-
RightClick 2011
30 September 2011 Perth Australia
-
2nd National Conference on Information Technology for Business Transformation
04 November 2011 Ghaziabad India
-
Fourth International Ubiquitous Learning Conference
11 November 2011 Berkeley California
-
Voices That Matter: iOS Developer Conference
12 November 2011 Boston Massachusetts
-
Public Relations of the Cold War
02 December 2011 Cambridge United Kingdom
-
2011 International Conference on Computer Application and Education Technology (ICCAET 2011)
03 December 2011 Beijing China
-
The 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011)
11 December 2011 Abu Dabi United Arab Emirates
-
International Conference on Electrical Engineering and Applications 2011 ¨C ICEEA 2011
17 December 2011 Chennai India
-
Fifth International Conference on Open-Source Systems and Technologies
22 December 2011 Lahore Pakistan
-
Second International Conference on Information and Communication Technology ICT- 2011
24 December 2011 Chennai India
-
2011 3rd International Conference on Information and Multimedia Technology (ICIMT 2011)
28 December 2011 Dubai United Arab Emirates
-
2011 4th International Conference on Advanced Computer Theory and Engineering (ICACTE 2011)
28 December 2011 Dubai United Arab Emirates
-
2011 International Conference on Communication and Network Security (ICCNS 2011)
28 December 2011 Dubai United Arab Emirates
-
2011 International Conference on Distributed Computing Engineering (ICDCE 2011)
28 December 2011 Dubai United Arab Emirates
-
INDIA-2012
05 January 2012 Visakhapatnam India
-
2012 4th International Conference on Computer and Automation Engineering (ICCAE 2012)
14 January 2012 Mumbai India
-
SANS North American SCADA 2012
21 January 2012 Lake Buena Vista Florida
-
Cyber Defence & Network Security
24 January 2012 London United Kingdom
-
4th edition of the Workshop on Sensor Networks and Ambient Intelligence (SeNAmI 2012)
19 March 2012 Lugano Switzerland
-
International Conference for Academic Disciplines
01 April 2012 Vienna Austria
-
Tridentcom 2012
11 June 2012 Thessaloniki Greece
- The 2nd International Conference on Advanced Polymer Matrix Composites 22 July 2012 Harbin China
Tuesday, September 27, 2011
List of Conferences as of Sep 25, 2011
Quantum Lecture Series 5
Laboratory of Computational
Sciences and Mathematical Physics, Institute for Mathematical Research in Universiti Putra Malaysia
will be organizing Expository Quantum Lecture Series 5 on January 9-13,
2012. The theme for EQuaLS5 is "Geometry, Topology and Physics 2012" and
the speakers are
- John Baez (NUS, Univ of California, Riverside)"Network Theory"
- Do Ngoc Diep (Inst of Math, Hanoi)
"A Procedure for Quantization of Fields" - Maurice de Gosson (Univ. of Vienna)
"The Symplectic Camel and Quantum Mechanics" - Fredrik Stroemberg (Technical Univ. of Darmstadt)
"Arithmetic Quantum Chaos" - S. Twareque Ali (Concordia University, Montreal)
"Coherent States: Theory and Applications"
On-line registration is now open at http://einspem.upm.edu.my/equals5/
Facebook Updates Could Give Nonprofits Better Visibility
An interesting articles written by Derek Lieu and posted at Social Philantrophy.
My thoughts:
1. Lots of algorithm running behind facebook which one small mistake might affect lots of people
2. Opportunity for researchers as there are lots of research can be done especially on algorithm, security, social etc.
3. Facebook will be here for another decades
My thoughts:
1. Lots of algorithm running behind facebook which one small mistake might affect lots of people
2. Opportunity for researchers as there are lots of research can be done especially on algorithm, security, social etc.
3. Facebook will be here for another decades
Friday, September 23, 2011
Tuesday, September 20, 2011
Applying Static Analysis To Medical Device Software
An interesting articles written back on 2008 by David N. Kleidermacher indicates the importance of having static analysis tool to improve reliability and sustainability of medical devices [read here]
However, as complexity increases especially on mobile devices and mission-critical devices like medical and military, static analysis tool is still far away from achieving zero-tolerant or 99.99% secure. It depends on technique and tool use by the tool to statically analyze applications stored in those devices and at the moment, and as written in my paper title "Preventing Exploitation on Software Vulnerabilities: Why Static Analysis Failed?" in WEC 2010, there are more works need to be done to improve static analysis tool capability especially when the complexity and LOC is increase.
However, as complexity increases especially on mobile devices and mission-critical devices like medical and military, static analysis tool is still far away from achieving zero-tolerant or 99.99% secure. It depends on technique and tool use by the tool to statically analyze applications stored in those devices and at the moment, and as written in my paper title "Preventing Exploitation on Software Vulnerabilities: Why Static Analysis Failed?" in WEC 2010, there are more works need to be done to improve static analysis tool capability especially when the complexity and LOC is increase.
