Management Console Research Articles

IAM Identity Access Management—Importance in Maintaining Security Systems within Organizations

Identity and Access Management proposes a web service that assists in controlling the entire work through secured ways. This research study has been started to highlight the importance of IAM by discussing its roles, characteristics, advantages and disadvantages. It is a framework comprising processes, policies, and the latest technologies, allowing the organization to monitor digital identities and control exclusive access to follow information based on user data. The IAM component proposes an approach of centralized user management, account management console, authentication approaches, and so on. In this research work, roles and key components of IAM have been discussed with all types of possible challenges. Furthermore, this research will help readers and future researchers easily identify the importance of IAM in maintaining security systems within organizations.

Let Us Create A Lambda Function for Our IoT Device In The AWS Cloud Using C#

Purpose: This research paper explores the process of creating a Lambda function for an IoT device in the AWS cloud using C#. It provides a comprehensive guide to the steps involved in building a Lambda function, including setting up the AWS environment, creating the Function using C#, and deploying it to the cloud. Additionally, the paper will discuss the benefits of using Lambda functions for IoT devices, such as cost-effectiveness and scalability. It will provide examples of real-world use cases for this technology. By the end of this paper, readers will clearly understand how to create Lambda functions for their IoT devices using C# in the AWS cloud and will be able to apply this knowledge to their projects. Design/Methodology/Approach: A comprehensive literature review was conducted to gather information on the AWS cloud, IoT devices, and Lambda functions. The Lambda function was created using C# in Visual Studio. This involved writing the necessary code to perform the desired functionality, testing the Function locally, and packaging it for deployment. The Lambda function deployed to the AWS cloud using the AWS Management Console. Findings/Result: The AWS environment can be easily configured with IoT devices and Lambda functions. AWS allows for cost-effective and scalable solutions that can be easily managed and monitored. Creating a Lambda function using C# in Visual Studio is straightforward and allows for powerful and flexible coding techniques. The deployment of the Lambda function to the AWS cloud is simple and can be achieved using the AWS Management Console. Originality/Value: It offers a comprehensive guide to creating a Lambda function for an IoT device in the AWS cloud using C#. This guide includes a step-by-step approach to setting up the AWS environment, creating the Function using C#, and deploying it to the cloud. It demonstrates the real-world application of Lambda functions for IoT devices, providing examples of use cases and demonstrating the benefits of this technology. Paper Type: Experimental-based Research.

An Efficient Intrusion Detection Framework for Industrial Internet of Things Security

Recently, the Internet of Things (IoT) has been used in various applications such as manufacturing, transportation, agriculture, and healthcare that can enhance efficiency and productivity via an intelligent management console remotely. With the increased use of Industrial IoT (IIoT) applications, the risk of brutal cyber-attacks also increased. This leads researchers worldwide to work on developing effective Intrusion Detection Systems (IDS) for IoT infrastructure against any malicious activities. Therefore, this paper provides effective IDS to detect and classify unpredicted and unpredictable severe attacks in contradiction to the IoT infrastructure. A comprehensive evaluation examined on a new available benchmark TON_IoT dataset is introduced. The data-driven IoT/IIoT dataset incorporates a label feature indicating classes of normal and attack-targeting IoT/IIoT applications. Correspondingly, this data involves IoT/IIoT services-based telemetry data that involves operating systems logs and IoT-based traffic networks collected from a realistic medium-scale IoT network. This is to classify and recognize the intrusion activity and provide the intrusion detection objectives in IoT environments in an efficient fashion. Therefore, several machine learning algorithms such as Logistic Regression (LR), Linear Discriminant Analysis (LDA), K-Nearest Neighbors (KNN), Gaussian Naive Bayes (NB), Classification and Regression Tree (CART), Random Forest (RF), and AdaBoost (AB) are used for the detection intent on thirteen different intrusion datasets. Several performance metrics like accuracy, precision, recall, and F1-score are used to estimate the proposed framework. The experimental results show that the CART surpasses the other algorithms with the highest accuracy values like 0.97, 1.00, 0.99, 0.99, 1.00, 1.00, and 1.00 for effectively detecting the intrusion activities on the IoT/IIoT infrastructure on most of the employed datasets. In addition, the proposed work accomplishes high performance compared to other recent related works in terms of different security and detection evaluation parameters.

