title: Key factors in building a Secure Web Gateway

authors: Yeh, Jeffrey

subjects: Web proxy security

abstract: A Secure Web Gateway, according to Gartner’s definition, is a solution that provides URL filtering, malicious code detection and blocking, and application controls for cloud applications to filter out objectionable software/malware in outbound Internet traffic generated by end-user devices and has the capability to enforce corporate policy and regulatory compliance [1]. Its predecessor – Web proxy - has been around since the beginning of the Web and evolved to meet the needs of a fast changing Web ecosystem. Traditionally, Web proxy servers have been used to fulfil the following requirements: 1) Enable several machines to share a single Internet connection; 2) Improve Web performance and save bandwidth by caching repeatedly-accessed content locally; 3) Provide a basic URL filtering capability. However, these capabilities are no longer sufficient to meet the requirements of today’s Web ecosystem. Firstly, with the development of Network Address Translation in the late 1990s, the needs to use proxy servers to share an Internet connection has been superseded. Secondly, caching does not improve performance much for mobile clients, and mobile traffic volume has already exceeded that of desktop’s [2, 3]. Thirdly, a Web content filter based on using a URL database cannot keep up with the growth of Internet traffic [4]. In addition, it has become difficult to detect and stop threats such as Botnet and Advanced Persistent Threat [5] because of: 1) The polymorphic characteristics of the threats; 2) The increasing use of encryption on the Web; 3) The increase in threats targeting end-users - the weakest link; 4) The increasing need to use a variety of end-user devices from multiple locations such as the BRING YOUR OWN DEVICE (BYOD) policy requirement. Hence, there is an imminent need to evolve from the current Web proxy solution to a Secure Web Gateway solution. This research provides a categorisation of the key factors in building a Secure Web Gateway, proposes a reference design and architecture, a practical implementation for a home vDSL connection and finally, a testing framework that can be used to evaluate the effectiveness of a Secure Web Gateway deployment.

text: Key factors in building a Secure Web Gateway A Secure Web Gateway, according to Gartner’s definition, is a solution that provides URL filtering, malicious code detection and blocking, and application controls for cloud applications to filter out objectionable software/malware in outbound Internet traffic generated by end-user devices and has the capability to enforce corporate policy and regulatory compliance [1]. Its predecessor – Web proxy - has been around since the beginning of the Web and evolved to meet the needs of a fast changing Web ecosystem. Traditionally, Web proxy servers have been used to fulfil the following requirements: 1) Enable several machines to share a single Internet connection; 2) Improve Web performance and save bandwidth by caching repeatedly-accessed content locally; 3) Provide a basic URL filtering capability. However, these capabilities are no longer sufficient to meet the requirements of today’s Web ecosystem. Firstly, with the development of Network Address Translation in the late 1990s, the needs to use proxy servers to share an Internet connection has been superseded. Secondly, caching does not improve performance much for mobile clients, and mobile traffic volume has already exceeded that of desktop’s [2, 3]. Thirdly, a Web content filter based on using a URL database cannot keep up with the growth of Internet traffic [4]. In addition, it has become difficult to detect and stop threats such as Botnet and Advanced Persistent Threat [5] because of: 1) The polymorphic characteristics of the threats; 2) The increasing use of encryption on the Web; 3) The increase in threats targeting end-users - the weakest link; 4) The increasing need to use a variety of end-user devices from multiple locations such as the BRING YOUR OWN DEVICE (BYOD) policy requirement. Hence, there is an imminent need to evolve from the current Web proxy solution to a Secure Web Gateway solution. This research provides a categorisation of the key factors in building a Secure Web Gateway, proposes a reference design and architecture, a practical implementation for a home vDSL connection and finally, a testing framework that can be used to evaluate the effectiveness of a Secure Web Gateway deployment.

year: 2017

title: Improving the Quality of Real Time Media Applications through Sending the Best Packet Next

authors: McDonald, Ian

abstract: Real time media applications such as video conferencing are increasing in usage. These bandwidth intensive applications put high demands on a network and often the quality experienced by the user is sub-optimal.

In a traditional network stack, data from an application is transmitted in the order that it is received. This thesis proposes a scheme called "Send the Best Packet Next (SBPN)" where the most important data is transmitted first and data that will not reach the receiver before an expiry time is not transmitted. In SBPN the packet priority and expiry time are added to a packet and used in conjunction with the Round Trip Time (RTT) to determine whether packets are sent, and in which order that they are sent. For example, it has been shown that audio is more important to users than video in video conferencing. SBPN could be considered to be Quality of Service (QoS) that is within an application data stream. This is in comparison to network routers that provide QoS to whole streams such as Voice over IP (VoIP), but do not differentiate between data items within the stream or which data gets transmitted by the end nodes. Implementation of SBPN can be done on the server only, so that much of the benefit for one way transmission (e.g. live television) can be gained without requiring existing clients to be changed.

