首页 > 最新文献

2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)最新文献

英文 中文
Distributed Shuffle Index in the Cloud: Implementation and Evaluation 云中的分布式Shuffle索引:实现与评估
Enrico Bacis, S. Vimercati, S. Foresti, S. Paraboschi, Marco Rosa, P. Samarati
The distributed shuffle index strengthens the guarantees of access confidentiality provided by the shuffle index through the distribution of data among three cloud providers. In this paper, we analyze architectural and design issues and describe an implementation of the distributed shuffle index integrated with different cloud providers (i.e., Amazon S3, OpenStack Swift, Google Cloud Storage, and EMC Elastic Cloud Storage). The experimental results obtained with our implementation confirm the protection guarantees provided by the distributed shuffle index and its limited performance overhead, demonstrating its practical applicability in cloud scenarios.
分布式shuffle索引通过数据在三个云提供商之间的分布,加强了shuffle索引提供的访问机密性保证。在本文中,我们分析了架构和设计问题,并描述了与不同云提供商(即Amazon S3, OpenStack Swift, Google cloud Storage和EMC Elastic cloud Storage)集成的分布式shuffle索引的实现。实验结果证实了分布式shuffle索引提供的保护保证及其有限的性能开销,证明了其在云场景中的实际适用性。
{"title":"Distributed Shuffle Index in the Cloud: Implementation and Evaluation","authors":"Enrico Bacis, S. Vimercati, S. Foresti, S. Paraboschi, Marco Rosa, P. Samarati","doi":"10.1109/CSCloud.2017.25","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.25","url":null,"abstract":"The distributed shuffle index strengthens the guarantees of access confidentiality provided by the shuffle index through the distribution of data among three cloud providers. In this paper, we analyze architectural and design issues and describe an implementation of the distributed shuffle index integrated with different cloud providers (i.e., Amazon S3, OpenStack Swift, Google Cloud Storage, and EMC Elastic Cloud Storage). The experimental results obtained with our implementation confirm the protection guarantees provided by the distributed shuffle index and its limited performance overhead, demonstrating its practical applicability in cloud scenarios.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125155720","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Security Threats and Challenges in Cloud Computing 云计算中的安全威胁与挑战
Abdulaziz Alshammari, Sulaiman Alhaidari, Ali I. Alharbi, M. Zohdy
Cloud Computing has emerged as a new paradigm of computing that builds on the foundations of Distributed Computing, Grid Computing, and Virtualization. Cloud computing is Internet-accessible business model with flexible resource allocation on demand, and computing on a pay-per-use as utilities. Cloud computing has grown to provide a promising business concept for computing infrastructure, where concerns are beginning to grow about how safe an environment is. Security is one of the major issues in the cloud-computing environment. In this paper we investigate some prime security attacks and possible solutions for clouds: XML Signature Wrapping attacks, Browser Security, and Vendor Lock-in.
云计算已经成为一种新的计算范式,它建立在分布式计算、网格计算和虚拟化的基础之上。云计算是一种互联网可访问的商业模式,具有灵活的按需资源分配和按使用付费的计算方式。云计算已经发展为计算基础设施提供了一个很有前途的业务概念,在计算基础设施中,人们开始越来越关注环境的安全性。安全性是云计算环境中的主要问题之一。在本文中,我们研究了一些主要的云安全攻击和可能的解决方案:XML签名包装攻击、浏览器安全性和供应商锁定。
{"title":"Security Threats and Challenges in Cloud Computing","authors":"Abdulaziz Alshammari, Sulaiman Alhaidari, Ali I. Alharbi, M. Zohdy","doi":"10.1109/CSCloud.2017.59","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.59","url":null,"abstract":"Cloud Computing has emerged as a new paradigm of computing that builds on the foundations of Distributed Computing, Grid Computing, and Virtualization. Cloud computing is Internet-accessible business model with flexible resource allocation on demand, and computing on a pay-per-use as utilities. Cloud computing has grown to provide a promising business concept for computing infrastructure, where concerns are beginning to grow about how safe an environment is. Security is one of the major issues in the cloud-computing environment. In this paper we investigate some prime security attacks and possible solutions for clouds: XML Signature Wrapping attacks, Browser Security, and Vendor Lock-in.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"84 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130944632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 26
A Framework for the Information Classification in ISO 27005 Standard ISO 27005标准中的信息分类框架
V. Agrawal
Information Security Risk Management (ISRM) process involves several activities to conduct a risk management (RM) task in an organization. ISRM activities require access to various information related to the organization. An organization often needs to share information related to an ISRM process with the stakeholders involved in the activity. Therefore, it is important to manage the information which is critical to the operations of the organization. The presence of an information classification scheme can enable the proper handling of the information involved in the RM task. We selected ISO/IEC27005:2011 risk management standard to assess various information generated during the process of applying this standard in an organization. The purpose of this study is to propose a framework to show various information objects involved in ISO27005 risk management standard and classify the information based on the guideline provided by UNINETT scheme. A case scenario of a health clinic is developed to identify ISRM related information objects using the proposed framework and classify the information using UNINETT scheme.
