Defense Architecture Research Articles

Defending Against Collaborative Attacks by Malicious Nodes in MANETs: A Cooperative Bait Detection Approach

In mobile ad hoc networks (MANETs), a primary requirement for the establishment of communication among nodes is that nodes should cooperate with each other. In the presence of malevolent nodes, this requirement may lead to serious security concerns; for instance, such nodes may disrupt the routing process. In this context, preventing or detecting malicious nodes launching grayhole or collaborative blackhole attacks is a challenge. This paper attempts to resolve this issue by designing a dynamic source routing (DSR)-based routing mechanism, which is referred to as the cooperative bait detection scheme (CBDS), that integrates the advantages of both proactive and reactive defense architectures. Our CBDS method implements a reverse tracing technique to help in achieving the stated goal. Simulation results are provided, showing that in the presence of malicious-node attacks, the CBDS outperforms the DSR, 2ACK, and best-effort fault-tolerant routing (BFTR) protocols (chosen as benchmarks) in terms of packet delivery ratio and routing overhead (chosen as performance metrics).

Cybersecurity: From Months to Milliseconds

Computer technology is the nexus of our critical infrastructures, yet it remains extremely vulnerable to cyberattacks. A proposed Integrated Adaptive Cyber Defense architecture promises to create a healthy cyber ecosystem by automating many risk decisions and optimizing human oversight of security processes too complex or important for machines alone to solve.

Indicios de violencia en yacimientos de la región de Madrid en el marco del Calcolítico peninsular

This study focuses on aspects related to interpersonal or intergroup violence during the Iberian Chalcolithic by discussing some archaeological evidences which have not been thoroughly evaluated to date. Particular attention is given to a series of injuries observed in some burials, which in the light of recent anthropological and paleopathological studies are becoming more numerous and diverse. Besides reviewing some papers and proposals on bone injuries resulting from acts of violence, new documented evidences are offered from the study of two Chalcolithic burials in Madrid: Camino de las Yeseras and Humanejos and related to an old one from the cemetery of Ciempozuelos. In the first of these sites, a multiple inhumation in a pit has been documented. It contains a possible family group associated with flint arrow heads intermingled with the skeletons and they seem to be related to the violent death of the group in a short space of time. Far more striking are the injuries found on two Bell Beaker males, one of them from Camino de las Yeseras, a senile with broken and deviated nasal bones, probably due to an interpersonal conflict. The second example, from Humanejos, is a 30 year old male who was a victim of a major traumatic injury to the forehead ante mortem . It was possibly caused by a copper adze or small axe, due to a face-to-face conflict. Both cases seem to suggest that, interpersonal or intergroup violence during the Iberian Chalcolithic is not infrequent. Also the archaeological record is revealing the existence of defensive architectures in several sites, where a considerable amount of arrow heads have been recovered in entrances, walls and workshops. These circumstances and the increase of arrow heads also in some ditched enclosures could explain their productions as primary defensive and offensive artefacts and later on the emergence of the first copper Palmela arrow heads in Iberia. Otherwise, as the archaeozoological studies of some chalcolithic sites reveal, that the increasing frequency of the flint arrow heads productions are not necessarily related to the rise of hunting activities during the 3 rd millennium. It is also discussed the use of some metal tools as weapons during the Bell Beaker horizon as they only appear in household contexts and the functionality of some of the Beaker “package” items from tombs as weapons.

A New Factor State Space Model for SCADA Network Attack and Defense

To solve the security problem in the supervisor control and data acquisition (SCADA), a new factor network model of SCADA network attack and defense based on factor state space is presented. Combining with factor space theory, formal descriptions of factor neurons based on factor state space are developed. On the basis of analysis and expression of network attack and defense factors, factor neuron model based on variable weight is proposed and a FNN-based security defense architecture model for SCADA network is put forward. For illustration, by introducing factor space canes, an attack simulation experiment is utilized to show the feasibility of the proposed method in solving network attack and defense knowledge reasoning. Experimental results indicate that the proposed method can effectively improve recognition rate of different attacks. Factor neuron network based on factor state space can effectively solve complexity of knowledge reasoning and expression in network attack and defense system and provides a new method for solving similar application.

