Browsing by Author "Huang, Yu-Lun"

Now showing 1 - 20 of 26

A Batch-Authenticated and Key Agreement Framework for P2P-Based Online Social Networks
(2012-05-01)
Yeh, Lo-Yao
;
Huang, Yu-Lun
;
Joseph, Anthony D.
;
Shieh, Shiuhpyng Winston
;
Tsaur, Woei-Jiunn
Online social networks (OSNs) such as Facebook and MySpace are flourishing because more and more people are using OSNs to share their interests with friends. Because security and privacy issues on OSNs are major concerns, we propose a security framework for simultaneously authenticating multiple users to improve the efficiency and security of peer-to-peer (P2P)-based OSNs. In the proposed framework, three batch authentication protocols are proposed, adopting the one-way hash function, ElGamal proxy encryption, and certificates as the underlying cryptosystems. The hash-based authentication protocol requires lower computational cost and is suitable for resource-limited devices. The proxy-based protocol is based on asymmetric encryption and can be used to exchange more information among users. The certificate-based protocol guarantees nonrepudiation of transactions by signatures. Without a centralized authentication server, the proposed framework can therefore facilitate the extension of an OSN with batched verifications. In this paper, we formally prove that the proposed batch authentication protocols are secure against both passive adversaries and impersonator attacks, can offer implicit key authentication, and require fewer messages to authenticate multiple users. We also show that our protocols can meet important security requirements, including mutual authentication, reputation, community authenticity, nonrepudiation, and flexibility. With these effective security features, our framework is appropriate for use in P2P-based OSNs.
A framework for quantitative evaluation of parallel control-flow obfuscation
(2012-11-01)
Huang, Yu-Lun
;
Tsai, Hsin-Yi
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Software obfuscation is intended to protect a program by thwarting reverse engineering. Several types of software obfuscation have been proposed, and control-flow obfuscation is a commonly adopted one. In this paper, we present a framework to evaluate parallel control-flow obfuscation, which raises difficulty of reverse engineering by increasing parallelism of a program. We also define a control flow graph of a program and some atomic operators for obfuscating transformations. The proposed framework comprises three phases: parsing, formalization and evaluation. A program is first parsed to a control flow graph. Then, we formalize a parallel control-flow obfuscating transformation based on our atomic operators. By selecting target code blocks in the control flow graph and applying obfuscating transformations to the target code blocks, the original program is then obfuscated. In the third phase, we define a measure to calculate the program complexity. The measure can be considered as a degree to which an obfuscating transformation can confuse a human trying to understand the obfuscated program. Such a measure can also be used as the base of the potency metric to estimate the capability of the obfuscated program against reverse engineering. Our novel framework helps efficiently examine a control-flow obfuscating transformation in a systematic manner and helps select an appropriate obfuscating transformation among a number of candidates to better protect a program. (C) 2012 Elsevier Ltd. All rights reserved.
A GA-based Resource Management Algorithm for Smart Living Applications Requiring Intensive Computing Power
(2017-01-01)
Huang, Yu-Lun
;
Li, Zong-Xian
;
電機工程學系
;
Department of Electrical and Computer Engineering
When running smart living applications requiring intensive computing power in a cloud, a proper resource management algorithm is required to guarantee the performance of the applications. The paper presents a Genetic Algorithm (GA) based resource management algorithm, GASdv2, for allocating cloud-based virtual machines on physical machines. GASdv2 analyzes the utilization of hardware resources (CPU, memory, etc.) and generates an optimized distribution strategy to obtain better performance of the cloud running applications that requires intensive computing power and/or memory capacity.
