DCDIDP: A distributed, collaborative, and data-driven intrusion detection and prevention framework for cloud computing environments

With the growing popularity of cloud computing, the exploitation of possible vulnerabilities grows at the same pace; the distributed nature of the cloud makes it an attractive target for potential intruders. Despite security issues delaying its adoption, cloud computing has already become an unstoppable force; thus, security mechanisms to ensure its secure adoption are an immediate need. Here, we focus on intrusion detection and prevention systems (IDPSs) to defend against the intruders. In this paper, we propose a Distributed, Collaborative, and Data-driven Intrusion Detection and Prevention system (DCDIDP). Its goal is to make use of the resources in the cloud and provide a holistic IDPS for all cloud service providers which collaborate with other peers in a distributed manner at different architectural levels to respond to attacks. We present the DCDIDP framework, whose infrastructure level is composed of three logical layers: network, host, and global as well as platform and software levels. Then, we review its components and discuss some existing approaches to be used for the modules in our proposed framework. Furthermore, we discuss developing a comprehensive trust management framework to support the establishment and evolution of trust among different cloud service providers. © 2011 ICST

Business Collaboration in Food Networks: Incremental Solution Development

The paper will present an approach for an incremental solution development that is based on the usage of the currently developed Internet based FIspace business collaboration platform. Key element is the clear segmentation of infrastructures that are either internal or external to the collaborating business entity in the food network. On the one hand, the approach enables to differentiate between specific centralised as well as decentralised ways for data storage and hosting of IT based functionalities. The selection of specific dataexchange protocols and data models is facilitated. On the other hand, the supported solution design and subsequent development is focusing on reusable “software Apps” that can be used on their own and are incorporating a clear added value for the business actors. It will be outlined on how to push the development and introduction of Apps that do not require basic changes of the existing infrastructure. The paper will present an example that is based on the development of a set of Apps for the exchange of product quality related information in food networks, specifically addressing fresh fruits and vegetables. It combines workflow support for data exchange from farm to retail as well as to provide quality feedback information to facilitate the business process improvement. Finally, the latest status of theFIspace platform development will be outlined. Key features and potential ways for real users and software developers in using the FIspace platform that is initiated by science and industry will be outlined

Realising Team-Working in the Field: An Agent-based Approach

Multi-agent systems technology is applied to enable co-operation between mobile workers in the field, minimising user intervention and increasing reachability. A component-based approach is taken to simplify the management of deployed co-operation services. A Personal Assistant running on a mobile device is introduced to show how an intelligent and autonomous agent can increase the utility of users during workforce co-operation processes. Finally, a real world trial of the technology by network installation and maintenance engineers in the UK is described. Some technical issues revealed during the trial are discussed, as is the impact of the technology on the business process

An architecture for organisational decision support

The Decision Support (DS) topic of the Network Enabled Capability for Through Life Systems Engineering (NECTISE) project aims to provide organisational through-life decision support for the products and services that BAE Systems deliver. The topic consists of five streams that cover resource capability management, decision management, collaboration, change prediction and integration. A proposed architecture is presented for an Integrated Decision Support Environment (IDSE) that combines the streams to provide a structured approach to addressing a number of issues that have been identified by BAE Systems business units as being relevant to DS: uncertainty and risk, shared situational awareness, types of decision making, decision tempo, triggering of decisions, and support for autonomous decision making. The proposed architecture will identify how either individuals or groups of decision makers (including autonomous agents) would be utilised on the basis of their capability within the requirements of the scenario to collaboratively solve the decision problem. Features of the scenario such as time criticality, required experience level, the need for justification, and conflict management, will be addressed within the architecture to ensure that the most appropriate decision management support (system/naturalistic/hybrid) is provided. In addition to being reliant on a number of human factors issues, the decision making process is also reliant on a number of information issues: overload, consistency, completeness, uncertainty and evolution, which will be discussed within the context of the architecture

An agent-based framework for selection of partners in dynamic virtual enterprises

Advances in computer networking technology and open system standards have made practically feasible to create and manage virtual enterprises. A virtual enterprise, VE, is usually defined as a temporary alliance of enterprises that come together to share their skills, core competencies, and resources in order to better respond to business opportunities, and whose cooperation is supported by computer networks. The materialization of this paradigm, although enabled by recent advances in communication technologies, computer networks and logistics, requires an appropriate architectural framework and support tools. In this paper we propose an agent-based model of a dynamic VE to support the different selection processes that are used in selecting the partners for a dynamic VE, where the partners of a VE are represented by agents. Such a framework will form the basis for tools that provide automated support for creation, and operation, of dynamic virtual enterprises

Dependable Distributed Computing for the International Telecommunication Union Regional Radio Conference RRC06

The International Telecommunication Union (ITU) Regional Radio Conference (RRC06) established in 2006 a new frequency plan for the introduction of digital broadcasting in European, African, Arab, CIS countries and Iran. The preparation of the plan involved complex calculations under short deadline and required dependable and efficient computing capability. The ITU designed and deployed in-situ a dedicated PC farm, in parallel to the European Organization for Nuclear Research (CERN) which provided and supported a system based on the EGEE Grid. The planning cycle at the RRC06 required a periodic execution in the order of 200,000 short jobs, using several hundreds of CPU hours, in a period of less than 12 hours. The nature of the problem required dynamic workload-balancing and low-latency access to the computing resources. We present the strategy and key technical choices that delivered a reliable service to the RRC06