Will Tracz, our esteemed editor and Used-Program salesman, has written an entertaining, non-technical book dealing with the practice (and lack of) of software reuse. Its a collection of essays, mostly rehashed (reused?) and updated from various columns and papers published over the years.. Its a short (a bit over 200 pages) easy reading and enjoyable book (I read most of it in one sitting). Some of the essays discuss what was printed in the past and a discussion of the current status of the points.

Safeware: System Safety and Computers

Network Simulator NS2

Looking for competent reading sources? We have secrets and lies digital security in a networked world to read, not only check out, yet likewise download them and even check out online. Discover this excellent book writtern by by now, merely here, yeah only here. Get the data in the types of txt, zip, kindle, word, ppt, pdf, as well as rar. Once more, never ever miss to check out online and also download this book in our website right here. Click the link.

Secrets and Lies: Digital Security in a Networked World

DAG-based attack and defense modeling: don’t miss the forest for the attack trees

This paper presents the current state of the art on attack and defense modeling approaches that are based on directed acyclic graphs (DAGs). DAGs allow for a hierarchical decomposition of complex scenarios into simple, easily understandable and quantifiable actions. Methods based on threat trees and Bayesian networks are two well-known approaches to security modeling. However there exist more than 30 DAG-based methodologies, each having different features and goals. The objective of this survey is to present a complete overview of graphical attack and defense modeling techniques based on DAGs. This consists of summarizing the existing methodologies, comparing their features and proposing a taxonomy of the described formalisms. This article also supports the selection of an adequate modeling technique depending on user requirements.

DAG-Based Attack and Defense Modeling: Don't Miss the Forest for the Attack Trees

The integration of Software Fault Tree (SFT), which describes intrusions and Coloured Petri Nets (CPNs) that specifies design, is examined for an Intrusion Detection System (IDS). The IDS under development is a collection of mobile agents that detect, classify, and correlate the system and network activities. SFTs, augmented with nodes that describe trust, temporal and contextual relationships, are used to describe intrusions. CPNs for intrusion detection are built using CPN templates created from the augmented SFTs. Hierarchical CPNs are created to detect critical stages of intrusions. The agentbased implementation of the IDS is then constructed from the CPNs. Examples of intrusions and descriptions of the prototype implementation are used to demonstrate how the CPN approach has been used in the development of the IDS. The main contribution of this paper is an approach to systematic specification, design and implementation of an IDS; Innovations include (1) using stages of intrusions to structure the specification and design of the IDS; (2) augmentation of SFT with trust, temporal and contextual nodes to model intrusions; (3) algorithmic construction of CPNs from augmented SFT; and (4) generation of mobile agents from CPNs.

/pdf/software-fault-tree-and-coloured-petri-net-based-wa4m9r8d88.pdf

Software fault tree and coloured Petri net based specification, design and implementation of agent-based intrusion detection systems

Wireless mesh networking has been a cost-effective technology that provides wide-coverage broadband wireless network services. However, security and privacy in this proliferated network environment have not been widely studied. In this work, we propose a cross-layer based anomaly intrusion detection system (IDS) to accommodate the integrated property of routing protocols with link information in wireless mesh networks (WMNs). An IDS software prototype over a wireless mesh network testbed has been implemented and evaluated. By comparing the performance of the cross-layer approach with that of single-layer based intrusion detection, especially an IDS at network layer, we validate the effectiveness of cross-layer based anomaly detection in WMNs.

Cross-Layer Based Anomaly Detection in Wireless Mesh Networks

As Mobile ad-hoc network (MANET) has become a very important technology the security problem, especially, intrusion detection technique research has attracted many people’s effort. MANET is more vulnerable than wired network and suffers intrusion like wired network. This paper investigated some intrusion detection techniques using machine learning and proposed a profile based neighbor monitoring intrusion detection method. Further analysis shows that the features collected by each node are too many for wireless devices with limited capacity. We apply Markov Blanket algorithm [1] to the feature selection of the intrusion detection method. Experimental studies have shown that Markov Blanket algorithm can decrease the number of features dramatically with very similar detection rate.

https://lib.dr.iastate.edu/cgi/viewcontent.cgi?article=1205&context=cs_techreports

Feature Selection in Intrusion Detection System over Mobile Ad-hoc Network

This paper introduces an approach to automatic synthesis of the specification models of routing protocol behavior from the observed flow of the network traffic. In particular, our technique generalizes the monitored sequences of routing messages constructing a high-level abstract view of the protocol. The basis of our method is similar to inductive logic programming technique that derives a sound hypothesis from the individual examples. The preliminary experiments are presented on the example of AODV ad-hoc routing protocol.

/pdf/specification-synthesis-for-monitoring-and-analysis-of-manet-32j2zikgji.pdf

Specification Synthesis for Monitoring and Analysis of MANET Protocols

In this work we proposed a novel heterogeneity-aware group key management framework (HAGK) for wireless mesh networks (WMNs). In our framework a WMN multicast session involves both stationary backbone nodes and mobile client nodes: for backbone nodes which are topologically-stable but may spread over a large area, the distributed threshold-based group key management technique is applied; for client nodes associated with each backbone node which are mobile but confined in a limited area, the logical key hierarchical technique is applied. The results showed that HAGK reduces rekeying delay and storage overhead at end nodes with minimum communication costs. In addition, the framework is resilient to attacks.

Xia Wang

Papers

Software fault tree and coloured Petri net based specification, design and implementation of agent-based intrusion detection systems

Cross-Layer Based Anomaly Detection in Wireless Mesh Networks

Feature Selection in Intrusion Detection System over Mobile Ad-hoc Network

Specification Synthesis for Monitoring and Analysis of MANET Protocols

A heterogeneity-aware framework for group key management in wireless mesh networks