18665022
Towards scalable and reliable group key management
1. INTRODUCTION In secure group communications, members of a group share a symmetric group key. A key server provides access control to the group key as well as reliable rekeying for group members whenever the key changes. Figure 1 shows the functional components of an architecture for group key management. The registration component authenticates users and distributes to each user its individual key, which is shared only between the user and the key server. Authenticated users send their join and leave requests to the rekey encoding component. The encoding component validates the requests by checking whether they are encrypted by individual keys, and generates rekey messages, which are sent to the rekey transport component for delivery. Previous studies, however, have focused mainly on the encoding component, particularly the processing time required by the encoding component in a key server to process each request individually [1, 2]. The performance of batch rekeying and the problem of reliable transport of group rekey messages have not been addressed in the literature. In this paper, we investigate scalability issues of all three components, including a performance analysis of periodic batch rekeying based on the use of key trees [2], the design of a reliable rekey transport protocol, an analysis of server and client bandwidth requirements for the protocol, and an overall performance analysis of our system, called keygem. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. redistribute to lists, requires prior specific permission and/or a fee. While individual rekeying introduces no extra delay to process user requests, it has two issues. First, it is hard for individual rekeying to control the synchronization between keys and data. Furthermore, the delay needed to reliably multicast a rekey message may he too large to implement individual rekeying. Second, individual rekey-ing can be inefficient. For authentication purpose, each rekey message needs to be digitally signed to prove that it originates from the key server. Furthermore, when a key server rekeys upon each request and when forward access control is required, we show that f2(log N) is a lower bound on the amortized number of encrypted keys. In keygem, we alleviate the synchronization problem and improve rekey …
15017783
On the Computational Complexity of Sensor Network Localization
Determining the positions of the sensor nodes in a network is essential to many network functionalities such as routing, coverage and tracking, and event detection. The localization problem for sensor networks is to reconstruct the positions of all of the sensors in a network, given the distances between all pairs of sensors that are within some radius r of each other. In the past few years, many algorithms for solving the localization problem were proposed, without knowing the computational complexity of the problem. In this paper, we show that no polynomial-time algorithm can solve this problem in the worst case, even for sets of distance pairs for which a unique solution exists, unless RP = NP. We also discuss the consequences of our result and present open problems.
3103973
Sprite: a simple, cheat-proof, credit-based system for mobile ad-hoc networks
Mobile ad hoc networking has been an active research area for several years. How to stimulate cooperation among selfish mobile nodes, however, is not well addressed yet. In this paper, we propose Sprite, a simple, cheat-proof, credit-based system for stimulating cooperation among selfish nodes in mobile ad hoc networks. Our system provides incentive for mobile nodes to cooperate and report actions honestly. Compared with previous approaches, our system does not require any tamper-proof hardware at any node. Furthermore, we present a formal model of our system and prove its properties. Evaluations of a prototype implementation show that the overhead of our system is small. Simulations and analysis show that mobile nodes can cooperate and forward each other's messages, unless the resource of each node is extremely low.
920559
Verifiable distributed oblivious transfer and mobile agent security
The mobile agent is a fundamental building block of the mobile computing paradigm. In mobile agent security, oblivious transfer (OT) from a trusted party can be used to protect the agent's privacy and the hosts' privacy. In this paper, we introduce a new cryptographic primitive called Verifiable Distributed Oblivious Transfer (VDOT), which allows us to replace a single trusted party with a group of threshold trusted servers. The design of VDOT uses two novel techniques, consistency verification of encrypted secret shares and consistency verification through re-randomization. VDOT protects the privacy of both the sender and the receiver against malicious attacks of the servers. We also show the design of a system to apply VDOT to protect the privacy of mobile agents. Our design partitions an agent into the general portion and the security-sensitive portion. We also implement the key components of our system. As far as we know, this is the first effort to implement a system that protects the privacy of mobile agents. Our preliminary evaluation shows that protecting mobile agents not only is possible, but also can be implemented efficiently.
38612898
Transient behaviors of TCP-friendly congestion control protocols
We investigate the fairness, smoothness, responsiveness, and aggressiveness of TCP and three representative TCP-friendly congestion control protocols: GAIMD, TFRC, and TEAR. The properties are evaluated both analytically and via simulation by studying protocol responses to three network environment changes. The first environment change is the inherent fluctuations in a stationary network environment. Under this scenario, we consider three types of sending rate variations: smoothness, short-term fairness, and long-term fairness. For a stationary environment, we observe that smoothness and fairness are positively correlated. We derive an analytical expression for the sending rate coefficient of variation for each of the four protocols. These analytical results match well with experimental results. The other two environment changes we study are a step increase of network congestion and a step increase of available bandwidth. Protocol responses to these changes reflect their responsiveness and aggressiveness, respectively.
