Debian Linux Research Articles

Penerapan Sistem Keamanan Jaringan dengan DNS Adguard ada Linux Debian dan Kontrol Akses Internet Berdasarkan Waktu Implementasi Pada Mikrotik Routerboard

This research aims to develop a network security system with AdGuard DNS on Debian Linux and control time-based internet access using the Microtik Routerboard. The main challenges are rising network security threats and the need for efficient internet access management in a variety of environments, including families,, education, and offices. The aim of this study is to improve network security and efficiency by blocking harmful content and advertisements, ining user privacy, and regulating internet access at a specific time. Technologies used include DNS AdGuard on Debian Linux to strengthen protection against network security threats and RouterOS Microtik devices to manage internet access based on time. These technologies include content filtering features, network traffic distribution (load balancing), and the ability to block unwanted sites to enhance network performance. Research results show that the combination of AdGuard DNS and Microtik Routerboard is an effective solution to enhance network security and efficiency. The system is capable of blocking harmful content and advertising, improving user privacy, and adjusting internet access as needed, thus creating a more secure, controlled, and optimal network.

A Survey of Cloud Gaming Platforms: Architectural Design and Performance Evaluation of Major Providers

Cloud gaming, also known as gaming-as-a-service, is a transformative technology that leverages cloud infrastructure to deliver high-quality gaming experiences by streaming games from remote servers to various devices. This approach eliminates the need for powerful local hardware, making gaming more accessible and cost-effective. Cloud gaming architectures vary significantly across different companies, each leveraging unique technologies and infrastructure to deliver seamless gaming ex- periences. Microsoft’s Xbox Cloud Gaming (formerly Project xCloud) utilizes custom blade servers hosted in Azure data centers to stream Xbox games to various devices, emphasizing low latency and high availability NVIDIA’s GeForce NOW transforms local devices into high-performance gaming PCs by streaming games from NVIDIA’s data centers, using advanced video en- coding and adaptive bitrate streaming to optimize performance. Google Stadia, built on Debian Linux and Vulkan API, streams games from Google’s data centers, offering features like 4K res- olution and integration with YouTube for enhanced interactivity. Sony’s PlayStation Now, integrated into the PlayStation Plus service, uses custom servers to stream a wide range of PlayStation games, focusing on delivering console-quality experiences across multiple devices. This paper provides a comparison of the different architectures used by various companies.

Implementation Of Computer Programming Mathematical Algorithm On A Server With The Debian Linux Operating System Via Virtualbox As Supporting The Admission Of New Students In Vocational Schools

Implementation Of Computer Programming Mathematical Algorithm On A Server With The Debian Linux Operating System Via Virtualbox As Supporting The Admission Of New Students In Vocational Schools

Penerapan VPN Dalam Topologi Star Untuk Keamanan Pengiriman Data

Building a computer network needs significant care in selecting a configuration to ensure its efficacy and efficiency. It involves decisions about network topology, types, and device use. Security measures are essential for protecting networks with internet access from external attacks. A study conducted at an Islamic university in Indonesia indicated the use of a star network architecture and a client-server network model. The servers utilize Debian Linux. The university's security infrastructure includes a server authentication system and the setting up of a Virtual Private Network (VPN). If the server authentication difficulty is caused by a power outage, it is recommended that you use an UPS (uninterruptible power supply) to preserve power stability. Overall, security methods show up to be more effective when firewalls are installed.

