15237323
Testing and Fault Tolerance of Multistage Interconnection Networks
Test length is independent of network size in this simple, straightforward methodology for testing MINs (multistage interconnection networks). It requires only four test sequences for single-fault diagnosis. 26 references.
43408451
Network Intrusion Detection System Using Random Projection Technique
22890668
Arithmetic Algorithms in a Negative Base
Algorithms are described for the basic arithmetic operations in a negative base. These algorithms are simpler, faster, and more general than those proposed by Sankar et al.
29269446
A Novel Optimal Channel Partitioning Algorithm for Integrated Wireless and Mobile Networks
How to efficiently support multi-class services is a very important issue in integrated wireless and mobile networks because each type of services has distinct characteristics and quality of service (QoS) requirements. This paper presents an efficient algorithm for near optimal channel allocation when different types of services are to be provided in the next generation integrated wireless and mobile networks. We specifically propose a preemptive priority scheme for an integrated wireless and mobile network by first dividing channels into three independent groups and classifying traffic into four different types. The proposed system is modeled by a multi-dimension Markov chain model. Then such a model is used to obtain a set of relations that correlate performances with various system parameters. A novel recursive algorithm is developed to determine the minimal number of channels in each channel group that would be necessary to satisfy the QoS requirements. We also investigate the impact of load ratio for different types of traffic on channel assignment. Finally, we discuss some limitations of our approach and indicate possible future work. We believe that the partitioning scheme proposed in this paper can become a starting point for analysis of future integrated wireless and mobile networks.
5450203
Guest Editors' Introduction: Challenges in Designing Fault-Tolerant Routing in Networks
+I INRE arc several means nf intercomiecting the compoT nents of a computer system. Components can be connccted through direct or indirect connections. In a direct network, channels directly connect each processor. Neighboring nodes communicate with each other by scnding messages across the channcls. In an indirect network, processors are cnnnccted through switches and/or buses. Depending on how components are connected, we have bus-based networks, router-based networks, switcli-bascd networks, and cluster-based (hybrid of the other thrce networks) nctworks. Nctworks can also be classified bascd on topologies, which cau be either replnr or irregulnr. Anothcr classification is based on applications-there are local arca networks (LANs), networks of workstations (NOWs), multiprocessors, and mobilc networks. In a computer network, the efficiency of a routing process is critical to the system performance. A routing process deals with moving data between processors in a given network. When a routing process involves oiic source and onc destination, it is called unicnst or poirit-lopoint communication. When such a proccss involves more than one source and/or one destination, it is called a collective comrnlrnicntion process. Examples of collective communication include iirulticnst (one-to-many, one source and many destinations), brundcnst (one-to-all), and gossip (all-to-all).
26743853
Design and Analysis of a Class of Highly Scalable Hierarchical Networks: PdBCube
Abstract A class of hierarchical networks called the dBCube, that provides cost-effective and high-performance communication in large multicomputer systems, has recently been introduced. Such a compound graph of a hypercube and a de Bruijn (dB) graph utilizes every node of the hypercube as a gateway for intercluster communication. This paper presents a partially connected dBCube subclass (PdBCube), wherein the use of fewer nodes as gateways makes the PdBCube highly scalable in terms of both the hypercube and the dB size. This enhancement in scalability can be achieved by two different approaches to assigning gateways. Performance degradation of the proposed PdBCube is illustrated in terms of diameter and average distance. Improvement in track efficiency and reduction in cost are observed to be directly related to a decrease in the number of remote links.
11059176
Policy-based validation of SAN configuration
Historically, storage has been directly connected to servers for fast local access and easy configuration. In recent years, storage area networks (SANs) have defined an alternative storage paradigm that allows storage to be shared among servers using fast interconnects. One of the key challenges of SAN management is the large number of configuration problems that are encountered in a typical SAN deployment. These configuration problems can be addressed by SAN management software. However, hard-coding the SAN configuration rules into the management software is not a viable option since it is not possible to easily modify or replace old configuration rules and specify new policies and guidelines. In this paper, we propose a novel policy-based SAN configuration validation system that can be used to specify, store, and evaluate configuration policies for SANs. We also introduce five new operators for collection policies that are useful for evaluating a wide variety of practical SAN configuration policies found in practice. The policy-based SAN configuration checking approach proposed in this paper is discussed within the context of device interoperability constraints. However, this approach is extensible as it can also be used to enforce performance, reliability, and security-related configuration constraints.
