>Denial of service denial

>

A way to filter out denial of service attacks on computer networks, including cloud computing systems, could significantly improve security on government, commercial, and educational systems. Such a filter is reported in the Int. J. Information and Computer Security by researchers from Auburn University in Alabama.

Denial of Service (DoS) and distributed Denial of Service (DDoS) attacks involve an attempt to make a computer resource unavailable to its intended users. This may simply be for malicious purposes as is often the case when big commercial or famous web sites undergo a DDoS attack. However, it is also possible to exploit the system’s response to such an attack to break system firewalls, access virtual private networks, and to access other private resources. A DoS attack can also be used to affect a complete network or even a whole section of the Internet….

Now, computer engineers John Wu, Tong Liu, Andy Huang, and David Irwin of Auburn University have devised a filter to protect systems against DoS attacks that circumvents this problem by developing a new passive protocol that must be in place at each end of the connection: user and resource.

Their protocol – Identity-Based Privacy-Protected Access Control Filter (IPACF) – blocks threats to the gatekeeping computers, the Authentication Servers (AS), and so allows legitimate users with valid passwords to access private resources.

The user’s computer has to present a filter value for the server to do a quick check. The filter value is a one-time secret that needs to be presented with the pseudo ID. The pseudo ID is also one-time use. Attackers cannot forge either of these values correctly and so attack packets are filtered out.

One potential drawback of the added layer of information transfer required for checking user requests is that it could add to the resources needed by the server. However, the researchers have tested how well IPACF copes in the face of a massive DDoS attacks simulated on a network consisting of 1000 nodes with 10 gigabits per second bandwidth. They found that the server suffers little degradation, negligible added information transfer delay (latency) and minimal extra processor usage even when the 10 Gbps pipe to the authentication server is filled with DoS packets. Indeed, the IPACF takes just 6 nanoseconds to reject a non-legitimate information packet associated with the DoS attack.

via Denial of service denial.

>Denial of service denial

>

A way to filter out denial of service attacks on computer networks, including cloud computing systems, could significantly improve security on government, commercial, and educational systems. Such a filter is reported in the Int. J. Information and Computer Security by researchers from Auburn University in Alabama.

Denial of Service (DoS) and distributed Denial of Service (DDoS) attacks involve an attempt to make a computer resource unavailable to its intended users. This may simply be for malicious purposes as is often the case when big commercial or famous web sites undergo a DDoS attack. However, it is also possible to exploit the system’s response to such an attack to break system firewalls, access virtual private networks, and to access other private resources. A DoS attack can also be used to affect a complete network or even a whole section of the Internet….

Now, computer engineers John Wu, Tong Liu, Andy Huang, and David Irwin of Auburn University have devised a filter to protect systems against DoS attacks that circumvents this problem by developing a new passive protocol that must be in place at each end of the connection: user and resource.

Their protocol – Identity-Based Privacy-Protected Access Control Filter (IPACF) – blocks threats to the gatekeeping computers, the Authentication Servers (AS), and so allows legitimate users with valid passwords to access private resources.

The user’s computer has to present a filter value for the server to do a quick check. The filter value is a one-time secret that needs to be presented with the pseudo ID. The pseudo ID is also one-time use. Attackers cannot forge either of these values correctly and so attack packets are filtered out.

One potential drawback of the added layer of information transfer required for checking user requests is that it could add to the resources needed by the server. However, the researchers have tested how well IPACF copes in the face of a massive DDoS attacks simulated on a network consisting of 1000 nodes with 10 gigabits per second bandwidth. They found that the server suffers little degradation, negligible added information transfer delay (latency) and minimal extra processor usage even when the 10 Gbps pipe to the authentication server is filled with DoS packets. Indeed, the IPACF takes just 6 nanoseconds to reject a non-legitimate information packet associated with the DoS attack.

via Denial of service denial.

>Indonesia quake kills 75, thousands trapped + Donating to Red Cross by Text Message.

>

A powerful earthquake rocked western Indonesia Wednesday, trapping thousands under collapsed buildings — including two hospitals — and triggering landslides. At least 75 people were killed on Sumatra island and the death toll was expected to climb sharply.

