Miroslav Sveda

A Formal Model for Network-Wide Security Analysis

Network designers perform challenging tasks with so many configuration options that it is often hard or even impossible for a human to predict all potentially dangerous situations. In this paper, we introduce a formal method approach for verification of security constraints on networks with dynamic routing protocols in use. A unifying model based on packet-filters is employed for modelling of network behaviour. Over this graph model augmented with filtering rules over edges verification of reachability properties can be made. In our approach we also consider topology changes caused by dynamic routing protocols.

Integrated smart sensor networking framework for sensor-based appliances

This paper presents an integrated, sensor networking framework stemming from the IEEE 1451 smart transducer interface standard. This object-based networking model is complemented by the Virtual Interface Architecture (VIA), a Compaq-Intel-Microsoft approach to Internet messaging, and by the Internet Protocol (IP) multicast communication, mediating efficient and unified access from Internet to smart sensors. An application of networked sensors that offers a reusable design pattern for a class of sensor-based appliances is analyzed. The kernel of the paper focuses utilization of this framework for a computer-based pressure measurement systems developing environment as a real-world project while stressing smart pressure sensor and Internet connectivity architectures.

ZigBee-to-Internet Interconnection Architectures

This paper deals with sensor networking based on ZigBee and Internet using IEEE 1451 smart transducer interface architecture. The contribution begins with introduction to the IEEE 1451 smart transducer - network interface for sensors and actuators as an emerging, standard-based networking framework. Next part of the paper reviews some concepts of ZigBee architecture aimed at connecting wireless sensors and actuators through ZigBee to Intranets or Internet. The kernel of the paper deals with design of a software architecture stemming from technical standards or standard proposals. This paper focuses namely on design of software architectures of communication interconnecting devices in between ZigBee and Internet.

Industry feedback on skills and knowledge in real-time software engineering

Rapid progress of computing technologies is the major reason that the programs like electronics, computer and software engineering, robotics and control engineering need continuous updates. This paper is related to the development of an international curriculum in real-time software engineering. It focuses on identification of skills, attitude and knowledge the students need to acquire to become efficient engineers working in the field. To facilitate this objective, a survey administered to industry representatives in four countries is described and its results are discussed.

An integrated framework for Internet-based applications of smart sensors

This paper presents an application of networked sensors that offers a reusable design pattern for a class of sensor-based appliances. It deals with an integrated, sensor networking framework stemming from the IEEE 1451 smart transducer interface standard, an object-based networking model, complemented by the Virtual Interface Architecture (VIA), a Compaq-Intel-Microsoft approach to Internet messaging, and by the Internet Protocol (IP) multicast communication, mediating efficient and unified access from Internet to smart sensors. The kernel of the paper focuses on utilization of this framework for a computer-based pressure measurement systems development environment as a real-world project while stressing smart pressure sensor and Internet connectivity architectures.

Coupling architectures for low-level fieldbusses

This paper deals with hierarchical, multiple fieldbus-based architectures using four case studies that present some concepts reusable in developing the interconnections of intelligent sensors and actuators. The single-master, low-level fieldbusses considered involve (1) ASI (Actuator-Sensor-Interface), which is an example of a lowest-level industrial interconnection; (2) NBIP (Nine-Bit Inter-processor Protocol), which is an example of a special purpose link-layer protocol for microcontrollers; and (3) Bitbus, which is an example of well-established fieldbus utilized for almost 20 years in various applications. The paper begins with classification issues; particularly, coupling architectures are treated both from the viewpoint of more classical interconnections of wide-area and local-area networks, and from the viewpoint of fieldbus domain. Next part introduces the ASI and NBIP protocols while the well-known Bitbus is reviewed in applications. To offer more complex insight, implementation tools-developed particularly to support low-level fieldbus interconnecting experiments-are also mentioned. Four case studies demonstrating consequently NBIP-ASI, ASI-ASI, and two different Bitbus-NBIP hierarchical coupling structures create the kernel of the paper. Finally, brief notes about origins, results, and current targets of the project conclude the contribution.

Embedded system design: a case study

The paper presents an original design method dedicated to embedded distributed systems using dispenser control as an example. The techniques applied during all stages of design stem from a local time concept: a system-wide global clock is utilized neither as an abstract model launching specifications nor as some obligatory, application-independent synchronization of local clocks completing implementations. After a description of the method encompassing environment specification, system functional specification, logical structure description, prototyping, and implementation, a brief survey relates the method to current theory and practice. The core part of the paper deals with an application example concerning a dispenser with a counter/controller for a petrol pumping station, which is safety critical because of the danger of explosion in the case of uncontrolled petrol flow and, also, loss of money in the case of unregistered flow.

Actuator-sensor-interface interconnectivity

Abstract The paper deals with low-level fieldbus interconnections intended for use in simple digital measurement and control applications employing ASI (Actuator–Sensor–Interface), which specifies an industrial communication connection between the foremost binary sensors and actuators and a controlling site. The kernel of the paper stems from two case studies that offer a more detailed insight into system design employing ASI interconnections. The first case deals with a regular implementation of the gateway between ASI and NBIP (nine-bit inter-processor protocol), which exemplifies a microcontroller-dedicated protocol, whereas the second case introduces an ASI–ASI coupler enabling the realization of hierarchical ASI systems.

Practical IPv6 monitoring-challenges and techniques

Network monitoring is an essential task of network management. Information obtained by monitoring devices gives a real picture of the network in production including transmitted data volumes, top hosts, a list of frequently used applications etc. Deep analysis of data collected by monitoring can reveal network attacks or detect misuse of network services. In addition, Data Retention Act requires each ISP to track users activities. Protocol IPv6 puts new challenges for network administrators in the context of user identification. Unlike IPv4, an IPv6 address no longer uniquely identifies a user or PC. IPv6 address can be randomly generated and keeps changing in time. PCs with IPv6 stack can also communicate via predefined tunnels over IPv4 infrastructure. That tunneled traffic mostly bypasses network security implemented via firewalls. In this paper, we identify major monitoring and security issues of IPv6 connectivity and propose a solution based on SNMP and Netflow data that helps to uniquely identify users. The solution requires an extended set of monitoring data to be collected from network devices. We present a new data structure based on extended Netflow records. Feasibility of the approach is demonstrated on the Brno University of Technology (BUT) campus network.

Rapid prototyping of networked embedded systems

This paper presents rapid prototyping of networked embedded systems by the method that employs hardware and software components and an eligible executable specification language. Statements of that language should cover process management, timing and communication commands interpretable by the services of a real-time executive and a communication task located in each prototype node. The language is made executable by a technique that employs attribute grammars and either macroprocessor or Prolog-supported generation of communication software prototypes. Execution or interpretation of the expanded code embedded in reusable system components of the trial architecture provides final steps of the method. In the paper, an introduction to a dedicated asynchronous specification language is followed by a review of related prototyping techniques. The included case study deals with an application of the language for two-level specification of an Internet-based device for pressure measurement.