The science-policy interfaces of the European network for observing our changing planet: From Earth Observation data to policy-oriented decisions

This paper reports on major outcomes of the ERA-PLANET (The European network for observing our changing planet) project, which was funded under Horizon 2020 ERA-net co-funding scheme. ERA-PLANET strengthened the European Research Area in the domain of Earth Observation (EO) in coherence with the European participation to Group on Earth Observation and the Copernicus European Union’s Earth Observation programme. ERA-PLANET was implemented through four projects focused on smart cities and resilient societies (SMURBS), resource efficiency and environmental management (GEOEssential), global changes and environmental treaties (iGOSP) and polar areas and natural resources (iCUPE). These projects developed specific science-policy workflows and interfaces to address selected environmental policy issues and design cost-effective strategies aiming to achieve targeted objectives. Key Enabling Technologies were implemented to enhancing ‘data to knowledge’ transition for supporting environmental policy making. Data cube technologies, the Virtual Earth Laboratory, Earth Observation ontologies and Knowledge Platforms were developed and used for such applications.SMURBS brought a substantial contribution to resilient cities and human settlements topics that were adopted by GEO as its 4th engagement priority, bringing the urban resilience topic in the GEO agenda on par with climate change, sustainable development and disaster risk reduction linked to environmental policies.GEOEssential is contributing to the development of Essential Variables (EVs) concept, which is encouraging and should allow the EO community to complete the description of the Earth System with EVs in a close future. This will clearly improve our capacity to address intertwined environmental and development policies as a Nexus.iGOSP supports the implementation of the GEO Flagship on Mercury (GOS4M) and the GEO Initiative on POPs (GOS4POPs) by developing a new integrated approach for global real-time monitoring of environmental quality with respect to air, water and human matrices contamination by toxic substances, like mercury and persistent organic pollutants. iGOSP developed end-user-oriented Knowledge Hubs that provide data repository systems integrated with data management consoles and knowledge information systems.The main outcomes from iCUPE are the novel and comprehensive data sets and a modelling activity that contributed to delivering science-based insights for the Arctic region. Applications enable defining and monitoring of Arctic Essential Variables and sets up processes towards UN2030 SDGs that include health (SDG 3), clean water resources and sanitation (SDGs 6 and 14).

Development of an Intelligent Based Water Pipelines Damage Control System at the Supply Unit of the Federal Polytechnic Offa, Kwara State

Water is the most valuable means of life sustainability because it is a basic need of all households. The incessant water leakage levels in the water supply network on the mini campus, Federal Polytechnic Offa, is one of the most vital issues to address by the work unit on the School campus. Works unit provides services to all departments on campus, covering an area of the landmass of 1050 hectares with a population of staff and students of approximately 13 000. The work unit is in charge of correctional facilities and operation. The sub-service of the work unit on water supply system comprising a network of 1km of water pipes and 1500 litres capacity storage tower across units. The input system volume in the lose of water supply is approximately 56%, from which a significant proportion is about physical losses. This paper focused on intelligent-based leakage control to replace the traditional method used on campus parameters for backtesting tracing when physical damage becomes visible. However, the result of the study revolves around the design and implementation of a prototype system. The study created a management console as an intelligent decision support system. The realism of the study summarizes various operations by developing intelligent reporting software with data warehouse techniques to facilitate underground leak line pipes tracking.

Cloud security framework and key management services collectively for implementing DLP and IRM

A free and open-source framework management solution can help organizations as well as end-users. An agentless, completely controlled, centrally administered, and freely distributed source, cloud-based data leak control includes enhanced data loss protection management for both corporations and end-users. An Open-Source Framework in the cloud zone was used to construct the data loss prevention tool. This framework can be released under an Open License or a Free License, making it freely usable by end-users throughout the world. You can run it on any of these platforms: Linux, Windows, or UNIX. It relies on open database connectivity and MSSQL credentials for its database connectivity, although MySQL Server is used for database connectivity. As many as hundreds of individual files or thousands of multiple files can be accessed simultaneously by the Open User Data Loss Management Console, which can identify the case-sensitive information among them.