The magnitude 7.6 quake struck at 5:15 p.m. local time (1015GMT, 6:15 a.m. EDT), just off the coast of Padang city the U.S. Geological Survey said. It was along the same fault line that spawned the massive 2004 Asian tsunami that killed more than 230,000 people in a dozen countries.

A tsunami warning for countries along the Indian Ocean was issued, and panicked residents fled to higher ground fearing giant waves. The warning was lifted about an hour later.

When the quake struck, the ground was shaking so hard that people sat down on the streets to avoid falling over, footage shot in Padang and broadcast by local TVOne network showed.

Children screamed as residents tried to put out fires started in the quake. Thousands fled the coast in cars and motorbikes, honking horns.

Initial reports received by the government said 75 people were killed, but the real number is “definitely higher than that,” Vice President Jusuf Kalla told reporters in the capital, Jakarta.

“It’s hard to tell because there is heavy rain and a blackout,” he said.

Health Minister Siti Fadilah Supari told MetroTV that a mall and two hospitals had collapsed in Padang — a sprawling low-lying city in Western Sumatra province of around 900,000 people that geologists have warned could be vulnerable to a massive quake or tsunami.

“This is a high-scale disaster, more powerful than the earthquake in Yogyakarta in 2006 when more than 3,000 people died,” Supari said, referring to a major city on the main island of Java.

Rustam Pakaya, head of the Health Ministry’s crisis center, said “thousands of people are trapped under the collapsed houses.”

via Indonesia quake kills 75, thousands trapped – Yahoo! News.

Did you know you can donate to the Red Cross with a text message? I haven’t tried it, but here are the details:

TEXT 2HELP

The national Text 2HELP Initiative is a partnership between the American Red Cross and The Wireless Foundation that allows customers of participating wireless carriers to send a text message to the Red Cross and make a donation to support the American Red Cross Disaster Relief Fund. This Fund enables the Red Cross to provide shelter, food, cots, counseling and other assistance to victims of disasters.

Subscribers of participating wireless carriers can donate $5 to American Red Cross disaster relief efforts simply by text messaging the keyword “GIVE” to “2HELP” (24357). Donations will appear on customers’ monthly bills or be debited from a prepaid account balance. Standard text messaging rates apply. To opt-out, send “STOP” to 24357.

Participating Carriers:

Alltel
AT&T
Sprint-Nextel
T-Mobile
U.S. Cellular
Verizon Wireless

Text 2HELP Frequently Asked Questions

You can help people affected by disasters, like the recent earthquake and floods, by donating to the American Red Cross Disaster Relief Fund. On those rare occasions when donations exceed Red Cross expenses for a specific disaster, contributions are used to prepare for and serve victims of other disasters. Your gift enables the Red Cross to provide shelter, food, emotional support and other assistance to victims of all disasters. You may also call 1-800-RED-CROSS (1-800-733-2767) or 1-800-257-7575 (Spanish) or mail your donation, to the American Red Cross, P.O. Box 37243, Washington, DC 20013. Internet users can make a secure online contribution by visiting www.redcross.org.

>Indonesia quake kills 75, thousands trapped + Donating to Red Cross by Text Message.

>

A powerful earthquake rocked western Indonesia Wednesday, trapping thousands under collapsed buildings — including two hospitals — and triggering landslides. At least 75 people were killed on Sumatra island and the death toll was expected to climb sharply.

The magnitude 7.6 quake struck at 5:15 p.m. local time (1015GMT, 6:15 a.m. EDT), just off the coast of Padang city the U.S. Geological Survey said. It was along the same fault line that spawned the massive 2004 Asian tsunami that killed more than 230,000 people in a dozen countries.

A tsunami warning for countries along the Indian Ocean was issued, and panicked residents fled to higher ground fearing giant waves. The warning was lifted about an hour later.

When the quake struck, the ground was shaking so hard that people sat down on the streets to avoid falling over, footage shot in Padang and broadcast by local TVOne network showed.

Children screamed as residents tried to put out fires started in the quake. Thousands fled the coast in cars and motorbikes, honking horns.

Initial reports received by the government said 75 people were killed, but the real number is “definitely higher than that,” Vice President Jusuf Kalla told reporters in the capital, Jakarta.

“It’s hard to tell because there is heavy rain and a blackout,” he said.