Latvian Security and Defense Policy within the Twenty-First Century Security Environment

The aim of this paper is to analyze fundamental factors which form and profoundly shape security and defense policy of the Republic of Latvia. One can argue that historical background, geographical location, common institutional history within the former Soviet Union, the Russia factor, the relative smallness of the territory of state and the population, the ethnic composition of the population, the low density of the population and rather limited financial and manpower resources available for the defense of the Republic of Latvia are the key factors of influence on the state security and defense policy. The core principles of the security and defense policy of Latvia are the membership in powerful global military alliance of NATO and bilateral strategic partnership with the United States. However, security and defense cooperation among the three Baltic States as well as enhanced cooperation within the Baltic-Nordic framework is seen as an important supplementary factor for the increased security of the Republic of Latvia. Latvia has developed a sustainable legal and institutional framework in order to contribute to state security and defense; however, security challenges and significant changes within the global security environment of the twenty-first century will further challenge the ability of the Republic of Latvia to sustain its current legal framework, and more importantly, current institutional structure of Latvian security and defense architecture. Significant internal and external challenges will impact the fundamental pillars of Latvian security and defense policy, such as American strategic shift to the Pacific, and lack of political will to increase defense budgets in European part of NATO. It has to be clear that very independence, security and defense of the Republic of Latvia depend on the ability of NATO to remain an effective organization with timely and efficient decision-making, and the ability of the United States to remain militarily effective and committed to the security and defense of Europe.

Guerrilla‐style Defensive Architecture in Detroit: A Self‐provisioned Security Strategy in a Neoliberal Space of Disinvestment

AbstractSelf‐provisioning has long been an important component of urban political economic processes. However, it has recently become a central feature of grassroots urban governance strategies as well. In tumultuous cities of the twenty‐first century, with governments either unwilling or unable to effectively enforce zoning laws, police neighborhoods or manage infrastructure, some householders have begun performing these services instead. This article examines one subset of self‐provisioning practices that has emerged in southwest Detroit where residents have taken steps to secure abandoned housing as a means of exerting social control over their living environment. These actions embody many contradictions and ethical dilemmas, and the intimate scale of action has left the structural production of disinvestment in places like Detroit largely unchecked. Nevertheless, these guerilla‐style spatial interventions have emerged as critically important response strategies helping residents reduce their vulnerability and stabilize their blocks even as other nearby areas continue to experience decline.

Oil Spill Preparedness Response Capability and Capacity: Do we know what we want and how do we get what we need?

ABSTRACT The oil industry has relied on the tiered response structure for over forty years to meet its oil spill response and preparedness needs. Over this time there have been significant changes in the oil spill threat potential and the expectations of stakeholders and regulators in respect of what represents acceptable levels of response preparedness and planning. Many of the existing Tier 2 and Tier 3 response equipment bases were developed based on the perceived threat from oil tanker spills, however the following decade saw rapid expansion of offshore exploration and production and the advent of using FPSOs and FSOs to enable rapid development of oil production facilities with limited shore support & infrastructure. The recent offshore incidents in Australia, UK and United States have altered perspectives on spill response and preparedness requirements, in particular in response to offshore operations. Many OSROs have changed little since their inception and the response arrangements have remained fixed to the original design criteria, in spite of changes in their operating and risk environment. Through the OGP-IPIECA Joint Industry Project on Oil Spill Response, an OSRO capability assessment tool has been developed based on the assessment protocols commonly used in military and defence operations, known as “Capability Management” frameworks. In a Capability Management framework, the interlinking functions and activities of an enterprise may be defined under several best-practice paradigms or frameworks, such as the Balanced Scorecard (BSC), the US Department of Defence Architecture Framework (DoDAF), the Ministry of Defence Architecture Framework (MODAF), and many other similar systems. The UK Ministry of Defence uses a similar breakdown of Defence Lines of Development (DLoDs) encompassing Training, Equipment, Personnel, Information, Concepts and Doctrine, Organisation, Infrastructure, and Logistics, known by the acronym “Tepidoil”. The assessment protocol described in this paper uses the “Tepidoil” methodology, modified for use in an oil spill response context with the addition of a safety component to enable assessment of Tier 2 (and possibly Tier 3) facilities. The purpose of this work was to develop a comprehensive and objective tool that can be used by industry members to ensure that OSRO facilities have the resources and infrastructure to address their current risk profile. In addition, it can potentially be modified for use as an OSRO “self-assessment” tool. The assessment criteria include:TrainingEquipmentPersonnelInfrastructureDoctrine – translates into Response PhilosophyOrganizationInformationLogisticsSafety

Towards a Reference Architecture for Archival Systems: Use Case With Product Data