信息安全风险管理(ISRM)过程包括在组织中执行风险管理(RM)任务的几个活动。ISRM活动需要访问与组织相关的各种信息。组织经常需要与参与活动的涉众共享与ISRM过程相关的信息。因此,管理对组织运作至关重要的信息是很重要的。信息分类方案的存在可以支持正确处理RM任务中涉及的信息。我们选择ISO/IEC27005:2011风险管理标准来评估组织在应用该标准过程中产生的各种信息。本研究的目的是提出一个框架来显示ISO27005风险管理标准中涉及的各种信息对象,并根据uninet方案提供的指南对信息进行分类。开发了一个保健诊所的案例场景,以便使用提议的框架识别ISRM相关的信息对象,并使用uninet方案对信息进行分类。
{"title":"A Framework for the Information Classification in ISO 27005 Standard","authors":"V. Agrawal","doi":"10.1109/CSCloud.2017.13","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.13","url":null,"abstract":"Information Security Risk Management (ISRM) process involves several activities to conduct a risk management (RM) task in an organization. ISRM activities require access to various information related to the organization. An organization often needs to share information related to an ISRM process with the stakeholders involved in the activity. Therefore, it is important to manage the information which is critical to the operations of the organization. The presence of an information classification scheme can enable the proper handling of the information involved in the RM task. We selected ISO/IEC27005:2011 risk management standard to assess various information generated during the process of applying this standard in an organization. The purpose of this study is to propose a framework to show various information objects involved in ISO27005 risk management standard and classify the information based on the guideline provided by UNINETT scheme. A case scenario of a health clinic is developed to identify ISRM related information objects using the proposed framework and classify the information using UNINETT scheme.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"37 2","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120816585","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 17
Evaluation of Combining Bootstrap with Multiple Imputation Using R on Knights Landing Platform 基于R的骑士登陆平台自举与多重插值相结合的评价
Chuan Zhou, Yuxiang Gao, Waylon Howard
Cloud computing and big data technologies are converging to offer a cost-effective delivery model for cloud-based big data analytics. Though impacts of size and scaling of big data on cloud have been extensively studied, the effects of complexity of underlying analytic methods on cloud performance have received less attention. This paper will develop and evaluate a computationally intensive statistical methodology to perform inference in the presence of both non-Gaussian data and missing data. Two well-established statistical approaches, bootstrap and multiple imputations (MI), will be combined to form the methodology. Bootstrap is a computer-based nonparametric resampling procedure that involves randomly selecting data many thousands of times to construct an empirical distribution, which is then used to construct confidence intervals for significance tests. This statistical technique enables scientists who conduct studies on data with known non-normality to obtain higher quality significance tests than is possible with a traditional asymptotic, normal-theory based significance test. However, the bootstrapping procedure only works when no data are missing or the data are missing completely at random (MCAR). Missing data can lead to biased estimates when the MCAR assumption is violated. It is unclear how to best implement a bootstrapping procedure in the presence of missing data. The proposed methods will provide guidelines and procedures that will enable researchers to use the technique in all areas of health, behavior and developmental science in which a study has missing data and cannot rely on parametric inference. Either bootstrapping or MI can be computationally expensive, and combining these two can lead to further computation costs in the cloud. Using carefully constructed simulation examples, we demonstrate that it is feasible to implement the proposed methodology in a high performance Knights Landing platform. However, the computation costs are substantial even with small data size. Further studies are needed to study the effects of optimizing the implementation and its performance with big data.