A Graph Approach to Quantitative Analysis of Control-Flow Obfuscating Transformations
(2009-06-01)
Tsai, Hsin-Yi
;
Huang, Yu-Lun
;
Wagner, David
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Modern obfuscation techniques are intended to discourage reverse engineering and malicious tampering of software programs. We study control-flow obfuscation, which works by modifying the control flow of the program to be obfuscated, and observe that it is difficult to evaluate the robustness of these obfuscation techniques. In this paper, we present a framework for quantitative analysis of control-flow obfuscating transformations. Our framework is based upon the control-flow graph of the program, and we show that many existing control-flow obfuscation techniques can be expressed as a sequence of basic transformations on these graphs. We also propose a new measure of the difficulty of reversing these obfuscated programs, and we show that our framework can be used to easily evaluate the space penalty due to the transformations.
A Performance Mapping Model for Physical-to-Virtual Migration
(2013)
Chen, Borting
;
Lai, Chien-Yu
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
With the increasing popularity of cloud computing, hosting services on a remote virtual machine becomes a trend due to its ease of use and cost saving. When migrating services to a cloud, users need to submit a resource plan to ensure service's performance. However, it is difficult to estimate the resources required by a virtual machine for running arbitrary services. To address the problem, we propose an estimation model for a resource plan. The model takes the performance characteristics of a physical machine as input and estimates virtual machine configurations. Using the estimated configurations, a user can obtain a virtual machine having similar performance characteristics to that of the physical machine. In this paper, we derive a model to estimate the CPU capability for creating a virtual machine on Xen. Our experiments show that our model can provide a resource plan for a virtual machine, which has the minimum performance difference compared with a designated physical machine.
A VM-based Approach for Real-Time EtherCAT Control
(2014)
Huang, Yu-Lun
;
Lu, Chien-Hao
;
電控工程研究所
;
Institute of Electrical and Control Engineering
The paper is aiming at designing and implementing a real-time control platform for distributed motors. With the proposed design, experts can activate a monitor at a remote site, check the states of motor in real time and send proper control parameters to immediately control the motor via its controller. By leveraging the modern virtualization technologies, two designs are presented in the paper. We investigate the real-time performance of the host machine by executing stress test on the virtual machines. We also prove that the realization of our design can obtain a precise response time when issuing a command to an EtherCAT slave device.
An Adjustable Risk Assessment Method for a Cloud System
(2015)
Chih, Chi-An
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Although cloud computing technologies provide many advantages for organizations, security is still a barrier for wide-spread adoption to the public. Many cloud systems suffer from various attacks, including unauthorized data modification, denial of service, etc. The existing researches use risk assessments to evaluate the security of a cloud environment either from a CSP\'s viewpoint or from a user\'s point of view. The results of these works may not be precise enough, nor can they satisfy both CSP\'s and user\'s security requirements. We propose an Adjustable Cloud Risk Assessment systeM (ACRAM) for Cloud Service Providers (CSPs) and users to assess the cloud security. ACRAM consists of a risk assessment module running at two modes (Offline or Online mode) with the help of Security Service Level Agreement (SecSLA) signed by the CSP and the cloud user. The Offline mode is used for assessing the risk of a cloud based on the historical software vulnerabilities, while the Online mode is for assessing the risk of a cloud system at RUNTIME. To explain how ACRAM works for altering the potential threats in a cloud system, we conduct an experiment using different weights in Confidentiality (C), Integrity (I) and Availability (A). The results show that 1) CSP can protect future users from being co-located with a possible attacker; 2) CSP can take some risk mitigation to meet a user\'s requirements and keep the user from being attacked.
An AHP-based Risk Assessment for an Industrial IoT Cloud
(2018-01-01)
Huang, Yu-Lun
;
Sun, Wen-Lin
;
電機工程學系
;
Department of Electrical and Computer Engineering
An Industrial Internet-of-Things (IIoT) Cloud builds up a platform to accelerate the realization of factories running Industry 4.0 services. The IIoT cloud interconnects machines, robotic arms, controllers and drivers to form a collaborative platform [1], which brings the convenience of developing new features, for example, remote controlling, automatic producing, etc. However, the interconnected network may suffer from new security issues and risks. Hence, a method for assessing risks of the IIoT network is required, especially for the core running cloud services for the IoT devices. In this research, a novel AHP (Analytic Hierarchy Process) [2]-based risk assessment model is presented for an IIoT cloud to self-check its own health.