Long-term preservation of product data is imperative for many organizations. A product data archive should be designed to ensure information accessibility and understanding over time. Approaches, such as the Open Archival Information System Reference Model (OAIS RM) and the Audit and Certification of Trustworthy Digital Repositories (ACTDR), provide a framework for conceptually describing and evaluating archives. These approaches are generic and do not focus on particular contexts or content types such as product data. Moreover, these approaches offer no guidance on how to formally and comprehensively describe archival systems. Such descriptions should include the business activities that a product data archive has to support and the systems that interact with the archive. Enterprise architecture provides a means to describe systems in their potentially complex environments. This paper proposes a holistic approach to formally describe the architecture and the environment of archival systems. This approach relies on the formal representation of the preservation terminology, including OAIS concepts, using the Department of Defense Architecture Framework (DoDAF). The approach covers the various interactions of other business functions with the archive and the information models necessary to ensure preservation and accessibility of product data. This approach is a step towards a reference architecture for the formal description of archival systems. To demonstrate the approach, we formally describe the ingest of product data related to a ship. The resulting description uses the preservation terminology defined in the OAIS Reference Model. It facilitates the understanding of how the preservation solution is actually implemented and provides evidence that the solution is able to preserve product data and make it accessible.

Ripple-effect analysis for operational architecture of air defense systems with supernetwork modeling

In order to solve the problem that the ripple-effect analysis for the operational architecture of air defense systems (OAADS) is hardly described in quantity with previous modeling approaches, a supernetwork modeling approach for the OAADS is put forward by extending granular computing. Based on that operational units and links are equal to different information granularities, the supernetwork framework of the OAADS is constructed as a ?four-network within two-layer? structure by forming dynamic operating coalitions, and measuring indexes of the ripple-effect analysis for the OAADS are given combining with Laplace spectral radius. In this framework, via analyzing multidimensional attributes which inherit relations between operational units in different granular scales, an extended granular computing is put forward integrating with a topological structure. Then the operation process within the supernetwork framework, including transformation relations between two layers in the vertical view and mapping relations among functional networks in the horizontal view, is studied in quantity. As the application case shows, comparing with previous modeling approaches, the supernetwork model can validate and analyze the operation mechanism in the air defense architecture, and the ripple-effect analysis can be used to confirm the key operational unit with micro and macro viewpoints.

A Novel Executable Modeling Approach for System-of-Systems Architecture

A novel executable modeling approach is proposed for system-of-systems architecture by taking full advantage of the Department of Defense Architecture Framework (DoDAF) Meta-model (DM2) and defining the common model transformation specification at the metamodel level. This methodology provides more flexibility and adaptability for the automated construction of executable models directly from the architectural data rather than from static models. More specifically, the architectural data metamodel is first established to guide architectural data modeling of core data elements and associations in DM2 as the common and consistent data dictionary for architecture modeling, while the executable formalism metamodel is designed to formally define executable models. Then, the mapping rules between both metamodels are presented as the common transformation specification regardless of which modeling language or methodology is employed in developing architectural descriptions. Finally, eXtensible Markup Language (XML) technology, like XML schema languages and eXtensible Stylesheet Language specifications, is discussed to facilitate the automated transformation of executable models from architectural instance data. The feasibility of the proposed approach is illustrated using a published example where colored Petri net (CPN) is used as the executable formalism.

A game inspired defense mechanism against distributed denial of service attacks

ABSTRACTGame theory offers a promising approach toward modeling cyber attacks and countermeasures as games played among attackers and system defenders. The widely accepted concept of Nash equilibrium can be used to determine the optimal strategy for all players playing the game. In this work, we demonstrate the applicability of game theory in modeling the defense against distributed denial of service attacks. In particular, we focus on attack scenarios that attempt to create congestion in bottleneck network links. We design a game model to determine the best defense strategy for the defender in such attack scenarios. In our model, the attacker uses a botnet consisting of multiple nodes to send rogue traffic in order to flood one or more links in the target network. The defender's challenge is to determine the best firewall settings to block rogue traffic while allowing legitimate traffic. We validate our game model using simulation. Furthermore, we build a comprehensive defense architecture called game inspired defense architecture and test its performance via emulation on one publicly available testbed called DeterLab. Open source software, such as Bro intrusion detection system, Dummynet network emulator, IP firewall, and Iperf network testing tool are used to build game inspired defense architecture. Our proposed defense solution exhibits promising results during both simulation and emulation. Copyright © 2014 John Wiley & Sons, Ltd.

