First International Conference on Availability, Reliability and Security (ARES'06)最新文献_第5页

Representing security and audit rules for data warehouses at the logical level by using the common warehouse metamodel 通过使用公共仓库元模型在逻辑级别表示数据仓库的安全和审计规则

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.110

E. Soler, R. Villarroel, J. Trujillo, E. Fernández-Medina, M. Piattini

{"title":"Representing security and audit rules for data warehouses at the logical level by using the common warehouse metamodel","authors":"E. Soler, R. Villarroel, J. Trujillo, E. Fernández-Medina, M. Piattini","doi":"10.1109/ARES.2006.110","DOIUrl":"https://doi.org/10.1109/ARES.2006.110","url":null,"abstract":"Data warehouses (DWs) contained high sensitive data, and therefore, it is essential to specify security measures from the early stages of the DW design and enforce them. Access control models for transactional (relational) databases, based on tables, columns and rows, are not appropriate for DWs. Instead, security and audit rules defined for DWs must be specified based on the multidimensional (MD) modeling used to design data warehouses. So far, very few approaches represent security measures in the conceptual modeling of data warehouses form the early stages of a DW project. Moreover these security measures cannot be directly represented in the relational model for data warehouses, thereby having a semantic gap between the conceptual and logical schemas. In this paper, we present an extension of the relational model to consider security and audit measures represented in the conceptual modeling. To accomplish this, we based on the relational package of the common warehouse metamodel (CWM) and extend it to properly represent all security and audit rules defined in the conceptual modelling of data warehouses. Finally, to show the benefit of our approach, we apply our proposal to a health care case study.","PeriodicalId":106780,"journal":{"name":"First International Conference on Availability, Reliability and Security (ARES'06)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128478661","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 22

Evaluating certification protocols in the partial database state machine 评估部分数据库状态机中的认证协议

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.60

A. Sousa, A. Correia, F. Moura, J. Pereira, R. Oliveira

{"title":"Evaluating certification protocols in the partial database state machine","authors":"A. Sousa, A. Correia, F. Moura, J. Pereira, R. Oliveira","doi":"10.1109/ARES.2006.60","DOIUrl":"https://doi.org/10.1109/ARES.2006.60","url":null,"abstract":"Partial replication is an alluring technique to ensure the reliability of very large and geographically distributed databases while, at the same time, offering good performance. By correctly exploiting access locality most transactions become confined to a small subset of the database replicas thus reducing processing, storage access and communication overhead associated with replication. The advantages of partial replication have however to be weighted against the added complexity that is required to manage it. In fact, if the chosen replica configuration prevents the local execution of transactions or if the overhead of consistency protocols offsets the savings of locality, potential gains cannot be realized. These issues are heavily dependent on the application used for evaluation and render simplistic benchmarks useless. In this paper, we present a detailed analysis of partial database state machine (PDBSM) replication by comparing alternative partial replication protocols with full replication. This is done using a realistic scenario based on a detailed network simulator and access patterns from an industry standard database benchmark. The results obtained allow us to identify the best configuration for typical online transaction processing applications.","PeriodicalId":106780,"journal":{"name":"First International Conference on Availability, Reliability and Security (ARES'06)","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129129187","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Security analysis for IP-based Government Emergency Telephony Service 基于ip的政府紧急电话服务的安全性分析

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.124

Feng Cao, S. Malik

引用次数: 1

Diagnosis of complex systems using ant colony decision Petri nets 基于蚁群决策Petri网的复杂系统诊断

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.52

C. Ciufudean, A. Graur, C. Filote, C. Turcu, V. Popa

引用次数: 14

Adding security to a multiagent learning platform 为多智能体学习平台增加安全性

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.24

C. Webber, Maria de Fátima Webber do Prado Lima, Marcos E. Casa, A. Ribeiro

引用次数: 7

Systematic error detection for RFID reliability RFID可靠性的系统错误检测

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.128

Sozo Inoue, H. Yasuura, D. Hagiwara

引用次数: 34

An integral IT continuity framework for undisrupted business operations 一个完整的IT连续性框架，用于不间断的业务操作

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.27

R. Helms, S. V. Oorschot, J. Herweijer, M. Plas

引用次数: 12

Representing levels of abstraction to facilitate the secure multidimensional modeling 表示抽象级别以促进安全的多维建模

