Search

Technological developments have a positive effect on agencies and companies, one of which is the innovation of employee attendance registration using the internet network media. Employee attendance system model using internet network will certainly make it easier to control employee attendance. The internet network is an important part of every agency in helping its performance and can also be used as an attendance system. WPA2 Enterprise implementation is used as authentication using the provided email and password. Devices that have been connected to the network will automatically be recorded in the employee attendance system. The implementation of WPA2 Enterprise requires freeradius assistance in processing authentication data from employees which will then be verified again through LDAP, in this case UNESA uses Google LDAP. The attendance system by implementing WPA2 Enterprise has been tested by implementing the Technology Acceptance Model (TAM) method resulting in 43% answering strongly agree and 56% answering agreeing. The analysis is based on 78 employees who gave their assessments. Based on the results of the acceptance analysis of the system, it is stated that it can be applied at UNESA.

U ovom radu istražen je način koriš­ćenja dva različita sistema informacione-bezbednosti – Microsoft Active Directory zasnovan na Windows plat­formi i OpenLDAP zasnovanog na Linux platformi, uo­čene su njihove sličnosti i razlike, razvijen je, implemen­tiran i verifikovan interoperabilni adapter za rad sa ova dva sistema informacione-bezbednosti koji omogućuje korišćenje administratorske i korisničke funkcionalnosti.

Message format extraction, the process of revealing the message syntax without access to the protocol specification, is important for a variety of applications such as service virtualization and network security. In this paper, we propose P-token, which mines fine-grained message formats from network traces. The novelty of our approach is twofold: a ‘positional keyword’ identification technique and a two-level hierarchical clustering strategy. Positional keywords are based on the insight that keywords or reserved words usually occur at relatively fixed positions in the messages. By associating positions as meta-information with keywords, we can more accurately distinguish keywords from message payload data. After identification, the positional keywords are used as features to cluster the messages using density peaks clustering. We then perform another level of clustering to refine the clusters with low homogeneity. Finally, the message format of each cluster is extracted based on the observed ordering of keywords. P-token improves on the current state-of-the-art techniques by successfully addressing two challenges that commonly afflict existing keyword based format extraction methods: message keyword mis-identification and message format over-generalization. We have conducted experiments on services and applications using various protocols, including SOAP, LDAP, IMS and a RESTful service. Our experimental results show that P-token outperforms existing methods in extracting message formats.

Latent Dirichlet Allocation (LDA) is a topic model that represents a document as a distribution of multiple topics. It expresses each topic as a distribution of multiple words by mining semantic relationships hidden in text. However, traditional LDA ignores some of the semantic features hidden inside the document semantic structure of medium and long texts. Instead of using the original LDA to model the topic at the document level, it is better to refine the document into different semantic topic units. In this paper, we propose an improved LDA topic model based on partition (LDAP) for medium and long texts. LDAP not only preserves the benefits of the original LDA but also refines the modeled granularity from the document level to the semantic topic level, which is particularly suitable for the topic modeling of the medium and long text. The extensive experimental classification results on Fudan University corpus and Sougou Lab corpus demonstrate that LDAP achieves better performance compared with other topic models, such as LDA, HDP, LSA and doc2vec.

Single sign-on (SSO) is an essential tool for company and organizations to secure access the website or application by using username and password. It is used instead of local database, Lightweight Directory Access Protocol (LDAP) and Active Directory (AD). The number of new sessions on single sign-on is considered on the large organization. The large organizations have many websites and applications that need the secure access. The new sessions and concurrent sessions support are one of the key factors for determining the efficiency of single sign-on. In general, single sign-on can support only hundred scales of the new sessions and thousand scales of the concurrent sessions. In this research, we propose in-memory data store method for single sign-on session storing and load distribution method to improve single sign-on performance. The result showed that in-memory data store and load distribution methods could increase the new sessions support and concurrent sessions support up to ten thousand scales and hundred thousand scales, respectively.

A user-logging solution based on the Authentication Authorization and Accounting mechanism that is resistant to Spoofed Packet Injection attack is presented in this paper. The Remote Authentication Dial-In User Service protocol is often implemented in telecommunications networks, thus being the target of cyber-attacks. To secure the process of user authentication in the networks of Internet Service Providers, it is necessary to develop and implement security modules in the RADIUS authentication PolicyFlow.

With the world moving towards digitalization, more applications and servers are online hosted on the internet, more number of vulnerabilities came out which directly affects an individual and an organization financially and in terms of reputation too. Out of those many vulnerabilities such as Injection, Deserialization, Cross site scripting and more. Injection stand top as the most critical vulnerability found in the web application. Injection itself is a broad vulnerability as it further consists of SQL Injection, Command injection, LDAP Injection, No-SQL Injection etc. In this paper we have reviewed SQL Injection, different types of SQL injection attacks, their causes and remediation to comprehend this attack.