云计算和大数据技术正在融合,为基于云的大数据分析提供一种经济高效的交付模式。虽然大数据的规模和规模对云的影响已经得到了广泛的研究,但底层分析方法的复杂性对云性能的影响却很少受到关注。本文将开发和评估一种计算密集的统计方法,以在非高斯数据和缺失数据的存在下执行推理。两种完善的统计方法,bootstrap和多重imputation (MI),将结合起来形成方法论。Bootstrap是一种基于计算机的非参数重采样过程,它涉及随机选择数据数千次以构建经验分布,然后用于构建显著性检验的置信区间。这种统计技术使科学家能够对具有已知非正态性的数据进行研究,从而获得比传统的渐进的、基于正态理论的显著性检验更高质量的显著性检验。然而,引导过程只有在没有数据丢失或数据完全随机丢失(MCAR)时才能工作。当违反MCAR假设时,数据缺失可能导致估计偏差。在缺少数据的情况下,如何最好地实现引导过程尚不清楚。拟议的方法将提供指导方针和程序,使研究人员能够在缺乏数据和不能依靠参数推理的所有健康、行为和发展科学领域使用该技术。无论是自引导还是人工智能都可能在计算上很昂贵,并且将这两者结合起来可能会导致云中进一步的计算成本。通过精心构建的仿真示例,我们证明了在高性能骑士登陆平台上实现所提出的方法是可行的。然而,即使数据量很小,计算成本也很大。利用大数据优化实施方案及其性能的效果有待进一步研究。
{"title":"Evaluation of Combining Bootstrap with Multiple Imputation Using R on Knights Landing Platform","authors":"Chuan Zhou, Yuxiang Gao, Waylon Howard","doi":"10.1109/CSCLOUD.2017.55","DOIUrl":"https://doi.org/10.1109/CSCLOUD.2017.55","url":null,"abstract":"Cloud computing and big data technologies are converging to offer a cost-effective delivery model for cloud-based big data analytics. Though impacts of size and scaling of big data on cloud have been extensively studied, the effects of complexity of underlying analytic methods on cloud performance have received less attention. This paper will develop and evaluate a computationally intensive statistical methodology to perform inference in the presence of both non-Gaussian data and missing data. Two well-established statistical approaches, bootstrap and multiple imputations (MI), will be combined to form the methodology. Bootstrap is a computer-based nonparametric resampling procedure that involves randomly selecting data many thousands of times to construct an empirical distribution, which is then used to construct confidence intervals for significance tests. This statistical technique enables scientists who conduct studies on data with known non-normality to obtain higher quality significance tests than is possible with a traditional asymptotic, normal-theory based significance test. However, the bootstrapping procedure only works when no data are missing or the data are missing completely at random (MCAR). Missing data can lead to biased estimates when the MCAR assumption is violated. It is unclear how to best implement a bootstrapping procedure in the presence of missing data. The proposed methods will provide guidelines and procedures that will enable researchers to use the technique in all areas of health, behavior and developmental science in which a study has missing data and cannot rely on parametric inference. Either bootstrapping or MI can be computationally expensive, and combining these two can lead to further computation costs in the cloud. Using carefully constructed simulation examples, we demonstrate that it is feasible to implement the proposed methodology in a high performance Knights Landing platform. However, the computation costs are substantial even with small data size. Further studies are needed to study the effects of optimizing the implementation and its performance with big data.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126104874","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Performance Study of Ceph Storage with Intel Cache Acceleration Software: Decoupling Hadoop MapReduce and HDFS over Ceph Storage 基于Intel缓存加速软件的Ceph存储性能研究:在Ceph存储上解耦Hadoop MapReduce和HDFS
V. Shankar, Roscoe Lin
Storage demands in the data centers are growing dramatically for most internet and cloud service providers today. More and more service providers are adopting Software-Defined Storage (SDS) instead of traditional fiber channel based storage appliances due to the lead time, expense, and flexibility. However, data centers are held back by storage I/O that cannot keep up with ever-increasing demand, preventing systems from reaching their full performance potential. Intel Cache Acceleration Software (Intel CAS), combined with highperformance Solid State Drives (SSDs), increases data center performance via intelligent caching rather than extreme spending. This case study shows the decoupling of compute and storage in the Apache Hadoop cluster so the compute and storage can be expanded independently. While decoupling Hadoop HDFS storage from local hard drives to external Ceph storage, the study demonstrates how the Intel Cache Acceleration Software helps the increase of the performance under the decoupled architecture by several benchmarking tasks.
