40149048
An International Perspective on Fighting Cybercrime
Cybercrime is becoming ever more serious. Findings from the 2002Computer Crime and Security Survey show an upward trend that demonstrates aneed for a timely review of existing approaches to fighting this new phenomenonin the information age. In this paper, we provide an overview of cybercrimeand present an international perspective on fighting cybercrime. We review currentstatus of fighting cybercrime in different countries, which rely on legal, organizational,and technological approaches, and recommend four directions forgovernments, lawmakers, intelligence and law enforcement agencies, and researchersto combat cybercrime.
19452291
Cross-Jurisdictional Activity Networks to Support Criminal Investigations
Border and transportation security is a critical part of the Department of Homeland Security's (DHS) national strategy. DHS strategy calls for the creation of "smart borders" where information from local, state, federal, and international sources can be combined to support risk-based management tools for border-management agencies. Sharing cross-jurisdictional law enforcement data is important because criminals take advantage of the fact that information sharing between law enforcement jurisdictions is very limited. Challenges to information integration in this important domain include policy and privacy concerns, data security requirements, semantic or schema-level matching of legacy system data, and identity matching. The BorderSafe project leverages the skills and experiences of a diverse group of researchers, law enforcement officials, and government agencies to address data sharing needs in the Southwest United States. Our demo presents a framework for combining law enforcement data across jurisdictions to support criminal investigation and describes how that framework was used in combining three large, overlapping datasets to produce an integrated system for visualizing criminal activity networks.
21266732
User Misconceptions of Information Retrieval Systems
In this paper, we report results of an investigation where thirty subjects were observedperforming subject-based search in an online catalog system. The observationshave revealed a range of misconceptions users have when performing subject-basedsearch. We have developed a taxonomy that characterizes these misconceptions andhypotheses about the causes of the misconceptions. Directions for improving searchperformance are also suggested.
32790214
Federating Diverse Collections of Scientific Literature
The Digital Library Initiative (DLI) project at the University of Illinois at Urbana-Champaign is developing the information infrastructure to effectively search technical documents on the Internet. The authors are constructing a large testbed of scientific literature, evaluating its effectiveness under significant use, and researching enhanced search technology. They are building repositories (organized collections) of indexed multiple-source collections and federating (merging and mapping) them by searching the material via multiple views of a single virtual collection. Developing widely usable Web technology is also a key goal. Improving Web search beyond full-text retrieval will require using document structure in the short term and document semantics in the long term. Their testbed efforts concentrate on journal articles from the scientific literature, with structure specified by the Standard Generalized Markup Language (SGML). Research efforts extract semantics from documents using the scalable technology of concept spaces based on context frequency. They then merge these efforts with traditional library indexing to provide a single Internet interface to indexes of multiple repositories.
35410760
Collaborative Workflow Management for Interagency Crime Analysis
To strengthen homeland security, there is a critical need for new tools that can facilitate real time collaboration among various law enforcement agencies. Through a field study, we find that law enforcement work is knowledge intensive and involves complex collaborative processes interrelating a large number of disparate units in a loosely defined virtual organization. To support knowledge intensive collaboration, we propose a new workflow centric framework to seamlessly integrate previously separate techniques from the fields of information retrieval and workflow management. Specifically, we develop a collaborative workflow management framework for interagency crime analysis. The key contribution of our research is that by integrating various state-of-the-art techniques innovatively, the proposed system can support real time collaboration processes in a virtual organization that evolves dynamically.
2228993
Visualization in law enforcement
Visualization techniques have proven to be critical in helping crime analysis. By interviewing and observing Criminal Intelligence Officers (CIO) and civilian crime analysts at the Tucson Police Department (TPD), we found that two types of tasks are important for crime analysis: crime pattern recognition and criminal association discovery. We developed two separate systems that provide automatic visual assistance on these tasks. To help identify crime patterns, a Spatial Temporal Visualization (STV) system was designed to integrate a synchronized view of three types of visualization techniques: a GIS view, a timeline view and a periodic pattern view. The Criminal Activities Network (CAN) system extracts, visualizes and analyzes criminal relationships using spring-embedded and blockmodeling algorithms. This paper discusses the design and functionality of these two systems and the lessons learned from the development process and interaction with law enforcement officers.
