Service-oriented grid computing system for digital rights management (GC-DRM)

Service-oriented computing and applications have recently gained significant attention since they provide new service infrastructure and development of service-oriented technology. Under such trend and ubiquitous computing requirement, grid computing is becoming popular in scientific and enterprise computing due to its flexible deployment and implementation. In this paper, we proposed a service-oriented digital rights management (DRM) platform based on grid computing (called GC-DRM) which is in the compliance of Grid Portal standards by using porlet. The platform integrates Globus Toolkit 4 and Condor 6.9.2 and uses web 2.0 to construct the web-based user interface for providing job submission, control, management, monitor for DRM services. GC-DRM can provide different categories of services which include watermark embedding and extraction, image scrambling, visible watermark embedding, image tamper-detection and recovery. In addition, GC-DRM has been applied to analyze the robustness of digital watermark by filter bank selection and the performance can be improved in the aspect of speedup, stability and processing time compared with NaradaBrokering based Computing Power Services (NB-CPS) and Web Services based Computing Power Service (WS-CPS). Therefore, GC-DRM can be concluded as a superior service-oriented computing which provides the user friendly environment with efficient DRM service performance based on grid computing architecture.     

Distributed computing power service coordination based on peer-to-peer grids architecture

As computational speed, storage capacity, and communication technologies steadily progress to the advanced levels, many business employments have utilized these improvements to aggregate distributed resources in various enterprise collaborating functionalities. Recently, grid computing has been identified as a critical technology by industry for enterprise computing and business-to-business computing. The concept of peer-to-peer (P2P) network is also evolving to an expanded usage in distributed networks for sharing the resources like the content files or real-time data for enterprise applications. Therefore, it is natural to include the grids and P2P to support environments that have features of both limiting case. In this paper, a new computing design – NaradaBrokering based Computing Power Services (NB-CPS) – has been applied to utilize the P2P grid to integrate the computational grids, distributed objects, P2P networks under the hybrid environment. In this study, the approach has been applied to analyze the robustness of digital watermark by filter bank selection and the performance can be improved in the aspect of speedup, stability and processing time. NB-CPS is not only suitable for executing computing works which are able to run in batches, but also be able to solve current issues in Web Services based Computing Power Service (WS-CPS) such as system resilience, fault tolerance, efficiency of job scheduling and the instability in congested network environment.     

Web based metacomputing

Programming tools that are simultaneously sustainable, highly functional, robust and easy to use have been hard to come by in the HPCC arena. This is partially due to the difficulty in developing sophisticated customized systems for what is a relatively small part of the worldwide computing enterprise. Thus, we have developed a new strategy – termed High Performance Commodity Computing (HPCC) [G. Fox, W. Furmanski, HPCC as high performance commodity computing, in: I. Foster, C. Kesselman (Eds.), Building National Grid, http://www.npac.syr.edu/users/gcf/HPcc/HPcc.html] – which builds HPCC programming tools on top of the remarkable new software infrastructure being built for the commercial web and distributed object areas. We add high performance to commodity systems using multi-tier architecture with Globus metacomputing toolkit as the backend of a middle-tier of commodity web and object servers. We have demonstrated the fully functional prototype of WebFlow during Alliance’98 meeting.     

DDoS attack protection in the era of cloud computing and Software-Defined Networking

Cloud computing has become the real trend of enterprise IT service model that offers cost-effective and scalable processing. Meanwhile, Software-Defined Networking (SDN) is gaining popularity in enterprise networks for flexibility in network management service and reduced operational cost. There seems a trend for the two technologies to go hand-in-hand in providing an enterprise’s IT services. However, the new challenges brought by the marriage of cloud computing and SDN, particularly the implications on enterprise network security, have not been well understood. This paper sets to address this important problem.We start by examining the security impact, in particular, the impact on DDoS attack defense mechanisms, in an enterprise network where both technologies are adopted. We find that SDN technology can actually help enterprises to defend against DDoS attacks if the defense architecture is designed properly. To that end, we propose a DDoS attack mitigation architecture that integrates a highly programmable network monitoring to enable attack detection and a flexible control structure to allow fast and specific attack reaction. To cope with the new architecture, we propose a graphic model based attack detection system that can deal with the dataset shift problem. The simulation results show that our architecture can effectively and efficiently address the security challenges brought by the new network paradigm and our attack detection system can effectively report various attacks using real-world network traffic.     