如今,对于大多数互联网和云服务提供商来说,数据中心的存储需求正在急剧增长。由于交货时间、费用和灵活性的原因,越来越多的服务提供商正在采用软件定义存储(SDS),而不是传统的基于光纤通道的存储设备。然而,由于存储I/O无法满足不断增长的需求,数据中心受到阻碍,导致系统无法充分发挥其性能潜力。英特尔缓存加速软件(英特尔CAS)与高性能固态硬盘(ssd)相结合,通过智能缓存提高数据中心的性能,而不是极端的支出。这个案例研究展示了Apache Hadoop集群中计算和存储的解耦,这样计算和存储就可以独立扩展。当将Hadoop HDFS存储从本地硬盘驱动器解耦到外部Ceph存储时,该研究通过几个基准测试任务演示了英特尔缓存加速软件如何帮助在解耦架构下提高性能。
{"title":"Performance Study of Ceph Storage with Intel Cache Acceleration Software: Decoupling Hadoop MapReduce and HDFS over Ceph Storage","authors":"V. Shankar, Roscoe Lin","doi":"10.1109/CSCloud.2017.40","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.40","url":null,"abstract":"Storage demands in the data centers are growing dramatically for most internet and cloud service providers today. More and more service providers are adopting Software-Defined Storage (SDS) instead of traditional fiber channel based storage appliances due to the lead time, expense, and flexibility. However, data centers are held back by storage I/O that cannot keep up with ever-increasing demand, preventing systems from reaching their full performance potential. Intel Cache Acceleration Software (Intel CAS), combined with highperformance Solid State Drives (SSDs), increases data center performance via intelligent caching rather than extreme spending. This case study shows the decoupling of compute and storage in the Apache Hadoop cluster so the compute and storage can be expanded independently. While decoupling Hadoop HDFS storage from local hard drives to external Ceph storage, the study demonstrates how the Intel Cache Acceleration Software helps the increase of the performance under the decoupled architecture by several benchmarking tasks.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125194536","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
Customized HPC Cluster Software Stack on QCT Developer Cloud 在QCT开发人员云上定制HPC集群软件堆栈
Stephen Chang, A. Pan
OpenHPC is a collaborative project conducted by Linux Foundation to lower barriers to deployment, management, and use of modern HPC system with reference collection of open-source HPC software components and best practices. Quanta Cloud Technology (QCT) customized HPC cluster software stack including system provisioning, core HPC services, development tools, and optimized applications and libraries, which are distributed as pre-built and validated binaries and are meant to seamlessly layer on top of popular Linux distributions with the integration conventions defined by OpenHPC project. The architecture of QCT HPC Cluster Software Stack is intentionally modular to allow end users to pick and choose from the provided components, as well as to foster a community of open contribution. This paper presents an overview of the underlying customized vision, system architecture, software components and run tests on QCT Developer Cloud.
