High Energy Physics Forum for Computational Excellence: Working Group Reports (I. Applications Software II. Software Libraries and Tools III. Systems)

Computing plays an essential role in all aspects of high energy physics. As computational technology evolves rapidly in new directions, and data throughput and volume continue to follow a steep trend-line, it is important for the HEP community to develop an effective response to a series of expected challenges. In order to help shape the desired response, the HEP Forum for Computational Excellence (HEP-FCE) initiated a roadmap planning activity with two key overlapping drivers -- 1) software effectiveness, and 2) infrastructure and expertise advancement. The HEP-FCE formed three working groups, 1) Applications Software, 2) Software Libraries and Tools, and 3) Systems (including systems software), to provide an overview of the current status of HEP computing and to present findings and opportunities for the desired HEP computational roadmap. The final versions of the reports are combined in this document, and are presented along with introductory material.Comment: 72 page

An Analysis of Applications Development Systems for Remotely Sensed, Multispectral Data for the Earth Observations Division of the NASA Lyndon B. Johnson Space Center

An application development system (ADS) is examined for remotely sensed, multispectral data at the Earth Observations Division (EOD) at Johnson Space Center. Design goals are detailed, along with design objectives that an ideal system should contain. The design objectives were arranged according to the priorities of EOD's program objectives. Four systems available to EOD were then measured against the ideal ADS as defined by the design objectives and their associated priorities. This was accomplished by rating each of the systems on each of the design objectives. Utilizing the established priorities, it was determined how each system stood up as an ADS. Recommendations were made as to possible courses of action for EOD to pursue to obtain a more efficient ADS

Multidisciplinary Environments: A History of Engineering Framework Development

This paper traces the history of engineering frameworks and their use by Multidisciplinary Design Optimization (MDO) practitioners. The approach is to reference papers that have been presented at one of the ten previous Multidisciplinary Analysis and Optimization (MA&O) conferences. By limiting the search to MA&O papers, the authors can (1) identify the key ideas that led to general purpose MDO frameworks and (2) uncover roadblocks that delayed the development of these ideas. The authors make no attempt to assign credit for revolutionary ideas or to assign blame for missed opportunities. Rather, the goal is to trace the various threads of computer architecture and software framework research and to observe how these threads contributed to the commercial framework products available today

A Dynamic scheduling monitor for a manufacturing process

Dynamic scheduling is the ability to create an effective schedule based on the current state of a manufacturing factory. I have developed such a scheduler for an injection molding department. The molding department provides the factory for which the schedule is created. In order to test my scheduling algorithm, I have developed three modules that form a complete factory model. A user interface allows access to the factory system. A factory database system permits the user to create and maintain the data that is required. The schedule and run module creates a schedule and then, simulates the schedule being run in the factory. The run component also keeps the factory performance data updated in order that subsequent schedules can be calculated based on the current abilities of the factory. The system is implemented on an IBM AT class machine utilizing the C++ language

Cockpit data management

This study is a continuation of an FAA effort to alleviate the growing problems of assimilating and managing the flow of data and flight related information in the air transport flight deck. The nature and extent of known pilot interface problems arising from new NAS data management programs were determined by a comparative timeline analysis of crew tasking requirements. A baseline of crew tasking requirements was established for conventional and advanced flight decks operating in the current NAS environment and then compared to the requirements for operation in a future NAS environment emphasizing Mode-S data link and TCAS. Results showed that a CDU-based pilot interface for Mode-S data link substantially increased crew visual activity as compared to the baseline. It was concluded that alternative means of crew interface should be available during high visual workload phases of flight. Results for TCAS implementation showed substantial visual and motor tasking increases, and that there was little available time between crew tasks during a TCAS encounter. It was concluded that additional research should be undertaken to address issues of ATC coordination and the relative benefit of high workload TCAS features

Rethinking Boundaries, Spaces, and Networks Between Geography and Military Science: Understanding and Actualizing Real-Time Integrated Command and Control for Joint Air Operations