分布式系统中局部处理机的设计与实现

针对企业生产过程中存在大量原始数据需要实时处理的问题,设计并实现了一个基于自定义架构的局部处理机.在设计之初以Hadoop的并行架构为参考,对MapReduce的工作原理和缓存方式进行了分析,在此基础上根据实际生产环境设计了一个"多类线程协同处理"的程序架构,并辅以两类自定义的数据缓存方式,保证了分布式系统中的局部处理机在接收、计算、上传各环节的并发性和正确性.该系统投入实际生产并连续使用一年有余,实现了将企业多个车间生成的原始数据进行实时处理的预期目标,具有很好的稳定性、有效性和可扩展性.实际应用结果表明,自定义的程序架构和有效的缓存方式能实现大量数据的同步处理及分析.     

基于Web Service的电子商务技术研究

WebServices是一种面向服务的体系结构，其突出优点是实现了真正意义上的平台独立性和语言独立性。WebServices是新一代Internet分布式应用框架，代表了下一代网络计算和企业应用的必然趋势。分析了电子商务发展现状以及存在的问题，介绍了基于WebServices电子商务技术，它们可以跨越不同应用系统的对象体系、运行平台和开发语言等的界限，并以服务的形式封装，对外对内发布应用服务接口，供其它的应用程序调用，从而形成一个基于Web的服务共享平台。由于XML语言的应用，电子商务的应用和开发将进入一个新的阶段-ebXML.     

基于动态云的智慧农业架构研究

云计算是所有数据汇集到云中心进行统一处理,用户不再需要部署计算能力很强的客户端,而是直接从“云冶里（服务器端）获得计算能力。流行的云计算架构采用强数据中心（服务端）、弱客户端模式。而建设云计算中心的强服务端,需要硬件高配置,需要良好的网络环境,造成建设云中心资金投入过大。对于智慧农业云架构,亦是如此。目前智慧农业的各网络客户端硬件配置优良。文中提出基于动态云的智慧农业架构,该架构通过将具有一定存储能力、数据处理能力、能够提供一定网络服务能力的客户端,根据需要,结合到云数据中心,使该中心的规模动态地扩大或者缩小。实际上,就是让某客户端为云服务中的其他客户端提供服务,减轻实际云数据中心的数据存储、数据处理、资源配置等压力。基于该动态云的智慧农业架构部分已经实现,并且在南京和安徽地区的部分农产品的各环节中得到稳定应用,证明了该架构的实用性。     

面向超大规模计算系统的监控、调度及网络优化实践

【目的】为应对超大规模计算系统所带来的监控数据风暴、作业调度稳定性及灵活性、网络复杂度及高效性等实际挑战,本文分享了近期真实实践的经验和解决办法。【应用背景】当计算系统从P级逐渐向E级过渡,节点数量可超过10000个。在计算系统设计之初就需要确定网络拓扑的选型,而在系统的具体使用中更是离不开高效的调度和及时的监控。【方法】本文采用了基于动态负载均衡的分布式监控架构设计,基于高速缓存的分布式告警架构设计,基于SLURM的源码和配置优化,以及nd-Torus网络拓扑仿真对比等相关技术手段,基本满足了实际业务使用需求。【结果】数据表明,对于~10000节点的计算系统,实时告警数据库表的数据量大小基本可以控制在100万条以内。优化后的SLURM调度系统,可满足系统的业务级调度需求。网络方面,6D-Torus网络由于网络直径低、平均通信距离短,性能和网卡线缆用量较Fat-Tree网络和3D-Torus有一定提升,饱和吞吐率超过40%。【结论】分布式监控架构和告警架构可以有效解决监控数据风暴问题。SLURM在优化后可以实现对超大规模计算系统的作业调度功能。就线缆和交换机使用数量而言,6D-Torus相对于传统Fat-Tree网络更加经济,且性能优于3D-Torus,更适合超大规模计算系统。     

Adaptive security architecture for protecting RESTful web services in enterprise computing environment

In this modern era of enterprise computing, the enterprise application integration (EAI) is a well-known industry-recognized architectural principle that is built based on loosely coupled application architecture, where service-oriented architecture (SOA) is the architectural pattern for the implementation of EAI, whose computational elements are called as “services.” Though SOA can be implemented in a wide range of technologies, the web services implementation of SOA becomes the current selective choice due to its simplicity that works on basic Internet protocols. Web service technology defines several supporting protocols and specifications such as SOAP and WSDL for communication with client and server for data interchange. A new architectural paradigm has emerged in SOA in recent years called REpresentational State Transfer (REST) that is also used to integrate loosely coupled service components, named RESTful web services, by system integration consortiums. This SOA implementation does not possess adequate security solutions within it, and its security is completely dependent on network/transport layer security that is obsolete owing to latest web technologies such as Web 2.0 and its upgraded version, Web 3.0. Vendor security products have major implementation constraints such as they need secured organizational environment and breach to SOA specifications, hence introducing new vulnerabilities. Herein, we examine the security vulnerabilities of RESTful web services in the view of popular OWASP rating methodologies and analyze the gaps in the existing security solutions. We hence propose an adaptive security solution for REST that uses public key infrastructure techniques to enhance the security architecture. The proposed security architecture is constructed as an adaptive way-forward Internet-of-Things (IoT) friendly security solution that is comprised of three cyclic parts: learn, predict and prevent. A novel security component named “intelligent security engine” is introduced which learns the possible occurrences of security threats on SOA using artificial neural networks learning algorithms, then it predicts the potential attacks on SOA based on obtained results by the developed theoretical security model, and the written algorithms as part of security solution prevent the SOA attacks. This paper is written to present one of such algorithms to prevent SOA attacks on RESTful web services along the discussion on the obtained results of the conducted proof-of-concept on the real-time SOA environment. A comparison of the proposed system with other competing solutions demonstrates its superiority.     

