ppxscal/embedding_network huggingface dataset:
Shunting: a hardware/software architecture for flexible, high-performance network intrusion prevention
Authors: Jose M. Gonzalez, Vern Paxson, Nicholas Weaver
Venue: Proceedings of the 14th ACM conference on Computer and communications security (2007)

Stateful, in-depth, inline traffic analysis for intrusion detection and prevention is growing increasingly more difficult as the data rates of modern networks rise. Yet it remains the case that in many environments, much of the traffic comprising a high-volume stream can, after some initial analysis, be qualified as of "likely uninteresting." We present a combined hardware/software architecture, Shunting, that provides a lightweight mechanism for an intrusion prevention system (IPS) to take advantage of the "heavy-tailed" nature of network traffic to offload work from software to hardware. The primary innovation of Shunting is the introduction of a simple in-line hardware element that caches rules for IP addresses and connection 5-tuples, as well as fixed rules for IP/TCP flags. The caches, using a highest-priority match, yield a per-packet decision: forward the packet; drop it; or divert it through the IPS. By manipulating cache entries, the IPS can specify what traffic it no longer wishes to examine, including directly blocking malicious sources or cutting through portions of a single flow once the it has had an opportunity to "vet" them, all on a fine-grained basis. We have implemented a prototype Shunt hardware design using the NetFPGA 2 platform, capable of Gigabit Ethernet operation. In addition, we have adapted the Bro intrusion detection system to utilize the Shunt framework to offload less-interesting traffic. We evaluate the effectiveness of the resulting system using traces from three sites, finding that the IDS can use this mechanism to offload 55%-90% of the traffic, as well as gaining intrusion prevention functionality.
Design and tuning of a distributed fuzzy logic controller for flexible-Link manipulators
Authors: Mohamed B. Trabia, Linda Z. Shi
Venue: Journal of Intelligent Fuzzy Systems: Applications in Engineering and Technology (2001)

Fuzzy logic control is already in use due to its computational efficiency and robustness. If a person is sufficiently familiar with a system, intuition can be used as a basis to design a fuzzy controller for it. It may be difficult to accurately describe the behavior for flexible manipulators as their variables are strongly coupled. This paper reviews existing fuzzy logic controllers for flexible manipulators and discusses some of their limitations. It presents an alternative structure using a distributed fuzzy logic controller that controls angle and link vibrations of flexible manipulators independently. While the rules and structure of the proposed distributed controller offers significant advantages compared to those available in literature, its performance still depends on the membership functions for its input and output variables. Wrong choices of these membership functions may lead to sluggish response, excessive vibration, or instability. The paper presents a novel algorithm, Low Dimensionality Tuning Algorithm (LDTA), for tuning a fuzzy controller by changing the membership functions of its variables using nonlinear programming. LDTA uses only two variables to describe each fuzzy variable to avoid dimensionality problems associated with searching for a solution to problems with large number of variables. The paper also discusses possibilities of simplifying the tuned fuzzy controller.
Minimality attack in privacy preserving data publishing
Authors: Raymond Chi-Wing Wong, Ada Wai-Chee Fu, Ke Wang, Jian Pei
Venue: Proceedings of the 33rd international conference on Very large data bases (2007)

Data publishing generates much concern over the protection of individual privacy. Recent studies consider cases where the adversary may possess different kinds of knowledge about the data. In this paper, we show that knowledge of the mechanism or algorithm of anonymization for data publication can also lead to extra information that assists the adversary and jeopardizes individual privacy. In particular, all known mechanisms try to minimize information loss and such an attempt provides a loophole for attacks. We call such an attack a minimality attack. In this paper, we introduce a model called m-confidentiality which deals with minimality attacks, and propose a feasible solution. Our experiments show that minimality attacks are practical concerns on real datasets and that our algorithm can prevent such attacks with very little overhead and information loss.
Message-in-a-bottle: user-friendly and secure key deployment for sensor nodes
Authors: Cynthia Kuo, Mark Luk, Rohit Negi, Adrian Perrig
Venue: Proceedings of the 5th international conference on Embedded networked sensor systems (2007)

