Search

Robotic arms are now commonplace in diverse settings and are poised to play a crucial role in automating laboratory tasks. However, biological experiments remain challenging for automation due to their dependence on human factors, such as researchers' skills and experience. This article introduces robotic automation and remote control for both general and biological research tasks through a modularized platform comprising a robotic arm, auxiliary tools, and software. This platform facilitates fully automated or remote execution of key experiments in chemistry and biology, including liquid handling, mixing, cell seeding, culturing, and genetic manipulation. The robot interfaces seamlessly with standard laboratory equipment and operates remotely in real time through an online program. Integration of a vision system via robotic arm webcams ensures precise positioning and object localization, enhancing accuracy. This modularized robotic platform signifies a substantial advancement in lab automation, promising enhanced efficiency, reproducibility, and scientific progress compared to human‐led experiments. [ABSTRACT FROM AUTHOR]

Background: Concerns about adolescent screen use are often expressed but poorly understood, particularly in terms of how parents are supposed to respond in ways that balance safety, care and developing independence and autonomy. This qualitative study investigated parental perceptions and concerns about screen use of adolescents aged 13 to 17. Current strategies to manage screen use and barriers to doing so were explored, and parents were asked to outline recommended interventions for better outcomes. Methods: Interviews and focus groups were held with 33 adults in Auckland, Aotearoa New Zealand (mean age 48 years) who were parenting adolescents (mean age 14 years). Interviews were transcribed verbatim, then inductive analysis and interpretation by the research team distilled the key ideas and illustrative quotes. A table of recommendations for a practical 'toolbox' was developed from these in-depth conversations. Results: Parents reported extensive use of screens by their adolescents, constantly throughout the day (and night, instead of sleeping). Four areas of specific concern included: (1) addict-like behavior, (2) exposure to harmful (and inane) content, (3) living in a virtual world, and (4) negative impacts on physical, mental, and cognitive wellbeing. To manage adolescent screen use, family rules and restrictions (on time and place) were common. Some used technical control via software or accessing the adolescent's devices and/or accounts to check for inappropriate content (such as pornography). Communication about device use and self-regulation were important. Barriers to managing screen use included trying to avoid conflict with their child; difficulties with consistency or follow-through on rules; lack of technical knowledge; parental screen use that set a bad example; and device use needed for school or other purposes. Recommendations from parents are presented in a toolbox of tips and techniques they shared, and their 'wish list' for better access to practical, local, scientific information, examples of techniques that have worked for other families, tools for problematic behavior and risk (including how to begin conversations with adolescents about their concerns), and having schools and young people involved in developing interventions to build digital citizenship. Conclusions: Rich, nuanced accounts from parents about adolescent screen use in their families and communities underpinned their practical ideas for more skillful responses to young people grappling with an addictive digital existence. [ABSTRACT FROM AUTHOR]

By now, a large number of studies in the field of formal models of computer systems security have been performed. In this paper, we do not consider cryptographic methods of information protection, which, as applied to information systems, ensure security of data storage and transfer. The focus in this paper is on the models based on access control and information flow control that ensure security of data processing. The models based on access control are widely used for implementing protection mechanisms at the level of operating systems (OS) and database management systems (DBMS). Information flow control (IFC) is presently integrated into language platforms designed for creating both system and application software. However, despite all efforts, the dominating approach in the practical design of automated industry-level information systems is exclusively directed to the implementation of system-wide mechanisms of access control. The IFC at the level of applications is often considered without taking into account the requirements of global security policy. In this paper, an attempt is made to justify the necessity of complementing the global access control systems in software with IFC. An algorithm for integrating the IFC at the level of database program units on the basis of the role-based access control implemented at the system level is described. [ABSTRACT FROM AUTHOR]