Imagine a military commander standing around a table with a three-dimensional hologram projected onto to it. The hologram is of an ongoing air war of which this general is in command. Friendly forces are portrayed in blue and enemy forces in red as the opposing forces movements and actions are tracked and continuously updated. The commander has god’s eye view of where his forces are positioned relative to the enemy’s forces. Because of this view, the commander is able to make effective decisions with quick synergistic efficiency to achieve his desired outcome: defeat of the enemy. This scene invokes an image akin to a science fiction film of a futuristic air war with man and machine delicately intertwined. Films such as Star Wars and, notably, Ender’s Game have portrayed this concept; however, technology and human understanding has made these new concepts a reality. For the United States military to maintain its overmatch capability advantage over the advanced technologies and concepts of the enemy we must fundamentally shift our doctrine, policies, concepts for better integration of joint air operations. Informed by geography, the goal of this thesis is to call for a new approach to integrating command and control in the context of joint air operations. China and Russia are growing peer threats that seek to challenge the United States militarily. The current system does not integrate the air, space, and cyberspace domains enough to prosecute air wars. This new approach for joint air operations is called the Real-time integrated command and control system

Composing Systemic Aspects into Component-Oriented DOC Middleware

The advent and maturation of component-based middleware frameworks have sim-plified the development of large-scale distributed applications by separating system devel-opment and configuration concerns into different aspects that can be specified and com-posed at various stages of the application development lifecycle. Conventional component middleware technologies, such as J2EE [73] and .NET [34], were designed to meet the quality of service (QoS) requirements of enterprise applications, which focus largely on scalability and reliability. Therefore, conventional component middleware specifications and implementations are not well suited for distributed real-time and embedded (DRE) ap-plications with more stringent QoS requirements, such as low latency/jitter, timeliness, and online fault recovery. In the DRE system development community, a new generation of enhanced commercial off-the-shelf (COTS) middleware, such as Real-time CORBA 1.0 (RT-CORBA)[39], is increasingly gaining acceptance as (1) the cost and time required to develop and verify DRE applications precludes developers from implementing complex DRE applications from scratch and (2) implementations of standard COTS middleware specifications mature and encompass key QoS properties needed by DRE systems. However, although COTS middleware standardizes mechanisms to configure and control underlying OS support for an application’s QoS requirements, it does not yet provide sufficient abstractions to separate QoS policy configurations such as real-time performance requirements, from application functionality. Developers are therefore forced to configure QoS policies in an ad hoc way, and the code to configure these policies is often scattered throughout and tangled with other parts of a DRE system. As a result, it is hard for developers to configure, validate, modify, and evolve complex DRE systems consistently. It is therefore necessary to create a new generation of QoS-enabled component middleware that provides more comprehensive support for addressing QoS-related concerns modularly, so that they can be introduced and configured as separate systemic aspects. By analyzing and identifying the limitations of applying conventional middleware technologies for DRE applications, this dissertation presents a new design and its associated techniques for enhancing conventional component-oriented middleware to provide programmability of DRE relevant real-time QoS concerns. This design is realized in an implementation of the standard CORBA Component Model (CCM) [38], called the Component-Integrated ACE ORB (CIAO). This dissertation also presents both architectural analysis and empirical results that demonstrate the effectiveness of this approach. This dissertation provides three contributions to the state of the art in composing systemic behaviors into component middleware frameworks. First, it illustrates how component middleware can simplify development and evolution of DRE applications while ensuring stringent QoS requirements by composing systemic QoS aspects. Second, it contributes to the design and implementation of QoS-enabled CCM by analyzing and documenting how systemic behaviors can be composed into component middleware. Finally, it presents empirical and analytical results to demonstrate the effectiveness and the advantage of composing systemic behaviors in component middleware. The work in this dissertation has a broader impact beyond the CCM in which it was developed, as it can be applied to other component-base middleware technologies which wish to support DRE applications

Prevention of SQL Injection Attacks using AWS WAF

SQL injection is one of several different types of code injection techniques used to attack data driven applications. This is done by the attacker injecting an input in the query not intended by the programmer of the application gaining the access of the database which results in potential reading, modification or deletion of users’ data. The vulnerabilities are due to the lack of input validation which is the most critical part of software security that is often not properly covered in the design phase of the software development lifecycle. This paper presents different techniques and some of the countermeasures for detection and prevention of SQL injection attacks. The proposed procedure in the paper is to use a database firewall between the client (user) side and the database server through AWS to avoid the malicious codes injected by the attackers