Drilling Intensity Varies Among Neogene Tropical American Bivalvia in Relation to Shell Form and Life Habit

We calculated the incidence of drilling on bivalve genera from the Neogene fossil record of Panama and Costa Rica to determine differences in predation intensity among groups based on shell architecture, life habit, mobility, and taxonomic affinity. Bulk samples from 28 localities yielded >106,000 bivalve specimens, which were examined for characteristic drilling traces of muricid and naticid gastropods. We calculated the drilling intensity for the 90 most common genera, and characterized the size, ornament, life habit, and mobility for each genus. Large size confers considerable protection from drilling, but shell ornamentation does not. Life habit is strongly linked with drilling intensity. Epifaunal bivalves experience higher predation than infaunal bivalves and shallow burrowers experience higher drilling than deep burrowers. Mobility is also important for epifaunal bivalves; cemented taxa are twice as likely to be drilled as their uncemented counterparts. Our results suggest that bivalve behavior and life habits are more important than shell architecture for defense against drilling predators.

Design and Realization of Network Security Defense Architecture of Medical Information Integration Platform

In this paper, based on the characteristics of heterogeneous information integration, a set of complete medical information integration platform network security defense architecture was designed by utilizing network security defense equipment and technologies such as gatekeeper, disk array and hot-standby etc. On the basis of overall design, the construction, deployment and operation of related system were realized. At last, the effectiveness of the network security defense architecture designed and realized in this paper was tested by means of fault injection.

Detection and defense of application-layer DDoS attacks in backbone web traffic

Web servers are usually located in a well-organized data center where these servers connect with the outside Internet directly through backbones. Meanwhile, the application-layer distributed denials of service (AL-DDoS) attacks are critical threats to the Internet, particularly to those business web servers. Currently, there are some methods designed to handle the AL-DDoS attacks, but most of them cannot be used in heavy backbones. In this paper, we propose a new method to detect AL-DDoS attacks. Our work distinguishes itself from previous methods by considering AL-DDoS attack detection in heavy backbone traffic. Besides, the detection of AL-DDoS attacks is easily misled by flash crowd traffic. In order to overcome this problem, our proposed method constructs a Real-time Frequency Vector (RFV) and real-timely characterizes the traffic as a set of models. By examining the entropy of AL-DDoS attacks and flash crowds, these models can be used to recognize the real AL-DDoS attacks. We integrate the above detection principles into a modularized defense architecture, which consists of a head-end sensor, a detection module and a traffic filter. With a swift AL-DDoS detection speed, the filter is capable of letting the legitimate requests through but the attack traffic is stopped. In the experiment, we adopt certain episodes of real traffic from Sina and Taobao to evaluate our AL-DDoS detection method and architecture. Compared with previous methods, the results show that our approach is very effective in defending AL-DDoS attacks at backbones.

Hierarchical Nuclear and Cytoplasmic Genetic Architectures for Plant Growth and Defense withinArabidopsis

To understand how genetic architecture translates between phenotypic levels, we mapped the genetic architecture of growth and defense within the Arabidopsis thaliana Kas × Tsu recombinant inbred line population. We measured plant growth using traditional size measurements and size-corrected growth rates. This population contains genetic variation in both the nuclear and cytoplasmic genomes, allowing us to separate their contributions. The cytoplasmic genome regulated a significant variance in growth but not defense, which was due to cytonuclear epistasis. Furthermore, growth adhered to an infinitesimal model of genetic architecture, while defense metabolism was more of a moderate-effect model. We found a lack of concordance between quantitative trait loci (QTL) regulating defense and those regulating growth. Given the published evidence proving the link between glucosinolates and growth, this is likely a false negative result caused by the limited population size. This size limitation creates an inability to test the entire potential genetic landscape possible between these two parents. We uncovered a significant effect of glucosinolates on growth once we accounted for allelic differences in growth QTLs. Therefore, other growth QTLs can mask the effects of defense upon growth. Investigating direct links across phenotypic hierarchies is fraught with difficulty; we identify issues complicating this analysis.