Psychologists and linguists collect various data on word and concept properties. In psychology, scholars have accumulated norms and ratings for a large number of words in languages with many speakers. In linguistics, scholars have accumulated cross-linguistic information about the relations between words and concepts. Until now, however, there have been no efforts to combine information from the two fields, which would allow comparison of psychological and linguistic properties across different languages. The Database of Cross-Linguistic Norms, Ratings, and Relations for Words and Concepts (NoRaRe) is the first attempt to close this gap. Building on a reference catalog that offers standardization of concepts used in historical and typological language comparison, it integrates data from psychology and linguistics, collected from 98 data sets, covering 65 unique properties for 40 languages. The database is curated with the help of manual, automated, semi-automated workflows and uses a software API to control and access the data. The database is accessible via a web application, the software API, or using scripting languages. In this study, we present how the database is structured, how it can be extended, and how we control the quality of the data curation process. To illustrate its application, we present three case studies that test the validity of our approach, the accuracy of our workflows, and the integrative potential of the database. Due to regular version updates, the NoRaRe database has the potential to advance research in psychology and linguistics by offering researchers an integrated perspective on both fields. [ABSTRACT FROM AUTHOR]

It is seen that restricted exploration has been done in the space of consortium blockchains for upgrading cloud security. It is likewise seen that as of late proposed models have high intricacy, which restricts their QoS execution. In view of these perceptions, next areas talk about plan of the proposed consortium blockchain-based particular possession and access control model with weakness opposition utilizing cross breed choice motor. The proposed model is tried on a wide assortment of cloud situations, and parametric assessment concerning exactness of assault location, and speed of access is broke down in outcomes area, and contrasted and different cutting edge models. Here we have applied proposed model for Medical data and studied Accuracy for authorization attack detection (ADAA),. Delay of authorization check (DAC), Delay of access control detection (DACD) and Accuracy of access control detection (AACD) for different models. [ABSTRACT FROM AUTHOR]

Airborne health management systems prevent functional failure caused by errors or faults in airborne software. The on-the-fly repairing of atomicity violations in ARINC 653 concurrent software is critical for guaranteeing the correctness of software execution. This paper introduces RAV (Repairing Atomicity Violation), which efficiently treats atomicity violations. RAV diagnoses an error on the fly by utilizing the training results of software and treats to control access to the shared variable of the thread where the error has occurred. The evaluation of RAV measured the time overhead by applying methods found in previous works and RAV to five synthesis programs containing an atomicity violation. [ABSTRACT FROM AUTHOR]

The main objective of the present study is to develop a mobile application that manages and controls the entry and exit of bike users (students, faculty, and administrative staff) at the Cooperative University of Colombia (UCC, in Spanish), Bogota campus. Unified modeling language (UML) models are applied to improve software quality by using appropriate metrics and software requirements to control the entry and exit of bike users through a mobile application with up to date technologies (Ionic and Angular). The agile Scrum process is used to obtain the software product to control access to the university through a web application and an app. It is concluded that the software developed here responds to the needs of the university by improving control over on campus bicycle parking. [ABSTRACT FROM AUTHOR]

Attribute-based encryption (ABE) for cloud computing access control is reviewed in this article. A taxonomy and comprehensive assessment criteria of ABE are first proposed. In the taxonomy, ABE schemes are assorted into key-policy ABE (KP-ABE) schemes, ciphertext-policy ABE (CP-ABE) schemes, anti-quantum ABE schemes, and generic constructions. In accordance with cryptographically functional features, CP-ABE is further divided into nine subcategories with regard to basic functionality, revocation, accountability, policy hiding, policy updating, multi-authority, hierarchy, offline computation, and outsourced computation. In addition, a systematical methodology for discussing and comparing existing ABE schemes is proposed. For KP-ABE and each type of CP-ABE, the corresponding access control scenario is presented and explained by concrete examples. Specifically, the syntax of ABE is given followed by the adversarial model and security goals. ABE schemes are discussed according to the design strategies and special features and are compared in the light of the proposed assessment criteria with respect to security and performance. Compared to related state-of-the-art survey papers, this article not only provides a broader 12 categories of ABE schemes, but also makes a more comprehensive and holistic comparison. Finally, a number of open research challenges in ABE are pointed out. [ABSTRACT FROM AUTHOR]