641995
An Admission Control Scheme for Predictable Server Response Time for Web Accesses
The diversity in web object types and their resource requirements contributes to the unpredictability of web service provisioning. In this paper, an eÆcient admission control algorithm, PACERS, is proposed to provide di erent levels of services based on the server workload characteristics. Service quality is ensured by periodical allocation of system resources based on the estimation of request rate and service requirements of prioritized tasks. Admission of lower priority tasks is restricted during high load periods to prevent denial-of-services to high priority tasks. A doublequeue structure is implemented to reduce the e ects of estimation inaccuracy and to utilize the spare capacity of the server, thus increasing the system throughput. Response delays of the high priority tasks are bounded by the length of the prediction period. Theoretical analysis and experimental study show that the PACERS algorithm provides desirable throughput and bounded response delay to the prioritized tasks, without any signi cant impact on the aggregate throughput of the system under various workload.
9059456
Model Checking One Million Lines of C Code
Implementation bugs in security-critical software are pervasive. Several authors have previously suggested model checking as a promising means to detect improper use of system interfaces and thereby detect a broad class of security vulnerabilities. In this paper, we report on our practical experience using MOPS, a tool for software model checking security-critical applications. As examples of security vulnerabilities that can be analyzed using model checking, we pick five important classes of vulnerabilities and show how to codify them as temporal safety properties, and then we describe the results of checking them on several significant Unix applications using MOPS. After analyzing over one million lines of code, we found more than a dozen new security weaknesses in important, widely-deployed applications. This demonstrates for the first time that model checking is practical and useful for detecting security weaknesses at large scale in real,
15665012
Progressive auction based resource allocation in service-oriented architecture
The emerging paradigm of distributed Web services has promised seamless business integration across the Internet that shares not only computing power but also applications. One major challenge is resource allocation to each end user in an economically efficient and low latency manner. A common solution is proportional sharing where each user gets his resource in proportion to the predetermined weight. However, this does not allow users to differentiate the value of their services and to dynamically adjust the weights. A resource reservation mechanism may improve the information and service sharing but usually introduces a high latency. In this paper, we propose a progressive auction based market mechanism for resource allocation that allows user differentiation of the service value and ensures the resource acquisition latency to be limited only to the communication delay in service-oriented architecture (SOA) systems. We present a service sharing prototype for selecting services for further business process composition or solution creation and show experimental results on the formation of reliable user ranking in resource sharing through the progressive auction.
26701472
Interface descriptions for enterprise architecture
This paper describes our experiences in implementing a repository-based system that records and manages architectural information for an organization-wide set of enterprise information systems. The system is called Interface Descriptions for Enterprise Architecture (IDEA). The IDEA system business case and system creation are discussed, and the use of the system is exemplified by applying it to a set of information systems within a large corporation. We show how the existence of a managed enterprise architecture description enables an important set of analyses: risk analyses, architecture analyses, and change management analyses. Finally, we discuss how the IDEA system has the potential to catalyze even more profound change by changing how the various systems' stakeholders interact.
7036833
Dynamic Service Discovery for Mobile Computing: Intelligent Agents Meet Jini in the Aether
The emergence of ad-hoc pervasive connectivity for devices based on Bluetooth-like systems provides a new way to create applications for mobile systems. We seek to realize ubiquitous computing systems based on the cooperation of autonomous, dynamic and adaptive components (hardware as well as software) which are located in vicinity of one another. In this paper we present this vision. We also describe a prototype system we have developed that implements parts of this vision – in particular a system that combines agent oriented and service oriented approaches and provides dynamic service discovery. We point out why existing systems such as Jini are not suited for this task, and how our system improves on them.