A Flexible Authorization Mechanism for Enterprise Networks Using Smart-Phone Devices

Today, networks contribute signi cantly to everyone's life. The enormous usefulness of networks for various services and data storage motivates adversaries to launch attacks on them. Network Intrusion Detection Systems (NIDSs) are used as security measure inside the organizational networks to identify any intrusions and generate alerts for them. The idea of deploying an NIDS is quite known and has been studied and adopted in both academia and industry. However, most of the NIDS literature have emphasized to detect the attacks that originate externally in a wired network infrastructure. In addition, Wi-Fi and wired networks are treated the same for the NIDSs. The open infrastructure in Wi-Fi network makes it different from the wired network. Several internal attacks that could happen in a Wi-Fi network are not pos-sible in a wired network. The NIDSs developed using traditional approaches may fail to identify these internal attacks.The thesis work attempts to develop a Multi-Level Network Intrusion Detection System (ML-NIDS) for Wi-Fi dominant networks that can detect internal attacks speci c to Wi-Fi networks as well as the generic network attacks that are independent of network infrastructure. In Wi-Fi dominant networks, Wi-Fi devices (stations) are prevalent at the edge of campus and enterprise networks and integrated with the fi xed wired infrastructure at the access. The implementation is proposed for Wi-Fi dominant networks; nevertheless, it aims to work for the wired network as well. We develop the ML-NIDS using an ensemble learning method that combines several weaklearners to create a strong learner.

Wi-Fi is the dominant infrastructure for last-mile internet access both in indoor and outdoor environments. The existing Wi-Fi infrastructure leverages to offer IoT services. Despite the growth and popularity of Wi-Fi, security is a significant concern associated with it. One such issue with the Wi-Fi network is Evil Twin Attack (ETA). In ETA, the adversary creates an Evil Twin AP (EAP), a copy of Legitimate Access Point (LAP), for the user to connect. Once the user connects to EAP, the adversary can perform various attacks. Enterprise networks can solve ETA with the help of certificate-based server authentication using 802.1X and Extensible Authentication Protocol. However, there is no proper solution to detect ETA in Wi-Fi personal networks. Latest Wi-Fi security algorithms, namely Wi-Fi Protected Access 3 (WPA3) and Opportunistic Wireless Encryption (OWE) also vulnerable to ETA. This paper proposes a novel Proof of Existence (PoEx) scheme, bringing network lifetime to Access Point (AP). Wi-Fi client devices will detect and prevent ETA using associated AP lifetime. We apply the proposed PoEx scheme on WPA3 and OWE and show the security improvements. Our experiment results show that lifetime forging is difficult due to an exponential number of computations (2 <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">(N-1)</sup> ) required. The experimental result also shows negligible overhead (less than 2%) on throughput when the PoEx solution is enabled.

Abstract. The traditional data envelopment analysis (DEA) model ignores the cooperative relationship among decision-making units (DMUs), so it is difficult to evaluate the DMUs efficiency reasonably. In this study, we use a cross-efficiency and bootstrap truncated regression (BTR) model to analyze the determining factors of digital mobile e-learning. The empirical results of this research indicate the following results: (1) Importing digital mobile e-learning can really enhance the efficiency of school management. (2) The school size, tablet PC numbers, total equipment expenses associated with tablet PC and school location are important determinants for affecting the efficiency of school management. Owing to the government is full implementation of the new learns model, that is, to be where the students able to experience the authentic joy of new learning model and attract students join. The result of the study suggested that in order to increase the school’s cross-efficiency model efficiency. The first assist the school in upgrading the Wi-Fi technology and network equipment. In general, the school adds to the Wi-Fi technology and network equipment. That would enlarge the school network and as to attract more school will adopt the new learning. It is where the students able to experience the authentic joy of new learning model and attract students join. Thus, the schools will increase school size. However, it should be noted that total equipment expenses associated with tablet PC have the negative influence on school management efficiency due to the increasing costs for furnishing the related internet and network equipment or device to facilitate for teaching and learning among teachers and students by digital mobile e-learning. The results of this research can also be the reference for educational authorities when formulating policies and regulations for promoting digital mobile e-learning in high school in Taiwan. Keywords. Operating efficiency, Digital mobile e-Learning, Data envelopment analysis (DEA), Truncated bootstrapped regression (TBR), Cross efficiency model. JEL. I21, I25, I28.