Automatic detection of access control violations in software applications is a challenging problem. Insecure direct object reference (IDOR) is among top-ranked vulnerabilities, which violates access control policies and cannot be yet detected by automated vulnerability scanners. While such tools may detect the absence of access control by static or dynamic testing, they cannot verify if it is properly functioning when it is present. When a tool detects requesting access to an object, it is not aware of access control policies to infer whether the request is permitted. This completely depends on the access control logic and there is no automatic way to fully and precisely capture it from software behavior. Taking this challenge into consideration, this article proposes a black-box method to detect IDOR vulnerabilities in web applications without knowing access control logic. To this purpose, we first, gather information from the web application by a semi-automatic crawling process. Then, we tricksily manipulate legal requests to create effective attacks on the web application. Finally, we analyze received responses to check whether the requests are vulnerable to IDOR. The detection process in the analysis phase is supported by our set theory based formal modeling of such vulnerabilities. The proposed method has been implemented as an IDOR detection tool (IDOT) and evaluated on a couple of vulnerable web applications. Evaluation results show that the method can effectively detect IDOR vulnerabilities provided that enough information is gathered in the crawling phase. [ABSTRACT FROM AUTHOR]

Summary: Software‐defined networking (SDN) creates a platform to dynamically configure the networks for on‐demand services. SDN can easily control the data plane and the control plane by implementing the decoupling concept. SDN controller will regulate the traffic flow and creates the new flow label based on the packet dump received from the OpenFlow virtual switches. SDN governs both data information and control information toward the destination based on flow label, but it does not contain security measure to restrict the malicious traffic. The malicious denial‐of‐service (DoS) attack traffic is generated inside the SDN environment; it leads to the service unavailability. This paper is mainly focused on the detection of DoS attacks and also mitigates the malicious traffic by dynamically configuring the firewall. The SDN with dynamic access control list properties is emulated by mininet, and the experimental results exemplify the service unavailable gap between acceptance and rejection ratio of the packets. [ABSTRACT FROM AUTHOR]

Cloud file storage systems are the current trend of enterprises and also of individual users. Due to the malicious or unauthorized users, file sharing among the cloud users has become the biggest challenge in the recent times. Attribute-based signcryption (ABSC) is known as the versatile cryptographic primitive which achieves the fine-grained access control over robust cloud storage. ABSC combines attribute-based encryption (ABE) and attribute-based signatures to achieve privacy-oriented confidentiality along with the authenticity. Unfortunately, most of the present ABE and ABSC schemes leverage heavy computational overheads against the key length, the ciphertext size or the expressive access structures used. In this paper, a new ABSC scheme is devised to reduce computational overheads, more particularly, at cloud by introducing the more expressive hypergraph access structure, Attribute HyperGraph. On a positive note, the proposed system outperforms and shows less cloud computational timing without exponentiations unlike Deng et al. (IEEE Access 6:39473–39486, 2018. 10.1109/ACCESS.2018.2843778), Liu et al. (Future Gener Comput Syst 52:67–76, 2015. 10.1016/j.future.2014.10.014) and Li et al. (IEEE Trans Parallel Distrib Syst 25(8):2201–2210, 2014. 10.1109/TPDS.2013.271) schemes. Subsequently, the system does not incur any cryptographic computations associated with designcryption at cloud unlike Deng et al. (2018). [ABSTRACT FROM AUTHOR]