2.5.2 Architecting in the Fourth Dimension Temporal Aspects of DoDAF

AbstractThe capture of system structure, behavior, configuration, interaction, and compliance is common practice in architectures. These are largely static views showing a specific configuration or behavior. IEEE Std 610.12–1990 defines architecture as “the fundamental organization of a system embodied in its components, their relationships to each other, and to the environment, and the principles guiding its design and evolution.” (IEEE, 1990) Modeling this evolution or the temporal aspects in architecture frameworks such as the Department of Defense Architecture Framework (DoDAF) was previously problematic. With the release of DoDAF version 2.0, architectures can now take the fourth dimension (Time) into account. The challenge is to identify areas of architecture where time can be modeled and how to take best advantage of it. Also problematic is how to express these concepts without having to expose all the internal ontological relationships upon which DoDAF is built. The Unified Profile for DoDAF and MODAF (UPDM) delivers an implementation of DoDAF 2.0 that provides a clear and concise way of expressing these concepts without requiring the user to become an expert in the DoDAF 2.0 “internal wiring” and detailed ontological concepts. This paper will examine the temporal concepts defined in DoDAF 2.0 and show how time can be effectively integrated into a model to express essential temporal concepts.

A Comparative Analysis of the Integration of SOA Elements in Widely-Used Enterprise Architecture Frameworks

In recent years, enterprise architecture (EA) has captured increasing interest as a means to systematically consolidate and manage various enterprise artefacts in order to provide holistic decision support for business/IT alignment and business/IT landscapes management. To provide a holistic perspective on the enterprise over time, EA frameworks need to co-evolve with the changes in the enterprise and its IT over time. In this paper the authors focus on the emergence of Service-Oriented Architecture (SOA). There is a need to integrate SOA with EA to keep EA relevant and to use EA products to help drive successful SOA. This paper investigates and compares the integration of SOA elements in five widely used EA frameworks: Archimate, The Open Group Architecture Framework (TOGAF), Federal Enterprise Architecture Framework (FEAF), Department of Defence Architecture Framework (DoDAF) and the Ministry of Defence Architecture Framework (MODAF). It identifies what SOA elements are considered and their relative position in the overall structure. The results show that services and related elements are far from being well-integrated constructs in current EA frameworks and that the different EA frameworks integrated SOA elements in substantially different ways. The results can support the academic EA and SOA communities with a closer and more consistent integration of EA and SOA and support practitioners in identifying an EA framework that provides the SOA support that matches their requirements.

A data‐centric capability‐focused approach for system‐of‐systems architecture modeling and analysis

AbstractA data‐centric, capability‐focused approach is proposed to facilitate the architecture modeling and analysis of challenging system‐of‐systems (SoS). This approach abstracts essential information from the underlying complexity with the architecture modeling in a data‐centric and semantically consistent fashion, and allows early understanding and exploration of the logical, behavioral, and performance characteristics to achieve the desired capabilities. More specifically, a high‐level data meta‐model, depicting the semantic relationships of constituent architectural data elements, is first presented to guide the architectural data modeling, which is aligned well with the US Department of Defense Architecture Framework (DoDAF) Meta‐model (DM2). Then, the development of architectural descriptions and the construction of executable models are studied based on the core architectural data elements. Additionally, architecture analysis using static and executable models are discussed, including static analysis, dynamic analysis, and experimental analysis. The feasibility of the foregoing approach is demonstrated with an illustrative example. ©2013 Wiley Periodicals, Inc. Syst Eng 16:

An Enterprise Architecture Approach Based on DoDAF

Effective enterprise architecture has a decisive role in the survival and success of the enterprise. It is also an indispensable means for enterprises to gain competitive advantage through IT. By analyzing the existing DoDAF(Department of Defense Architecture Framework) architecture, we tailor some parts of the capability viewpoint and operational viewpoint to make it more suitable for the implementation of small and medium-sized enterprise architecture. At the same time, in order to meet the requirements of business expanding, we add the enterprise viewpoint and the process viewpoint to DoDAF. Finally, we take a typical part of a logistics case as an example to show the specific application process of our method.

Integration, Verification, Validation, Test, and Evaluation (IVVT&E) Framework for System of Systems (SoS)

The traditional systems engineering (SE) methodologies for integration, verification, validation, test and evaluation (IVVT&E) throughout the lifecycle are focused on expected outcomes (behavior, capabilities), which may not necessarily apply for system of systems (SoS), where some emergent behavior and knowledge may be needed in untested scenarios (unknown environments). Next-generation SoS consisting of partially or fully decentralized systems are incorporating advances in computing, sensing, and communications operations to address uncertainty and emergence in SoS. Thus, current standardized and formalized IVVT&E methodologies will need to be modified, adapted, or an evolutionary IVVT&E framework for SoS is required to test and evaluate integrated SoS capabilities in unknown scenarios. This paper discusses several potential strategies and explores possible methodologies that may be applied to develop a SoS IVVT&E framework, as applied to an unmanned aerial system (UAS), based on existing architectural frameworks such as Department of Defense Architecture Framework (DoDAF).