OpenHPC是Linux基金会开展的一个协作项目,旨在通过参考收集开源HPC软件组件和最佳实践,降低部署、管理和使用现代HPC系统的障碍。广达云技术(QCT)定制了HPC集群软件堆栈,包括系统配置、核心HPC服务、开发工具以及优化的应用程序和库,这些软件以预构建和验证的二进制文件的形式分发,旨在通过OpenHPC项目定义的集成约定无缝地覆盖在流行的Linux发行版之上。QCT高性能计算集群软件栈的体系结构是模块化的,允许最终用户从提供的组件中挑选和选择,并培养一个开放贡献的社区。本文概述了QCT开发人员云上的底层定制视图、系统架构、软件组件和运行测试。
{"title":"Customized HPC Cluster Software Stack on QCT Developer Cloud","authors":"Stephen Chang, A. Pan","doi":"10.1109/CSCloud.2017.56","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.56","url":null,"abstract":"OpenHPC is a collaborative project conducted by Linux Foundation to lower barriers to deployment, management, and use of modern HPC system with reference collection of open-source HPC software components and best practices. Quanta Cloud Technology (QCT) customized HPC cluster software stack including system provisioning, core HPC services, development tools, and optimized applications and libraries, which are distributed as pre-built and validated binaries and are meant to seamlessly layer on top of popular Linux distributions with the integration conventions defined by OpenHPC project. The architecture of QCT HPC Cluster Software Stack is intentionally modular to allow end users to pick and choose from the provided components, as well as to foster a community of open contribution. This paper presents an overview of the underlying customized vision, system architecture, software components and run tests on QCT Developer Cloud.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"72 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126259632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Brain-Based Computer Interfaces in Virtual Reality 虚拟现实中基于大脑的计算机接口
Sukun Li, A. Leider, Meikang Qiu, Keke Gai, Meiqin Liu
Virtual Reality (VR) research is accelerating the development of inexpensive real-time Brain Computer Interface (BCI). Hardware improvements that increase the capability of Virtual Reality displays and Brain Computer wearable sensors have made possible several new software frameworks for developers to use and create applications combining BCI and VR. It also enables multiple sensory pathways for communications with a larger sized data to users' brains. The intersections of these two research paths are accelerating both fields and will drive the needs for an energy-aware infrastructure to support the wider local bandwidth demands in the mobile cloud. In this paper, we complete a survey on BCI in VR from various perspectives, including Electroencephalogram (EEG)-based BCI models, machine learning, and current active platforms. Based on our investigations, the main findings of this survey highlights three major development trends of BCI, which are entertainment, VR, and cloud computing.
虚拟现实(VR)的研究正在加速廉价实时脑机接口(BCI)的发展。硬件的改进提高了虚拟现实显示器和脑机可穿戴传感器的能力,使开发人员可以使用几个新的软件框架,并创建结合脑机接口和虚拟现实的应用程序。它还可以实现多种感官通路,将更大的数据传输到用户的大脑。这两种研究路径的交叉正在加速这两个领域的发展,并将推动对能源感知基础设施的需求,以支持移动云中更广泛的本地带宽需求。本文从基于脑电图(EEG)的脑机接口模型、机器学习和当前活跃平台等多个角度对VR中的脑机接口进行了研究。根据我们的调查,本次调查的主要发现突出了BCI的三大发展趋势,即娱乐、VR和云计算。
{"title":"Brain-Based Computer Interfaces in Virtual Reality","authors":"Sukun Li, A. Leider, Meikang Qiu, Keke Gai, Meiqin Liu","doi":"10.1109/CSCloud.2017.51","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.51","url":null,"abstract":"Virtual Reality (VR) research is accelerating the development of inexpensive real-time Brain Computer Interface (BCI). Hardware improvements that increase the capability of Virtual Reality displays and Brain Computer wearable sensors have made possible several new software frameworks for developers to use and create applications combining BCI and VR. It also enables multiple sensory pathways for communications with a larger sized data to users' brains. The intersections of these two research paths are accelerating both fields and will drive the needs for an energy-aware infrastructure to support the wider local bandwidth demands in the mobile cloud. In this paper, we complete a survey on BCI in VR from various perspectives, including Electroencephalogram (EEG)-based BCI models, machine learning, and current active platforms. Based on our investigations, the main findings of this survey highlights three major development trends of BCI, which are entertainment, VR, and cloud computing.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"213 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134637256","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 15
Finding the Best Box-Cox Transformation in Big Data with Meta-Model Learning: A Case Study on QCT Developer Cloud 利用元模型学习寻找大数据中最佳的Box-Cox转换:以QCT开发人员云为例
Yuxiang Gao, Tonglin Zhang, B. Yang
Finding the best model to reveal potential relationships of a given set of data is not an easy job and often requires many iterations of trial and errors for model sections, feature selections and parameters tuning. This problem is greatly complicated in the big data era where the I/O bottlenecks significantly slowed down the time needed to finding the best model. In this article, we examine the case of Box-Cox transformation when assumptions of a regression model are violated. Specifically, we construct and compute a set of summary statistics and transformed the maximum likelihood computation into a per-role operational fashion. The innovative algorithms reduced the big data machine learning problem into a stream based small data learning problem. Once the Box-Cox information array is obtained, the optimal power transformation as well as the corresponding estimates of model parameters can be quickly computed. To evaluate the performance, we implemented the proposed Box-Cox algorithms on QCT developer cloud. Our results showed that by leveraging both the algorithms and the QCT cloud technology, find the fittest model from 101 potential parameters is much faster than the conventional approach.