METHOD OF INFANT FEEDING AS A PREDICTOR OF MATERNAL RESPONSIVENESS By Emily Eiwen Drake R.N., Ph.D. A dissertation submitted in partial fulfillment of the requirements for the degree of Doctor of Philosophy at Virginia Commonwealth University. Virginia Commonwealth University, 2005 Major Director: Sharron S. Humenick, R.N., Ph.D. Professor, Department of Maternal Child Nursing, School of Nursing Infants need to develop effective, secure attachment to their primary caregivers in the first year of life. Researchers have not been able to identify all the factors that may influence the development of infant attachment. Most of the studies in this area have been done without regard to infant feeding as a potential factor. Maternal responsiveness appears to be key in the child’s development of secure attachment behaviors, yet even after decades of research on infant attachment and maternal responsiveness, there is little evidence available to assist with early identification of families at risk and few interventions known to be effective in promoting maternal responsiveness. The research questions for this study were: 1) Do mothers who exclusively breastfed their infants for at least 6 weeks report more maternal responsiveness behaviors 2-4 months after delivery compared to mothers who exclusively formula feed their infants? 2) How well does breastfeeding duration predict self-reported maternal responsiveness at 2-4 months once socio-demographics and maternal characteristics (i.e., self-esteem, satisfaction with life) are statistically controlled? A cross-sectional survey design was used to assess the variables of maternal responsiveness, feeding patterns, and maternal characteristics in a convenience sample of 200 mothers in the first 2-4 months after delivery. The 60-item instrument included scales to measure maternal responsiveness (MIRI: Amankwaa et al., 2002), self-esteem (RSE: Rosenberg, 1965), and satisfaction with life (SWLS: Diener et al., 1985) as well as infant feeding and socio-demographic questions. A mixed mode data collection strategy was used combining Internet data collection with traditional paper-and-pencil survey methods. Somewhat surprisingly, mothers who exclusively breastfed for at least 6 weeks did not report any more maternal responsiveness behaviors compared to mothers who formula fed their infants. Hierarchical multiple regression analysis revealed that satisfaction with life, self-esteem, and parity, but not breastfeeding, explained a significant portion of the variance in self-reported maternal responsiveness scores. Further research in this area is needed. It should be noted that this is one of few studies of maternal responsiveness using a self-report instrument and may also be the first study of maternal responsiveness using Internet data collection. 1 CHAPTER 1: INTRODUCTION The purpose of this study was to compare self-reported maternal responsiveness in breastfeeding versus formula feeding mothers in the first 2-4 months after delivery. Infant feeding practices were evaluated as a potential predictor of maternal responsiveness. In chapter one, the problem statement, background, significance, research questions, and purpose of the study will be discussed. This chapter includes a summary of the theoretical framework and a discussion of the need for further research on maternal responsiveness. Maternal responsiveness has been labeled as a critical factor in the cognitive and emotional development of children (Ainsworth, Blehar, Waters, & Wall, 1978; Raval et al., 2001). Derived from classic attachment theory (Ainsworth & Wittig, 1969; Bowlby, 1969), maternal responsiveness is a construct that describes sensitive interactions between mother and child. The early maternal-child relationship is critically important because it serves as the basis for the development of secure infant attachment and promotes healthy child development; thus, it was the focus for this study. It was hypothesized that the breastfeeding experience, along with other factors, may directly affect the mother’s responsiveness to her infant’s cues. Ultimately it was anticipated that

PurposeThe purpose of this paper is to provide a framework for enhancing security policy management in the Grid.Design/methodology/approachThe Grid security policy reconciliation problem is presented. A generic view on the security policy notion is adopted and the security policy ontology notion is introduced and used.FindingsIn the course of this work it was found that, in order to enhance security policy management in the Grid, Grid entities should have the ability to negotiate their security policies. It was also found that, in order to achieve security policy negotiation, effective security policy semantics manipulation towards security policy reconciliation is needed. Finally, it was established, through the use of an example, that if appropriate means are used for security policy reconciliation then incompatible security policy representations can be transformed into compatible ones.Research limitations/implicationsResearch limitations stem from the adoption of a generic view on the security policy notion and the selection of identification and authentication security policies as the focal point of the proposed framework. Research implications include the possibility of examining how existing security policy reconciliation models can be incorporated in this generic framework. The possibility of investigating how such a framework can lead to a security policy knowledge management tool for Grid administrators is also demonstrated.Practical implicationsPractical implications of this work include the establishment of a common framework for security information exchange between Grid entities.Originality/valueThis paper proposes a framework for enhancing security policy management in the Grid. The proposed framework can be used by researchers as a reference and by security experts in order to reduce ambiguity concerning the interpretation of security policies expressed in different forms, by negotiating Grid entities.