Analysis of network security organization based on SD-WAN technology

A Software-Defined Network (SDN) on a Wide Area Network (WAN) is a computer network that is controlled and created by software. SD-WAN is an emerging research area that has received a lot of attention from industry and government. This technology offers tremendous opportunities to support the creation of consolidated data centers and secure networks. This is an innovation that allows the network to be monitored and programmed so that it can respond to network events caused by security breaches. This solution provides network security, offers a single network management console, and provides complete control over the network architecture. Also controls security in the cloud software-defined infrastructure (SDI), such as dynamically changing the network configuration when forwarding packets, blocking, redirecting, changing Media Access Control (MAC) or Internet Protocol (IP) addresses, limiting the packet flow rate etc. Using SD-WAN technology, it is possible to reduce the cost of dedicated bandwidth channels, achieve a high-quality Virtual Private Network (VPN), and the ability to automatically select a channel for certain channels. The main advantages of SD-WAN are the management of an unlimited number of devices from a single center, reducing the cost of deploying branch infrastructure. According to the results of the survey, 7 % of respondents use SD-WAN for security solutions, 14% at the piloting stage. As a result of the research, it was revealed that by 2024, to increase the flexibility and support of cloud applications, more than 60 % of SD-WAN customers will implement the SASE (Secure Access Service Edge) architecture, which is 30% more than in 2020 and the main concept - application security and cloud functions. Keywords: OpenFlow, Software defined wide area network (SD-WAN), architecture, DDoS attack, WAN network

Design innovations for IBM Z hardware management appliance

The IBM z15 supports the new IBM Z Hardware Management Appliance optional feature, which provides redundant Hardware Management Consoles (HMCs) and Support Elements (SEs) that run on redundant physical servers inside the CPC (Central Processor Complex) frame. This eliminates the need for having to manage one or more separate physical servers for HMCs outside of the frame. This article describes the host HMC/KVM (kernel-based virtual machine) and Virtual SE environment, which is completely managed by IBM Z firmware as a true appliance. It also illustrates the firmware integrity monitoring environment for the host HMC/KVM extended to the Virtual SE to provide secure boot protection for firmware and continuous monitoring and the utilization of a shared trusted platform module. It describes how physical system errors are processed by problem analysis firmware running on the Virtual SE, thereby enabling online guided repair instructions running on the Virtual SE to be used for both HMC and SE detected errors. This article will shares the innovative design basics of the IBM Z Hardware Management Appliance feature, which has significant positive impact potential for both clients and IBM.

A multicenter clinical trial to assess the efficacy of the digital therapeutics for essential hypertension: Rationale and design of the HERB-DH1 trial.

Digital therapeutics is a new approach to treat hypertension via using software programs such as smartphone apps and/or device algorithms. We develop a HERB system—new interactive smartphone app (HERB Mobile) with web‐based patient management console (HERB Console)—to lower blood pressure (BP) based on an algorithm that helps users to promote lifestyle modifications in conjunction with medically validated non‐pharmacological interventions. The app can assess the personalities, behavior characteristics, and hypertension determinants of each patient with hypertension to provide adequate guidance. To demonstrate the efficacy of the system, we designed a randomized, controlled, multicenter, open‐label trial “HERB‐DH1 (HERB digital hypertension 1)” to assess the efficacy of HERB system in patients with essential hypertension. The authors allocate patients to the intervention group (HERB system + standard lifestyle modification) or to the control group (standard lifestyle modification alone). In the intervention group, we provide the HERB Mobile for patients and the HERB Console for their primary physicians for 24 weeks. Both groups are instructed for standard lifestyle modifications based on the current recommendations in the Japanese Society of Hypertension 2019 guideline. The primary outcome is the mean change from baseline to 12 weeks in 24‐hour systolic BP measured by ambulatory BP monitoring. We started this study in December of 2019, and the trial results will be expected in early 2021. We believe that this trial enables us to verify the efficacy of the HERB system in patients with essential hypertension.

