Formalisation and Implementation of the XACML Access Control Mechanism

We propose a formal account of XACML, an OASIS standard adhering to the Policy Based Access Control model for the specifica- tion and enforcement of access control policies. To clarify all ambiguous and intricate aspects of XACML, we provide it with a more manageable alternative syntax and with a solid semantic ground. This lays the basis for developing tools and methodologies which allow software engineers to easily and precisely regulate access to resources using policies. To demonstrate feasibility and effectiveness of our approach, we provide a software tool, supporting the specification and evaluation of policies and access requests, whose implementation fully relies on our formal development

Environmental Management (Supplementary Exam)

Exam paper for second semester: Environmental Management (Supplementary Exam

Architecture of the Multi-Modal Organizational Research and Production Heterogeneous Network (MORPHnet)

The research and education (R&E) community requires persistent and scaleable network infrastructure to concurrently support production and research applications as well as network research. In the past, the R&E community has relied on supporting parallel network and end-node infrastructures, which can be very expensive and inefficient for network service managers and application programmers. The grand challenge in networking is to provide support for multiple, concurrent, multi-layer views of the network for the applications and the network researchers, and to satisfy the sometimes conflicting requirements of both while ensuring one type of traffic does not adversely affect the other. Internet and telecommunications service providers will also benefit from a multi-modal infrastructure, which can provide smoother transitions to new technologies and allow for testing of these technologies with real user traffic while they are still in the pre-production mode. The authors proposed approach requires the use of as much of the same network and end system infrastructure as possible to reduce the costs needed to support both classes of activities (i.e., production and research). Breaking the infrastructure into segments and objects (e.g., routers, switches, multiplexors, circuits, paths, etc.) gives the capability to dynamically construct and configure the virtual active networks to address these requirements. These capabilities must be supported at the campus, regional, and wide-area network levels to allow for collaboration by geographically dispersed groups. The Multi-Modal Organizational Research and Production Heterogeneous Network (MORPHnet) described in this report is an initial architecture and framework designed to identify and support the capabilities needed for the proposed combined infrastructure and to address related research issues

Password-based group key exchange in a constant number of rounds

Abstract. With the development of grids, distributed applications are spread across multiple computing resources and require efficient security mechanisms among the processes. Although protocols for authenticated group Diffie-Hellman key exchange protocols seem to be the natural mechanisms for supporting these applications, current solutions are either limited by the use of public key infrastructures or by their scalability, requiring a number of rounds linear in the number of group members. To overcome these shortcomings, we propose in this paper the first provably-secure password-based constant-round group key exchange protocol. It is based on the protocol of Burmester and Desmedt and is provably-secure in the random-oracle and ideal-cipher models, under the Decisional Diffie-Hellman assumption. The new protocol is very efficient and fully scalable since it only requires four rounds of communication and four multi-exponentiations per user. Moreover, the new protocol avoids intricate authentication infrastructures by relying on passwords for authentication.

Adjoint "quarks" on coarse anisotropic lattices: Implications for string breaking in full QCD

A detailed study is made of four dimensional SU(2) gauge theory with static adjoint ``quarks'' in the context of string breaking. A tadpole-improved action is used to do simulations on lattices with coarse spatial spacings $a_s$, allowing the static potential to be probed at large separations at a dramatically reduced computational cost. Highly anisotropic lattices are used, with fine temporal spacings $a_t$, in order to assess the behavior of the time-dependent effective potentials. The lattice spacings are determined from the potentials for quarks in the fundamental representation. Simulations of the Wilson loop in the adjoint representation are done, and the energies of magnetic and electric ``gluelumps'' (adjoint quark-gluon bound states) are calculated, which set the energy scale for string breaking. Correlators of gauge-fixed static quark propagators, without a connecting string of spatial links, are analyzed. Correlation functions of gluelump pairs are also considered; similar correlators have recently been proposed for observing string breaking in full QCD and other models. A thorough discussion of the relevance of Wilson loops over other operators for studies of string breaking is presented, using the simulation results presented here to support a number of new arguments.Comment: 22 pages, 14 figure