Health Minister Siti Fadilah Supari told MetroTV that a mall and two hospitals had collapsed in Padang — a sprawling low-lying city in Western Sumatra province of around 900,000 people that geologists have warned could be vulnerable to a massive quake or tsunami.

“This is a high-scale disaster, more powerful than the earthquake in Yogyakarta in 2006 when more than 3,000 people died,” Supari said, referring to a major city on the main island of Java.

Rustam Pakaya, head of the Health Ministry’s crisis center, said “thousands of people are trapped under the collapsed houses.”

via Indonesia quake kills 75, thousands trapped – Yahoo! News.

Did you know you can donate to the Red Cross with a text message? I haven’t tried it, but here are the details:

TEXT 2HELP

The national Text 2HELP Initiative is a partnership between the American Red Cross and The Wireless Foundation that allows customers of participating wireless carriers to send a text message to the Red Cross and make a donation to support the American Red Cross Disaster Relief Fund. This Fund enables the Red Cross to provide shelter, food, cots, counseling and other assistance to victims of disasters.

Subscribers of participating wireless carriers can donate $5 to American Red Cross disaster relief efforts simply by text messaging the keyword “GIVE” to “2HELP” (24357). Donations will appear on customers’ monthly bills or be debited from a prepaid account balance. Standard text messaging rates apply. To opt-out, send “STOP” to 24357.

Participating Carriers:

Alltel
AT&T
Sprint-Nextel
T-Mobile
U.S. Cellular
Verizon Wireless

Text 2HELP Frequently Asked Questions

You can help people affected by disasters, like the recent earthquake and floods, by donating to the American Red Cross Disaster Relief Fund. On those rare occasions when donations exceed Red Cross expenses for a specific disaster, contributions are used to prepare for and serve victims of other disasters. Your gift enables the Red Cross to provide shelter, food, emotional support and other assistance to victims of all disasters. You may also call 1-800-RED-CROSS (1-800-733-2767) or 1-800-257-7575 (Spanish) or mail your donation, to the American Red Cross, P.O. Box 37243, Washington, DC 20013. Internet users can make a secure online contribution by visiting www.redcross.org.

>Method to monitor quake fault strength eyed

>

Scientists are releasing results of a study aimed at gauging the strength of earthquake faults, which could help them pinpoint weak ones at risk of breaking and unleashing temblors.

Earthquakes are caused by a sudden slip on a fault. This occurs because of stress buildup that causes the fault to fail or a weakening of the fault itself.

Until now, scientists have not been able to measure a fault’s strength directly, said Taka’aki Taira of the University of California, Berkeley, who led the study.

Taira and his team analyzed 20 years of data at Parkfield, which sits on the mighty San Andreas Fault halfway between Los Angeles and San Francisco. It’s the most studied earthquake zone in the world, rigged with sensitive instruments to detect minute changes in the Earth’s crust.

The team noted small repeating earthquakes along the San Andreas three months after the magnitude-9 Sumatra temblor in 2004 that spawned a deadly tsunami.

In certain regions of the fault zone, they noticed the fractures were filled with fluid. The migration of fluid decreases friction in the fault zone, weakening the fault and increasing the likelihood of an earthquake, the researchers say.

Similar results were observed after the magnitude-7.3 Landers quake in 1992 that shook the Southern California desert.

The study was published in Thursday’s issue of the journal Nature and was funded by the National Science Foundation.

Seismologist Susan Hough of the U.S. Geological Survey called the results intriguing but said more work needs to be done to determine the connection between powerful temblors around the world and their impact on the strength of faults elsewhere.

via Method to monitor quake fault strength eyed – Yahoo! News.

>NASA Probe Snaps Photos of Mercury But Suffers Minor Glitch

>

A NASA spacecraft that completed its third and final flyby of the planet Mercury yesterday, snapping new pictures of the innermost planet, had a small data hiccup that has delayed release of the images, mission engineers said today.

The MESSENGER probe skimmed just 142 miles (228 km) above Mercury at its closest approach as it whipped around the planet during the flyby, the last of three designed to guide the spacecraft into orbit around the planet in 2011.

The spacecraft did snap several new images of the rocky planet on the inbound leg of its close approach.

