Article

Architecture design and implementation of service interfaces in LBS platform

September 2006

Authors:

Through the LBS (location based service) platform, spatial information data can be conformed and shared in LBS fields and the platform can provide integrated applications and services. The architecture of the LBS platform based on the SIG (spatial information grid) distributed model is discussed in detail in order to store map data and query location information. The interfaces of the LBS platform accord with the criterion of OpenLS and can be transported in HTTP communication protocol by XML code. The interfaces are discussed using many examples. Compared with the traditional pull mode, a new location notification method based on push is researched in this paper. The push mechanism can fit the need for high capability of data transformation and management, and transporting information between the LBS platform and applications. An example system based on MAPGIS and CDMA location technology has been designed and developed, validating the platform model and interface usability.

ResearchGate has not been able to resolve any citations for this publication.

ResearchGate has not been able to resolve any references for this publication.

Article

Implementation of vehicle logistics information transmission based on HTTP communication protocol

January 2015 · International Journal of Wireless and Mobile Computing

Because of the problems in the information exchange of telematics, this paper proposes a data transmission system architecture based on the hypertext transfer protocol. It has been divided into four layers independently. The data in short message mode are sent to the remote server in time through wireless network, and then backstage clients can dynamically master the location information, ... [Show full abstract] transport information and status information of vehicle logistics by logging into the website. The method has solved many problems in the processing of the vehicle terminals' transmitting and receiving information, such as data encapsulation, data compression, data upload, data download and many other problems. We have analysed the data in the vehicle in real time and achieved good results.

Conference Paper

A Generalized Model for Internet-Based Access Control Systems with Delegation Support

January 2013 · Lecture Notes of the Institute for Computer Sciences

In the web environment, web browsers use HTTP/HTTPS to communicate between users and web/application servers. However, many internet activities require interactions among three parties without compromising confidentiality. For example, an e-commerce transaction requires a buyer to authorize an e-commerce website to withdraw money from the buyer’s bank account at an internet banking website. ... [Show full abstract] Although several existing works have been proposed to solve this problem, they are done in ad-hoc manners or lack of some important properties. This paper proposes a model, called PRA (Provider-Requestor-Authorizer), for generalizing three-party communication in the web-environment in order to identify desirable properties that can be used to measure the goodness of protocols for and classify them. We found that PRA model can generalize three-party communication protocols to a single model from conceptual level to implementation level.

Conference Paper

Full-text available

Web services for the Internet of Things through CoAP and EXI

July 2011

According to the Internet of Things (IoT) vision, everyday objects such as domestic appliances, actuators and embedded systems of any kind in the near future will be connected with each other and with the Internet. These will form a distributed network with sensing capabilities that will allow unprecedented market opportunities, spurring new services, including energy monitoring and control of ... [Show full abstract] homes, buildings, industrial processes and so forth. In this paper, we concentrate on the actual implementation of the communication technology, adopting the Representational State Transfer (REST) approach. REST only relies on the HTTP methods such as GET and POST. Embedded communication devices are addressed using Universal Resource Indicators (URI) and data is exchanged through standard XML. We present our TinyOS design and implementation of two components that will play a fundamental role in the communication stack of REST-based devices. First, we focus on the Constrained Application Protocol (CoAP), which allows REST--based communications among applications residing in distributed and networked embedded systems. Second, we present our lightweight implementation of a EXI library: an efficient binary compressor for XML data files. Experimental results are provided in terms of compression, decoding (EXI) and access time (CoAP) performance.

Article

Full-text available

Performance Analysis of an Effective Approach to Protect Cloud Systems against Application Layer Bas...

February 2019 · International Journal of Online and Biomedical Engineering (iJOE)

Cloud computing is a new paradigm for hosting hardware and software resources and provides a web-based services to organizations and consumers. It also provides an easy to use and on-demand access to cloud based computing resources that can be published by easy, minimal administration and with a great efficiency. Services of cloud computing are accessing and sharing through internet connection ... [Show full abstract] thus it is open for attacker to attack on its security. Application layer based attacks is one of Distributed Denial of Service attacks (DDoS) that can cause a big problem in cloud security. The main objective of DDoS attacks is to infect computer resources (e.g., software applications, network, CPU, etc.) and make them not working properly for the authorized users. In DDoS, the attacker tries to overload the web-based service with traffic. HTTP and XML-based DDoS attacks are founded under the application layer based category of DoS attacks. This category of attack is focused on particular web applications. The main objective of this research paper is to introduce an effective approach to protect cloud-based systems against application layer based attacks. Complexity analysis, effectiveness and performance evaluations of the presented approach are presented. The feedbacks of the experimental results were highly promising, for protecting cloud computing systems against both DoS and DDoS attacks. Correlation analysis model is also used to validate the efficiency of the proposed approach.