A Review on Identity and Access Management Server (KeyCloak)

KeyCloak is an open source identity and access management arrangement focused on present day applications and administrations. It makes it simple to protect applications and administrations with next to zero code. The identity and access management server component provides centralized user management, authentication, and single sign-on identity brokering user federation, social login, client adapters, an admin console, and an account management console for the applications. With KeyCloak, the user management and authentication functions may be integrated with an externally managed system, such as LDAP or active directory. KeyCloak provides single sign-on infrastructure for authentication and session management. In this paper, the authors present an overview of KeyCloak that gives the objectives and features of KeyCloak and comparisons between the servers. They also present protocols of KeyCloak. Finally, benefits of KeyCloak are defined.

A Noble Approach of Real Time Intrusion Detection System (NART-IDS)

Malicious users use different techniques such as cracking passwords, text traffic, sniffing unencrypted or light, etc. System overhead and compromise critical systems. Therefore, there must be some sort of security for the organization's private resources from the Internet and from the inside. Therefore, the intrusion detection system (IDS) could be the best solution. It complements the firewall to improve the security holes. An intrusion detection system includes a management console and sensors. The management console holds all the responsibility of functionality of IDS comprises with its initialization, packet capturing, and report generation, whereas the sensors used to monitor hosts or networks in real time. There may be different categories of Intrusion Detection System. IDS can be designed in the concept of Signature analysis as well as anomaly behavior analysis. Therefore IDS used to capture the behavior of suspected packets. These functions are in host mode and called as Host Intrusion Detection System (HIDS) and in Network mode called as Network Intrusion Detection System (NIDS). The entitled dissertation work is carried out to obtain the best analysis performance through signature based detection system. It is efficient for host as well as network system .here basically Transmission Control Packets (TCP) and User Datagram Packets (UDP) considered to analysis for finding different attacks like Probe,DoS,R2l and U2R. This system is being found functionally efficient and also provide layer wise attacks details. Here different agent modules used to perform desired isolated responsibility like Mobile Agent (MA) to activate different IDS chest at different hosts, Tenet Agent (TA) for signature rule, Analysis Agent (AA) etc. The proposed system can greatly improve efficiency from offline detection to real-time online detection. Since the proposed system derives features from packet headers. Many attacks were experimented in this system. Experiments were performed to demonstrate the excellent effectiveness and efficiency of the proposed system. The proposed system can greatly improve efficiency from offline detection to real-time online detection. Since the proposed system derives features from packet headers. The entitled system can be further enhanced to capture more type of attacks at the levels of multiple layers and also may stop attacks as well.

An Intelligent Low-Power Displaying System withIntegrated Emergency Alerting Capability.

Integrated communication infrastructure has become a must-have facility for modern public buildings and offices. To cover this need, several commercial products exist on the market, but most of them require advanced technical skill to operate, while others require manual and time-consuming operations. This work proposes an intelligent displaying and alerting system (called SICIAD), implemented over an integrated communication infrastructure with support for wireless ePaper and iBeacon technologies to enhance displaying static and dynamic information, as well as to ease the indoor orientation of guests. A centralized display management console is implemented, as well as procedures for automatically displaying different types of notifications. An Android mobile application is developed which enables indoor user location and guidance. The system targets educational and research institutions but could also cope with public institutions such as museums and hospitals. Remote authentication is supported in research facilities through eduroam technology, access being provided by the user’s distant institution of affiliation. Secure multiple-level access to the system is provided to users, from guests to system administrators, based on locally defined policies. Functional validation and performance evaluation aspects are presented for the proposed system.

