A quantitative study of firewall configuration errors

The protection that firewalls provide is only as good as the policy they are configured to implement. Analysis of real configuration data show that corporate firewalls are often enforcing rule sets that violate well established security guidelines. Firewalls are the cornerstone of corporate intranet security. Once a company acquires a firewall, a systems administrator must configure and manage it according to a security policy that meets the company's needs. Configuration is a crucial task, probably the most important factor in the security a firewall provides.     

Evaluating software reuse alternatives: a model and its application to an industrial case study

We propose a model that enables software developers to systematically evaluate and compare all possible alternative reuse scenarios. The model supports the clear identification of the basic operations involved and associates a cost component with each basic operation in a focused and precise way. The model is a practical tool that assists developers to weigh and evaluate different reuse scenarios, based on accumulated organizational data, and then to decide which option to select in a given situation. The model is currently being used at six different companies for cost-benefit analysis of alternative reuse scenarios; we give a case study that illustrates how it has been used in practice.     

Input-output feedback linearization of time-delay systems

In this note, the input-output linearization problem (IOLP) for a class of single-input-single-output nonlinear systems with multiple delays in the input, the output, and the state is studied. The problem is solved by means of various static or dynamic compensators, including state and output feedback. The mathematical setting is based on some noncommutative algebraic tools and the introduction of a nonlinear version of the so-called Roesser models for this class of systems. These are claimed to be the cornerstones for studying nonlinear time-delay systems. Necessary and sufficient conditions are given for the existence of a static or pure shift output feedback which solves the IOLP. Sufficient conditions for the existence of a dynamic state feedback solution are included as well.     

A new method for singular value loop shaping in design of multiple-channel controllers

In this note, simple symmetric interval bounds on the singular values of a matrix based on its Gershgorin disks are proposed. This allows the Gershgorin theorem to be used not only to provide information about the location of the eigenvalues of a matrix but also its singular values. This is utilized for the proposition of a new design technique for singular value loop shaping based on the diagonal dominance methodology for design of linear multivariable plants. In return, this allows multiple-channel simply structured controllers to be designed with a view to robustness and to meet constraints and specifications on the behavior of its singular values. A design example is given demonstrating the effectiveness of this approach.     

Nonlinear control synthesis by convex optimization

A stability criterion for nonlinear systems, recently derived by the third author, can be viewed as a dual to Lyapunov's second theorem. The criterion is stated in terms of a function which can be interpreted as the stationary density of a substance that is generated all over the state-space and flows along the system trajectories toward the equilibrium. The new criterion has a remarkable convexity property, which in this note is used for controller synthesis via convex optimization. Recent numerical methods for verification of positivity of multivariate polynomials based on sum of squares decompositions are used.     

Probability-Theoretic and Statistical Analysis of Dictionary Texts

We consider probability-theoretic and statistical models and methods for computing the characteristics of dictionary structures. Results of a statistical analysis of several commonly used dictionaries are presented in order to test the adequacy of the computing methods proposed.     

Modeling and sensitivity analysis of fire emissions in southern Africa during SAFARI 2000

This paper uses three recently generated southern African satellite burned area products for the month of September 2000 in a sensitivity study of regional biomass burning emissions for a number of trace gases and particulates. Differences in the extent and location of areas burned among products generated from Moderate Resolution Imaging Spectroradiometer (MODIS), Systeme Pour l'Observation de la Terre (SPOT-VEGETATION), and Along Track Scanning Radiometer (ATSR-2) data are significant and result in different emissions estimates for woodland and grassland land cover types. Due to the different emission profiles in woodlands and grasslands, favoring relatively more products of incomplete combustion in woodlands compared with products of complete combustion in grasslands in the late dry season, these changes are not proportional to the differences in the burned area amounts. The importance of accurate burned area information not just in terms of the total area but also in terms of its spatial distribution becomes apparent from our modeling results. This paper highlights the urgent need for satellite data producers to provide accuracy assessments associated with satellite-derived products. Preferably, these accuracy data will be spatially explicit, or defined in a way that can be applied in a spatially explicit modeling context, to enable emissions uncertainties to be defined with respect to different landscape units in support of greenhouse gas emissions reporting.     

Neural-Net Analysis of the Plasticity of ÉP-450 Ferrite–Martensite Steel with Different Alloying Element Concentrations

The results of a computational experiment with a neural-net model simulating the effect of the chemical composition on the plastic properties of ÉP-450 steel are presented. It is shown that computer-aided development of reactor steel with prescribed properties is, in principle, possible.