The purpose of this study is to investigate the effects of different cursor click modalities in an alternative computer access device using accelerometry from head tilt to control cursor movement. Eighteen healthy adults performed a target acquisition task using the device with five different cursor click modalities, while maintaining cursor movement control via accelerometry. Three dwell-based click modalities with dwell times of 0.5 s, 1.0 s, and 1.5 s were tested. Two surface electromyography-based click modalities - with the sensor placed next to the eye for a blink and above the eyebrow for a brow raise - were tested. Performance was evaluated using metrics of target selection accuracy, path efficiency, target selection time, and user effort. Surface electromyography-based click modalities were as fast as the shortest dwell time and as accurate as the longest dwell time, and also minimized user effort. Three of the four performance metrics were not affected by sensor location. Future studies will investigate if these results are similar in individuals with neuromuscular disorders. [ABSTRACT FROM AUTHOR]

Named Data Networking (NDN) is a new promising architecture of information-centric networking. Traditional mechanisms of access control can no longer fit appropriately, because of its caching property. Hamdane et al. propose a new access control solution for both closed and open environments. In this paper, we make the very first attempt to formally analyze this access control solution. Inspired by the basic BAN logic, we adding some new notions to it to propose our BAN-like logic. It can describe the access control solution. In the form of the beliefs of principals, the procedures of the access control solution are idealized. Under several security goals with a set of logical postulates, the idealized procedures are analyzed. We give the modification to make the solution safer. Then we introduce the man-in-the-middle attack into the access control solution and check the insecurity properties. The improvement is given according to the result. Our study helps to improve security and protect against various attacks for the access control solution. [ABSTRACT FROM AUTHOR]

The electronic health record (EHR) system facilitates integrating patients' medical information and improves service productivity. However, user access to patient data in a privacy-preserving manner is still a challenging problem. Many studies concerned with security and privacy in EHR systems. Rezaeibagha and Mu [1] have proposed a hybrid architecture for privacy-preserving accessing patient records in a cloud system. In their scheme, encrypted EHRs are stored in multiple clouds to provide scalability and privacy. In addition, they considered a role-based access control (RBAC) such that for any user, an EHR access policy must be determined. They also encrypt the EHRs by the public keys of all users. So, for a large amount of EHRs, this scheme is not efficient. Furthermore, using RBAC for access policy makes the policy changing difficult. In their scheme, users cannot search on encrypted EHRs based on diseases, and some physicians must participate in the data retrieval by a requester physician. In this paper, we address these problems by considering ciphertext-policy attribute-based encryption (CP-ABE), which is conceptually closer to the traditional access control methods such as RBAC. Our secure scheme can retrieve encrypted EHR based on a specific disease. Furthermore, the proposed scheme guarantees the user access control and the anonymity of the user or data owner during data retrieval. Moreover, our scheme is resistant against collusion between unauthorized retrievers to access the data. The analysis shows that our scheme is secure and efficient for cloud-based EHRs. [ABSTRACT FROM AUTHOR]

Background. Smartphones can tackle healthcare stakeholders' diverse needs. Nonetheless, the risk of data disclosure/breach can be higher when using such devices, due to the lack of adequate security and the fact that a medical record has a significant higher financial value when compared with other records. Means to assess those risks are required for every mHealth application interaction, dependent and independent of its goals/content. Objective. To present a risk assessment feature integration into the SoTRAACE (Socio-Technical Risk-Adaptable Access Control) model, as well as the operationalization of the related mobile health decision policies. Methods. Since there is still a lack of a definition for health data security categorization, a Delphi study with security experts was performed for this purpose, to reflect the knowledge of security experts and to be closer to real-life situations and their associated risks. Results. The Delphi study allowed a consensus to be reached on eleven risk factors of information security related to mobile applications that can easily be adapted into the described SoTRAACE prototype. Within those risk factors, the most significant five, as assessed by the experts, and in descending order of risk level, are as follows: (1) security in the communication (e.g., used security protocols), (2) behavioural differences (e.g., different or outlier patterns of behaviour detected for a user), (3) type of wireless connection and respective encryption, (4) resource sensitivity, and (5) device threat level (e.g., known vulnerabilities associated to a device or its operating system). Conclusions. Building adaptable, risk-aware resilient access control models into the most generalized technology used nowadays (e.g., smartphones) is crucial to fulfil both the goals of users as well as security and privacy requirements for healthcare data. [ABSTRACT FROM AUTHOR]