Existing protocols for secure key establishment all rely on an unspecified mechanism for initially deploying secrets to sensor nodes. However, no commercially viable and secure mechanism exists for initial setup. Without a guarantee of secure key deployment, the traffic over a sensor network cannot be presumed secure. To address this problem, we present a user-friendly protocol for the secure deployment of cryptographic keys in sensor networks. We propose a collection of five techniques to prevent an attacker from eavesdropping on key deployment. To demonstrate feasibility for real-world use, we implement our protocol on Telos motes and conduct a user study.
A Graphical Method for Checking Complete Monotonicity
Authors: R. O. Fontao
Venue: IEEE Transactions on Computers (1971)

Complete monotonicity is a necessary condition for linear separability of a switching function and it is equivalent to the 2-asummable property. A test for this property using a tabular representation of a switching function and an easily generated test card is given. This method may be used reasonably well up to six variables.
Performance of Storage Management in an Implementation of SNOBOL4
Authors: G. D. Ripley
Venue: IEEE Transactions on Software Engineering (1978)

Results of measuring the performance of the storage management subsystem in an implementation of SNOBOL4 are described. By instrumenting the storage management system, data concerning the size, lifetime, and use of storage blocks were collected. These data, like those obtained from conventional time measurement techniques, were used to locate program inefficiencies. In addition, these measurements uncovered some deficiencies in the storage management system, and provided the basis upon which to judge the heuristics used in the garbage collector.
Optimal decisions for complex systems-Software packages
Authors: Florin Filip, Dumitru Popescu, Mihaela Mateescu
Venue: Mathematics and Computers in Simulation (2008)

This paper proposes the software package SISCON, dedicated to the evaluation of optimal decisions for large-scale systems. SISCON firstly evaluates mathematical models developed from experimental data using LS methods for linear and non-linear systems and after that computes the optimal decision problems, solving the mathematical non-linear programming problems. The large-scale systems have generally a complex structure and global approach computation cannot be carried out. The authors present a decentralised decision structure having a well-defined distribution of supervisory functions. After decomposition of large-scale problems is carried out, sub problems are solved using standard optimization techniques. SISCON offers opportunities for solving non-linear mathematical programming problems and for evaluating optimal decisions in large-scale systems control.
Study on Stereo Vision-based Cross-country Obstacle Detection Technology for Intelligent Vehicle
Authors: Linhui Li, Rongben Wang, Mingheng Zhang
Venue: Proceedings of the Third International Conference on Natural Computation - Volume 02 (2007)

Cross-country intelligent vehicles always work in complicated environments with varying illuminations. The paper presents a new cross-country obstacle detection technology based on stereo vision system. The original images are preprocessed by Gaussian filter and contrast-limited adaptive histogram equalization (CLAHE) method to weaken the effect of noise, light and contrast. Harris corners are located with sub-pixel accurate. To guarantee the overall system real-time performance, feature-based matching techniques are studied and fundamental matrix is calculated based on random sample consensus (RANSAC). Also restrains are studied to eliminate pseudo matching pairs. Then data interpolation is introduced to build elevation maps. Edge extraction and morphological processing are concerned to accomplish obstacle detection. Experiment results for different conditions are presented in support of the obstacle detection technology.
A Workflow Model with Temporal Logic Constraints and Its Automated Verification
Authors: Yang Yu, Xiaohui Li
Venue: Proceedings of the Sixth International Conference on Grid and Cooperative Computing (2007)