Platform simplification for IBM z14

In this paper, we describe our continued focus on simplifying the IBM Z environment and the key changes made across the mainframe stack, including platform management, hypervisors, and operating systems. For the IBM z14 program, the first goal was to enable system administrators, with no mainframe experience, to provision resources and deploy Linux workloads on the mainframe in minutes using their current skills. Further goals include providing a mobile experience for users to securely monitor and manage their systems from “anywhere,” addressing critical user pain points in the configuration of server time protocol using a topological visualization, securing the hardware management console (HMC) with two-factor authentication, and modernizing the main user workspace. Finally, the concept of attaching storage resources to an IBM Z environment has been changed to provide a consistent end-to-end experience for both the novice system administrator and the storage administrator. Additionally, the two IBM Design hallmark projects, IBM Dynamic Partition Manager and IBM zHMC.Next, are also critical to achieve these goals. Finally, applying IBM Design Thinking and Agile practices, and establishing radical collaboration with our customers, is essential to deliver these meaningful outcomes.

Efficient data access and performance improvement model for virtual data warehouse

This paper presents a model for improving query performance in Virtual Data Warehouse (VDW) by simulating VDW environment on a cellular phone billing and customer care system which involves processing millions of Call Detail Records (CDRs) generated by thousands of counters across the country. Processing aggregations on millions of CDRs requires expensive systems, especially when analysing customers’ traffic trends and encompasses several performance optimization techniques used for improvement of query performance in VDW. In this regard, VDW offers several advantages such as real-time analytic reports, reduced maintenance, low cost solution and flexible data integration, but performance is still one of its critical shortcomings. This paper enhances performance of VDW by using techniques like partitioned materialized views, index performance optimization, query rewrite in materialized views, analytic functions, sub-queries and enabling parallel execution etc. The study uses Oracle 10g as a backend database; Oracle management console and SQL query analyser are used for monitoring performance concerns during validation of VDW model; standard PL/SQL developer is used for extracting and loading test data; and finally, Hyperion Development suite is used for testing time comparisons of datasets both in normal OLTP and simulated VDW environments.

Дослідження засобів створення обчислювального кластера на основі технологій віртуалізації

The analysis of modern technologies of computing clusters. The question of configuration and installation of OpenVZ, HyperVM, Hyper-V is considered. The stages of setting OpenVZ OS Ubuntu/Debian are developed. The features of setting in solving virtualization are considered. Features HyperVM a widespread technology for farm management of physical and virtual servers using web-based interface are considered. The possibilities of using HyperVM based management of certificates, remote access protocols, the definition lists services and processes and build reports of virtual machines are developed. The questions of building a computing cluster based on Linux operating system based on the system of Hyper-V are discussed. The features like Hyper-V virtual environment that runs on the hardware level are considered. The next stages of adjustment of virtualization environment are developed: hardware requirements are сconsidered that choose to use virtualization technologies to processor computing cluster system; Software included with the kernel and hypervisor management console for centralized control. The necessity of spending resources on the host server to support other roles to improve performance of virtualization technologies are developed. The stages of system settings, which include: setting up a computer network by identifying local servers for all IP-addresses prior to connection to the switch, permit remote access to the cluster nodes using RDP and console MM, determination node domain, domain definitions and connect it to the cluster nodes; configuration repository to store virtual machines; virtual machines directly to the cluster; mounting distribution to work correctly with no dependencies on external resources on the nodes of a computer network operating system CentOS.

Design and Analysis of Real-time Network Intrusion Detection and Prevention System using Open Source Tools

detection and prevention is one of the most important and fundamental task in an organization's computer network. Commercially available intrusion detection and prevention systems are costly and overkill for small and medium sized organizations. This paper describes the design and analysis of a network intrusion detection system (NIDS) and network intrusion prevention system (NIPS) using open source tools. The study also describes an open source Database to store the alerts and an open source front end management console application to view the alerts and logs from the proposed Database in any of the modern day web browser. In this particular research Snort was used as an NIDS to detect intrusions and attacks. Snort is a popular open source NIDS with signature based rules for detecting thousands of known attacks. The rules are regularly updated by Snort team to include new attacks and intrusions. SnortSam was used as an NIPS to act upon the alerts detected by Snort. SnortSam blocks the intrusions by sending intruders and attacker's source IP addresses to firewall in real time. MySQL was used as the Database to store alerts and BASE (Basic Analysis and Security Engine) was chosen as the open source management console application. Juniper Networks switch EX-3200 and Firewall SSG-20 were used as the network devices for connectivity and working of the system. Any other vendor network devices can also effectively be used in design and configuration of the system. The design successfully detected and prevented network intrusions and same can be implemented in any small and medium sized organization for protection of their Computer Networks.