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.109

R. Villarroel, E. Soler, E. Fernández-Medina, M. Piattini, J. Trujillo

{"title":"Representing levels of abstraction to facilitate the secure multidimensional modeling","authors":"R. Villarroel, E. Soler, E. Fernández-Medina, M. Piattini, J. Trujillo","doi":"10.1109/ARES.2006.109","DOIUrl":"https://doi.org/10.1109/ARES.2006.109","url":null,"abstract":"In most real world data warehouses (DWs) projects, security aspects are issues that usually rely on DBMS administrators. We argue that the design of security aspects should be considered together with the conceptual modeling of DWs from the early stages of a DW project, and being able to attach user security information to the basic structures of a multidimensional (MD) model (e.g. dimensions, facts, attributes, and so on). In this way, we would be able to generate this information in a semi or automatic way into a target platform and the final DW will better suit user security requirements. In this paper, we will present an extension of the Unified Modeling Language (UML) using a UML profile to represent multidimensional and security aspects of our conceptual modeling. Our approach proposes the use of UML packages in order to group classes together into higher level units creating different levels of abstraction, and therefore, simplifying the final model. In this way, when modeling complex and large DWs systems, the designer is not restricted to use flat UML class diagrams. Finally, we would show an example to illustrate the applicability of our proposal.","PeriodicalId":106780,"journal":{"name":"First International Conference on Availability, Reliability and Security (ARES'06)","volume":"116 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123768008","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Application of the digraph method in system fault diagnostics 有向图法在系统故障诊断中的应用

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.31

{"title":"Application of the digraph method in system fault diagnostics","authors":"","doi":"10.1109/ARES.2006.31","DOIUrl":"https://doi.org/10.1109/ARES.2006.31","url":null,"abstract":"There is an increasing demand for highly reliable systems in the safety conscious climate of today's world. When a fault does occur there are two desirable outcomes. Firstly, detection is required to discover whether functionality at a pre-determined level can be maintained and secondly, a necessary repair strategy is sought to minimise system disruption. Traditional focus on fault diagnosis has been through a sequential testing procedure or via real time mechanisms. The limitations have incorporated the issue of combining real time diagnosis; enabling fast analysis, with multiple fault causes. These issues are typical of critical situations within current complex system architectures. The diagnostic method suggested in this paper uses the digraph procedure, which represents the propagation of inputs through a system. The procedure involves generating a model; linking nodes referring to system parameters and determining the relationship(s) which connect the nodes. Fault detection occurs by means of tracing through the diagram. The method has been applied to a water tank system during steady state operation. Diagnosis is conducted by comparing readings from sensors in the system with expected readings, given the system mode of operation. The results demonstrate the effective use of this technique for fault diagnosis of the application system.","PeriodicalId":106780,"journal":{"name":"First International Conference on Availability, Reliability and Security (ARES'06)","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121620568","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

A reference model for Authentication and Authorisation Infrastructures respecting privacy and flexibility in b2c eCommerce 关于b2c电子商务中隐私和灵活性的身份验证和授权基础设施的参考模型

First International Conference on Availability, Reliability and Security (ARES'06) Pub Date : 2006-04-20 DOI: 10.1109/ARES.2006.13

Christian Schläger, Thomas Nowey, J. A. Montenegro

{"title":"A reference model for Authentication and Authorisation Infrastructures respecting privacy and flexibility in b2c eCommerce","authors":"Christian Schläger, Thomas Nowey, J. A. Montenegro","doi":"10.1109/ARES.2006.13","DOIUrl":"https://doi.org/10.1109/ARES.2006.13","url":null,"abstract":"Authentication and Authorisation Infrastructures (AAIs) are gaining momentum throughout the Internet. Solutions have been proposed for various scenarios among them academia, grid computing, company networks, and above all eCommerce applications. Products and concepts vary in architecture, security features, target group, and usability containing different strengths and weaknesses. In addition security needs have changed in communication and business processes. Security on the Internet is no longer defined as only security measures for an eCommerce provider against an untrustworthy customer but also vice versa. Consequently, privacy, data canniness, and security are demands in this area. The authors define criteria for an eCommerce provider federation using an AAI with a maximum of privacy and flexibility. The criteria is derived concentrating on b2c eCommerce applications fulfilling the demands. In addition to best practices found, XACML policies and an attribute infrastructure are deployed. Among the evaluated AAIs are Shibboleth, Microsoft Passport, the Liberty Alliance Framework, and PERMIS.","PeriodicalId":106780,"journal":{"name":"First International Conference on Availability, Reliability and Security (ARES'06)","volume":"28 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130646421","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 23