For teaching students in the course on "Parallel Computing", the idea of building an educational computing cluster based on single-board computers is relevant. This cluster should provide multi-user remote access for the simultaneous interaction of a group of students with it in order to carry out a laboratory practice in the above discipline. The paper presents the general structure of a cluster based on 64 single-board computers Raspberry Pi 3 Model B with an individual power module for rebooting each cluster node separately. Provided remote access to the cluster with LDAP authorization and authentication, as well as diskless boot of the operating system. This article describes the organization of a network with a division into a cluster management network and a data network. Due to the easy scalability of the considered configuration, this cluster has great prospects for daily use and subsequent modernization.

The world is now shifting from Industry 4.0 to Industry 5.0 enabling the automation of the human livelihood by using Internet of Things (IoT). IoT can be attributed as a network that connects many sensor devices to collect data to provide automated smart environments. However, with a huge number of connected devices already deployed worldwide and organizations resorting to IoT development services more frequently because IoT security issues remain a matter of concern. One of the main identified reasons is IoT devices possess limited memory capacity, energy, processing which cause difficulties to run complex security algorithms, hindering the security services such as privacy and authentication, although those are crucial factors of IoT services. Hence, the adoption of adequate security and authentication techniques are necessary for a broad IoT deployment. To this end, this study proposes an authentication platform to improve the security and efficiency of data transmission between the IoT devices using LDAP and MQTT technologies. The implementation complies with IEEE 1451 standardization to uplift the MQTT with the help of LDAP features and GZip compression.

For years, clusters for HPC have been implemented through the typical process of obtaining the source code, configuring and compiling each of the tools that make up the infrastructure services. Each administrator based on their experience and knowledge assumes a series of considerations to design and implement a cluster that is considered efficient by installing base tools such as NTP, NFS, a task manager (that is, SLURM), LDAP, among others. In order to reduce these times, several open-source initiatives have emerged, such as Rocks, that allow the rapid implementation of an HPC cluster despite its low configuration flexibility. OpenHPC emerges as an alternative that provides the necessary tools in a software repository and that once installed allows the same flexibility of customization and adaptation as if they had been installed in a typical way. It’s worth mentioning that OpenHPC provides all of those standardized tools in order to spread best practices in building and managing HPC data centers, but unlike Rocks, OpenHPC requires pre-design of the platform, including network infrastructure, storage services, and the different tools to implement, requiring prior knowledge by the administrator about each of them. The objective of this paper is to present the fundamental basis for implementing an efficient cluster by using OpenHPC without becoming a technical installation guide, but rather a series of steps in a methodology used by the Supercomputacion y Calculo Cienfifico Laboratory SC3.

Data is crucial in today’s word. Each and every company function depends on data. Depending upon the data storage capacity of companies, it is segregated into various categories like multinational, small-scale, and middle-scale companies. As an example, Facebook, Google, Amazon, etc., they have billions of users and their data, which are continuously uploading/downloading from their Web sites. Data is the core part of every company working. To store the data, companies are using different database and directory servers. The databases or directory servers store the data in their won formats and to extract the data from this, and they are using special functions and protocols. Data is mostly used to manage the identity and access of the users into the organization and outside the organization. IAM is a suit which nowadays very popular in the market for securing the user data. IAM system allows the user to access the data depending upon user credentials, which means when the data is accessible by the user. The user has to enter the credentials, and then depending upon credentials, the access is granted to the user. The IAM system proposed in this paper depends upon three things (WHO, WHAT, and HOW) Who’s identity can be created and who can access the data, also the level of data access will be decided and How the user can access the data. In this using the single directory server, we will try to implement a single server system in that both identity and access manager can use the same data storage but having a different suffix. IAM suite will also make sure that users can access the data for which they have the access and need for their business operations.

One of the main obstacles of securing industrial control systems is the lack of an appropriate security model that is both implementable by vendors and addresses the inherent security and usability issues needed by organizations. Current solutions such as device passwords and IPSec lack scalable key management infrastructure and fine granularity access control mechanisms. In this paper we propose a novel security model for industrial control systems that supports organizational level authorizations and authentication requirements, while hiding the low-level details (e.g., keys and passwords) from the users. It also allows to easily add and remove PLCs, engineering stations, HMI devices and users, and assign permissions to them. The core of the model is a new ICS secure protocol that we call K7. Without loss of generality, we base our protocol on the Siemens S7 protocol, and enhance it with new cryptographic features to support the extra functionality. We use a ticket-based system (e.g., Kerberos with LDAP server) to support the exchange of permissions and keys, and incorporate it into our protocol. To prove our solution, we implemented K7 as a protocol converter add-on to standard Siemens clients and PLCs that transform them into augmented devices that use K7. A major advantage is its support for ICS systems, that contain legacy devices, and the simple ability to upgrade their security using device augmentation. We hope that Siemens and other vendors will add direct support for K7 on their ICS systems.

