Fides

We describe a SQLite-based mail server that runs on a bare PC with no operating system. The mail server application is integrated with a server-based adaptation of the popular SQLite client database engine. The SQLite database is used for storing mail messages, and mail clients can send/receive email and share files using any Web browser as in a conventional system. The unique features of the bare PC SQLite-based email server include (1) no OS vulnerabilities; (2) the inability for attackers to run any other software including scripts; (3) no support for dynamic linking and execution of external code; (4) a small code footprint making it easy to analyze the code for security flaws; and (5) performance benefits due to eliminating OS overhead. We describe system design and implementation, and give details of the bare machine mail server application. This work serves as a foundation to build future bare machine servers with integrated databases that can support Internet-based collaboration in high-security environments.

In this paper, we propose a new security architecture for adapting multiple access control models to operating systems. As adding a virtual access control system to a proposed security architecture, various access control models such as MAC, DAC, and RBAC are applied to secure operating systems easily. Also, the proposed was designed to overcome the deficiencies of access control in standard operating systems, makes secure OS more available by combining access control models, and apply them to secure OS in runtime.KeywordsAccess ControlControl MessageRequest MessageKernel ModuleAccess Control PolicyThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

As a standard of operating system in automotive industry, OSEK/VDX is applied on dozens of mature industrial operating systems and widely installed on the products of major automotive manufacturers. In this empirical report, we introduce our experience on verifying OSEK/VDX real-time operating system. From both source code and binary code level, the OSEK/VDX operating system is verified based on approaches comprising Hoare Logic, Communicating Sequential Processes, Binary Code Analysis and Discrete-Time Markov Chains model checking. Based on our approach, a commercial OSEK/VDX standard automotive operating system is verified and it is proved to be of great help to the development of software.

Software partitioning is a technology to partition a machine running a single instance of operating system image into multiple virtual machines called partitions. Each partition emulates an independent machine running a single instance of the operating system on dedicated hardware. All partitions are isolated form each other by the operating system. Software partitioning is very useful in server consolidation. A single powerful machine can be used to host many different servers each using a single software partition. This increases hardware resource utilization, gives flexibility to the administrator and can reduce system administration costs. The advantages offered by software partitioning are greatly enhanced with the capability to checkpoint a running software partition and restart it on a different machine. It helps in load balancing over hardware resources, load balancing over time and fault tolerance.Workload Partition [WPAR] is IBM's implementation that provides software partitioning capability on the AIX operating system. It is possible to do the live migration of the WPARs in and across AIX systems. The live migration is achieved by the checkpoint/restart mechanism. It is possible to checkpoint and restart WPARs running most existing AIX applications without any modification to the applications. Also the checkpoint and restart process is transparent to the application running inside the WPAR (Partition).This paper discusses the issues faced in implementing software partition checkpoint and restart in the AIX operating system. These issues will be typical to any standard UNIX operating system. To successfully checkpoint and restart a software partition, it is necessary not only to checkpoint all the user processes in the partition but also to checkpoint global data pertaining the partition itself and data shared between processes of the Partition like IPC data, Streams, timers, file handles, memory mapped regions, shared memory, System services, Virtual devices etc. The WPAR implementation handles both; the checkpoint of individual processes as well as checkpoint of partition wide data.

Mobile phones are increasingly used in the e-health domain. In this context, enabling secure access to health records from mobile devices is of particular importance because of the high security and privacy requirements for sensitive medical data. Standard operating systems and software, as they are deployed on current smartphones, cannot protect sensitive data appropriately, even though modern mobile hardware platforms often provide dedicated security features. Current mobile phones are prone to attacks by malicious software, which might gain unauthorized access to sensitive medical data.In this paper, we present a security architecture for the protection of electronic health records and authentication credentials that are used to access e-health services. Our architecture is derived from a generic solution and tailored specifically to current mobile platforms with hardware security extensions. Authentication data are protected by a trusted wallet (TruWallet), which leverages trusted hardware features of the phone and isolated application environments provided by a secure operating system. A separate application environment is used to provide runtime protection of medical data. Furthermore, we present a prototype implementation of TruWallet on the Nokia N900 mobile phone. In contrast to commodity systems, our architecture enables healthcare professionals to securely access medical data on their mobile devices without the risk of disclosing sensitive information.KeywordsMobile PhoneElectronic Health RecordPersonal Health RecordTrusted Platform ModuleVirtual Private NetworkThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

This study aims to determine the importance of management science and company operational standardization that is applied, to know a good and correct company development strategy in accordance with operational standards of company development strategy at UD. AQMARINA. This type of research is descriptive research with a qualitative approach where the data obtained from a UD. AQMARINA in the form of observation, interviews and literature study. The data used is primary data, where the data is processed from interview data of company owners and publications. The results of this study state that the importance of management knowledge and company operational standards for strategy development is very necessary, this is because the process of organizing something is done by a group of people ororganizationto achieve these goals by working together to utilize the available resources by developing strategies. The standardization of company operations that is applied to this company is very standard, therefore it is necessary to have guidelines on the company's operational system so that it can run the company optimally. A good and correct company development strategy according to operational standards, this is done to get quality human resources with skills, work abilities, and job loyalty to a company or organization. The company's development strategy is not only skill development but also products produced in the form of product variants which are of course creative and innovative.

One of the main characteristics of reconfigurable embedded systems is their ability to be dynamically modified to be adapted at run-time to the current environment. This feature, that makes it possible to change the functionality of a system while it is up and running, requires a software application that is able to handle the reconfiguration process. The software for the management of reconfiguration can be developed either as a standalone application, that has to be specifically designed for each given system, or within an operating system, in order to fully exploit both code reuse and code portability. This paper proposes a novel methodology for the design of dynamically reconfigurable systems in which the reconfiguration management is completely assigned to an operating system reconfiguration support. Finally, a prototype implementation is presented, where a standard Linux operating system has been extended with the proposed operating system support in order to handle dynamically reconfigurable hardware resources.

