Diego Marcos-Jorquera

Network Intrusion Detection System Embedded on a Smart Sensor

This paper proposes a Network Intrusion Detection System (NIDS) embedded in a smart-sensor-inspired device under a service-oriented architecture (SOA) approach which is able to operate independently as an anomaly-based NIDS, or integrated transparently in a Distributed Intrusion Detection System (DIDS). The proposal is innovative because it combines the advantages of the smart sensor approach and the subsequent offering of the NIDS functionality as a service with the SOA use to achieve their integration with other DIDS components. The main goal of this paper is to reduce the huge volume of management tasks inherent to this type of network services, as well as facilitating the design of DIDS whose managing complexity could be restricted within well-defined margins. This paper also addresses the construction of a physical sensor prototype. This prototype was used to carry out the tests that has demonstrated the proposals validity, providing detection and performance ratios similar to those of existing intrusion detection systems (IDS), but with the advantage of a zero-maintenance approach.

Industrial Machines as a Service: Modelling industrial machinery processes

In this paper is proposed a service model for the industrial machinery which provides a design pattern which details, classifies and organises the services that ideally the machine should possess in order to facilitate its self-management and proactive management of the business logic for which it is responsible. This pattern also establishes those services which will enable the machine to communicate and cooperate with other machines or manufacturing elements, as well as with the remaining business processes. The proposed pattern are based on service oriented architecture (SOA) and Web services extensions (WS-*) in order to ensure that the industrial machinery attains high levels of self management and especially so that it can show the rest of the organisation and from a perspective of functionality, in a normalised manner, overcoming barriers imposed by technological and physical restrictions typical of these components and which traditionally have kept them isolated from the general business model.

Wake on LAN over Internet as Web Service

In this paper we present an approach based on the use of embedded network devices for the deployment of small network services, such as DHCP, BOOTP, filters or very specific proxies. The novelty of the proposal resides in the very reduced size of the devices, in that every device is specialized in a certain network function, and specially designed to operate with minimum maintenance, and in the fact that they are presented under both conventional (client-server) and more open (SOA) standards, more concretely, as Web services. At the same time, these embedded services can work in an individual way or in collaboration with other enterprise network services, either provided by means of conventional systems or by means of other embedded devices. To specify the proposal, we have chosen as example an embedded device able to manage the remote boot of network nodes by means of wake on LAN (WoL) through Internet.

Intrusion Detection Method Using Neural Networks Based on the Reduction of Characteristics

The application of techniques based on Artificial Intelligence for intrusion detection systems (IDS), mostly, artificial neural networks (ANN), is becoming a mainstream as well as an extremely effective approach to address some of the current problems in this area. Nevertheless, the selection criteria of the features to be used as inputs for the ANNs remains a problematic issue, which can be put, in a nutshell, as follows: The wider the detection spectrum of selected features is, the lower the performance efficiency of the process becomes and vice versa. This paper proposes sort of a compromise between both ends of the scale: a model based on Principal Component Analysis (PCA) as the chosen algorithm for reducing characteristics in order to maintain the efficiency without hindering the capacity of detection. PCA uses a data model to diminish the size of ANNs input vectors, ensuring a minimum loss of information, and consequently reducing the complexity of the neural classifier as well as maintaining stability in training times. A test scenario for validation purposes was developed, using based-on-ANN IDS. The results obtained based on the tests have demonstrated the validity of the proposal.

Wireless sensor networks and service-oriented architecture, as suitable approaches to be applied into ITS

In this paper, Wireless Sensor Networks (WSN) and Service-Oriented Architecture (SOA) approaches are analyzed given that represent both emerging and key role for Intelligent Transportations Systems (ITS). However, It is worth noting that WSN and SOA approaches have begun to be applied into ITS separately and day by day these approaches tend to be combined to get the best outcomes for both safety and security for ITS applications. For this reason, a discussion of the principals ITS applications of these two approaches and a case study, that has been designed and implemented to illustrate their advantages, are presented. The case study is focused on support a very useful ITS service associated with the localization of parking spaces.

Wake on LAN Over the Internet as Web Service System on Chip

In this paper, we introduce a system on chip designed to run a particular Web service (WS) in an application-specific integrated circuit. The system has been designed devoid of processor and software and conceived as a hardware pattern for a trouble-free design of network services offered as WS in a service-oriented architecture (SOA). Therefore, the chip is not only able to act as a Simple Object Access Protocol service provider but also capable of registering the service on its own in an external broker server using the Universal Description, Discovery and Integration Standard publication protocol. This proposal has been named WS on chip, and its main goal is to implement more cost-effective and zero-management SOA network devices. To validate this approach, a prototypical device has been developed using a field-programmable gate array technology. The particular network service selected has been Wake on LAN (WoL) over the Internet, thus allowing any WS client to wake up any network node compatible with WoL technology. A full SOA scenario has also been developed to test the prototype functionalities and show the proposal validity.

Energy Management System as an Embedded Service: Saving Energy Consumption of ICT

In this paper we present a service approach based on the use of embedded network devices for the energy management of Information and Communication Technology (ICT) infrastructures. The service is completely compatible with other strategies in order to achieve an efficient management for saving energy. These devices are very small, with low consumption and specially designed to operate with minimum maintenance, and also they are presented under Services Oriented Architecture open standards, more specifically, as Web Services. In addition, these embedded services can work individually or in collaboration with other ICT enterprise services, either through conventional systems or by means of other embedded devices. To validate the proposal we have implemented a prototype and we have designed a test scenario based in the ICT replicated infrastructure in order to support web applications of the Polytechnic University College at the University of Alicante.

Services and Networks management through embedded devices and SOA

In this paper we present an approach based on the use of embedded network devices for the deployment of small network services, such as DHCP, BOOTP, filters or very specific proxies. The novelty of the proposal resides in the very reduced size of the devices, in that every device is specialized in a certain network function, and specially designed to operate with minimum maintenance, and in the fact that they are presented under both conventional (client-server) and more open (SOA) standards, more concretely, as Web services. At the same time, these embedded services can work in an individual way or in collaboration with other enterprise network services, either provided by means of conventional systems or by means of other embedded devices. To specify the proposal, we have chosen as example an embedded device able to manage the remote boot of network nodes by means of wake on LAN (WoL) through Internet

Embedded web services for industrial TCP/IP services monitoring

In this paper we present an approach based on the use of embedded network devices for the deployment of small network services suitable for IT management in industrial and manufacturing environments. The novelty of the proposal resides in the fact that allows to unfold IT services that can be deployed without the need for specialized IT staff since the services in question have a zero maintenance design philosophy. They are presented under both conventional (client-server) and more open (SOA) standards, more specifically, as Web Services. To illustrate the specific the proposal, we have chosen as an example an embedded device able to monitor the correct operation of the applications and IT services located in the current manufacturing equipment and components.

High Availability for Manufacturing Components

The more the information technologies begin to be incorporated into the industrial productive fabric, the more complex it becomes to organise them. It is vital to implant proactive, self-managed systems that ensure continuous operation and, therefore, business continuity. This article proposes a regeneration system for industrial production elements that transfers the concept of high availability to the manufacturing levels of the organisation, acting automatically under open protocols when there is degradation or failure of any of the components, ensuring that normal operation is resumed within a delimited time. In addition to this proposal, we present a development scenario that allows the validity of the approach to be confirmed, while verifying the drastic reduction in recovery times, the support for the significant heterogeneity existing in these scenarios and their high level of automation, while practically dispensing with the intervention of system administrators.