Unveiling the Landscape of Operating System Vulnerabilities

Operating systems play a crucial role in computer systems, serving as the fundamental infrastructure that supports a wide range of applications and services. However, they are also prime targets for malicious actors seeking to exploit vulnerabilities and compromise system security. This is a crucial area that requires active research; however, OS vulnerabilities have not been actively studied in recent years. Therefore, we conduct a comprehensive analysis of OS vulnerabilities, aiming to enhance the understanding of their trends, severity, and common weaknesses. Our research methodology encompasses data preparation, sampling of vulnerable OS categories and versions, and an in-depth analysis of trends, severity levels, and types of OS vulnerabilities. We scrape the high-level data from reliable and recognized sources to generate two refined OS vulnerability datasets: one for OS categories and another for OS versions. Our study reveals the susceptibility of popular operating systems such as Windows, Windows Server, Debian Linux, and Mac OS. Specifically, Windows 10, Windows 11, Android (v11.0, v12.0, v13.0), Windows Server 2012, Debian Linux (v10.0, v11.0), Fedora 37, and HarmonyOS 2, are identified as the most vulnerable OS versions in recent years (2021–2022). Notably, these vulnerabilities exhibit a high severity, with maximum CVSS scores falling into the 7–8 and 9–10 range. Common vulnerability types, including CWE-119, CWE-20, CWE-200, and CWE-787, are prevalent in these OSs and require specific attention from OS vendors. The findings on trends, severity, and types of OS vulnerabilities from this research will serve as a valuable resource for vendors, security professionals, and end-users, empowering them to enhance OS security measures, prioritize vulnerability management efforts, and make informed decisions to mitigate risks associated with these vulnerabilities.

Implementasi Virtual Private Server untuk Mini Hosting

Virtual Private Server is a private server whose entire resource is used by one user only and is not influenced by other users. The technology used by VPS is virtualization of physical server hardware which is then divided into several different resources. Called virtual because this division uses software so that in one physical server there are several VPS running. To be more extensive in terms of server control, researchers use Public IP and Dedicated IP as a distributor of VPS systems from local to public. In addition, in this VPS implementation, debian linux and ubuntu linux are used as operating systems to create a VPS server. To get the value of the VPS network performance test from the client using the parameters of the Quality of Service (QoS), namely Delay and Jitter. From the test results, the value of the VPS server resource obtained can be categorized as very good and feasible to be implemented with an average server CPU load of 2.9%, memory 71.23%, disk space 16.1%. And testing the QoS parameters (delay, jitter) also gets good performance and has a fairly low value obtained with an average delay value of 6-37.24%, jitter of 8.95-59.95%.

Perancangan dan Implementasi Sistem Operasi Linux Debian untuk Konfigurasi Content Management System (CMS) Wordpress Dengan Winscp

The operating system is one of the vital components in a computer system. The operating system is responsible for managing the use of computer hardware such as processors, memory, I/O devices, storage media, and others.( Wamiliana, At All. 2013). The purpose of making this title is the first as a reference for future researchers in creating websites but using Linux and as a reference for lecturers and teachers especially in the field of computer networks for teaching and for making scientific work related to the same problem but using a different Linux, for example Ubuntu, Mandrake, Caldera and other operating systems. This research has been successfully carried out with the final result in the form of Debian Linux implementation for website creation. In making a Wordpress CMS Website using Linux, you don’t need internet access, but instead create your own server with a text-based Debian Linux operating system, and the result is a Graphic User Interface (GUI) display that can be accessed, modified, added images, added videos, changed background, installed. Plugin, post news like wordpress which is connected to the internet.

A multi-dimensional analysis of technical lag in Debian-based Docker images

Container-based solutions, such as Docker, have become increasingly relevant in the software industry to facilitate deploying and maintaining software systems. Little is known, however, about how outdated such containers are at the moment of their release or when used in production. This article addresses this question, by measuring and comparing five different dimensions of technical lag that Docker container images can face: package lag, time lag, version lag, vulnerability lag, and bug lag. We instantiate the formal technical lag framework from previous work to operationalise these different dimensions of lag on Docker Hub images based on the Debian Linux distribution. We carry out a large-scale empirical study of such technical lag, over a three-year period, in 140,498 Debian images. We compare the differences between official and community images, as well as between images with different Debian distributions: OldStable, Stable or Testing. The analysis shows that the different dimensions of technical lag are complementary, providing multiple insights. Official Debian images consistently have a lower lag than community images for all considered lag dimensions. The amount of lag incurred depends on the type of Debian distribution and the considered lag dimension. Our research offers empirical evidence that developers and deployers of Docker images can benefit from identifying to which extent their containers are outdated according to the considered dimensions, and mitigate the risks related to such outdatedness.