An Analytic Hierarchy Process-Based Risk Assessment Method for Wireless Networks
(2011-12-01)
Tsai, Hsin-Yi
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
This paper presents a wireless risk assessment method to help an administrator manage wireless network security. The assessment method consists of a risk model and an assessment measure. The risk model is in charge of modeling the wireless network risk. Security requirements, wireless attacks, and system configurations are considered in the model. The assessment measure is an algorithm which determines the risk value of the wireless network according to the risk model. Our risk model is developed upon an extended analytic hierarchy process, which contains the 4 layers: the risk layer, the requirement layer, the attack layer, and the configuration layer. The separate layers of the risk model are helpful in dealing with the dynamics of a wireless network because only the related layers are introduced to the assessment measure when changes of the network are detected. Based on the risk model per device, our assessment measure evaluates the wireless network risk in consideration of the relations between devices, attacks, and configurations. Hence, our risk assessment method, composed of the risk model and the assessment measure, can determine the wireless network risk efficiently while considering the dependencies in the wireless network. Two examples are introduced in this paper to examine the feasibility of our method. In the first example, we demonstrate that the risk values derived by our method meet the ground truth by performing practical experiments. The second example shows that our method can evaluate the risk of a changing wireless network with efficiency, and can distinguish disparities in different wireless networks.
An Anomaly Detection Module for Firefox OS
(2014-01-01)
Chen, Borting
;
Shih, Ming-Wei
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Firefox OS, a new Web-based OS developed by Mozilla mainly for mobile platforms, is designed to realize the " Boot to the Web" concept for the open Web. It supports users booting to the network directly, launching remote applications and accessing remote data with the standard Web technologies. Although Firefox OS has adopted several mechanisms to enhance its security, its current design is lack of a mechanism to detect 1) applications calling Web API with unusual frequency, and 2) applications consuming abnormal amount of resources. In this paper, we propose an anomaly detection module which takes the system resource usage and the amount of interprocess communication as the inputs to detect whether the system has an anomaly. We also conduct several experiments to examine the ability of the proposed module. The results show that detection accuracy of our module is 0% in false negative rate and 12.5% in false positive rate.
An Enhanced Handover Scheme adopting Mobile Relays in a LTE-A Network for High-Speed Movements
(2017-01-01)
Chen, Li-Wen
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
In a high movement environment, handover occurs frequently in a mobile network and degrades the quality of mobile communication and service. The shorter the handover delay is, the better the communication quality can be obtained. To shorten the handover delay for a bunch of UEs moving in the same direction, mobile relays (MR), an intermediate role between a UE and an eNodeB (eNB), have been introduced to support mobile communication and service in a Long-Tern Evolution Advanced (LTE-A) network for high-speed rail systems. MR acts as an eNB for the UE, and acts as a UE for the eNB. Since a train travels along a fixed trajectory, target eNB are predicatible when handover is required. Based on such an assumption, we design an enhanced handover scheme to simultaneously synchronize the target eNB and complete the path switch among the serving eNB and target eNB. We run several simulations to show that the proposed scheme can shorten 29.63% of the handover delay.
Bringing Desktop Applications to the Web
(2016-01-02)
Chen, Borting
;
Hsu, Ho-Pang
;
Huang, Yu-Lun
;
資訊工程學系
;
電機學院
The authors\' desktop application service framework enables a Web server to host desktop applications and users to access them through a browser. The framework helps a virtual desktop cloud reduce bandwidth consumption by supporting browser-based access.