Securing Smart Cities using LSTM algorithm and lightweight containers against botnet attacks

The basic software for all newer computers is built on the well-established need for standard operating systems. This implies that all applications—no matter how large, complex or time consuming—must operate under (or, more precisely, on top of) the standard system. Large applications require supervisory monitors which handle problems similar to those of the operating systems, but at a different level. Sometimes, still a third or even a fourth such level is required or desirable. This leads naturally to the concept of multilevel systems—similar vertically, but different horizontally. Proper division of responsibility between levels leads to greater efficiency and less logical complexity, while actually enhancing capability.

In this paper we develop a novel technique, called MULTIVIEW, which enables implementation of page-based fine-grain DSMs. We show how the traditional techniques for implementing page-based DSMs can be extended to control the sharing granularity in a flexible way, even when the size of the sharing unit varies, and is smaller than the operating system's page size. The run-time overhead imposed in the proposed technique is negligible. We present a DSM system, called MILLIPAGE, which builds upon MULTIVIEW in order to support sharing in variable-size units. MILLIPAGE efficiently implements Sequential Consistency and shows comparable (sometimes superior) performance to related systems which use relaxed consistency models. It uses standard user-level operating system API and requires no compiler intervention, page twinning, diffs, code instrumentation, or sophisticated protocols. The resulting system is a thin software layer consisting mainly of a simple, clean protocol that handles page-faults.

Constructing an embedded device with a real-time and a general-purpose operating system has attracted attention as a promising approach to let the device balance real-time responsiveness and rich functionalities. This paper introduces our methodology for constructing such multi-OS platform with minimal engineering cost by assuming asymmetric OS combinations unique to embedded systems. Our methodology consists of two parts. One is a simple hypervisor for multiplexing resources to be shared between operating systems. The other is modifying operating systems to allow them to be aware of each other. We constructed an experimental system executing TOPPERS and Linux simultaneously on a hardware equipped with an SH-4A processor. The modification to each operating system kernel limited to a few dozen lines of code and do not introduce any overhead that would compromise real-time responsiveness or system throughput.KeywordsEmbed SystemEngineering CostEmbed DeviceVirtual Machine MonitorVirtual ProcessorThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Transmission control protocol (TCP) and Ethernet have been widely used in readout systems. These protocols are de facto standards and have been implemented on standard operating systems. However, some small devices, e.g., front-end devices and detectors, are not capable of employing these protocols because of hardware size limitations. This paper describes a TCP processor for gigabit Ethernet with a circuit size suitable for implementing on a single field programmable gate array. The only peripheral device required is a single Ethernet physical layer device. The hardware was implemented and its TCP throughput was measured. The throughputs in both directions simultaneously were at the upper limits of gigabit Ethernet. A mechanism for slow control over user datagram protocol (UDP) is also provided. The processor described here allows adoption of TCP/Ethernet in small devices that have hardware size limitations.

Dinas Penanaman Modal dan Pelayanan Terpadu Satu Pintu (DPMPTSP) Surakarta is an institution that can be used as a solution by the Regional Government, especially the Surakarta City Government to overcome the problems of public services that are expected to have the competitive advantage of Surakarta City in service to the community. The forms of services provided include prime licensing and non-licensing services and one door with convenience, transparent costs, and timely completion. In addition, it is also supported by the use of an adequate Information and Information Technology System, so that the data stored and data presented are always fast, precise and accurate. The purpose of this study was to obtain knowledge about the application of an integrated service information system and to evaluate to determine whether the system was used with the existing provisions and according to procedures. Weaknesses of agencies that have never been measured by system performance in the application system. Based on the constraints that exist in the agency, the method used in this study is the COBIT 4.1 framework with the Delivery and Support domain which includes DS10 (manage problem) and DS11 (manage data). From this research produces on process DS10 count to 3.71 and DS11 count to 3.86 that describe DPMPTSP Surakarta is only at level 4 (manage level) which means the use of the system is in accordance with its functions and procedures existing and standardized in the Standard Operating System (SOP) documented and applied and formalized. The optimized procedure has been socialized to all management and employees and has been obeyed and worked on in daily activities.

This paper explores the temporal hierarchy of API sequence calls using Deep Recurrent Neural Networks. RNN’s have the capability to easily capture the nature of time series processing due to their sequential structure, whereas generic neural networks cannot find an underlying relationship between data that is separated by timesteps. The primary goal of the paper is to describe an approach to analyzing malware attacks on networks while accounting for each timestep of data and gaining more flexibility in the size of the detection request using the features of the Long Short-Term Memory (LSTM) architecture. We will also touch on the more recent Gated Recurrent Units (GRU) network architecture. We will discuss the tested network configurations and the most optimal model. Lastly, the paper will suggest some applications of this model and how it could be integrated into standard operating systems.

In this chapter, the authors review software that enables the proper management of EHR. The different types of software share the feature of being open source and offer the best opportunity in health care to developing countries—an overall integrated approach. The authors analyze the main free software programs (technical features, programming languages, places for introduction, etc.). Then they focus on the description and the comparison of the three most important open source software programs EHR (OpenMRS, OpenVistA, and OpenEMR) that are installed on two operating systems (Linux Ubuntu and Windows). Finally, the authors show the results of the various parameters measured in these systems after using different Web browsers. The results show us how the three main EHR applications work depending on which operating system is installed and which web browser is used.