SBPN was implemented in a Linux kernel on top of Datagram Congestion Control Protocol (DCCP) and compared to existing solutions. This showed real improvement in the measured quality of audio with a maximum improvement of 15% in selected test scenarios.

text: Improving the Quality of Real Time Media Applications through Sending the Best Packet Next Real time media applications such as video conferencing are increasing in usage. These bandwidth intensive applications put high demands on a network and often the quality experienced by the user is sub-optimal.

In a traditional network stack, data from an application is transmitted in the order that it is received. This thesis proposes a scheme called "Send the Best Packet Next (SBPN)" where the most important data is transmitted first and data that will not reach the receiver before an expiry time is not transmitted. In SBPN the packet priority and expiry time are added to a packet and used in conjunction with the Round Trip Time (RTT) to determine whether packets are sent, and in which order that they are sent. For example, it has been shown that audio is more important to users than video in video conferencing. SBPN could be considered to be Quality of Service (QoS) that is within an application data stream. This is in comparison to network routers that provide QoS to whole streams such as Voice over IP (VoIP), but do not differentiate between data items within the stream or which data gets transmitted by the end nodes. Implementation of SBPN can be done on the server only, so that much of the benefit for one way transmission (e.g. live television) can be gained without requiring existing clients to be changed.

SBPN was implemented in a Linux kernel on top of Datagram Congestion Control Protocol (DCCP) and compared to existing solutions. This showed real improvement in the measured quality of audio with a maximum improvement of 15% in selected test scenarios.

year: 2013

title: Talking About Race and Positionality in Psychology: Asians as Tangata Tiriti

authors: Tan, Kyle K. H.

subjects: tangata whenua

abstract: The article discusses the dominance of Western, educated, industrialized, rich, and democratic (WEIRD) perspectives in the field of psychology in Aotearoa New Zealand. This has resulted in a racial hierarchy of knowledge, with Indigenous and culturally diverse epistemologies marginalized. The lack of diversity in the curriculum and the limited representation of non-Pākehā (non-New Zealand European) psychologists in the country have led to calls for a more inclusive environment.

The first perspective proposed is to understand Asians as a racialized group with diverse experiences. Asians in Aotearoa come from various backgrounds and face different degrees of racism and acculturation. The notion of 'Asian' may be used to marginalize the interests of Māori, perpetuating institutional racism. The concept of 'Asianisations' describes different forms of racial marginalization experienced by Asians in the country.

The second perspective emphasizes the positionality of Asians as tangata Tiriti (people of the Treaty). Te Tiriti o Waitangi, the Treaty between the British Crown and Māori chiefs, is seen as granting tangata Tiriti equal rights and privileges alongside Pākehā and Māori. As tangata Tiriti, Asians have a responsibility to uphold Tiriti principles, which include partnership, active protection, equity, and options to address Māori inequities. Asian psychologists can engage in culturally safe care for Māori clients and collaborate with and empower Māori leadership in research.

The article highlights the need for Asian psychologists to reflect on their positionality, power structures, and biases within the discipline and society. It encourages them to challenge the dominance of WEIRD psychology and work towards decolonizing the field. By doing so, they can contribute to the flourishing of Kaupapa Māori psychology and develop culturally informed practices that draw on the richness of Asian cultures.

text: Talking About Race and Positionality in Psychology: Asians as Tangata Tiriti The article discusses the dominance of Western, educated, industrialized, rich, and democratic (WEIRD) perspectives in the field of psychology in Aotearoa New Zealand. This has resulted in a racial hierarchy of knowledge, with Indigenous and culturally diverse epistemologies marginalized. The lack of diversity in the curriculum and the limited representation of non-Pākehā (non-New Zealand European) psychologists in the country have led to calls for a more inclusive environment.

The first perspective proposed is to understand Asians as a racialized group with diverse experiences. Asians in Aotearoa come from various backgrounds and face different degrees of racism and acculturation. The notion of 'Asian' may be used to marginalize the interests of Māori, perpetuating institutional racism. The concept of 'Asianisations' describes different forms of racial marginalization experienced by Asians in the country.

The second perspective emphasizes the positionality of Asians as tangata Tiriti (people of the Treaty). Te Tiriti o Waitangi, the Treaty between the British Crown and Māori chiefs, is seen as granting tangata Tiriti equal rights and privileges alongside Pākehā and Māori. As tangata Tiriti, Asians have a responsibility to uphold Tiriti principles, which include partnership, active protection, equity, and options to address Māori inequities. Asian psychologists can engage in culturally safe care for Māori clients and collaborate with and empower Māori leadership in research.

The article highlights the need for Asian psychologists to reflect on their positionality, power structures, and biases within the discipline and society. It encourages them to challenge the dominance of WEIRD psychology and work towards decolonizing the field. By doing so, they can contribute to the flourishing of Kaupapa Māori psychology and develop culturally informed practices that draw on the richness of Asian cultures.

year: 2023-07-24