International Conference on Distributed Computing Engineering (ICDCE 2011)
2011 International Conference on Distributed Computing Engineering (ICDCE 2011)
28 to 30 December 2011
Dubai, United Arab Emirates
2011 International Conference on Distributed Computing Engineering (ICDCE 2011)
will be held in Dubai, Chengdu, China during December 28-30, 2011. The upcoming
ICDCE 2011 will inherit the advantages of the previous conferences and develop
the conference to a higher level. The theme of the ICDCE is to discuss the new
development of computer theory and engineering, and to promote its new
application. ICDCE 2011 will bring together leading engineers and scientists
around the world, so as to present their research results and development
activities in Distributed Computing Engineering. This conference provides
opportunities for the delegates to exchange new ideas and application
experiences
face to face, to establish business or research relations and to find global
partners for future collaboration.
ICDCE is sponsored by Singapore International Association of Computer Science
and Information Technology (IACSIT), and technical co-sponsored by many
universities and institutes.
This year, all ICDCE 2011 conference papers will be included in the ICACTE 2011
proceedings, which is published by ASME Press, and will be included in the ASME
Digital Library, and indexed by the Ei Compendex, ISI Proceeding and other major
indexing services.
The deadline for abstracts/proposals is
30 October 2011
Enquiries: icdce@iacsit.org
Web address: http://www.icdce.org/
Sponsored by: IACSIT
28 to 30 December 2011
Dubai, United Arab Emirates
2011 International Conference on Distributed Computing Engineering (ICDCE 2011)
will be held in Dubai, Chengdu, China during December 28-30, 2011. The upcoming
ICDCE 2011 will inherit the advantages of the previous conferences and develop
the conference to a higher level. The theme of the ICDCE is to discuss the new
development of computer theory and engineering, and to promote its new
application. ICDCE 2011 will bring together leading engineers and scientists
around the world, so as to present their research results and development
activities in Distributed Computing Engineering. This conference provides
opportunities for the delegates to exchange new ideas and application
experiences
face to face, to establish business or research relations and to find global
partners for future collaboration.
ICDCE is sponsored by Singapore International Association of Computer Science
and Information Technology (IACSIT), and technical co-sponsored by many
universities and institutes.
This year, all ICDCE 2011 conference papers will be included in the ICACTE 2011
proceedings, which is published by ASME Press, and will be included in the ASME
Digital Library, and indexed by the Ei Compendex, ISI Proceeding and other major
indexing services.
The deadline for abstracts/proposals is
30 October 2011
Enquiries: icdce@iacsit.org
Web address: http://www.icdce.org/
Sponsored by: IACSIT
Implement CRUD operations using RESTful WCF Service and javascript
Found a good articles to start playing with WCF and Javascript (for Java developers) written by Shahriar Iqbal Chowdhury. Check it out @ Code Project
Friday, September 16, 2011
Using static code analysis to support DO-178b certification
Paul Anderson, GrammaTech
9/6/2011 6:29 PM EDT
In this Product How-To, Paul Anderson of GrammaTech takes you step by step through the DO-178B and how use his company’s static analysis tools to support the safety-critical software requirements of the specification [read more].
As one of my interest in software security, I keen to evaluate the effectiveness and efficiencies of GrammaTech CodeSonar on its static analysis capability using taxonomy of C Overflow Vulnerabilities Attack which I constructed for the purpose of identifying overflow vulnerabilities in C. However, due to fact (based on my email conversation between one of the company's employee), I can't evaluate theirs thus I'm not sure how their tools could help supporting the safety-critical software requirements.
And I can says one things for sure here that all tools including CodeSonar is yet to successfully help in reducing vulnerabilities in software. This can been seen by looking at various vulnerability database and advisories released by Symantec, Karspesky, Microsoft, NIST, etc. The numbers are still large and yet to see it is tremendously reduce.
9/6/2011 6:29 PM EDT
In this Product How-To, Paul Anderson of GrammaTech takes you step by step through the DO-178B and how use his company’s static analysis tools to support the safety-critical software requirements of the specification [read more].
As one of my interest in software security, I keen to evaluate the effectiveness and efficiencies of GrammaTech CodeSonar on its static analysis capability using taxonomy of C Overflow Vulnerabilities Attack which I constructed for the purpose of identifying overflow vulnerabilities in C. However, due to fact (based on my email conversation between one of the company's employee), I can't evaluate theirs thus I'm not sure how their tools could help supporting the safety-critical software requirements.
And I can says one things for sure here that all tools including CodeSonar is yet to successfully help in reducing vulnerabilities in software. This can been seen by looking at various vulnerability database and advisories released by Symantec, Karspesky, Microsoft, NIST, etc. The numbers are still large and yet to see it is tremendously reduce.
Thursday, September 15, 2011
Google add new artilery in fight with the other giant (Facebook, Yahoo, Microsoft, Apple, etc)
Recently, I heard many IT giant acquiring patents from various company such as Nortel, HTC, IBM, etc and we will definitely keep on reading news of patent infringement case as the fight continues. Latest news was acquisition of some IBM patents related to Java language (JDJ: Google Buys Some Java Patents). And this was continuation from the last battle between Google and the other IT giant. (list of Java related patent).