找到最好的模型来揭示给定数据集的潜在关系并不是一件容易的工作,通常需要对模型部分、特征选择和参数调整进行多次反复试验和错误。在大数据时代,这个问题变得非常复杂,因为I/O瓶颈大大降低了寻找最佳模型所需的时间。在本文中,我们研究了当回归模型的假设被违反时,Box-Cox变换的情况。具体来说,我们构建并计算一组汇总统计数据,并将最大似然计算转换为每个角色的操作方式。创新算法将大数据机器学习问题简化为基于流的小数据学习问题。一旦得到Box-Cox信息阵列,就可以快速计算出最优功率变换以及相应的模型参数估计。为了评估性能,我们在QCT开发者云上实现了所提出的Box-Cox算法。我们的研究结果表明,通过利用算法和QCT云技术,从101个潜在参数中找到最适合的模型比传统方法快得多。
{"title":"Finding the Best Box-Cox Transformation in Big Data with Meta-Model Learning: A Case Study on QCT Developer Cloud","authors":"Yuxiang Gao, Tonglin Zhang, B. Yang","doi":"10.1109/CSCloud.2017.53","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.53","url":null,"abstract":"Finding the best model to reveal potential relationships of a given set of data is not an easy job and often requires many iterations of trial and errors for model sections, feature selections and parameters tuning. This problem is greatly complicated in the big data era where the I/O bottlenecks significantly slowed down the time needed to finding the best model. In this article, we examine the case of Box-Cox transformation when assumptions of a regression model are violated. Specifically, we construct and compute a set of summary statistics and transformed the maximum likelihood computation into a per-role operational fashion. The innovative algorithms reduced the big data machine learning problem into a stream based small data learning problem. Once the Box-Cox information array is obtained, the optimal power transformation as well as the corresponding estimates of model parameters can be quickly computed. To evaluate the performance, we implemented the proposed Box-Cox algorithms on QCT developer cloud. Our results showed that by leveraging both the algorithms and the QCT cloud technology, find the fittest model from 101 potential parameters is much faster than the conventional approach.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"100 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123668951","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Vulnerability Assessment for Security in Aviation Cyber-Physical Systems 航空信息物理系统安全脆弱性评估
S. Kumar, Brian Xu
In this paper, we present a vulnerability assessment framework that could be used to assess and prevent cyber threats related to wired and wireless networks and computer systems. We have performed vulnerability assessment tests for aviation systems including data loaders and in order to meet aviation industry requirements for wireless network security. Our contributions include detecting cyber vulnerabilities in these aviation systems by using vulnerability assessment and penetration testing tools such as Metasploit Pro and BackTrack and improving security and safety of aircraft. Based on our test results of cyber vulnerabilities, the corresponding solutions will be developed to fix these vulnerabilities. New vulnerability assessment tests will be conducted again until our solutions are secure and safe to use. Some results of our vulnerability assessment tests against our software-hardware products are presented
在本文中,我们提出了一个漏洞评估框架,可用于评估和预防与有线和无线网络以及计算机系统相关的网络威胁。我们对航空系统进行了脆弱性评估测试,包括数据加载器,以满足航空行业对无线网络安全的要求。我们的贡献包括通过使用漏洞评估和渗透测试工具(如Metasploit Pro和BackTrack)检测这些航空系统中的网络漏洞,并提高飞机的安全性。根据我们对网络漏洞的测试结果,开发相应的解决方案来修复这些漏洞。新的漏洞评估测试将再次进行,直到我们的解决方案是安全和安全的使用。给出了针对我们的软硬件产品进行的一些漏洞评估测试结果