Bringing Desktop Applications to the Web
(2016-01-01)
Chen, Borting
;
Hsu, Ho-Pang
;
Huang, Yu-Lun
;
資訊工程學系
;
電機資訊學士班
The authors\' desktop application service framework enables a Web server to host desktop applications and users to access them through a browser. The framework helps a virtual desktop cloud reduce bandwidth consumption by supporting browser-based access.
CoAP Option for Capability-Based Access Control for IoT-Applications
(2016)
Chen, Borting
;
Guenes, Mesut
;
Huang, Yu-Lun
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Access control is critical for many applications of the Internet of Things (IoT) since the owner of an IoT device (and application) may only permit one user to access a subset of the resources of the device. To provide access control for an IoT network, recent work adopted the capability-based access control (CBAC) model, which allows an IoT device to decide on the authorization by itself based on a capability token. However, the existing approaches based on CBAC directly attach the capability token at the end of CoAP when sending a request message. For the receiver, it is not easy to retrieve the capability token from the request message if the CoAP payload is present, because CoAP does not have a length field to indicate the size of its payload. To counter this problem, we propose a CoAP option, Cap-Token, to encapsulate a capability token when sending request messages. Because a CoAP option is independent from other CoAP fields, a receiver can get the capability token from the Cap-Token option of the request message without ambiguity. We also provide a compression mechanism to reduce the size of the Cap- Token option. Our evaluation shows that the compression mechanism can save the size of the option by 60%. Adding a compressed Cap-Token option to a request message increases the IP datagram size by 45 bytes, which is only 41% of the increase when directly attaching the capability token at the end of CoAP.
Conductive films based on sandwich structures of carbon nanotubes/silver nanowires for stretchable interconnects
(2019-06-07)
Jheng, Li-Cheng
;
Hsiao, Chi-Hui
;
Ko, Wen-Ching
;
Hsu, Steve Lien-Chung
;
Huang, Yu-Lun
A variety of conductive films made of a hybrid of two conductive nanomaterials have been used as stretchable electrodes or interconnectors, desirable for stretchable electronic devices. Their intrinsic stretchability of electrical conductivity allows for accommodating mechanical strain to a certain extent under various deformations. However, few efforts have been made to enhance the interactions between two conductive components in a hybrid system. Herein, we reported new conductive films with tri-layer sandwich structures based on carbon nanotubes (CNTs) and Ag nanowires (NWs), encapsulated in silicone rubber, exhibited high stretchability along with insignificant piezoresistivity. They are suitable to be stretchable interconnectors. A successive vacuum filtration method was used to stack the conductive components layer by layer. The effects of the stacking sequence and the interactions between layers on the stretchability and stability of the electrical properties under mechanical deformations were studied. In the case of a tri-layer conductive film comprising two CNT outer layers and one AgNW central layer in the presence of enhanced interfacial interactions, it showed exceptionally durability in withstanding repetitive deformations.
Design methodology and hands-on practices for embedded operating systems
(2007)
Huang, Yu-Lun
;
Hu, Jwu-Sheng
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Operating systems play an important role in interacting with hardware and software, while embedded operating systems deal more with hardware-specific functions, optimization and customization. To emphasize the education in embedded operating systems, in this paper, we present the design methodologies of two courses in this area: Embedded Operating Systems and Real-Time Embedded Operating Systems for SoC The former course focus on the basic concepts of embedded kernel primitives. The latter one emphasizes more on the insight of the real-time kernel and its scheduling protocols. Both courses consist of comprehensive hands-on practices to provide students more opportunities to fully participate in this blooming field.