“We do have some new science from the flyby,” said MESSENGER project scientist Ralph McNutt of Johns Hopkins University Applied Physics Laboratory.

MESSENGER also took snapshots during its close approach, but “we had a little bit of a hiccup in the data” that has delayed the release of those images, said Eric Finnegan, systems engineer for the mission at Johns Hopkins APL. “It’s coming,” he added.

The anomaly appears to have happened right around the spacecraft’s close approach, so there may not be images from the outbound leg of the journey, McNutt said.

“We missed a little icing on the cake,” McNutt told SPACE.com.

Despite the hiccup, the spacecraft is in good health, Finnegan told SPACE.com.

“What is important is that the spacecraft and the instruments are healthy,” McNutt said.

The team is sifting through all the data and new images to see just how much they got before the glitch, McNutt added.

via NASA Probe Snaps Photos of Mercury But Suffers Minor Glitch – Yahoo! News.

What shape was the hiccup and how fast was it moving? 😉

>Canadian circus billionaire heads to space station

>

Canadian circus tycoon Guy Laliberte turned space into his big top Wednesday, boarding a Russian rocket and lifting off on a mission that mixes a serious message on water shortages with some clowning around in the cosmos.

Laliberte, an experienced fire-eater and stilt-walker who founded Cirque du Soleil, joined Russian cosmonaut Maxim Surayev and American astronaut Jeffrey Williams aboard a Soyuz craft that soared off the Kazakh steppe and set a course for the International Space Station.

The billionaire who calls himself the first clown in space paid a reported $35 million for his nine-day stay at the station, where he plans to publicize the world’s growing shortage of clean water. His space extravaganza will culminate in a satellite linkup with shows in 14 cities across five continents featuring rock band U2 and Colombian pop star Shakira, as well as an appearance by former U.S. Vice President Al Gore.

With a puff of white smoke, the Soyuz craft carrying Laliberte and his crew mates shed its first rocket stage minutes after liftoff from the Baikonur launch facility and then disappeared from view.

Laliberte’s friends and family on the ground waited anxiously and then burst into cheers when an announcement that the ship had reached orbit blared over a loudspeaker. There were ecstatic hugs, sobs of relief and chants of “Guy! Guy!”

They then broke into an impromptu rendition of Elton John’s “Rocket Man.”

“I’m very happy for him. It’s amazing,” said Laliberte’s partner, former model Claudia Barilla, tears streaming down her face as she cradled their youngest son. “Now we know he’s up there.”

She wore a yellow clown nose as she watched the launch. Laliberte had donned a bulbous red nose before the launch and said he was taking nine of the novelty noses to the station for other occupants to wear. He has also mischievously warned he will tickle them in their sleep.

Also among the spectators was Quebec pop star Garou, a friend of Laliberte’s.

“I feel a lot more mesmerized than I ever thought I would be,” Garou said after the launch. “Having your friend rising up that fast and that impressively is beyond what I expected.”

An acrobat, fire-breather, philanthropist and a keen gambler, 50-year old Laliberte plans to use his trip to publicize the world’s shortage of clean water by holding a global artistic performance organized by his One Drop Foundation. The Quebec-born entrepreneur is worth an estimated $2.5 billion and holds a 95 percent stake in Cirque du Soleil, which he founded 25 years ago.

via Canadian circus billionaire heads to space station – Yahoo! News.

>Military may lift ban on women in submarines

>

Top Pentagon officials are calling for an end to the U.S. military’s historical ban on allowing women to serve in submarines.

Admiral Mike Mullen, chairman of the Joint Chiefs of Staff and the top U.S. military officer, advocated the policy change in written congressional testimony distributed by his office to reporters on Friday.

“I believe we should continue to broaden opportunities for women. One policy I would like to see changed is the one barring (women’s) service aboard submarines,” Mullen said.

Navy Secretary Ray Mabus said he was “moving out aggressively on this.”

“I am very comfortable addressing integrating women into the submarine force,” Admiral Gary Roughead, chief of naval operations, said in a statement.

Women account for about 15 percent of the more than 336,000 members of the U.S. Navy and can serve on its surface ships. But critics have argued that submarines are different, pointing to cramped quarters where some crews share beds in shifts.