A policy is a sequence of rules, where each rule consists of a predicate and a decision, and where each decision is either "accept" or "reject". A policy P is said to accept (or reject, respectively) a request iff the decision of the first rule in P, that matches the request is "accept" (or "reject", respectively). Examples of computing policies are firewalls, routing policies and software-defined networks in the Internet, and access control policies. In this paper, we present a generalization of policies called policy expressions. A policy expression is specified using one or more policies and the three policy operators: "not", "and", and "or". We show that policy expressions can be utilized to support bottom-up methods for designing policies. We also show that each policy expression can be represented by a set of special types of policies, called slices. We present several algorithms that use the slice representation of given policy expressions to verify whether the given policy expressions satisfy logical properties such as adequacy, implication, and equivalence. Finally, we present 19 equivalence laws of policy expressions. [ABSTRACT FROM AUTHOR]

We are experiencing a new digital revolution in which data are becoming a key pillar for business and industry. Promoting data sharing, without compromising data sovereignty and traceability, is fundamental since it provides a heterogeneous ecosystem with the potential to enrich the variety of applications and services that take part in this digital revolution. In this scope, the use of secure and trusted platforms for sharing and processing personal and industrial data is crucial for the creation of a data market and a data economy. Protecting data goes beyond restricting who can access what resource (covered by identity and access control respectively): it becomes necessary to control how data are treated, which is known as data usage control. Data usage control provides a common and trustful security framework to guarantee the sovereignty and the responsible use of organizations' data by third-party entities, easing and ensuring data sharing in ecosystems such as industry or smart cities. In this article, we present an architecture proposal for achieving access and usage control in shared data ecosystems among multiple organizations. The proposed architecture is based on the UCON (Usage Control) model and an extended XACML (eXtensible Access Control Markup Language) Reference Architecture, relying on key aspects of the IDS (International Data Spaces) Reference Architecture Model. Its modular design and technology-agnostic nature provide an integral solution while maintaining flexibility of implementation. [ABSTRACT FROM AUTHOR]

Cloud computing has pulled in numerous business organizations and users because of its simplified administration effort, minimal maintenance cost and pervasive access to out-sourced resources, which can be hardware or software. Users share these resources in large-scale environments over the Internet. Stringent access control must be implemented in a cloud storage system for protecting sensitive information. Access control models in the current literature such as Discretionary Access control (DAC), Mandatory Access Control model (MAC), Role-Based Access Model (RBAC) or Attribute Access Control Model (ABAC) consider the entities of access control in isolation and thus leading to incorrect access control decisions. In this paper, Ontology-Based Access Control is proposed. This proposal uses an ontology to model the entities associated with access control and their interrelationships among them, which could be effortlessly adjusted to Cloud environments. Ontology promises to streamline knowledge sharing among the entities. Subsumption property is exploited over concepts, properties and individuals. The experimental results show that the number of rules to be stored in Policy Base is reduced and reasoning time is also considerably reduced because of applying subsumption property and hence access decision is made faster. Also, our work is compared with the existing works against the state of art models with the help of access control metrics provided by the National Institute of Standards and Technology (NIST). Our work answers the queries related to metric effectively than the existing works. Hence the performance of the system is increased and suitable for securing cloud data. [ABSTRACT FROM AUTHOR]