{"title":"Vulnerability Assessment for Security in Aviation Cyber-Physical Systems","authors":"S. Kumar, Brian Xu","doi":"10.1109/CSCloud.2017.17","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.17","url":null,"abstract":"In this paper, we present a vulnerability assessment framework that could be used to assess and prevent cyber threats related to wired and wireless networks and computer systems. We have performed vulnerability assessment tests for aviation systems including data loaders and in order to meet aviation industry requirements for wireless network security. Our contributions include detecting cyber vulnerabilities in these aviation systems by using vulnerability assessment and penetration testing tools such as Metasploit Pro and BackTrack and improving security and safety of aircraft. Based on our test results of cyber vulnerabilities, the corresponding solutions will be developed to fix these vulnerabilities. New vulnerability assessment tests will be conducted again until our solutions are secure and safe to use. Some results of our vulnerability assessment tests against our software-hardware products are presented","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"74 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126472342","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 25
Advanced Fully Homomorphic Encryption Scheme Over Real Numbers 实数上的先进全同态加密方案
Keke Gai, Meikang Qiu, Yujun Li, Xiao-Yang Liu
The broad implementation of cloud computing have led to a dramatically growing in exchanging and using data throughout multiple parties. The main problem restricting the implementation of cloud computing is that users lack controls in cloud systems, from which security and privacy concerns become a major issue for cloud users. Logically, an applicable Fully Homomorphic Encryption (FHE) scheme is an effective solution to protecting data throughout the data usage lifecycle in the cloud system, due to the full control on users' own. However, there is no efficacious FHE scheme developed yet for meeting practical demands by the reason of either unqualified accuracy rate or intolerable latency time. Focus on this issue, we propose an advanced FHE scheme designed for operating real numbers, which is named as Full Homomorphic Encryption over Real Numbers (FHE-RN). Our approach has superb performances in both accuracy and efficiency, which has been proved by our experimental evaluations.
云计算的广泛实施导致了多方交换和使用数据的急剧增长。限制云计算实施的主要问题是用户在云系统中缺乏控制,由此产生的安全和隐私问题成为云用户的主要问题。从逻辑上讲,一个适用的完全同态加密(Fully Homomorphic Encryption, FHE)方案是在云系统的整个数据使用生命周期中保护数据的有效解决方案,因为用户可以完全控制数据。然而,由于精度不合格或延迟时间难以忍受,目前还没有一种有效的FHE方案能够满足实际需求。针对这一问题,我们提出了一种用于实数运算的FHE方案,称为实数全同态加密(FHE- rn)。我们的方法在准确性和效率上都有很好的表现,我们的实验评估证明了这一点。
{"title":"Advanced Fully Homomorphic Encryption Scheme Over Real Numbers","authors":"Keke Gai, Meikang Qiu, Yujun Li, Xiao-Yang Liu","doi":"10.1109/CSCloud.2017.61","DOIUrl":"https://doi.org/10.1109/CSCloud.2017.61","url":null,"abstract":"The broad implementation of cloud computing have led to a dramatically growing in exchanging and using data throughout multiple parties. The main problem restricting the implementation of cloud computing is that users lack controls in cloud systems, from which security and privacy concerns become a major issue for cloud users. Logically, an applicable Fully Homomorphic Encryption (FHE) scheme is an effective solution to protecting data throughout the data usage lifecycle in the cloud system, due to the full control on users' own. However, there is no efficacious FHE scheme developed yet for meeting practical demands by the reason of either unqualified accuracy rate or intolerable latency time. Focus on this issue, we propose an advanced FHE scheme designed for operating real numbers, which is named as Full Homomorphic Encryption over Real Numbers (FHE-RN). Our approach has superb performances in both accuracy and efficiency, which has been proved by our experimental evaluations.","PeriodicalId":436299,"journal":{"name":"2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)","volume":"25 2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125672900","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 31
期刊
2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1