高可用性冗余实时集群系统的设计与构建

根据实时集群系统的高可用性和实时性要求，考虑集群系统的网络拓扑结构和网络传输性能对系统实时性能的影响，文章设计和构建了一个高可用性冗余实时集群系统，对系统的网络拓扑结构设计进行了阐述，估算了网络的数据传输性能，并讨论了系统并行计算的实现和冗余机组调度策略。经实际测试证明，系统具有较高的可用性和实时性，可作为周期性、高强度、多源浮点信息处理平台。     

信息物理融合系统

信息物理融合系统 (Cyber-physical system, CPS)是计算、通信和物理过程高度集成的系统,通过在物理设备中嵌入感知、通信和计算能力,实 现对外部环境的分布式感知、可靠数据传输、智能信息处理,并通过反馈机制实现对物理过程的实时控制. 分析了CPS的基本概念和特征,对CPS的体系架构、中间件系统、实时性、安全和隐私等关键技术的现有研究 成果进行综述,并提出了相应的研究思路;然后介绍了一些现有的CPS原型系统和实例,体现出CPS的优越性; 最后对CPS和传感器网络(Wireless sensor network, WSN)、物联网(The internet of things, IOT)、网络控制系统(Networked control systems, NCSs)进行了对比分析,总结了CPS现有研究中存在的问题,并展望了CPS的发展方向.     

VGITS: ITS based on intervehicle communication networks and grid technology

The intelligent traffic system based on intervehicle communication networks and grid technology is proposed. This system adopts hybrid architecture, and diverse real-time traffic services are provided in a centralized or decentralized way. Grid technology is introduced to provide the high performance computing platform for massive traffic data processing and real-time traffic service presenting. Moreover, the computation and communication capacity of the IVC network is developed and exploited to provide decentralized traffic services to drivers. Therefore, the system load is balanced among grid nodes and in-vehicle terminal, and better performance is achieved. At last, a prototype is implemented to demonstrate the efficiency and effectivity.     

Effective real-time scheduling algorithm for cyber physical systems society

CPS (Cyber Physical Systems) tightly couple their cyber factor and physical factor in distributed computing or Grids environments to provide real-time services such as avionics, transportation, manufacturing processes, energy, healthcare, etc. We need to consider not only the cyber space (CPU, network, storage systems, etc.) and the physical space (location, migration, etc.) but also the socio space and mental space for the precise analysis and useful services. In this paper, real-time scheduling algorithms, namely ELST (Effective Least Slack Time First) and H-ELST (Heuristic-Effective Least Slack Time First), are presented for CPS, where servicing node needs to move to serviced node for real-time services. We measure the real-time performance in terms of deadline meet ratio by mathematical analysis and simulations. The results show that our algorithms reduce a deadline miss ratio approximately up to 50% and 20% compared to the conventional real-time scheduling algorithm, FIFO (First In First Out) and LST (Least Slack Time First), respectively.     

基于Storm的城市消防联网远程监控系统的实时数据处理应用

针对城市消防联网远程监控系统中实时信息数据逐渐增长而引出的大数据问题,传统的消防系统无法实时、高效地处理消防实时数据的问题,提出了一种基于云计算和Storm实时数据处理系统的解决方案;对于开源的Storm框架进行需求和性能分析,实现对其技术架构上的改进,并结合消防系统的特点,提出一套高实时性、高可扩展性的消防联网监控中心的数据实时处理的体系架构,同时也进行了云计算平台的搭建,利用心跳检测机制保证各个监控单位的实时性连接;研究表明,基于云计算和Storm平台架构完全适用于消防联网监控中心的实时消防数据的处理,具有高效性、高可靠性、性能显著等特性。     

基于Web服务EAMS的性能及安全研究

针对使用Web服务构建EAMS(企业资产管理系统)时的实时交互性能差以及服务通信安全无法保证等问题,提出了基于序列化、数据压缩、数据加密和数字签名等技术的有效解决方案.该系统采用.NET框架的RemotingFormat序列化Web服务传递的数据集并对其压缩传输的方式,解决了实时性交互问题.通过对SOAP消息头的扩展,对SOAP消息进行加密、签名、添加令牌等操作,实现了Web服务通信的端到端的消息级安全.测试结果表明,基于Web服务的EAMS的实时交互性能和服务通信安全得到了有效保障.     