An Adaptive Cloud Service Observation using Billboard Manager Cloud Monitoring Tool

Tracking of Quality of Service (QoS) parameters in real-time within a cloud computing system is a major challenge as it involves monitoring each every resource parameter. Such resources may constitute virtual machines, storage devices, network equipment, allied appliances, etc. Examination of physical resources being used to host the virtualized systems is often required on a continuous basis. This is important as virtualized systems also share physical resources among themselves. To monitor resources and services, we introduce a new monitoring tool named Billboard Manager Cloud Monitoring Tool (BMCMT) running on our proposed Billboard Manager system. Through this system, a cloud system administrator is apprised of the status of virtual machines that are running within the cloud system. The Billboard Manager keeps a continuous watch on all the parameters of every virtual machine and physical resource registered with it. At preset intervals, the proposed BMCMT would automatically send reports to the administrators. Every cloud system administrator is provided web login user identification. Should an administrator find it necessary to carry out any activity pertaining to any resource, using the constantly Billboard Manager refreshed hyperlinks on the web page the administrator can access the appropriate management console for further action.

How secure is your building?

Buildings today often incorporate use of a building automation system, which provides automated centralised control of systems such as heating, ventilation, air conditioning and lighting. Buildings that employ such systems are often referred to as smart buildings. According to AutomatedBuildings, a smart building is defined as one that incorporates the use of networked technology, embedded within architecture to monitor and control elements of architecture for exchange of information between users, systems and buildings.1So-called smart buildings make use of networked technology to connect a broad range of systems to central management consoles for more efficient operation.This use of networked technology has advantages for security as well, enabling feeds from security controls to be fed into central management system so that anomalies in traffic flows can be seen and remedial action taken in an efficient, automated manner, as Colin Tankard of Digital Pathways explains.

Processing Shotgun Proteomics Data on the Amazon Cloud with the Trans-Proteomic Pipeline

Cloud computing, where scalable, on-demand compute cycles and storage are available as a service, has the potential to accelerate mass spectrometry-based proteomics research by providing simple, expandable, and affordable large-scale computing to all laboratories regardless of location or information technology expertise. We present new cloud computing functionality for the Trans-Proteomic Pipeline, a free and open-source suite of tools for the processing and analysis of tandem mass spectrometry datasets. Enabled with Amazon Web Services cloud computing, the Trans-Proteomic Pipeline now accesses large scale computing resources, limited only by the available Amazon Web Services infrastructure, for all users. The Trans-Proteomic Pipeline runs in an environment fully hosted on Amazon Web Services, where all software and data reside on cloud resources to tackle large search studies. In addition, it can also be run on a local computer with computationally intensive tasks launched onto the Amazon Elastic Compute Cloud service to greatly decrease analysis times. We describe the new Trans-Proteomic Pipeline cloud service components, compare the relative performance and costs of various Elastic Compute Cloud service instance types, and present on-line tutorials that enable users to learn how to deploy cloud computing technology rapidly with the Trans-Proteomic Pipeline. We provide tools for estimating the necessary computing resources and costs given the scale of a job and demonstrate the use of cloud enabled Trans-Proteomic Pipeline by performing over 1100 tandem mass spectrometry files through four proteomic search engines in 9 h and at a very low cost.

The Big Show: A Reimagination of Eugene O'Neill's Thirst Through the Life Story of Frances Farmer

The Big Show: A Reimagination of Eugene O'Neill's Thirst Through the Life Story of Frances Farmer