A Formal Model for Detecting Bugs by Symbolic Execution of Programs

Automatic detection of bugs in programs is an extremely important direction of current research and development in the field of program reliability and security assurance. Earlier studies covered, methods for program analysis that combine the dynamic symbolic execution, randomized testing, and static analysis. In this paper, a formal model for detecting bugs using the symbolic execution of programs and its implementation for detecting the buffer bounds violation is presented. A formal model of the program symbolic execution is described, and a theorem on detecting a bug on the basis of the violation of the operation domain is formulated and proved. An implementation of the buffer bounds violation analyzer in the process of symbolic program execution is described, and the application of the implemented prototype for analyzing a set of programs in Debian Linux is presented. The experiments confirm the actionability of the proposed method.

IMPLEMENTASI INTRUSION DETECTION SYSTEM (IDS) MENGGUNAKAN SURICATA PADA LINUX DEBIAN 9 BERBASIS CLOUD VIRTUAL PRIVATE SERVERS (VPS)

The development of information technology, especially on virtual Private server (VPS) technology in particular that uses Debian Linux operating system, increasingly facilitated with the service Adaya of some VPS providers both locally and non-local, but there is a problem vulnerability if, the server maintainers do not shame testing against the resilience of attacks from outside parties, with the Network Development Life Cycle (NDLC) method is one of the most popular in the Monitoring phase is using Suricata Intrusion Detection System (IDS) software. Suricata is a tool to detect any suspicious activity that could be threatening a network or server with Brute Force technique, DDOS, Port Scanning. Suricata is able to display logs from suspicious activity results in detail with the time, date and IP address of the activity even with the tools used to perform the activity. Also suricata can detect if there is suspicious activity associated with the network..

Performance analysis of Proxmox VE firewall for network security in cloud computing server implementation

Virtualization server uses the hypervisor technology in its implementation. Hypervisor is one of the virtualization techniques. Where this technique runs several operating systems together in one host. Cloud computing is a combination of the use of internet-based computer technology. The Open source Proxmox VE (Virtual Environment) is a virtual machine operating system. Where virtual machines are built from the Debian Linux operating system, with the modified RHEL kernel. A firewall is a system designed to prevent attacks on the network. Firewalls can be software or hardware that filters network traffic. Proxmox VE Firewall provides a way to protect network infrastructure. In Proxmox VE firewall allows setting rules for all hosts in a cluster or for virtual machines. In this study, the performance of the firewall from the server virtualization using ProxmoxVE will be examined. This study is intended to determine the performance of the firewall default from Proxmox VE. Firewall testing is done by creating filtering rules in the Proxmox VE cloud server. The results of this study will provide an analysis of the performance of the Proxmox VE firewall that runs on cloud servers. The analysis presents that iptables firewall rules can be applied to cloud servers.

OpenPiton

Industry is building larger, more complex, manycore processors on the back of strong institutional knowledge, but academic projects face difficulties in replicating that scale. To alleviate these difficulties and to develop and share knowledge, the community needs open architecture frameworks for simulation, chip design, and software exploration that support extensibility, scalability, and configurability, alongside an established base of verification tools and supported software. In this article, we present OpenPiton, an open source framework for building scalable architecture research prototypes from one core to 500 million cores. OpenPiton is the world's first open source, general-purpose, multithreaded manycore processor, and framework. OpenPiton is highly configurable, providing a rich design space spanning a variety of hardware parameters that researchers can change. OpenPiton designs can be emulated on FPGAs, where they can run full-stack multiuser Debian Linux. OpenPiton is designed to scale to very large core fabrics, enabling researchers to measure operating system, compiler, and software scalability. The mature code-base reflects the complexity of an industrial-grade design and provides the necessary scripts to build new chips, making OpenPiton a natural choice for computer-aided design (CAD) research. OpenPiton has been validated with a 25-core chip prototype, named Piton, and is bolstered by a validation suite that has thousands of tests, providing an environment to test new hardware designs while verifying the correctness of the whole system. OpenPiton is being actively used in research both internally to Princeton and in the wider community, as well as being adopted in education, industry, and government settings.