Traditional workflow models are weak in describing the temporal properties and constraints between activities, while some high-level extensions based on time or temporal logic have another problem that the soundness verification of the model requires high academic knowledge. In order to solve these problems, a new workflow model LTL-WF based on WF-net and Linear Temporal Logic is proposed in this paper. Besides introducing the new model, we also bring forward a method for automated verification of LTLWF. The method proposed here provides the verification of workflow model with a convenient environment for model checking.
A tool chain for reverse engineering C++ applications
Authors: Nicholas A. Kraft, Brian A. Malloy, James F. Power
Venue: Science of Computer Programming (2007)

We describe a tool chain that enables experimentation and study of real C++ applications. Our tool chain enables reverse engineering and program analysis by exploiting gcc, and thus accepts any C++ application that can be analysed by the C++ parser and front end of gcc. Our current test suite consists of large, open-source applications with diverse problem domains, including language processing and gaming. Our tool chain is designed using a GXL-based pipe-filter architecture; therefore, the individual applications and libraries that constitute our tool chain each provide a point of access. The preferred point of access is the g4api Application Programming Interface (API), which is located at the end of the chain. g4api provides access to information about the C++ program under study, including information about declarations, such as classes (including template instantiations); namespaces; functions; and variables, statements and some expressions. Access to the information is via either a pointer to the global namespace, or a list interface.
Identification of humoral immune responses in protein microarrays using DNA microarray data analysis techniques
Authors: Suman Sundaresh, Denise L. Doolan, Siddiqua Hirst, Yunxiang Mu, Berkay Unal, D. Huw Davies, Philip L. Felgner, Pierre Baldi
Venue: Bioinformatics (2006)

Motivation: We present a study of antigen expression signals from a newly developed high-throughput protein microarray technique. These signals are a measure of antibody–antigen binding activity and provide a basis for understanding humoral immune responses to various infectious agents and supporting vaccine and diagnostic development. Results: We investigate the characteristics of these expression profiles and show that noise models, normalization, variance estimation and differential expression analysis techniques developed in the context of DNA microarray analysis can be adapted and applied to these protein arrays. Using a high-dimensional dataset containing measurements of expression profiles of antibody reactivity against each protein (295 antigens and 9 controls) in 42 malaria (Plasmodium falciparum) protein arrays derived from 22 donors with various clinical presentations of malaria, we present a methodology for the analysis and identification of significantly expressed antigens targeted by immune responses for individual sera, groups of sera and across stages of infection. We also conduct a short study highlighting the top immunoreactive antigens where we identify three novel high priority antigens for future evaluation. Availability: All software programs (in R) used for the analysis described in this paper are freely available for academic purposes at Contact: pfbaldi@uci.edu
Helping End-User Programmers "Engineer" Software: an Opportunity for Empirical Researchers
Authors: Gregg Rothermel
Venue: Proceedings of the First International Symposium on Empirical Software Engineering and Measurement (2007)

While much of the software that people depend on is written by professional software engineers, increasingly, important applications are being created by non-professional (end-user) programmers. Using tools such as spreadsheet environments and web authoring tools, these programmers are creating software that is being used to support significant activities and inform decisions. Such software needs to work dependably and increase user productivity, but evidence shows that it frequently does not. For example, studies have shown that a large percentage of the spreadsheets created by end-users contain faults, and data suggests that time spent maintaining web macros may actually impede their users' overall efforts.
Faces of pain: automated measurement of spontaneousallfacial expressions of genuine and posed pain
Authors: Gwen C. Littlewort, Marian Stewart Bartlett, Kang Lee
Venue: Proceedings of the 9th international conference on Multimodal interfaces (2007)