PBA4WSSP: a policy-based architecture for web services security processing

Due to the dynamic, heterogeneous and interorganizational nature, different web services and different ports or operations in the same service, even the same services at different times may have their different security requirements because of their different security domains and different business backgrounds. How to design a flexible, fine-grained and comprehensive architecture for web services security processing has become a matter of great urgency. However, no ideal solutions have been worked out for these problems. As a result of our study, we have presented in this paper a policy-based architecture termed policy-based architecture for web services security processing (PBA4WSSP) to meet the dynamic, complete and fine-grained security requirements. In PBA4WSSP, the processing of all security problems is based on security policy in service stage to support flexibly security configuration. Moreover, we have designed a service policy model to describe the fine-grained security requirements. And the conversion method between security policy model and security policy expression has also been described. In addition, a staged complete security processing architecture is provided to reduce the dependency among protocol implementations. Furthermore, with PBA4WSSP, a web service security module has been designed and implemented as well. Eventually, the performance evaluation results amply demonstrate that our system is flexible and usable.     

Web服务与目录服务在系统集成中的应用研究

随着企业网上运行的应用服务不断增多,如何把各种不同的服务系统集成起来成为网络应用服务领域所面临的重大问题.目录服务与Web服务的结合为不同应用系统的集成提供了新的解决方案.目录服务能够实现对用户信息和网络资源的统一管理,Web服务能够将众多异构应用系统有机的结合起来,而基于目录的UDDI Web服务注册中心则又实现了目录对Web服务的统一管理.给出了一个利用目录和Web服务解决校园网络应用系统集成的方案.     

A multimedia healthcare data sharing approach through cloud-based body area network

Wireless Body Area Network (WBAN), as a dramatic platform for pervasive computing and communication, has been widely applied in healthcare domains. Since the patient-related data in the form of text, image, voice, etc. is significant in the process of healthcare services, efficiently managing these media data from various WBAN is vital for various applications. Recently, Cloud-assisted WBAN has become popular that can supply massive computing, flexible storage and various software services to WBAN. Still, there are some challenging issues exist in this platform to deliver and share the huge media healthcare data to remote terminals timely with guaranteed QoS support. In the paper, we propose an efficient network model that combines WBAN and Cloud for valid data sharing. The proposed network architecture is designed as four layers: perception layer, network layer, cloud computing layer, and application layer. In the network, the integration of TCP/IP and Zigbee in the coordinator devices is utilized. Consequently, WBAN coordinators can compatibility inter-operate with various local networks such as WiFi and LTE network to support high mobility of users. Besides, we integrate Content Centric Networking (CCN) with our proposed architecture to improve the ability of the WBAN coordinator. Thus, it can support uninterrupted media healthcare content delivery. In addition, adaptive streaming technique was also utilized to reduce packet loss. Various simulations were conducted using OPNET simulator to show the feasibility of the proposed architecture in terms of transmitting a huge amount of media healthcare data in real-time under traditional IP-based network.     

面向企业遗留应用设计实时主数据集成

企业遗留系统应用现状催生混合型主数据管理系统;该文将混合型主数据中心作为存储转发中介协调相关系统实现实时主数据集成、以集成取代单一中心服务访问实现主数据管理;为此在SOA集成架构下,主数据中心系统和遗留系统共同提供主数据维护服务,批量数据服务负责主数据变换与传输,XA支持服务实现分布式系统事务提交;这些服务经服务编排生成主数据管理业务流程,由流程控制实时主数据集成。     

主动网络的研究

传统网络对报文不做处理或计算．只是原封不动地转发用户数据，严重限制了网络业务的开发和应用。主动网络是一种新型的网络体系结构，允许用户向网络节点嵌入定制的程序．可以快速动态地定制、配置新的服务，增强了网络的灵活性和可扩展性．因此具有广阔的应用前景。为对主动网络的进一步研究打下基础，文中从主动节点的体系结构、主动报文的格式和处理等方面阐述了主动网络的体系结构，并介绍了主动网络的实现方法及其研究现状，论述了主动网络的几种典型应用。