Evolution of information and technology increasingly sophisticated, also influential in the field of education. One of the implementation of information and technology development in the field of education is e-learning or electronic learning. GitHub social network can be one of the e-learning media in studying software development because GitHub provides access control The number of contributors who commits or change in a repository to make the duration of the calculation process to fill the parameter value that has been determined. Based on the issue, this research aims to build a page capable of integrating information from the GitHub repository page. Integration of information will be made by utilizing web scraping technology. With a web page that integrates information from the GitHub repository page to get repository, collaborators, commits, and issues information, the lecturer does not need to calculate how often the participant contributes to the task. [ABSTRACT FROM AUTHOR]

Implementing REST API for SDN is quite challenging compared to conventional web services. First, the state transfers in SDN are more complex among network devices, controllers, and applications. Second, SDN provides more granular resources in both the controller and the network device itself. Those challenges require SDN to have a proper REST API security definition, which is currently not available in most of the SDN controllers. In this paper, we propose and implement a REST API security module for SDN controller based on OAuth 2.0. We answer the SDN REST API security challenges by presenting novel access control parameters to cope with the granular resources introduced by SDN. Our prototype maintains the best trade-off between performance and safety by generating a maximum value of 15% overhead during our benchmark. It also offers a customizable and flexible access control for the network in various use cases. [ABSTRACT FROM AUTHOR]

We report a software for logging chemical processes in a multi-user laboratory, which implements a workflow designed to reduce hazardous situations associated with the disposal of chemicals in incompatible waste containers. The software allows users to perform only those processes displayed in their list of authorized chemical processes and provides the location and label code of waste containers, among other useful information. The software has been used for six years in the cleanroom of the Center for Functional Nanomaterials at Brookhaven National Laboratory and has been an important factor for the excellent safety record of the Center. [ABSTRACT FROM AUTHOR]

A facility login software, whose objective is to improve safety in multi-user research facilities, is reported. Its most important safety features are: (1) blocks users from entering the lab after being absent for more than a predetermined number of days; (2) gives users a random safety quiz question, which they need to answer satisfactorily in order to use the facility; (3) blocks unauthorized users from using the facility afterhours; and (4) displays the current users in the facility. Besides restricting access to unauthorized users, the software keeps users mindful of key safety concepts. In addition, integration of the software with a door controller system can convert it into an effective physical safety mechanism. Depending on DOE approval, the code may be available as open source. [ABSTRACT FROM AUTHOR]

Recently, researches on key management scheme for user access control in outsourced databases have been actively done. Because outsourced databases require dealing with a lot of users and data resources, an efficient key management scheme for reducing the number of authentication keys is required. However, the existing schemes have a critical problem that the cost of key management is rapidly increasing as the number of keys becomes larger. To solve the problem, we propose an efficient key management scheme for user access control in outsourced databases. For this, we propose an Resource Set Tree(RST)-based key generation algorithm to reduce key generation cost by merging duplicated data resources. In addition, we propose a hierarchical Chinese Remainder Theorem(CRT)-based key assignment algorithm which can verify a user permission to gain accesses to outsourced databases. Our algorithm can reduce key update cost because the redistribution of authentication keys is not required. We also provide the analytic cost models of our algorithms and verify the correctness of the theoretical analysis by comparing them with experiment results. Finally, we show from the performance analysis that the proposed scheme outperforms the existing schemes in terms of both key generation cost and update cost. [ABSTRACT FROM AUTHOR]

Abstract: Efficient medium access control (MAC) is a key part of any wireless network communication architecture. MAC protocols are needed for nodes to access the shared wireless medium efficiently. Vehicular Ad hoc networks (VANETs) are an emerging network technology on the verge of large-scale deployment. The dynamic network topologies in VANETs caused by high mobility rates of vehicles presents a great challenge in reliable data transfer. A MAC protocol that enables quick reservation of packet transmission slots by vehicles that wish to send packets is crucial in addressing this challenge. In this paper, we propose a new distributed MAC algorithm ResVMAC for VANETs. We demonstrate using simulations, that our algorithm outperforms two state-of-the-art algorithms in key performance metrics. [ABSTRACT FROM AUTHOR]