Formalisation and Implementation of the XACML Access Control Mechanism

We propose a formal account of XACML, an OASIS standard adhering to the Policy Based Access Control model for the specifica- tion and enforcement of access control policies. To clarify all ambiguous and intricate aspects of XACML, we provide it with a more manageable alternative syntax and with a solid semantic ground. This lays the basis for developing tools and methodologies which allow software engineers to easily and precisely regulate access to resources using policies. To demonstrate feasibility and effectiveness of our approach, we provide a software tool, supporting the specification and evaluation of policies and access requests, whose implementation fully relies on our formal development

Comparing P and S wave heterogeneity in the mantle

From the reprocessed data set of Engdahl and co-workers we have carefully selected matching P and S data for tomographic imaging. We assess data and model error and conclude that our S model uncertainty is twice that of the P model. We account for this in our comparison of the perturbations in P and S-wavespeed. In accord with previous studies we find that P and S perturbations are positively correlated at all depths. However, in the deep mantle systematic differences occur between regions that have undergone subduction in the last 120 million years and those that have not. In particular, below 1500 km depth ∂ln V[subscript s]/∂ln V[subscript p] is significantly larger in mantle regions away from subduction than in mantle beneath convergent margins. This inference is substantiated by wavespeed analyses with random realizations of the slab/non-slab distribution. Through much of the mantle there is no significant correlation between bulk sound and S-wave perturbations, but they appear to be negatively correlated between 1700 and 2100 km depth, which is also where the largest differences in ∂ln V[subscript s]/∂ln V[subscript p] occur. This finding supports convection models with compositional heterogeneity in the lowermost mantle.National Science Foundation (U.S.) (Grant EAR-9905779

Power-Law Distributions in a Two-sided Market and Net Neutrality

"Net neutrality" often refers to the policy dictating that an Internet service provider (ISP) cannot charge content providers (CPs) for delivering their content to consumers. Many past quantitative models designed to determine whether net neutrality is a good idea have been rather equivocal in their conclusions. Here we propose a very simple two-sided market model, in which the types of the consumers and the CPs are {\em power-law distributed} --- a kind of distribution known to often arise precisely in connection with Internet-related phenomena. We derive mostly analytical, closed-form results for several regimes: (a) Net neutrality, (b) social optimum, (c) maximum revenue by the ISP, or (d) maximum ISP revenue under quality differentiation. One unexpected conclusion is that (a) and (b) will differ significantly, unless average CP productivity is very high

Delivering Live Multimedia Streams to Mobile Hosts in a Wireless Internet with Multiple Content Aggregators

We consider the distribution of channels of live multimedia content (e.g., radio or TV broadcasts) via multiple content aggregators. In our work, an aggregator receives channels from content sources and redistributes them to a potentially large number of mobile hosts. Each aggregator can offer a channel in various configurations to cater for different wireless links, mobile hosts, and user preferences. As a result, a mobile host can generally choose from different configurations of the same channel offered by multiple alternative aggregators, which may be available through different interfaces (e.g., in a hotspot). A mobile host may need to handoff to another aggregator once it receives a channel. To prevent service disruption, a mobile host may for instance need to handoff to another aggregator when it leaves the subnets that make up its current aggregator�s service area (e.g., a hotspot or a cellular network).\ud In this paper, we present the design of a system that enables (multi-homed) mobile hosts to seamlessly handoff from one aggregator to another so that they can continue to receive a channel wherever they go. We concentrate on handoffs between aggregators as a result of a mobile host crossing a subnet boundary. As part of the system, we discuss a lightweight application-level protocol that enables mobile hosts to select the aggregator that provides the �best� configuration of a channel. The protocol comes into play when a mobile host begins to receive a channel and when it crosses a subnet boundary while receiving the channel. We show how our protocol can be implemented using the standard IETF session control and description protocols SIP and SDP. The implementation combines SIP and SDP�s offer-answer model in a novel way

