ANCHOR: logically-centralized security for Software-Defined Networks

While the centralization of SDN brought advantages such as a faster pace of innovation, it also disrupted some of the natural defenses of traditional architectures against different threats. The literature on SDN has mostly been concerned with the functional side, despite some specific works concerning non-functional properties like 'security' or 'dependability'. Though addressing the latter in an ad-hoc, piecemeal way, may work, it will most likely lead to efficiency and effectiveness problems. We claim that the enforcement of non-functional properties as a pillar of SDN robustness calls for a systemic approach. As a general concept, we propose ANCHOR, a subsystem architecture that promotes the logical centralization of non-functional properties. To show the effectiveness of the concept, we focus on 'security' in this paper: we identify the current security gaps in SDNs and we populate the architecture middleware with the appropriate security mechanisms, in a global and consistent manner. Essential security mechanisms provided by anchor include reliable entropy and resilient pseudo-random generators, and protocols for secure registration and association of SDN devices. We claim and justify in the paper that centralizing such mechanisms is key for their effectiveness, by allowing us to: define and enforce global policies for those properties; reduce the complexity of controllers and forwarding devices; ensure higher levels of robustness for critical services; foster interoperability of the non-functional property enforcement mechanisms; and promote the security and resilience of the architecture itself. We discuss design and implementation aspects, and we prove and evaluate our algorithms and mechanisms, including the formalisation of the main protocols and the verification of their core security properties using the Tamarin prover.Comment: 42 pages, 4 figures, 3 tables, 5 algorithms, 139 reference

Compensation of distributed delays in integrated communication and control systems

The concept, analysis, implementation, and verification of a method for compensating delays that are distributed between the sensors, controller, and actuators within a control loop are discussed. With the objective of mitigating the detrimental effects of these network induced delays, a predictor-controller algorithm was formulated and analyzed. Robustness of the delay compensation algorithm was investigated relative to parametric uncertainties in plant modeling. The delay compensator was experimentally verified on an IEEE 802.4 network testbed for velocity control of a DC servomotor

Prevalence of anginal symptoms and myocardial ischemia and their effect on clinical outcomes in outpatients with stable coronary artery disease: data from the international observational CLARIFY registry

Importance: In the era of widespread revascularization and effective antianginals, the prevalence and prognostic effect of anginal symptoms and myocardial ischemia among patients with stable coronary artery disease (CAD) are unknown.<p></p> Objective: To describe the current clinical patterns among patients with stable CAD and the association of anginal symptoms or myocardial ischemia with clinical outcomes.<p></p> Design, Setting, and Participants: The Prospective Observational Longitudinal Registry of Patients With Stable Coronary Artery Disease (CLARIFY) registry enrolled outpatients in 45 countries with stable CAD in 2009 to 2010 with 2-year follow-up (median, 24.1 months; range, 1 day to 3 years). Enrollees included 32 105 outpatients with prior myocardial infarction, chest pain, and evidence of myocardial ischemia, evidence of CAD on angiography, or prior revascularization. Of these, 20 291 (63.2%) had undergone a noninvasive test for myocardial ischemia within 12 months of enrollment and were categorized into one of the following 4 groups: no angina or ischemia (n = 13 207 [65.1%]); evidence of myocardial ischemia without angina (silent ischemia) (n = 3028 [14.9%]); anginal symptoms alone (n = 1842 [9.1%]); and angina and ischemia (n = 2214 [10.9%]).<p></p> Exposures: Stable CAD.<p></p> Main Outcome and Measure: The composite of cardiovascular (CV)–related death or nonfatal myocardial infarction.<p></p> Results: Overall, 4056 patients (20.0%) had anginal symptoms and 5242 (25.8%) had evidence of myocardial ischemia on results of noninvasive testing. Of 469 CV-related deaths or myocardial infarctions, 58.2% occurred in patients without angina or ischemia, 12.4% in patients with ischemia alone, 12.2% in patients with angina alone, and 17.3% in patients with both. The hazard ratios for the primary outcome relative to patients without angina or ischemia and adjusted for age, sex, geographic region, smoking status, hypertension, diabetes mellitus, and dyslipidemia were 0.90 (95% CI, 0.68-1.20; P = .47) for ischemia alone, 1.45 (95% CI, 1.08-1.95; P = .01) for angina alone, and 1.75 (95% CI, 1.34-2.29; P <.001) for both. Similar findings were observed for CV-related death and for fatal or nonfatal myocardial infarction.<p></p> Conclusions and Relevance: In outpatients with stable CAD, anginal symptoms (with or without ischemia on noninvasive testing) but not silent ischemia appear to be associated with an increased risk for adverse CV outcomes. Most CV events occurred in patients without angina or ischemia

Mapping RT-LOTOS specifications into Time Petri Nets

RT-LOTOS is a timed process algebra which enables compact and abstract specification of real-time systems. This paper proposes and illustrates a structural translation of RT-LOTOS terms into behaviorally equivalent (timed bisimilar) finite Time Petri nets. It is therefore possible to apply Time Petri nets verification techniques to the profit of RT-LOTOS. Our approach has been implemented in RTL2TPN, a prototype tool which takes as input an RT-LOTOS specification and outputs a TPN. The latter is verified using TINA, a TPN analyzer developed by LAAS-CNRS. The toolkit made of RTL2TPN and TINA has been positively benchmarked against previously developed RT-LOTOS verification tool