Investigating the Security Control of a Water System: An Overview
(2013)
Huang, Yu-Lun
;
Wang, Ya-Hsuan
;
電控工程研究所
;
Institute of Electrical and Control Engineering
This paper introduces the role of a PCS in a critical infrastructure, and especially addresses the processing flow and control of a water system. By leveraging advanced IT technologies, a modern process control system (PCS) can help monitor and control physical processes in a water system. Conventionally, a water system is composed of a water treatment subsystem and a water distribution subsystem. To provide better water quality and steady water flow, PCSs should be adopted in these subsystems to more precisely control the concentration of chemicals in water and the outlet valve of water tanks. We investigate the security issues and possible attacks in a water system adopting a close-loop control mechanism. Taking the concentration control of chlorine in water as an example, we formally explain how an integrity attack leads a water system into a harmful state by adding improper amount of chlorine into water. In the future, we will further develop a formal model describing a n-tank water system, evaluate the impact of simultaneous more attacks and discuss the potential impacts. We will also try to design a detection and defence system to resist against known attacks.
Kannon: Ubiquitous Sensor Actuator technologies for elderly living and care - A Multidisciplinary Effort in National Chiao Tung University, Taiwan
(2006)
Zao, John K.
;
Hu, Jwu-Sheng
;
Chiou, Jin-Chern
;
Huang, Yu-Lun
;
Li, Shu-Chen
A team of researchers including computer scientists, electrical and control engineers, architects, industrial designers, human factor engineers, and cognitive scientists in the National Chiao Tung University (NCTU), Taiwan, along with their overseas collaborators launched the project Kannon, a multidisciplinary effort to develop Adaptive Assistive Technologies that can be deployed incrementally into existing private/public spaces and collaborate opportunistically to offer monitoring, assisting, communicating and rejuvenating services to healthy elders. The team combined the state-of-art information, communication and robotic know-how with the activity oriented method for product design and the modular functional approach in modern architecture in order to devise a holistic support for successful aging. This paper presents the philosophy, approach and first fruits of this project.
Locating Anchors in WSN Using a Wearable IMU-Camera
(2014)
Hu, Jwu-Sheng
;
Huang, Yu-Lun
;
Tseng, Chin-Yuan
;
電控工程研究所
;
Institute of Electrical and Control Engineering
Localization in a wireless sensor network (WSN) becomes important for many modern applications, like landslide detection, precision agriculture, health care, and so forth. The more precise the position of an anchor node is, the more accurate the localization of a sensor node can be measured. Since the Global Positioning System (GPS) device cannot work properly indoor, some existing localization methods configure anchor nodes in a manual fashion. However, neither applying GPS modules nor manually configuring anchor nodes is suitable for a WSN and especially artificial errors ofmanual configuration may be propagated and affect the results of localization. In this paper, we propose an alternative method to estimate anchor node locations in an indoor environment. We collect the Received Signal Strength Indicator (RSSI) data from the anchor node when human is walking around them. Meanwhile, we use a wearable IMU-camera device to assist the moving trajectory estimation. We implement a monocular Visual Odometry with a human walking model to estimate moving trajectories. An Unscented Kalman Filter (UKF) is used to estimate the anchor node location by fusing the RSSI data and moving trajectory. The experiment results show that the proposed method has lower estimation error when locating anchors.
MLoC: A Cloud Framework adopting Machine Learning for Industrial Automation
(2019-01-01)
Huang, Yu-Lun
;
Sun, Wen-Lin
;
Yeh, Kai-Wei
;
電機工程學系
;
Department of Electrical and Computer Engineering
By leveraging the modern machine learning algorithms, we can build up more Artificial Intelligence (AI) systems, like self-driving cars, smart factories and financial analysis systems, to improve our daily life. In addition to building up an AI system, several prerequisites are required to drive the system, including data collection, data storage, machine learning models, training dataset, parameters tuning, and so on. To obtain the benefit of scalability and flexibility, most AI systems are built on a cloud platform, which shares resources with others in the same infrastructure. Though the above concept is trivial, the implementation faces big challenges when realizing it. In this paper, an easy-to-use cloud framework for machine learning as well as its implementation guideline is presented for building up a cloud-based development platform. We conduct several experiments on analyzing and monitoring the health condition of bearings of motors. We compare and analyze the feasibility of the proposed framework.