Juan Antonio Gil-Martínez-Abarca

Network Intrusion Detection System Embedded on a Smart Sensor

This paper proposes a Network Intrusion Detection System (NIDS) embedded in a smart-sensor-inspired device under a service-oriented architecture (SOA) approach which is able to operate independently as an anomaly-based NIDS, or integrated transparently in a Distributed Intrusion Detection System (DIDS). The proposal is innovative because it combines the advantages of the smart sensor approach and the subsequent offering of the NIDS functionality as a service with the SOA use to achieve their integration with other DIDS components. The main goal of this paper is to reduce the huge volume of management tasks inherent to this type of network services, as well as facilitating the design of DIDS whose managing complexity could be restricted within well-defined margins. This paper also addresses the construction of a physical sensor prototype. This prototype was used to carry out the tests that has demonstrated the proposals validity, providing detection and performance ratios similar to those of existing intrusion detection systems (IDS), but with the advantage of a zero-maintenance approach.

Industrial Machines as a Service: A Model Based on Embedded Devices and Web Services

In the last years, the maturity reached by the Information and Communications Technologies (ICT) has led us to an scenario which is suitable for facing the new business models, arisen as a consequence of the adoption of the Internet as the basic development infrastructure: strengthen of relationships between organizations and also between each organization and its customers, access to new markets, new competition models and manufacturing procedures. The research presented in this article is centred in the last field, concretely in a new method which allows an integral eBusiness model, compatible with current proposals and capable of overcoming the physical and logistical constraints that prevent the manufacturing processes from taking advantage of the whole potential offered by new technologies in this field, which are already being used by other business areas.

Wake on LAN over Internet as Web Service

In this paper we present an approach based on the use of embedded network devices for the deployment of small network services, such as DHCP, BOOTP, filters or very specific proxies. The novelty of the proposal resides in the very reduced size of the devices, in that every device is specialized in a certain network function, and specially designed to operate with minimum maintenance, and in the fact that they are presented under both conventional (client-server) and more open (SOA) standards, more concretely, as Web services. At the same time, these embedded services can work in an individual way or in collaboration with other enterprise network services, either provided by means of conventional systems or by means of other embedded devices. To specify the proposal, we have chosen as example an embedded device able to manage the remote boot of network nodes by means of wake on LAN (WoL) through Internet.

Intrusion Detection Method Using Neural Networks Based on the Reduction of Characteristics

The application of techniques based on Artificial Intelligence for intrusion detection systems (IDS), mostly, artificial neural networks (ANN), is becoming a mainstream as well as an extremely effective approach to address some of the current problems in this area. Nevertheless, the selection criteria of the features to be used as inputs for the ANNs remains a problematic issue, which can be put, in a nutshell, as follows: The wider the detection spectrum of selected features is, the lower the performance efficiency of the process becomes and vice versa. This paper proposes sort of a compromise between both ends of the scale: a model based on Principal Component Analysis (PCA) as the chosen algorithm for reducing characteristics in order to maintain the efficiency without hindering the capacity of detection. PCA uses a data model to diminish the size of ANNs input vectors, ensuring a minimum loss of information, and consequently reducing the complexity of the neural classifier as well as maintaining stability in training times. A test scenario for validation purposes was developed, using based-on-ANN IDS. The results obtained based on the tests have demonstrated the validity of the proposal.

Wake on LAN Over the Internet as Web Service System on Chip

In this paper, we introduce a system on chip designed to run a particular Web service (WS) in an application-specific integrated circuit. The system has been designed devoid of processor and software and conceived as a hardware pattern for a trouble-free design of network services offered as WS in a service-oriented architecture (SOA). Therefore, the chip is not only able to act as a Simple Object Access Protocol service provider but also capable of registering the service on its own in an external broker server using the Universal Description, Discovery and Integration Standard publication protocol. This proposal has been named WS on chip, and its main goal is to implement more cost-effective and zero-management SOA network devices. To validate this approach, a prototypical device has been developed using a field-programmable gate array technology. The particular network service selected has been Wake on LAN (WoL) over the Internet, thus allowing any WS client to wake up any network node compatible with WoL technology. A full SOA scenario has also been developed to test the prototype functionalities and show the proposal validity.

Services and Networks management through embedded devices and SOA

In this paper we present an approach based on the use of embedded network devices for the deployment of small network services, such as DHCP, BOOTP, filters or very specific proxies. The novelty of the proposal resides in the very reduced size of the devices, in that every device is specialized in a certain network function, and specially designed to operate with minimum maintenance, and in the fact that they are presented under both conventional (client-server) and more open (SOA) standards, more concretely, as Web services. At the same time, these embedded services can work in an individual way or in collaboration with other enterprise network services, either provided by means of conventional systems or by means of other embedded devices. To specify the proposal, we have chosen as example an embedded device able to manage the remote boot of network nodes by means of wake on LAN (WoL) through Internet

High Availability for Manufacturing Components

The more the information technologies begin to be incorporated into the industrial productive fabric, the more complex it becomes to organise them. It is vital to implant proactive, self-managed systems that ensure continuous operation and, therefore, business continuity. This article proposes a regeneration system for industrial production elements that transfers the concept of high availability to the manufacturing levels of the organisation, acting automatically under open protocols when there is degradation or failure of any of the components, ensuring that normal operation is resumed within a delimited time. In addition to this proposal, we present a development scenario that allows the validity of the approach to be confirmed, while verifying the drastic reduction in recovery times, the support for the significant heterogeneity existing in these scenarios and their high level of automation, while practically dispensing with the intervention of system administrators.

Security alert correlation using growing neural gas

The use of alert correlation methods in Distributed Intrusion Detection Systems (DIDS) has become an important process to address some of the current problems in this area. However, the efficiency obtained is far from optimal results. This paper presents a novel approach based on the integration of multiple correlation methods by using the neural network Growing Neural Gas (GNG). Moreover, since correlation systems have different detection capabilities, we have modified the learning algorithm to positively weight the best performing systems. The results show the validity of the proposal, both the multiple integration approach using GNG neural network and the weighting based on efficiency.

Service model for the management of industrial environments. Dynamic reconfiguration of production elements

This paper proposes a system for management of industrial production elements inspired by the techniques employed in the management of the current and complex ICT infrastructures on which business models are based and which are having considerable success. The main result of applying these techniques is that, at the same time as providing an adequate focus for the management of this type of infrastructure, it is possible to evolve from mass production models towards mass customization models increasingly bringing organisation objectives closer to the interests and requirements of customers. In this work, we present a review of the technologies in the sectors involved; a reconfiguration system is proposed for production systems based on management of ICT and integrated with the business system; their implementation and operation is analysed; and finally the main conclusions are drawn from the work, together with an indication of future lines of research.

Network Service Providing by means of Embedded Systems

In this paper we present an embedded device able to manage the remote boot of network nodes by means of Wake on LAN (WoL) through Internet and wide area network, presenting it as a Web service. The service is known as WoLI and comprises a network device, a group of embedded software applications in that device and an application protocol known as WoLIP. This device is small and requires only minimal maintenance, and is able to communicate via Wide Area Networks through embedded applications, using the WoLIP application protocol defined on SOAP massages and defined by means of WSDL documents. The mechanism used for booting up the devices is compatible with WoL technology. The service can be perfectly integrated with remote management systems based on SO A. The management and control of the device and the service may be carried out via Internet, using a standard Web browser. This approach is an example of the application of a more general proposal for managing network services, based on the use of small embedded network devices which provide specific functionalities for common use, and which are as autonomous and self sufficient as possible.