Article

Full-text available

Issues and challenges in anomaly intrusion detection for HTTP web services

January 2015 · Journal of Computer Science

In recent years, the development of Web-based applications has made possible novel online activities, such as banking and electronic shopping. This implies significant use of the Hypertext Transfer Protocol (HTTP) as the standard communication protocol enabler for Web services. Due to this role, HTTP has become an essential middle target of bound attacks for intruders. This paper is set to ... [Show full abstract] address various problems in anomaly-based intrusion detection for HTTP Web services. We seek to identify common essential methods and solutions, as well as the gaps, limitations and challenges in anomaly intrusion detection in terms of used experimental datasets, features and techniques. © 2015 Mohsen Kakavand, Norwati Mustapha, Aida Mustapha, Mohd Taufik Abdullah and Hamed Riahi.

Conference Paper

Design and Implementation of Windows Service Client Based on HTTP

May 2010

In some cases, we need to perform certain functions after computer is started, but not logged. This is the role of the service program. This article discusses the establishment of an installation, operation, start and stop function of the windows service program process and associated communication protocol implementations. Before logged in the case of the operating system, the function of the ... [Show full abstract] service program is to achieve communications and data exchange with the remote server. Communication protocol consists request mainly based on http protocol and text file to receive and resolve in two parts based on XML. In this paper, it is beginning with architecture design presentation, introduced the concept of service program and process design, based on http protocol session design and XML parsing, and made some analysis of the whole structure.

Article

Full-text available

ABC: Adaptive Bank-Transaction Camouflaging Systems

January 1970

We propose an adaptive bank-transaction camouflaging system to hide critical transaction information between two bank sites. Payload traffic is intercepted by security gateways and is embedded into carrier traffic between two gateways. In this way, the payload traffic appears to have a communication protocol and traffic pattern like the carrier traffic. We propose to use TCP applications such as ... [Show full abstract] FTP and HTTP to generate carrier traffic so that the carrier traffic can sense the current network status and adapt to the end-to-end available network bandwidth.

Article

Security mechanism in distributing network management system based on Web Service

May 2006

Application of Web service in distributing network manage system is introduced. WS-security (Web service security), as a new criterion of Web service's security it is introduced too. Involving communication layer and message layer, a security mechanism is designed. In this mechanism, HTTP basic authorization and secure socket layer (SSL) are used in communication layer to ensure security. XML ... [Show full abstract] encryption, XML signature and authorization technology are adopted to support the message layer. This security mechanism could satisfied all needs a network management system requests on security, such as authorization and verification, confidentiality, integrity and security log.

Article

Full-text available

Securing SOAP e-services

February 2002 · International Journal of Information Security

Remote service invocation via HTTP and XML promises to become an important component of the Internet infrastructure. Work is ongoing in the W3C XML Protocol Working Group to define a common standard, and solutions like SOAP and XML-RPC are already used in a few situations, demonstrating the potential. However, no standard technique for access control security is currently defined for these ... [Show full abstract] protocols. In this paper, we propose an approach that relies on the XML structure of SOAP requests to support fine-grained authorizations at the level of individual XML elements and attributes that comprise a SOAP call. The result is a simple yet general technique to specify and enforce fine-grained access control for e-services.

Conference Paper

Full-text available

Performance Evaluation of Web-based Applications and VOIP in Protected Dynamic and Multipoint VPN

July 2017

Dynamic Multipoint Virtual Private Network stands for DMVPN, is a technology that allows the dynamic creation of virtual Private IP tunnels between multiple sites automatically, quickly and with the least configuration. This technology relies on several protocols, IPsec can be used to guarantee the confidentiality, integrity and the authentication of data. IPsec can influence on the performances ... [Show full abstract] of DMVPN tunnels and the transported applications. Several works evaluate the impact of IPsec protocols on different networks, according to our research no one deals with the DMVPN technology. This was for us a motivation to conduct this work by studying the concept of protected DMVPN, and then evaluate the impact of IPsec protocol on the DMVPN network and transported data such as VOIP and Web-based applications. Evaluation parameters are: the establishment duration of IPsec tunnels, jitter, voice end to end delay, MOS score, the delay of TCP connection and HTTP load page

Conference Paper

WePR: A Tool for Automated Web Performance Measurement

December 2016

In this paper, we present WePR, a web performance measurement tool for evaluating the download and the rendering time of a website at large scale. The first component of the tool, WebPerf, measures the technical metrics of a website such as DNS lookup time, TCP connection establishment time, page download time from different vantage points. The second component renders the website based on the ... [Show full abstract] metrics recorded by the WebPerf and measures the rendering time of the website in a browser window. The user experience on a website is then inferred from the measured rendering time. Along with describing WePR's architectural design and the metrics it measures, we present initial measurement results recorded March to August 2015. The results show that transmission latency, DNS lookup time, the number of HTTP elements affect the rendering time of the website and therefore the end user experience.

Presentation

Full-text available

Security Architecture Patterns

April 2003

Graeme Burnett

Emerging Application Landscape ♦ Disappearing Security Perimeter — XML over HTTP based protocols have opened up corporate networks — Application level attacks are the new threat — Hardened platforms are increasingly necessary — Proactive and sophisticated patch management — XML “firewalls” - a nascent market ♦ Developer Community Lack Knowledge and Expertise in Security — Much application ... [Show full abstract] development is still client/server with ftp as the transport mechanism — Security always an add on — Java has improved access to cryptographic toolkits — Misconfiguration and performance are major issues — Lack of key management infrastructure — Kerberos: Inter-host trust does not mitigate risk