Identifying the cause of an underperforming WLAN can be challenging due to the presence of a plethora of devices and networks operating in the ISM band. Such devices cause electromagnetic interference that can potentially undermine the throughput of residential and enterprise WiFi networks. In this paper, we propose an interference estimation and monitoring technique for 802.11 Access Points that can be implemented without specialized hardware and without any modification to wireless stations. We validate our technique with commercial hardware, evaluating its accuracy with different types of interferers.

Premature babies born before 38 weeks have a high risk of dying, requiring urgent care. Premature babies receiving intensive care in incubators need certain temperature, humidity, and a quiet room. In addition, the baby should also be ensured that his body temperature remains normal during the treatment period. Based on the condition of these vulnerable babies, it is very necessary to have a temperature monitoring system in the incubator. Therefore, the purpose of this research is to develop a baby incubator monitoring system that still uses the manual method to make it faster, easier, and more practical. This module is a tool that works independently and is not part of the baby incubator. Therefore, any brand of the incubator can be monitored using this module. The system in this module is wireless and uses a Wi-Fi network for data transmission. By using several ESP32 modules assembled into a central system, the data obtained from monitoring each sensor will be processed by the ESP32 which functions as a client, and collected at the central point of the ESP32 which functions as a server using the internal wifi network of the ESP32 itself as data transmission. The data from the server will subsequently be shown on the TFT Nextion display. Based on the overall measurement results using 2 baby incubators, the highest error values ​​were 1.387% for the incubator temperature parameter, 3.911% for the skin temperature parameter, 10.5% for the humidity parameter, and 25.692% for the noise parameter. The results showed that the module that was made still contained errors in each measurement. The results of this study will assist nurses in more simply and swiftly monitoring premature newborns.

In this work we investigate position-based enhancements to indoor Wi-Fi network security. Specifically, we investigate whether received signal strength (RSS) measurements can identify attempts at network access by malicious nodes exterior to an authorized network perimeter. We assume the malicious nodes will spoof their received or transmitted power-levels in attempts to circumvent standard position-based security techniques. We outline why residual analysis of the RSS measurements cannot robustly identify illegal network access requests. However, we show that by referencing the residual RSS analysis to a "claimed position," interior to the authorized perimeter, a robust position-based verification system for secure network access can be developed.

Smartphone and wearable device use is rising broadly and can be leveraged for chronic disease management. Just-in-time adaptive interventions promise to deliver personalized, dynamic interventions directly to patients through use of push notifications from mobile devices. Although just-in-time adaptive interventions are a powerful tool for shaping health behavior, their application to cardiovascular disease management has been limited as they can be challenging to design. Herein, we provide a general overview and conceptual framework for microrandomized trials, a novel experimental study design that can be used to optimize just-in-time adaptive interventions. Microrandomized trials leverage mobile devices to sequentially randomize participants to types or levels of an intervention to determine the effectiveness of an intervention and time-varying moderators of those effects. Microrandomized trials are an efficient study design that can be used to determine which intervention components to include in just-in-time adaptive interventions and to optimize their decision rules while maintaining the strength of causal inference associated with traditional randomized controlled trials.

Radio-Frequency (RF) based human activity recognition (HAR) enables many attractive applications such as smart home, health monitoring, and virtual reality (VR). Among multiple RF sensors, mmWave radar is emerging as a new trend due to its fine-grained sensing capability. However, laborious data collection and labeling processes are required when employing a radar-based sensing system in a new environment. To this end, we propose RF-CM, a general cross-modal human activity recognition framework. The key enabler is to leverage the knowledge learned from a massive WiFi dataset to build a radar-based HAR system with limited radar samples. It can significantly reduce the overhead of training data collection. In addition, RF-CM can work well regardless of the deployment setups of WiFi and mmWave radar, such as performing environments, users' characteristics, and device deployment. RF-CM achieves this by first capturing the activity-related variation patterns through data processing schemes. It then employs a convolution neural network-based feature extraction module to extract the high-dimensional features to be fed into the activity recognition module. Finally, RF-CM takes the generalization knowledge from WiFi networks as guide labels to supervise the training of the radar model, thus enabling a few-shot radar-based HAR system. We evaluate RF-CM by applying it to two HAR applications, fine-grained American sign language recognition (WiFi-cross-radar) and coarse-grained gesture recognition (WiFi-cross-RFID). The accuracy improvement of over 10% in both applications demonstrates the effectiveness of RF-CM. This cross-modal ability allows RF-CM to support more cross-modal applications.