We present initial results from the application of an automated facial expression recognition system to spontaneous facial expressions of pain. In this study, 26 participants were videotaped under three experimental conditions: baseline, posed pain, and real pain. In the real pain condition, subjects experienced cold pressor pain by submerging their arm in ice water. Our goal was to automatically determine which experimental condition was shown in a 60 second clip from a previously unseen subject. We chose a machine learning approach, previously used successfully to categorize basic emotional facial expressions in posed datasets as well as to detect individual facial actions of the Facial Action Coding System (FACS) (Littlewort et al, 2006; Bartlett et al., 2006). For this study, we trained 20 Action Unit (AU) classifiers on over 5000 images selected from a combination of posed and spontaneous facial expressions. The output of the system was a real valued number indicating the distance to the separating hyperplane for each classifier. Applying this system to the pain video data produced a 20 channel output stream, consisting of one real value for each learned AU, for each frame of the video. This data was passed to a second layer of classifiers to predict the difference between baseline and pained faces, and the difference between expressions of real pain and fake pain. Naíve human subjects tested on the same videos were at chance for differentiating faked from real pain, obtaining only 52% accuracy. The automated system was successfully able to differentiate faked from real pain. In an analysis of 26 subjects, the system obtained 72% correct for subject independent discrimination of real versus fake pain on a 2-alternative forced choice. Moreover, the most discriminative facial action in the automated system output was AU 4 (brow lower), which all was consistent with findings using human expert FACS codes.
British Telecom 565 Mbit/s lightline system
Authors: R. M. Brooks, G. P. Coombs, R. Rowley, V. W. Stanbrook, A. Stevenson, S. Whitt
Venue: BT Technology Journal (2007)

British Telecom is currently developing a 565 Mbit/s trunk optical fibre system which incorporates both multiplexing and line transmission. The system will operate at 1.3 µm over single-mode fibre with a 30 km repeater spacing. Extensive use is being made of ECL uncommitted logic arrays (ULAs) manufactured at British Telecom Research Laboratories (BTRL) and derived from the reliable ECL 40 process as used in submarine cable system integrated circuits. Details of the system design are presented together with the initial results of a laboratory system built out of commercially available components to establish confidence in the design.
A Generic System Monitoring Technique by Using Similarity Recognition on the Flowing Entity Pattern
Authors: C. S. Tang, C. Y. Chan, K. L. Yung
Venue: Proceedings of the Third International Conference on Natural Computation - Volume 05 (2007)

Normally, Statistic Process Control (SPC) techniques are applied in monitoring production activities in a manufacturing system. With the help of the Computer Integrated Manufacturing (CIM), the efficiency of data transmission has improved. To examine the fluctuations on a control chart, the SPC tools provide a good platform. However, they are often too dedicated to a specific system type as SPC tools usually devote in well-known parameters such as the dimensions of a work piece, the temperature of an operation process, etc. In this paper, an alternative method is proposed. It is about the studying of the physical entities flowing patterns in a system to obtain an overview of a system instead of measuring specific parameters. This generic monitoring technique can potentially be applied not only in manufacturing systems but any system which contains measurable physical element flows.
Special Feature Component Progress: Its Effect on High-Speed Computer Architecture and Machine Organization
Authors: E. Bloch
Venue: Computer (1978)

Anyone concerned with understanding the past, present, and future of high-speed computing must of necessity focus on progress in the components field. He must formulate searching questions about the outlook of that technology and how it affects progress in high-speed computer development.
FCP
Authors: Ricard García-Serna, Lulla Opatowski, Jordi Mestres
Venue: Bioinformatics (2006)

Motivation: Tools and resources for translating the remarkable growth witnessed in recent years in the number of protein structures determined experimentally into actual gain in the functional coverage of the proteome are becoming increasingly necessary. We introduce FCP, a publicly accessible web tool dedicated to analyzing the current state and trends of the population of structures within protein families. FCP offers both graphical and quantitative data on the degree of functional coverage of enzymes and nuclear receptors by existing structures, as well as on the bias observed in the distribution of structures along their respective functional classification schemes. Availability: Contact: jmestres@imim.es
Distributed and local security policies for grid web-based resources
Authors: Serena Pastore
Venue: Proceedings of the 18th International Conference on Database and Expert Systems Applications (2007)

