A Logical Method for Policy Enforcement over Evolving Audit Logs

We present an iterative algorithm for enforcing policies represented in a first-order logic, which can, in particular, express all transmission-related clauses in the HIPAA Privacy Rule. The logic has three features that raise challenges for enforcement --- uninterpreted predicates (used to model subjective concepts in privacy policies), real-time temporal properties, and quantification over infinite domains (such as the set of messages containing personal information). The algorithm operates over audit logs that are inherently incomplete and evolve over time. In each iteration, the algorithm provably checks as much of the policy as possible over the current log and outputs a residual policy that can only be checked when the log is extended with additional information. We prove correctness and termination properties of the algorithm. While these results are developed in a general form, accounting for many different sources of incompleteness in audit logs, we also prove that for the special case of logs that maintain a complete record of all relevant actions, the algorithm effectively enforces all safety and co-safety properties. The algorithm can significantly help automate enforcement of policies derived from the HIPAA Privacy Rule.Comment: Carnegie Mellon University CyLab Technical Report. 51 page

System Reliability Evaluation Based on Convex Combination Considering Operation and Maintenance Strategy

The approaches to the system reliability evaluation with respect to the cases, where the components are independent or the components have interactive relationships within the system, were proposed in this paper. Starting from the higher requirements on system operational safety and economy, the reliability focused optimal models of multiobjective maintenance strategies were built. For safety-critical systems, the pessimistic maintenance strategies are usually taken, and, in these cases, the system reliability evaluation has also to be tackled pessimistically. For safety-uncritical systems, the optimistic maintenance strategies were usually taken, and, in these circumstances, the system reliability evaluation had also to be tackled optimistically, respectively. Besides, the reasonable maintenance strategies and their corresponding reliability evaluation can be obtained through the convex combination of the above two cases. With a high-speed train system as the example background, the proposed method is verified by combining the actual failure data with the maintenance data. Results demonstrate that the proposed study can provide a new system reliability calculation method and solution to select and optimize the multiobjective operational strategies with the considerations of system safety and economical requirements. The theoretical basis is also provided for scientifically estimating the reliability of a high-speed train system and formulating reasonable maintenance strategies

Fault Diagnosis of Train Axle Box Bearing Based on Multifeature Parameters

Failure of the train axle box bearing will cause great loss. Now, condition-based maintenance of train axle box bearing has been a research hotspot around the world. Vibration signals generated by train axle box bearing have nonlinear and nonstationary characteristics. The methods used in traditional bearing fault diagnosis do not work well with the train axle box. To solve this problem, an effective method of axle box bearing fault diagnosis based on multifeature parameters is presented in this paper. This method can be divided into three parts, namely, weak fault signal extraction, feature extraction, and fault recognition. In the first part, a db4 wavelet is employed for denoising the original signals from the vibration sensors. In the second part, five time-domain parameters, five IMF energy-torque features, and two amplitude-ratio features are extracted. The latter seven frequency domain features are calculated based on the empirical mode decomposition and envelope spectrum analysis. In the third part, a fault classifier based on BP neural network is designed for automatic fault pattern recognition. A series of tests are carried out to verify the proposed method, which show that the accuracy is above 90%

A Program Logic for Verifying Secure Routing Protocols

The Internet, as it stands today, is highly vulnerable to attacks. However, little has been done to understand and verify the formal security guarantees of proposed secure inter-domain routing protocols, such as Secure BGP (S-BGP). In this paper, we develop a sound program logic for SANDLog-a declarative specification language for secure routing protocols for verifying properties of these protocols. We prove invariant properties of SANDLog programs that run in an adversarial environment. As a step towards automated verification, we implement a verification condition generator (VCGen) to automatically extract proof obligations. VCGen is integrated into a compiler for SANDLog that can generate executable protocol implementations; and thus, both verification and empirical evaluation of secure routing protocols can be carried out in this unified framework. To validate our framework, we encoded several proposed secure routing mechanisms in SANDLog, verified variants of path authenticity properties by manually discharging the generated verification conditions in Coq, and generated executable code based on SANDLog specification and ran the code in simulation

A train dispatching model based on fuzzy passenger demand forecasting during holidays

Purpose: The train dispatching is a crucial issue in the train operation adjustment when passenger flow outbursts. During holidays, the train dispatching is to meet passenger demand to the greatest extent, and ensure safety, speediness and punctuality of the train operation. In this paper, a fuzzy passenger demand forecasting model is put up, then a train dispatching optimization model is established based on passenger demand so as to evacuate stranded passengers effectively during holidays. Design/methodology/approach: First, the complex features and regularity of passenger flow during holidays are analyzed, and then a fuzzy passenger demand forecasting model is put forward based on the fuzzy set theory and time series theory. Next, the bi-objective of the train dispatching optimization model is to minimize the total operation cost of the train dispatching and unserved passenger volume during holidays. Finally, the validity of this model is illustrated with a case concerned with the Beijing-Shanghai high-speed railway in China. Findings: The case study shows that the fuzzy passenger demand forecasting model can predict outcomes more precisely than ARIMA model. Thus train dispatching optimization plan proves that a small number of trains are able to serve unserved passengers reasonably and effectively. Originality/value: On the basis of the passenger demand predictive values, the train dispatching optimization model is established, which enables train dispatching to meet passenger demand in condition that passenger flow outbursts, so as to maximize passenger demand by offering the optimal operation plan.Peer Reviewe

Sparse Fast Fourier Transform and its application in intelligent diagnosis system of train rolling bearing

Healthy status monitoring of train bearing online is very meaningful work. But as traditional diagnosis system does, performing Fourier spectrum with the datum from more than 200 bearings in a marshalling train is an enormous challenge. Here a healthy status monitoring system of train rolling bearing based on Sparse Fast Fourier Transform (SFFT) is proposed. The monitoring system consists two sequential parts. First, extract fault features based on SFFT spectrum and other time-domain parameters. According to train bearing working environment, altogether 7 fault features are extracted in this paper. Another part is constructing a classifier based on BP neural network. Experimental results show that the system proposed here achieves gratifying results comparing with traditional fault diagnosis syste