Intelligent platform management interface protocol security

Master's Project (M.S.) University of Alaska Fairbanks, 2014The Intelligent Platform Management Interface (IPMI) is a protocol that allows administrators to manage servers remotely. Hardware vendors including Dell, HP, Supermicro, IBM, Lenovo, Fujitsu and Oracle support IPMI though a Baseboard Management Controller (BMC) which can either be integrated into the motherboard or purchased as a pluggable module. The BMC runs silently alongside other components of the server and provides a lower level of hardware access than the Operating System (OS). This allows support for features like power cycling the server, mounting virtual media and accessing a remote console. The failure of BMC vendors to produce a more secure product, along with the inherent flaws of the IPMI protocol, increases the need for these systems' security capabilities to be evaluated. The IPMI protocol and various vendor implementations of the BMC has been the subject of recent scrutiny, and initial investigation has raised concerns about the security properties of these components. This project focuses on evaluating specific IPMI supported hardware and software setup in an environment modeled to simulate real use, for the explicit purpose of evaluating the security of the system. This project presents: several methods by which unprivileged users can gain remote access to the system, a list of best practices for proper configuration, a guide to clearing configuration settings before decommission, and a basic Metasploit module to scan for BMC related services

Enterprise platform systems management security threats and mitigation techniques

Developers and technologists of enterprise systems such as servers, storage and networking products must constantly anticipate new cybersecurity threats and evolving security requirements. These requirements are typically sourced from marketing, customer expectations, manufacturing and evolving government standards. Much ongoing major research focus has been on securing the main enterprise system purpose functionality, operating system, network and storage. There appears, however, to be far less research and a growing number of reports of vulnerabilities in the area of enterprise systems management hardware and software subsystems. Many recent examples are within types of subsystems such as baseboard management controllers (BMCs), which are intricate embedded subsystems, independent of the host server system functionality. A BMC is typically comprised of a specialized system-on-a-chip, RAM, non-volatile storage, and sensors, and runs an embedded LINUX Operating System. The BMC’s primary roles are always increasing in scope including managing system inventory, system operational health, thermal and power control, event logging, remote console access, provisioning, performance monitoring, software updates and failure prediction and remediation. To compromise or create a denial of service of such subsystems has an increasing impact on equipment manufacturers and large and small enterprises. This report’s primary objective is to research real-world and theoretical hardware and software cyber-attack vectors on enterprise product platforms, inclusive of BMCs, BIOS and other embedded systems within such products. For each presented attack vector, best practices and suggestions for effective avoidance and mitigation are explored. Domains of particular interest are physical access security, hardware manipulation and secure boot protections against software image manipulation, BIOS recovery and secure field debug techniques.Electrical and Computer Engineerin

Smart Automation System for Office Environment

A smart automation system for office environment is being designed in this system. Various controlling systems based on lighting, ventilating, luminance are discussed respectively. Various sensors are used to extract the real time information i.e. temperature, light intensity, humidity, smoke, motion sensor are used. This data is send to ARM 11 Controller. It is then send to PC where data is saved. Through Network switch this data is send to other PC’s. The data collected is stored as database and can be accessed anytime. The data is send to the android or any internet enabled device. This system also provides need based emergency services like Ambulance call, fire alarm. Biometric fingerprint is used for security purpose. Manual mode and automatic mode are two alternative modes designed to promote the usability of smart office system. Control of electric lighting fixtures of different office spaces is done

A Prototype Toolkit For Evaluating Indoor Environmental Quality In Commercial Buildings

Measurement of building environmental parameters is often complex, expensive, and not easily proceduralized in a manner that covers all commercial buildings. Evaluating building indoor environmental quality performance is therefore not standard practice. This project developed a prototype toolkit that addressed existing barriers to widespread indoor environmental quality performance evaluation. A toolkit with both hardware and software elements was designed for practitioners around the indoor environmental quality requirements of the American Society of Heating, Refrigeration and Air Conditioning Engineers / Chartered Institution of Building Services / United States Green Building Council Performance Measurement Protocols. This unique toolkit was built on a wireless mesh network with a web-based data collection, analysis, and reporting application. The toolkit provided a fast, robust deployment of sensors, real-time data analysis, Performance Measurement Protocol-based analysis methods and a scorecard and report generation tools. A web-enabled Geographic Information System-based metadata collection system also reduced field-study deployment time. The toolkit was evaluated through three case studies, which were discussed in this report

Understanding occupancy pattern and improving building energy efficiency through Wi-Fi based indoor positioning

Detailed visualisation and data analysis of occupancy patterns including spatial distribution and temporal variations are of great importance to delivering energy efficient and productive buildings. An experimental study comprising 24-hour monitoring over 30 full days was conducted in a university library building. Occupancy profiles have been monitored and analysis has been carried out. Central to this monitoring study is the Wi-Fi based indoor positioning system based on the measured Wi-Fi devices’ number and locations and data mining methods. Distinct from traditional occupancy and energy studies, more detailed information related to the indoor positions and number of occupants has offered a better understanding of building user behaviour. The implication of the occupancy patterns for energy (e.g. lighting and other building services) efficiency is assessed, assisted with data from lighting sensors where needed. It is found occupancy patterns change dramatically with time. Also, the energy waste patterns have been identified through the method of data association rule mining. If the identified energy waste is removed, the total energy consumption can be reduced by 26.1%. The indoor positioning information also has implications for optimising space use, opening hours as well as staff deployment. The work could be extended to more rooms with diverse functions, other seasons and other types of non-domestic buildings for a more comprehensive understanding of building user behaviour and energy efficiency