Malware Detection in Embedded Systems Using Neural Network Model for Electromagnetic Side-Channel Signals

We propose a novel malware detection system for critical embedded and cyber-physical systems (CPS). The system exploits electromagnetic (EM) side-channel signals from the device to detect malicious activity. During training, the system models EM emanations from an uncompromised device using a neural network. These EM patterns act as fingerprints for the normal program activity. Next, we continuously monitor the target device’s EM emanations. Any deviation in the device’s activity causes a variation in the EM fingerprint, which in turn violates the trained model, and is reported as an anomalous activity. The system can monitor the target device remotely (without any physical contact), and does not require any modification to the monitored system. We evaluate the system with different malware behavior (DDoS, ransomware, and code modification) on different applications using an Altera Nios-II soft-processor. Experimental evaluation reveals that our framework can detect DDoS and ransomware with 100% accuracy (AUC = 1.0), and stealthier code modification (which is roughly a 5 μ s long attack) with an AUC ≈ 0.99, from distances up to 3 m. In addition, we execute control-flow hijack, DDoS, and ransomware on different applications using an A13-OLinuXino—a Cortex A8 ARM processor single board computer with Debian Linux OS. Furthermore, we evaluate the practicality and the robustness of our system on a medical CPS, implemented using two different devices (TS-7250 and A13-OLinuXino), while executing control-flow hijack attack. Our evaluations show that our framework can detect these attacks with perfect accuracy.

Design of the technological architecture for PUMPIT project

A specific technological architecture of infrastructure and specific software elements is designed and evaluated for project of Pricelist of Usual Manday Prices of IT services. The principles for the architecture are based on requirements of vendor lock-in prevention, maximum ease of deployment, and maximal use of free opensource solutions. The resulted architecture is designed as Debian Linux host environment running Docker containers with isolated applications with own scripts in node.js, a community software as Elasticsearch, Kibana, Ethercalc, Nginx etc. The architecture was designed and evaluated iteratively during five runs of the project and is prepared for next phases.

An Approach to Reachability Determination for Static Analysis Defects with the Help of Dynamic Symbolic Execution

Program analysis methods for error detection are conventionally divided into two groups: static analysis methods and dynamic analysis methods. In this paper, we present a combined approach that allows one to determine reachability for defects found by static program analysis techniques through applying dynamic symbolic execution to a program. This approach is an extension of our previous approach to determining the reachability of specific program instructions by using dynamic symbolic execution. The approach is sequentially applied to several points in the program: a defect source point, a defect sink point, and additional intermediate conditional jumps related to a defect under analysis. Our approach can be briefly described as follows. First, static analysis of the program executable code is carried out to gather information about execution paths that guide dynamic symbolic execution to the source point of a defect. Then, dynamic symbolic execution is performed to generate an input dataset for reaching the defect source point and the defect sink point through intermediate conditional jumps. Dynamic symbolic execution is guided by the heuristic of the minimum distance from the previous path to the next defect trace point when selecting execution paths. The distance metric is computed using an extended call graph of the program, which combines its call graph and portions of its control flow graph that include all paths leading to the defect sink point. We evaluate our approach by using several open-source command line programs from Debian Linux. The evaluation confirms that the proposed approach can be used for classification of defects found by static program analysis. However, we found some limitations that prevent deploying this approach to industrial program analyzers. Mitigating these limitations is one of the possible directions for future research.

A Wearable Platform for Research in Augmented Hearing.

