Browsing by Author "Chen, Borting"

Now showing 1 - 6 of 6

A Performance Mapping Model for Physical-to-Virtual Migration
(2013)
Chen, Borting
;
Lai, Chien-Yu
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
With the increasing popularity of cloud computing, hosting services on a remote virtual machine becomes a trend due to its ease of use and cost saving. When migrating services to a cloud, users need to submit a resource plan to ensure service's performance. However, it is difficult to estimate the resources required by a virtual machine for running arbitrary services. To address the problem, we propose an estimation model for a resource plan. The model takes the performance characteristics of a physical machine as input and estimates virtual machine configurations. Using the estimated configurations, a user can obtain a virtual machine having similar performance characteristics to that of the physical machine. In this paper, we derive a model to estimate the CPU capability for creating a virtual machine on Xen. Our experiments show that our model can provide a resource plan for a virtual machine, which has the minimum performance difference compared with a designated physical machine.
An Anomaly Detection Module for Firefox OS
(2014-01-01)
Chen, Borting
;
Shih, Ming-Wei
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Firefox OS, a new Web-based OS developed by Mozilla mainly for mobile platforms, is designed to realize the " Boot to the Web" concept for the open Web. It supports users booting to the network directly, launching remote applications and accessing remote data with the standard Web technologies. Although Firefox OS has adopted several mechanisms to enhance its security, its current design is lack of a mechanism to detect 1) applications calling Web API with unusual frequency, and 2) applications consuming abnormal amount of resources. In this paper, we propose an anomaly detection module which takes the system resource usage and the amount of interprocess communication as the inputs to detect whether the system has an anomaly. We also conduct several experiments to examine the ability of the proposed module. The results show that detection accuracy of our module is 0% in false negative rate and 12.5% in false positive rate.
Bringing Desktop Applications to the Web
(2016-01-02)
Chen, Borting
;
Hsu, Ho-Pang
;
Huang, Yu-Lun
;
資訊工程學系
;
電機學院
The authors\' desktop application service framework enables a Web server to host desktop applications and users to access them through a browser. The framework helps a virtual desktop cloud reduce bandwidth consumption by supporting browser-based access.
Bringing Desktop Applications to the Web
(2016-01-01)
Chen, Borting
;
Hsu, Ho-Pang
;
Huang, Yu-Lun
;
資訊工程學系
;
電機資訊學士班
The authors\' desktop application service framework enables a Web server to host desktop applications and users to access them through a browser. The framework helps a virtual desktop cloud reduce bandwidth consumption by supporting browser-based access.
CoAP Option for Capability-Based Access Control for IoT-Applications
(2016)
Chen, Borting
;
Guenes, Mesut
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Access control is critical for many applications of the Internet of Things (IoT) since the owner of an IoT device (and application) may only permit one user to access a subset of the resources of the device. To provide access control for an IoT network, recent work adopted the capability-based access control (CBAC) model, which allows an IoT device to decide on the authorization by itself based on a capability token. However, the existing approaches based on CBAC directly attach the capability token at the end of CoAP when sending a request message. For the receiver, it is not easy to retrieve the capability token from the request message if the CoAP payload is present, because CoAP does not have a length field to indicate the size of its payload. To counter this problem, we propose a CoAP option, Cap-Token, to encapsulate a capability token when sending request messages. Because a CoAP option is independent from other CoAP fields, a receiver can get the capability token from the Cap-Token option of the request message without ambiguity. We also provide a compression mechanism to reduce the size of the Cap- Token option. Our evaluation shows that the compression mechanism can save the size of the option by 60%. Adding a compressed Cap-Token option to a request message increases the IP datagram size by 45 bytes, which is only 41% of the increase when directly attaching the capability token at the end of CoAP.
S-CBAC: A Secure Access Control Model Supporting Group Access for Internet of Things
(2015)
Chen, Borting
;
Huang, Yu-Lun
;
Guenes, Mesut
;
電控工程研究所
;
Institute of Electrical and Control Engineering
This paper presents a secure capability-based access control model (S-CBAC) for a distributed IoT environment. S-CBAC supports group access which allows using a single token to access common services running on multiple devices. It also leverages IPsec to ensure end-to-end security and data privacy.