The Effect of Artificial Light Pollution on Orientation of Hatchling Loggerhead Sea Turtles (Caretta caretta) in the Grand Strand Region, South Carolina

Sea turtle hatchlings primarily utilize sight to detect differences in elevation and light intensity present along the horizon to navigate from the nest to the water’s edge. The addition of artificial lights can cause visual misdirection, resulting in disorientation (aimlessly wandering in circular paths) or misorientation (moving in distinct paths away from ocean). Extensive research has been done on effects of high levels of artificial light but little on effects of comparatively lower levels of artificial light on hatchling sea turtle orientation. This study examined these lower intensity areas to identify if there is a threshold of artificial light above which hatchling orientation is negatively affected. During the 2016 nesting season, a Geovision GV-FER5303 non-illuminating infrared camera recorded hatchling trajectories at twenty-one loggerhead sea turtle nests from areas varying in light intensity along the Grand Strand region of South Carolina. Individual and group dynamics for lateral range of movement, orientation deviation, and average speed were measured from each nest to determine if parameters associated with orientation were significantly affected by total and artificial radiance values present at the time of emergence. Lateral range of hatchling movement is not significantly influenced under artificial or total radiance conditions; however, deviation from seaward direction (F(2,299)=43.623, p\u3c0.001; F(3,424)=23.528, p\u3c0.001) and average speed are (F(2,495)=42.612, p\u3c0.001; F(3,648)=14.644, p\u3c0.001). Deviation from brightest light source is significant under total radiance conditions (F(3,427)=11.358, p\u3c0.001) while only marginally significant under artificial radiance conditions (F(2,300)=2.336, p=0.098). Results may help inform current management practices to enhance hatchling survival efforts near northern limit of loggerhead nesting beaches

XR, music and neurodiversity: design and application of new mixed reality technologies that facilitate musical intervention for children with autism spectrum conditions

This thesis, accompanied by the practice outputs,investigates sensory integration, social interaction and creativity through a newly developed VR-musical interface designed exclusively for children with a high-functioning autism spectrum condition (ASC).The results aim to contribute to the limited expanse of literature and research surrounding Virtual Reality (VR) musical interventions and Immersive Virtual Environments (IVEs) designed to support individuals with neurodevelopmental conditions. The author has developed bespoke hardware, software and a new methodology to conduct field investigations. These outputs include a Virtual Immersive Musical Reality Intervention (ViMRI) protocol, a Supplemental Personalised, immersive Musical Experience(SPiME) programme, the Assisted Real-time Three-dimensional Immersive Musical Intervention System’ (ARTIMIS) and a bespoke (and fully configurable) ‘Creative immersive interactive Musical Software’ application (CiiMS). The outputs are each implemented within a series of institutional investigations of 18 autistic child participants. Four groups are evaluated using newly developed virtual assessment and scoring mechanisms devised exclusively from long-established rating scales. Key quantitative indicators from the datasets demonstrate consistent findings and significant improvements for individual preferences (likes), fear reduction efficacy, and social interaction. Six individual case studies present positive qualitative results demonstrating improved decision-making and sensorimotor processing. The preliminary research trials further indicate that using this virtual-reality music technology system and newly developed protocols produces notable improvements for participants with an ASC. More significantly, there is evidence that the supplemental technology facilitates a reduction in psychological anxiety and improvements in dexterity. The virtual music composition and improvisation system presented here require further extensive testing in different spheres for proof of concept

Road lighting and future factors

Street lighting is currently a growing market that is adapting to and benefiting from numerous technological developments. This dissertation maps the technological factors that will contribute to the future of road lighting in order to aid professionals working in the field, such as lighting designers and engineers. Therefore, this dissertation makes a contribution to knowledge in this area by developing a framework tool (Figure 41. SLSNF - developed on draw.io) to assist stakeholders seeking to implement a new street lighting system. This is based on insights gathered through mixed methods of research from a varied group of professionals associated with street lighting. Furthermore, it also establishes a summarising model (Figure 49. Road lighting and associated factors overview, developed by Ajay Parmar, using www.mindmeister.com) to illustrate all of the considerations surrounding road lighting as a domain. One of the primary focuses of this research targets how lighting professionals interact with lighting standards. Data is collected by mixed methods research of both interviews and a questionnaire. This research confirms that good collaboration amongst a range of different professionals is required for new street lighting projects to develop efficiently. Due to the interdisciplinary nature of these projects, the proposed tool (Figure 41. SLSNF - developed on draw.io), which has been developed as a result of the data collected, will assist those involved to identify and mitigate any possible oversights in a street lighting installation at an early stage

Improving Campus Safety and Sustainability by Bringing Renewable Energy Technology to the American Farm School

Limited street lighting on the American Farm School campus in Thessaloniki, Greece presents safety hazards to pedestrians and motorists on campus roads. Through interviews, direct observation, and textual research, we identified the areas that most need increased lighting, and developed systems and funding strategies to meet these needs. To provide adequate lighting while limiting light pollution and maintaining the natural aesthetic of campus, we recommend low temperature covered LED lamps powered by roof-mounted solar panels to mitigate the long-term electricity expenses