistic description of uncertain variables cannot be used. It explores the uncertain parameters of admission control in computer networks based on the concept of network utility maximization. It suggests that the approach to admission control problem in computer networks can also be applied for designing and planning of computer networks.

The authoritative control objectives for access to data have always been something along the lines of: “Confirm that user access rights to systems and data are in line with defined and documented business needs, and that job requirements are attached to user identities…. Ensure that critical and confidential information is withheld from those who should not have access to it.” [Copyright &y& Elsevier]

The article focuses on the capability of Storage Area Networks (SAN) and Network Attached Storage (NAS) technologies in leveraging external disk storages. It notes that SAN is capable of spanning distant location that contains a secondary storage array. Moreover, it enables to gain access to data that involves high-speed block-level access to the drive. INSET: Find Out More.

The article focuses on the decision of the U.S. Court of Appeals regarding net neutrality regulations. The ability of internet providers to charge web companies which may harm consumers is mentioned. The right of internet service providers to offer premium services and the right of customers to contract with those who provide them on mutually agreed terms is cited. The benefit of net neutrality to all its users is also stated.

The article reports on the publication of EN 301 549, a European standard on accessibility requirements for public procurement of information and communication technologies (ICT) products and services. The development of the standard by an international team of experts with the participation of the ICT industry and organizations representing the consumers, disabled and older people is explained. The accessibility requirements and accompanying technical reports of the standard are discussed.

The article offers suggestions where and how to find military tool component lists (CLs) regarding inventories. Topics discussed include the Army Enterprise System Integration Program (AESIP) which feed CLs to Global Combat Support System (GCSS)-Army; accessing the CLs in AESIP and establishing an AESIP account; and in the Detailed Navigation panel, click the Reporting folder to expand the folder and show its menu items.

The article discusses network neutrality. The author presents a mock interview with Pro, who is in favor of net neutrality, and Con, who is not. Topics discussed include who both Pro and Con represent, including pro-consumer organizations and the telecommunications industry, respectively, what network neutrality is, and how it stifles innovation.

Social networking is a common Catch-22 for businesses – allow access to social media sites and the business is opened up to malicious content, phishing schemes and other evils. Declare all social media sites off-limits and employees become frustrated, find workarounds or work elsewhere. The key is to achieve a safe compromise – through an acceptable-use policy tailored to each specific organisation''s risk profile, and enforced through next-generation technologies. Clearly documenting ground rules, expectations and repercussions for out-of-policy behaviour will ensure that end users are aware of what''s considered acceptable use of social vehicles, explains Chris Jenkins of Dimension Data. It''s a common Catch-22 for many business and IT departments: allow access to social media sites and the business is opened up to malicious content, phishing schemes and other evils. Declare all social media sites off-limits and employees become frustrated, find workarounds or simply elect to work elsewhere. The key is to achieve a safe compromise – through an acceptable use policy tailored to each specific organisation''s risk profile, and enforced through next-generation technologies. [Copyright &y& Elsevier]