4407504
Optimal ISP subscription for Internet multihoming: algorithm design and implication analysis
Multihoming is a popular method used by large enterprises and stub ISPs to connect to the Internet to reduce cost and improve performance. Recently researchers have studied the potential benefits of multihoming and proposed protocols and algorithms to realize these benefits. They focus on how to dynamically select which ISPs to use for forwarding and receiving packets, and assume that the set of subscribed ISPs is given a priori. In practice, a user often has the freedom to choose which subset of ISPs among all available ISPs to subscribe to. We call the problem of how to choose the optimal set of ISPs the ISP subscription problem. In this paper, We design a dynamic programming algorithm to solve the ISP subscription problem optimally. We also design a more efficient algorithm for a large class of common pricing functions. Using real traffic traces and realistic pricing data, we show that our algorithm reduces users' cost. Next we study how ISPs respond to users' optimal ISP subscription by adjusting their pricing strategies. We call this problem the ISP pricing problem. Using a realistic charging model, we formulate the problem as a non-cooperative game. We first prove that if cost is the only criterion used by a user to determine which subset of ISPs to subscribe to, at any equilibrium all ISPs receive zero revenue. We then study a more practical formulation in which different ISPs provide different levels of reliability and users choose ISPs to both improve reliability and reduce cost. We analyze this problem and show that at any equilibrium an ISP's revenue is positive and determined by its reliability.
2952964
Non-Disjoint Discretization for Naive-Bayes Classifiers
Previous discretization techniques have discretized numeric attributes into disjoint intervals. We argue that this is neither necessary nor appropriate for naive-Bayes classifiers. The analysis leads to a new discretization method, Non-Disjoint Discretization (NDD). NDD forms overlapping intervals for a numeric attribute, always locating a value toward the middle of an interval to obtain more reliable probability estimation. It also adjusts the number and size of discretized intervals to the number of training instances, seeking an appropriate trade-off between bias and variance of probability estimation. We justify NDD in theory and test it on a wide cross-section of datasets. Our experimental results suggest that for naiveBayes classifiers, NDD works better than alternative discretization approaches.
43250103
An Agent-Based Ontological Approach for Information Reorganisation
This paper presents a novel approach for information reorganisation which is particularly suitable for distributed computing, such as Web services. An agent-based architecture is developed to cope with service agents' on and off and provide semantic support for implementation of complex e-business applications that may span diverse enterprises. A frame-based ontology representation is discussed. The representation is well suited for representing complex relationships that are unavailable in current ontology related work. Our approach aims to support dynamic information reorganisation in the Internet based e-business applications. The obtained information can serve for the knowledge acquisition purpose.
14000419
Using an experimental study to develop group awareness support for real-time distributed collaborative writing
Supporting group awareness is vital for the success of real-time, distributed, collaborative writing systems. Many awareness mechanisms have been introduced, but highly effective solutions are few. The research presented in this paper focuses on the development of awareness mechanisms using an experimental study of synchronous distributed collaborative writing. Our study has made two major contributions to research on group awareness. First, the study compares the importance of different awareness elements in supporting group awareness for collaborative writing. The results of our Wilcoxon test on awareness elements identify the five most important elements, including ‘‘Being able to comment on what other users have done,’’ ‘‘Knowing what actions other users are currently taking,’’ ‘‘Providing a communication tool when audio is not available,’’ ‘‘Knowing other user’s working areas in the document,’’ and ‘‘Knowing other user’s tasks.’’ Second, the research proposes mechanisms corresponding to the above-mentioned five awareness elements. The mechanisms include Dynamic Task List (DTL), Modification Director (MD), Advanced Chat (AC) and Split Window View (SWV). These mechanisms provide support for various aspects of group awareness, and add many enhanced features to existing awareness mechanisms. For example, DTL presents high-level information about authors’ responsibilities and the correlation between their work allocations. MD notifies users instantaneously whenever their work is modified by other authors. AC enhances communication between users by allowing them to attach document objects such as text and diagrams to a conversation message. And, SWV provides the views of other authors’ working areas and viewing areas simultaneously. � 2005 Elsevier B.V. All rights reserved.
8861403
Design and implementation of the just-in-time retrieving policy for schedule-based distributed multimedia presentations
In order to provide the smooth playback of a distributed multimedia presentation, the object-retrieving engine for the player must fetch each object before its playback time. In this paper, a smart object-retrieving engine is proposed, which adopts a retrieving policy named the just-in-time policy. The policy expects the retrieval process of an object to finish right before the playback time of the object to achieve a better buffer utilization and network bandwidth efficiency. The proposed object-retrieving engine focuses on SMIL1.0-based multimedia presentations. By converting the synchronization relationship of objects in the SMIL 1.0 document to Real-Time Synchronization Model, which simplifies the handling of the synchronization relationship, and considering the end-to-end bandwidth as well as the user interactions, the object-retrieving engine determines the object request time for each object. The engine issues the request to fetch each object for the ongoing presentation at the object request time, and provides the player with proper media objects. The feasibility and better performance of the proposed just-in-time retrieving policy had been proved by performance measurements of system implementation.
7913579
Robustness of adaptive filtering methods in a cross-benchmark evaluation
This paper reports a cross-benchmark evaluation of regularized logistic regression (LR) and incremental Rocchio for adaptive filtering. Using four corpora from the Topic Detection and Tracking (TDT) forum and the Text Retrieval Conferences (TREC) we evaluated these methods with non-stationary topics at various granularity levels, and measured performance with different utility settings. We found that LR performs strongly and robustly in optimizing T11SU (a TREC utility function) while Rocchio is better for optimizing Ctrk (the TDT tracking cost), a high-recall oriented objective function. Using systematic cross-corpus parameter optimization with both methods, we obtained the best results ever reported on TDT5, TREC10 and TREC11. Relevance feedback on a small portion (0.05~0.2%) of the TDT5 test documents yielded significant performance improvements, measuring up to a 54% reduction in Ctrk and a 20.9% increase in T11SU (with b=0.1), compared to the results of the top-performing system in TDT2004 without relevance feedback information.