Spectral ergodicity and normal modes in ensembles of sparse matrices

We investigate the properties of sparse matrix ensembles with particular regard for the spectral ergodicity hypothesis, which claims the identity of ensemble and spectral averages of spectral correlators. An apparent violation of the spectral ergodicity is observed. This effect is studied with the aid of the normal modes of the random matrix spectrum, which describe fluctuations of the eigenvalues around their average positions. This analysis reveals that spectral ergodicity is not broken, but that different energy scales of the spectra are examined by the two averaging techniques. Normal modes are shown to provide a useful complement to traditional spectral analysis with possible applications to a wide range of physical systems.Comment: 22 pages, 15 figure

Prochlo: Strong Privacy for Analytics in the Crowd

The large-scale monitoring of computer users' software activities has become commonplace, e.g., for application telemetry, error reporting, or demographic profiling. This paper describes a principled systems architecture---Encode, Shuffle, Analyze (ESA)---for performing such monitoring with high utility while also protecting user privacy. The ESA design, and its Prochlo implementation, are informed by our practical experiences with an existing, large deployment of privacy-preserving software monitoring. (cont.; see the paper

Comparing P and S wave heterogeneity in the mantle

From the reprocessed data set of Engdahl and co-workers we have carefully selected matching P and S data for tomographic imaging. We assess data and model error and conclude that our S model uncertainty is twice that of the P model. We account for this in our comparison of the perturbations in P and S-wavespeed. In accord with previous studies we find that P and S perturbations are positively correlated at all depths. However, in the deep mantle systematic di fferences occur between regions that have undergone subduction in the last 120 million years and those that have not. In particular, below 1500 km depth ∂ ln Vs/∂ ln Vp is signifi cantly larger in mantle regions away from subduction than in mantle beneath convergent margins. This inference is substantiated by wavespeed analyses with random realizations of the slab/non-slab distribution. Through much of the mantle there is no signi ficant correlation between bulk sound and S-wave perturbations, but they appear to be negatively correlated between 1700 and 2100 km depth, which is also where the largest di erences in ∂ ln Vs/∂ ln Vp occur. This finding supports convection models with compositional heterogeneity in the lowermost mantle

Scalable service-oriented replication with flexible consistency guarantee in the cloud

Replication techniques are widely applied in and for cloud to improve scalability and availability. In such context, the well-understood problem is how to guarantee consistency amongst different replicas and govern the trade-off between consistency and scalability requirements. Such requirements are often related to specific services and can vary considerably in the cloud. However, a major drawback of existing service-oriented replication approaches is that they only allow either restricted consistency or none at all. Consequently, service-oriented systems based on such replication techniques may violate consistency requirements or not scale well. In this paper, we present a Scalable Service Oriented Replication (SSOR) solution, a middleware that is capable of satisfying applications’ consistency requirements when replicating cloud-based services. We introduce new formalism for describing services in service-oriented replication. We propose the notion of consistency regions and relevant service oriented requirements policies, by which trading between consistency and scalability requirements can be handled within regions. We solve the associated sub-problem of atomic broadcasting by introducing a Multi-fixed Sequencers Protocol (MSP), which is a requirements aware variation of the traditional fixed sequencer approach. We also present a Region-based Election Protocol (REP) that elastically balances the workload amongst sequencers. Finally, we experimentally evaluate our approach under different loads, to show that the proposed approach achieves better scalability with more flexible consistency constraints when compared with the state-of-the-art replication technique

Disclosure quality and stock returns in the UK

The purpose of this paper is to update and re-examine the role of corporate narrative reporting in improving investors’ ability to better forecast future earnings change. We also construct a risk factor for disclosure quality (DQ) and test whether such a factor is useful in explaining the time-series variation of UK stock returns. Our paper contributes to the market based accounting research in three crucial ways. Firstly, it offers updated evidence on the usefulness of corporate narrative reporting to investors. Secondly, it offers evidence that the DQ factor is a significant risk factor in the UK. Thirdly, and finally, it finds that the Fama-French factors might contain DQ related information