A distributed system such as a grid infrastructure consists of different institutions and organizations that, with the goal of sharing resources with each other, need to establish trust relationships and security policies. Most implemented systems make use of the PKI-compliant Grid Security Infrastructure (GSI) for authentication purposes and use different authorization methods that rely on users' membership in the grid logical domain (the Virtual Organization). However, each grid site hosting a resource provider needs to set its own admission policies for de-centralized management. Focusing on web grid resources, the paper describes security mechanisms acting at global network, VO and target site levels. This papers provides a method based on the Java handlers' technique available for a resource provider at a target grid site to secure its web resources. Moreover, the paper proposes the future use of an integration system between a VO-based system and federated identity-based infrastructure.
Gateway performance for network-controlled WLAN IP mobility
Authors: Moshiur Rahman, Fotios C. Harmantzis
Venue: International Journal of Communication Systems (2007)

&lsquo;Always on&rsquo; broadband-accessed network gateway (GW) control can facilitate inter-WLAN IP mobility, with seamless connectivity. The GW server plays a critical role in the overall WLAN IP (WIP) mobility architecture (IEEE Wireless Communications and Networking Conference, WCNC, Atlanta, GA, 21 March 2004; Int. J. Wireless Inf. Networks 2006; 13(3):173&ndash;192). This paper provides a comparison of WIP with cellular IP (CIP) and mobile IP (MIP), and identifies the main requirements for a broadband-accessed network-based GW that supports WIP mobility. The paper then evaluates GW-contributed handoff message processing delay in the WIP architecture through an analytical system model and OPNET simulation model, and provides a comparison of the GW-contributed handoff message processing delays for non-preemptive vs preemptive queuing schemes. Both analytical and simulation results show that WIP handoff message processing delay at the GW has negligible impact on the overall system delay. Finally, this paper presents the simulation results of the fast routing table lookup and forwarding speed on the GW overall performance, which can assist service providers in the challenging implementation issues that they face. Copyright &copy; 2007 John Wiley & Sons, Ltd.
Workshop Report: Computer Packaging Workshop Explores Impact of LSI
Authors: J. W. Balde
Venue: Computer (1980)

A greater percentage of total system cost will be in packaging, making the role of the system packaging engineer crucial for ensuring reasonable system cost.
Fusing Asynchronous Feature Streams for On-line Writer Identification
Authors: A. Schlapbach, H. Bunke
Venue: Proceedings of the Ninth International Conference on Document Analysis and Recognition - Volume 01 (2007)

In this paper, we present a new approach to improving the performance of a writer identification system by fus- ing asynchronous feature streams. Different feature streams are extracted from on-line handwritten text acquired from a whiteboard. The feature streams are used to train a text and language independent writer identification system based on Gaussian Mixture Models (GMMs). From a stroke con- sisting of n points, n point-based feature vectors and one stroke-based feature vector are extracted. The resulting feature streams thus have an unequal number of feature vectors. We evaluate different methods to directly fuse the feature streams and show that, by means of feature fusion, we can improve the performance of the writer identification system on a data set produced by 200 different writers.
A Novel Digital Content Protection System Based on Iris Biometric
Authors: Meihua Wang, Kefeng Fan, Qingqi Pei, Shuguang Wang, Shan Cao
Venue: Proceedings of the Fourth International Conference on Fuzzy Systems and Knowledge Discovery - Volume 04 (2007)

The increased popularity of the digital transactions has required more efficient protection schemes such as digital rights management system (DRM). This paper proposes a model that contains DRM, and identification methods using high security iris biometric system as an additional security layer for access to restricted data, which is characterized by its immutability and individuality. This model is designed to distinguish clients from unauthorized users, so that only valid users can have access to the digital contents. To sort out unauthorized users, iris recognition mechanism is adopted, rather than conventional passwords. Analysis shows the proposed method has the reliable feature, which will allow a better digital environment for contents design, distribution and implementation.