We have previously reported a realtime, open-source speech-processing platform (OSP) for hearing aids (HAs) research. In this contribution, we describe a wearable version of this platform to facilitate audiological studies in the lab and in the field. The system is based on smartphone chipsets to leverage power efficiency in terms of FLOPS/watt and economies of scale. We present the system architecture and discuss salient design elements in support of HA research. The ear-level assemblies support up to 4 microphones on each ear, with 96 kHz, 24 bit codecs. The wearable unit runs OSP Release 2018c on top of 64-bit Debian Linux for binaural HA with an overall latency of 5.6 ms. The wearable unit also hosts an embedded web server (EWS) to monitor and control the HA state in realtime. We describe three example web apps in support of typical audiological studies they enable. Finally, we describe a baseline speech enhancement module included with Release 2018c, and describe extensions to the algorithms as future work.

Gender and the art of community relations

Aspects of one's personal identity can change the way you experience being part of a community, especially if you are in a minority group. The author reports on her experiences of conducting research with women who participate in the Debian Linux project.

DIY digital decorations

The BeagleBoard.org Foundation is a nonprofit dedicated to developing open-source embedded hardware and software. The foundation's latest creation is the PocketBeagle, a single-board computer that runs Linux. The PocketBeagle debuted at the World Maker Faire this past September in New York City, and we were lucky enough to be there and win one of the first boards. BeagleBoard.org makes a number of boards designed for different applications, such as robotics. These typically sell in the US $60 to $125 range. At $25, the PocketBeagle is designed to be a low-cost variant. But it's not just a stripped-down version of the other boards, as the PocketBeagle offers some interesting features of its own. So we immediately started thinking of projects that we could try out with the board, settling on a light controller for a festive village diorama for the coming holiday season. The PocketBeagle runs Debian Linux, and hence it is possible to develop applications in different programming languages, including Python, Ruby, or BoneScript. The latter is a library built on top of Node.js that was developed for the Beagle family: It allows you to program and control devices using Web pages and JavaScript. What's really interesting about the PocketBeagle is that in addition to a primary CPU that runs the Linux operating system (an ARM Cortex-A8 running at 1 gigahertz), the processor at the heart of the PocketBeagle also has two programmable real-time units (PRUs).

Video and Sensor Data Stream With Web Socket on Raspberry Pi 3

Internet of Things (IOT) and communication between machines (M2M), has emerged as an important concept in conjunction with the use of Internet technology in embedded systems. Thus, programmable remote control and the need for people with microcontrollers, it becomes possible to use the system are minimized. Given this device's web server hardware capabilities, also allows the use of technologies such as web sockets. In this study, a mini computer featuring Raspberry Pi 3 moving images, temperature and pir motion data received, transmitting in real time with clients via the web browser and the ability to monitor the place where you have displayed to clients at the same time is designed as a system. The goal of this system, image processing and artificial intelligence methods using a remote place / region to create a hardware and software infrastructure for monitoring or monitoring. The target for the operating system that offers performance from the device with the use of minimal resources, non-graphical interface and development environment ARM-supported Debian Linux as the Node.js installation is preferred. Socket servers and HTTP server software made by users of a particular program without the need for mobile phone environment is installed the device in any environment with a computer or web browser to monitor in real-time, data retrieval, and has obtained the ability to check. Created this is the system to be monitored spaces regardless of the number of users, thanks to the web connector technology in the software encoded on the device in real time without requiring an additional operation in the browser monitoring displays alerts (voice, text, etc.) situation can be produced.

DSN Transient Observatory

The Deep Space Network (DSN) Transient Observatory (DTO) is a signal processing facility that can monitor up to four DSN downlink bands for astronomically interesting signals. The monitoring is done commensally with reception of deep space mission telemetry. The initial signal processing is done with two CASPER a ROACH1 boards, each handling one or two baseband signals. Each ROACH1 has a 10 GBe interface with a GPU-equipped Debian Linux workstation for additional processing. The initial science programs include monitoring Mars for electrostatic discharges, radio spectral lines, searches for fast radio bursts and pulsars and SETI. The facility will be available to the scientific community through a peer review process.