Cancelable biometrics is known as a template protection approach, and concrete protocols with high accuracy and efficiency have been proposed. Nevertheless, most known protocols, including the Hattori et al. protocol (Journal of Information Processing, 2012), pay little attention to security against the replay attack, which leads to severe authenticity violation in the remote authentication setting. In this paper, we revisit the Hattori et al. protocol based on the Boneh-Goh-Nissim encryption scheme, and propose a secure variant while keeping user-friendliness of the original protocol. Our protocol uses the revocation method of the original protocol in a proactive manner, i.e., in our protocol, the public key assigned to a user is randomly re-generated in every authentication process. We define a general and formal security game that covers the replay attack and considers fuzziness of biometric feature extraction, and show that our protocol is secure in that model. The computation and communication costs of our protocol are more efficient than those of similar protocols.

The intensification of the international competition and the necessity to compete in a global context push companies to introduce new organizational forms; the continuous evolutions of the contexts both in terms of market demand and available technologies, the progressive reduction of the time-to-market, the necessity to personalize the offering according to the expectations of the single customer favour the development of new organizational paradigms such as the ”networked enterprise”. Supply-chain organization constituted by clients and suppliers has to consider also a series of actors with very different competences and specializations. If the concept of innovation is interpreted as the output of a new recombination of existing factors, nets of companies appear proper and coherent with the development activities. In many industries the access to tacit and distribute knowledge constitutes one of the principal critical success factor: for example, in the textile industry, the interaction with actors such as research centre, designer, design services, etc. allows to access and to interpret the diffused knowledge along the entire development chain. In this kind of scenario the ICTs cover a critical role. The identification of a model able to describe potential interrelations and synergies between ICTs and organizational structures has to consider a double aspect: (i)On the one hand the diffusion of new organizational models based on the networked enterprise constitutes a continuous stimulus for the creation of new technologies able to improve the effectiveness and the efficiency of the knowledge flows; (ii)On the other hand the availability of new information technologies offers the opportunity to create new organizational models. The increasing presence of international competition as well as the importance of socio-cultural and contextual settings are transforming the future of industrial and social scenarios. The increasing pressures of international competition are challenging companies that find themselves unable to reach international sources of supply of components and knowledge, as well as unable to offer their products and services worldwide. Moreover, historical, social, demographic and industrial factors are also forcing companies to develop a system of offerings that merge profitability with social and cultural values. Couple these factors with an ever-increasing standard of living means that the development of products and industrial processes in order to survive must not only be profitable for the manufacturers, but also socially constructive. For this reason companies must develop the knowledge and new product development processes that can support them in designing and developing socially, culturally and physically constructive products. The obstacles that obstruct the development of this kind of products are related to two fundamental capabilities: the capability to develop new technologies, and the capability to understand and design new lifestyles. While several methods exist that support companies in understanding the needs from a technically functional basis (such as Quality Functional Deployment) or in managing the explicit knowledge of organisations (Knowledge Management Systems), a methodology for the identification, capturing and interpretation of value intensive information related to socio-cultural trends and latent needs is less formalized.KeywordsInnovation ProcessInnovation ManagementInternational CompetitionHarvard Business ReviewProduct Development ProcessThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Sensor data are traveling from sensors to a remote server, data is analyzed remotely in a distributed manner, and health status of a user is presented in real-time. This paper presents a generic system-level framework for a self-served health monitoring system through the Internet of Things (IoT) to facilities an efficient sensor data management.

Chapter 9 - Wearable fitness band-based U-health monitoring

Securing sensitive user information and maintaining privacy during authentication and authorization processes is crucial in today’s interconnected digital world. This study investigates new approaches to tackle these obstacles by combining blockchain technology with Trusted Execution Environment (TEE). The proposed system introduces a new method that combines the advantages of both technologies to create a strong and privacy-focused framework for network security. The study assesses the effectiveness of the suggested system based on key parameters, focusing specifically on Transaction Throughput (TPS) and Latency. The combination of blockchain and TEE aims to improve privacy protection and security protocols, providing a dependable solution for privacy-focused authentication and authorization in network settings. The experiments confirmed the efficacy of the proposed model. The Transaction Throughput (TPS) reached 296 transactions per second, demonstrating the system’s scalability and capacity to manage a large number of transactions. The Latency was measured at 54 milliseconds, indicating a fast and responsive authentication and authorization process. The research enhances the development of privacy-preserving solutions by emphasizing the importance of the blockchain and TEE collaboration. The proposed model surpasses performance expectations set by traditional methods, positioning itself as a significant advancement in network security. The results highlight the system’s ability to significantly improve privacy protection in digital transactions and set the stage for advancements in secure, efficient, and privacy-focused authentication and authorization systems. between the quantity demand and the price.