13652126
Using certes to infer client response time at the web server
As businesses continue to grow their World Wide Web presence, it is becoming increasingly vital for them to have quantitative measures of the mean client perceived response times of their web services. We present Certes (CliEnt Response Time Estimated by the Server), an online server-based mechanism that allows web servers to estimate mean client perceived response time, as if measured at the client. Certes is based on a model of TCP that quantifies the effect that connection drops have on mean client perceived response time by using three simple server-side measurements: connection drop rate, connection accept rate and connection completion rate. The mechanism does not require modifications to HTTP servers or web pages, does not rely on probing or third party sampling, and does not require client-side modifications or scripting. Certes can be used to estimate response times for any web content, not just HTML. We have implemented Certes and compared its response time estimates with those obtained with detailed client instrumentation. Our results demonstrate that Certes provides accurate server-based estimates of mean client response times in HTTP 1.0/1.1 environments, even with rapidly changing workloads. Certes runs online in constant time with very low overhead. It can be used at websites and server farms to verify compliance with service level objectives.
1021221
Inferring client response time at the web server
As businesses continue to grow their World Wide Web presence, it is becoming increasingly vital for them to have quantitative measures of the client perceived response times of their web services. We present Certes (CliEnt Response Time Estimated by the Server), an online server-based mechanism for web servers to measure client perceived response time, as if measured at the client. Certes is based on a model of TCP that quantifies the effect that connection drops have on perceived client response time, by using three simple server-side measurements: connection drop rate, connection accept rate and connection completion rate. The mechanism does not require modifications to http servers or web pages, does not rely on probing or third party sampling, and does not require client-side modifications or scripting. Certes can be used to measure response times for any web content, not just HTML. We have implemented Certes and compared its response time measurements with those obtained with detailed client instrumentation. Our results demonstrate that Certes provides accurate server-based measurements of client response times in HTTP 1.0/1.1 [14] environments, even with rapidly changing workloads. Certes runs online in constant time with very low overhead. It can be used at web sites and server farms to verify compliance with service level objectives.
45546568
Multi-channel Attacks
We introduce multi-channel attacks, i.e., side-channel attacks which utilize multiple side-channels such as power and EM simultaneously. We propose an adversarial model which combines a CMOS leakage model and the maximum-likelihood principle for performing and analyzing such attacks. This model is essential for deriving the optimal and very often counter-intuitive techniques for channel selection and data analysis. We show that using multiple channels is better for template attacks by experimentally showing a three-fold reduction in the error probability. Developing sound countermeasures against multi-channel attacks requires a rigorous leakage assessment methodology. Under suitable assumptions and approximations, our model also yields a practical assessment methodology for net information leakage from the power and all available EM channels in constrained devices such as chip-cards. Classical DPA/DEMA style attacks assume an adversary weaker than that of our model. For this adversary, we apply the maximum-likelihood principle to such design new and more efficient single and multiple-channel DPA/DEMA attacks.
9570200
Templates as Master Keys
We introduce two new attacks: the single-bit template attack and the template-enhanced DPA attack. The single-bit template attack can be used very effectively to classify even single bits in a single side channel sample with a high probability of correctness. The template-enhanced DPA attack, combines traditional DPA with single-bit template attacks to show that if an adversary has access to a test card with even a slightly biased RNG, then he/she can break protected cryptographic implementations on a target card even if they have perfect RNGs. In support of our claim, we report results from experiments on breaking two implementations of DES and AES protected by the masking countermeasure running on smartcards of different manufacturers. 
 
In light of these results, the threat of template attacks, generally viewed as intrinsically difficult to mount, needs to be reconsidered.