Today External LDAP directories are considered as a standard technology for storing information about users, groups and permissions with a directory server like MS Active Directory, OpenLDAP, OpenDJ etc. and later providing this information's to enterprise application in the organization. Most of the organizations prefer external LDAP, as its authentication protocol is very simple. In this proposed system we present the technology of managing user's information and authentication of both internal and external users in the organization using external LDAP (Light-weight directory access protocol). This external LDAP directories stores various information about the users later this information can also be retrieved by another user depending upon the access levels. And various applications use this technology to allow authorized users who provides proper authentication details and that details should match with the information stored in LDAP server.

The solution presented in this paper presents an improved security variant of standard implementations of the Remote Authentication Dial-In User Service protocol within a Service Provider’s network. The Authentication, Authorization and Accounting mechanism may be subject to cyber-attacks with the effect of compromising the network. Therefore, it is necessary to implement an authentication protection solution against common cybersecurity attacks. For the presented solution, a unified protection module against Session Replay and Volumetric Distributed Denial-of-Service attacks has been developed and integrated within an AAA-RADIUS solution.

During the development of automated software packages for user authorization and granting access to network resources, there is a problem of software identification of the user of the directory service based on the LDAP database to a certain group of users. The standard Microsoft.NET Framework library, designed to perform basic operations on directory service objects, includes a special System.DirectoryServices library. The testing of this library has revealed that this mechanism only works properly with the group up to 1,500 members. This limitation of the System.DirectoryServices library remains uncorrected in all versions of.NET Framework. Wrong detection the group membership can lead to the dangerous situation when a authenticated user gets more large rights and privileges than it should or, on the contrary, does not get the necessary rights. The purpose of the article is to demonstrate how using of the library Novell.Directory.Ldap allows the administrator to produce the new working code for correct membership detection a certain user account in the user group.

IoT (Internet of Things)-based remote monitoring and controlling applications are increasing in dimensions and domains day by day. Sensor-based remote monitoring using a Wireless Sensor Network (WSN) becomes challenging for applications when both temporal and spatial data from widely spread sources are acquired in real time. In applications such as environmental, agricultural, and water quality monitoring, the data sources are geographically distributed, and have little or no cellular connectivity. These applications require long-distance wireless or satellite connections for IoT connectivity. Present WSNs are better suited for densely populated applications and require a large number of sensor nodes and base stations for wider coverage but at the cost of added complexity in routing and network organization. As a result, real time data acquisition using an IoT connected WSN is a challenge in terms of coverage, network lifetime, and wireless connectivity. This paper proposes a lightweight, dynamic, and auto-reconfigurable communication protocol (LDAP) for Wide-Area Remote Monitoring (WARM) applications. It has a mobile data sink for wider WSN coverage, and auto-reconfiguration capability to cope with the dynamic network topology required for device mobility. The WSN coverage and lifetime are further improved by using a Long-Range (LoRa) wireless interface. We evaluated the performance of the proposed LDAP in the field in terms of the data delivery rate, Received Signal Strength (RSS), and Signal to Noise Ratio (SNR). All experiments were conducted in a field trial for a water quality monitoring application as a case study. We have used both static and mobile data sinks with static sensor nodes in an IoT-connected environment. The experimental results show a significant reduction (up to 80%) of the number of data sinks while using the proposed LDAP. We also evaluated the energy consumption to determine the lifetime of the WSN using the LDAP algorithm.

Web application loopholes are related to different components. Defeat correctly sanitized users’ given input is one of the prominent features that accompany to run illegal snippets in such type of programs. Due to the absence of proper input sanitization, common loopholes occur in web applications, such as SQL, Cross-site Scripting (XSS), XML, CSRF, and LDAP. Thus, research work presented in this paper deliberates possible methods to detect and mitigate vulnerabilities in order to prevent organizational websites against SQL and XSS loopholes. We have analyzed a dataset of URLs. SQL, XSS, and XML have the highest rate of detection and the least percentage of CSRF.

Virtual Desktop Infrastructure (VDI) is a Virtualized Technology that hosts the user’s desktop at Datacenter Server. OpenStack is the most successful opensource enterprise cloud platform. Cloud-based VDI, also known as “Desktop as a Service” or DaaS, increases utilization of Datacenter infrastructure, provides high elasticity, increases service diversity, and improves scalability. It also allows for prioritizing delivering value, give the choices to use a wide range of hypervisor/storage/network. In this paper, an architecture proposed that comprises three major components that are, hypervisor, connection broker, and display protocol for enterprise-level VDI on OpenStack. The hypervisor used to host many virtual machines on a single hardware. Connection broker used for configuring, inventorying, provisioning, and centralized management of desktops and display protocol allows users to view the desktop that hosted at Datacenter. Lightweight Directory Access Protocol (LDAP) used for user authentication and authorization for desktops. In the paper, we explore the architecture design and implementation of the VDI system on OpenStack and verifies the experiment results.