Nancy Duff Campbell, an advocate for expanding the role of women in the U.S. armed forces, said it would be easy to resolve problems associated with so-called “hot-bunking.”

“They say, ‘How could we have the women sleeping in the same area as men?'” said Campbell, co-president of the National Women’s Law Center (NWLC).

“But they already separate where the officers sleep from the enlisted, so it’s not like it can’t be done.”

Roughead said the problem of sorting out accommodations on the U.S. fleet of 71 submarines was not insurmountable.

Allowing women on submarines would be another step forward in expanding the role of women in the U.S. military. Last year, a woman was promoted to the rank of four-star general for the first time.

Women are still barred from traditional frontline combat roles in the U.S. military. But female soldiers often run the same risks as men in Iraq and Afghanistan, where bombings and other insurgent attacks can happen almost anywhere and target any U.S. unit.

via Military may lift ban on women in submarines – Yahoo! News.

>Cosmic Rays Hit 50-Year High – Yahoo!

>

Galactic cosmic rays have just hit a Space Age high, new data from a NASA spacecraft indicates.

“In 2009, cosmic ray intensities have increased 19 percent beyond anything we’ve seen in the past 50 years,” said Richard Mewaldt of Caltech. “The increase is significant, and it could mean we need to re-think how much radiation shielding astronauts take with them on deep-space missions.”

The surge, which poses no threat to Earth, was detected by NASA’s ACE (Advanced Composition Explorer) spacecraft. The cause of the surge is solar minimum, a deep lull in the sun’s activity that began around 2007 and continues today. Researchers have long known that cosmic rays go up when solar activity goes down, because strong solar activity inflates and bolsters a protective bubble around our entire solar system.

Right now solar activity — marked by sunspots, solar flares and space storms — is as weak as it has been in modern times, setting the stage for what Mewaldt calls “a perfect storm of cosmic rays.”

… Galactic cosmic rays come from outside the solar system. They are subatomic particles — mainly protons but also some heavy nuclei — accelerated to almost light speed by distant supernova explosions. Cosmic rays cause “air showers” of secondary particles when they hit Earth’s atmosphere, where they can pose a threat to orbiting satellites — a single cosmic ray can disable a satellite if it hits an unlucky integrated circuit. Though some have suggested that cosmic rays might be behind the Earth’s current warming climate, research has shown no firm link between these invading rays and global warming. Cosmic rays also pose a health hazard to astronauts. Several reports have outlined the risks from cosmic radiation that might exist for future missions to Mars or stints on the moon.

The sun’s magnetic field — the heliosphere, which surrounds the entire solar system —is our first line of defense against these highly-charged, energetic particles. But the current state of solar activity means the solar system isn’t as protected right now.

via Cosmic Rays Hit 50-Year High – Yahoo! News.

From NASA:

Galactic cosmic rays (GCRs) come from outside the solar system but generally from within our Milky Way galaxy. GCRs are atomic nuclei from which all of the surrounding electrons have been stripped away during their high-speed passage through the galaxy. They have probably been accelerated within the last few million years, and have traveled many times across the galaxy, trapped by the galactic magnetic field. GCRs have been accelerated to nearly the speed of light, probably by supernova remnants. As they travel through the very thin gas of interstellar space, some of the GCRs interact and emit gamma rays, which is how we know that they pass through the Milky Way and other galaxies.

The elemental makeup of GCRs has been studied in detail , and is very similar to the composition of the Earth and solar system. but studies of the composition of the isotopes in GCRs may indicate the that the seed population for GCRs is neither the interstellar gas nor the shards of giant stars that went supernova. This is an area of current study.

I was thinking, Yahoo! more energy! Lets tap it and use it … but this changed my mind:

Cosmic rays in outer space are abundant and diverse. There’s a whole periodic table worth of nuclei (mostly H, He, C, and Fe), electrons and positrons, neutrons, and high-energy photons (x rays, gamma rays) … ejected by solar winds, distant supernovae, and all sorts of ill-understood processes.

At the Earth’s surface things are completely different. The atmosphere is dense enough to stop basically everything that comes in (except neutrinos!) and only some of the secondaries, the by-products of the collisions that stopped the original particles, manage to percolate down. These secondary particles are typically lightweight (certainly nothing heavier than a proton) and most of them are pretty rare … a few protons and a few tens of electrons, say, per square meter per second.