Observation of isolated high-E_T photons in deep inelastic scattering

First measurements of cross sections for isolated prompt photon production in deep inelastic ep scattering have been made using the ZEUS detector at the HERA electron-proton collider using an integrated luminosity of 121 pb^-1. A signal for isolated photons in the transverse energy and rapidity ranges 5 < E_T^gamma < 10 GeV and -0.7 < eta^gamma < 0.9 was observed for virtualities of the exchanged photon of Q^2 > 35 GeV^2. Cross sections are presented for inclusive prompt photons and for those accompanied by a single jet in the range E_T^jet \geq 6 GeV and -1.5 \leq eta^jet < 1.8. Calculations at order alpha^3alpha_s describe the data reasonably well.Comment: 16 pages, 5 figure

Measurement of the open-charm contribution to the diffractive proton structure function

Production of D*+/-(2010) mesons in diffractive deep inelastic scattering has been measured with the ZEUS detector at HERA using an integrated luminosity of 82 pb^{-1}. Diffractive events were identified by the presence of a large rapidity gap in the final state. Differential cross sections have been measured in the kinematic region 1.5 < Q^2 < 200 GeV^2, 0.02 < y < 0.7, x_{IP} < 0.035, beta 1.5 GeV and |\eta(D*+/-)| < 1.5. The measured cross sections are compared to theoretical predictions. The results are presented in terms of the open-charm contribution to the diffractive proton structure function. The data demonstrate a strong sensitivity to the diffractive parton densities.Comment: 35 pages, 11 figures, 6 table

Measurement of beauty production in deep inelastic scattering at HERA

The beauty production cross section for deep inelastic scattering events with at least one hard jet in the Breit frame together with a muon has been measured, for photon virtualities Q^2 > 2 GeV^2, with the ZEUS detector at HERA using integrated luminosity of 72 pb^-1. The total visible cross section is sigma_b-bbar (ep -> e jet mu X) = 40.9 +- 5.7 (stat.) +6.0 -4.4 (syst.) pb. The next-to-leading order QCD prediction lies about 2.5 standard deviations below the data. The differential cross sections are in general consistent with the NLO QCD predictions; however at low values of Q^2, Bjorken x, and muon transverse momentum, and high values of jet transverse energy and muon pseudorapidity, the prediction is about two standard deviations below the data.Comment: 18 pages, 4 figure

Photoproduction of D∗±D^{*\pm} mesons associated with a leading neutron

The photoproduction of $D^{*\pm} (2010)$ mesons associated with a leading neutron has been observed with the ZEUS detector in $ep$ collisions at HERA using an integrated luminosity of 80 pb$^{-1}$. The neutron carries a large fraction, {$x_L>0.2$}, of the incoming proton beam energy and is detected at very small production angles, {$\theta_n<0.8$ mrad}, an indication of peripheral scattering. The $D^*$ meson is centrally produced with pseudorapidity {$|\eta| 1.9$ GeV}, which is large compared to the average transverse momentum of the neutron of 0.22 GeV. The ratio of neutron-tagged to inclusive $D^*$ production is $8.85\pm 0.93({\rm stat.})^{+0.48}_{-0.61}({\rm syst.})\%$ in the photon-proton center-of-mass energy range {$130 <W<280$ GeV}. The data suggest that the presence of a hard scale enhances the fraction of events with a leading neutron in the final state.Comment: 28 pages, 4 figures, 2 table

Isolated tau leptons in events with large missing transverse momentum at HERA

A search for events containing isolated tau leptons and large missing transverse momentum, not originating from the tau decay, has been performed with the ZEUS detector at the electron-proton collider HERA, using 130 pb^-1 of integrated luminosity. A search was made for isolated tracks coming from hadronic tau decays. Observables based on the internal jet structure were exploited to discriminate between tau decays and quark- or gluon-induced jets. Three tau candidates were found, while 0.40 +0.12 -0.13 were expected from Standard Model processes, such as charged current deep inelastic scattering and single W-boson production. To search for heavy-particle decays, a more restrictive selection was applied to isolate tau leptons produced together with a hadronic final state with high transverse momentum. Two candidate events survive, while 0.20 +-0.05 events are expected from Standard Model processes.Comment: 28 pages, 4 figures, 3 tables, accepted by Phys. Lett. B. Updated with minor changes to the text requested by the journal refere