The one secondary that doesn’t have to percolate is the muon. Muons produced very high in the atmosphere are able to penetrate all the way to the surface (and a ways underground as well!) without losing all of their energy. This is because they’re very heavy (lots of inertia) and they don’t interact strongly with nuclei (which is what stops cosmic-ray protons and neutrons so quickly). So muons are the most important component of cosmic rays at the surface.

When building and testing new particle detectors, we do see cosmic ray muons on a regular basis. They’re a quick and dirty way to make sure a detector is working properly: if it gets triggered too often, or too infrequently, with respect to the cosmic ray flux, then you want to know why. The number to remember is ~70 muons per square meter per second, or one per square centimeter per minute.

As for the energy flux? First of all, it’ll be fantastically small amounts of energy, when you think about it on the scales we’re used to. The mean muon energy is ~4 giga-electron-volts (GeV), so that gives you an energy flux of 280 GeV/second. But one electron volt is ~10^-19 joules. That’s fantastically small. This does’t imply that we can’t detect them; in fact, it’s not too hard to detect them at all, as you know if you’ve seen a simple cloud-chamber setup. Fortunately, even a tiny amount of energy – a few electron volts – is enough to ionize an atoms, and free ions and electrons are what we detect. But you’re not going to see your detector heating up.

You also mentioned one-foot-thick concrete walls and roof. Now, that will attentuate the muons somewhat … if you want an order-of-magnitude answer we can ignore it. It’ll be a factor of 2, not 10. This is calculable, though; check out Chapter 23 of “The Passage of Particles through Matter” in the Review of Particle Physics (click here). – madsci.org

>Toyota to recall 3.8M vehicles over floor mats

>

Toyota Motor Corp. said Tuesday it will recall 3.8 million vehicles in the United States, the company’s largest-ever U.S. recall, to address problems with a removable floor mat that could cause accelerators to get stuck and lead to a crash. The recall will involve popular models such as the Toyota Camry, the top-selling passenger car in America, and the Toyota Prius, the best-selling gas-electric hybrid.

Toyota said it was still working with officials with the National Highway Traffic Safety Administration to find a remedy to fix the problem and said owners could be notified about the recall as early as next week. Toyota spokesman Irv Miller said until the company finds a fix, owners should take out the removable floor mat on the driver’s side and not replace it.

“A stuck open accelerator pedal may result in very high vehicle speeds and make it difficult to stop a vehicle, which could cause a crash, serious injury or death,” Miller said.

NHTSA said it had received reports of 102 incidents in which the accelerator may have become stuck on the Toyota vehicles involved. It was unclear how many led to crashes but the inquiry was prompted by a highspeed crash in August in California of a Lexus barreling out of control. As the vehicle hit speeds exceeding 120 mph, family members made a frantic 911 call and said the accelerator was stuck and they couldn’t stop the vehicle.

“This is an urgent matter,” Transportation Secretary Ray LaHood said in a statement. “For everyone’s sake, we strongly urge owners of these vehicles to remove mats or other obstacles that could lead to unintended acceleration.”

The recall will affect 2007-2010 model year Toyota Camry, 2005-2010 Toyota Avalon, 2004-2009 Toyota Prius, 2005-2010 Tacoma, 2007-2010 Toyota Tundra, 2007-2010 Lexus ES350 and 2006-2010 Lexus IS250 and IS350.

Toyota’s previously largest U.S. recall was about 900,000 vehicles in 2005 to fix a steering issue. The company declined to say how many complaints it had received about the accelerator issue.

The Japanese automaker warned owners that if they think their vehicle is accelerating out of control, they should check to see whether their floor mat is under the pedal. If a driver can’t remove the floor mat, Toyota advises drivers to step on the brake pedal with both feet until the vehicle slows and then try to put it into neutral and switch the ignition to accessory power.

For vehicles with engine start/stop buttons, Toyota said the engine can be shut off by holding the button down for three seconds.

via Toyota to recall 3.8M vehicles over floor mats – Yahoo! News.

Floor mats eh? See my previous post Your Prius may try to kill you, accelerates by itself, Toyota denies it.