This fight is hope to bring better future for the consumer and shall not affect or increase in cost of having better technology.
This fight is hope to bring better future for the consumer and shall not affect or increase in cost of having better technology.
Vulnerabilities is known and yet it is still there
Reported by Symantec, vulnerabilities still there and will always be there unless we do something to eliminate or reduce it to lower state. This is numbers of vulnerabilities captured/monitored by Symantec. It does not includes or cross-checking between other vulnerability databases such as NIST, CVE, Karspesky, Microsoft, etc.
Check it out the reports at Symantec Vulnerabilities Trend Report.
Check it out the reports at Symantec Vulnerabilities Trend Report.
Oracle Critical Patch Update - September 2011
Critical Patch
Update - September 2011
Dear Oracle Security Alert Customer,
Oracle Security Alert for CVE-2011-3192 was released on September 15th, 2011.
Oracle strongly recommends applying Security Alert fixes as soon as possible.
The Security Alert Advisory is the starting point for relevant information. It includes the list of products affected, a summary of the security vulnerability, and a pointer to obtain the latest patches. Supported products that are not listed in the "Affected Products and Versions" section of the advisory do not require new patches to be applied.
Also, it is essential to review the Security Alert supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.
The Advisory is available at the following location:
Oracle Critical Patch Updates and Security Alerts
http://www.oracle.com/technology/deploy/security/alerts.html
Oracle Security Alert CVE-2011-3192
http://www.oracle.com/technetwork/topics/security/alert-cve-2011-3192-485304.html
From Oracle Security Alerts team
Dear Oracle Security Alert Customer,
Oracle Security Alert for CVE-2011-3192 was released on September 15th, 2011.
Oracle strongly recommends applying Security Alert fixes as soon as possible.
The Security Alert Advisory is the starting point for relevant information. It includes the list of products affected, a summary of the security vulnerability, and a pointer to obtain the latest patches. Supported products that are not listed in the "Affected Products and Versions" section of the advisory do not require new patches to be applied.
Also, it is essential to review the Security Alert supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.
The Advisory is available at the following location:
Oracle Critical Patch Updates and Security Alerts
http://www.oracle.com/technology/deploy/security/alerts.html
Oracle Security Alert CVE-2011-3192
http://www.oracle.com/technetwork/topics/security/alert-cve-2011-3192-485304.html
From Oracle Security Alerts team
Auto-format for references/bibliography using plugin
Some of use may have found the solutions but most of us are still using the old-fashion ways in doing references or bibliography section while writing a technical papers, journal, etc.
Me too facing the same problems when trying to add, edit, or formatting according to certain standards or rules required by journal or conferences which I'm submitting my writing (paper for publications). However, that is no longer a burden to me.
So guys, take a look here or at Microsoft BibWord. You will definitely love it :) ... Enjoy the work of others whom willing to help you guys and by the way, don't forget to give credits to them too :)
Me too facing the same problems when trying to add, edit, or formatting according to certain standards or rules required by journal or conferences which I'm submitting my writing (paper for publications). However, that is no longer a burden to me.
So guys, take a look here or at Microsoft BibWord. You will definitely love it :) ... Enjoy the work of others whom willing to help you guys and by the way, don't forget to give credits to them too :)
Sunday, August 28, 2011
5 things to note about HTTPS Everywhere
Security extension for Firefox has positive intentions and design specification to enhance online privacy and security but users need to recognize loopholes, security experts say. [read more]
From my view, now is the best time to introduce anonymisation (Anonymity) concept. Although it do helps in protecting privacy and ensure safety and reliable internet acces, it however do have drawback especially to security forensics as it will be difficult to find the sources of threat (if exist).
Nevertheless, it is still a good research and will be the future trend of internet access in terms of security.
From my view, now is the best time to introduce anonymisation (Anonymity) concept. Although it do helps in protecting privacy and ensure safety and reliable internet acces, it however do have drawback especially to security forensics as it will be difficult to find the sources of threat (if exist).
Nevertheless, it is still a good research and will be the future trend of internet access in terms of security.
Wednesday, August 17, 2011
MySQL - Creating a loop in function
I was looking for foreach loop to be used in MySQL database and found a simple article written in MySQL development group. In MySQL, it does not have foreach loop but instead replace in with LOOP.
Based on that, I create my looping function and would like to share with you guys... Check it out the code below :)
DELIMITER $$
DROP FUNCTION IF EXISTS `myFunc` $$
CREATE DEFINER=`mydb`@`%` FUNCTION `myFunc`(p_id varchar(15), m_id varchar(2), q_id varchar (2), years varchar(4), r_id varchar(5), d_id varchar(10), s_id varchar(10), cws varchar(10)) RETURNS int(11)
READS SQL DATA
BEGIN
DECLARE done INT DEFAULT 0;
DECLARE jsid VARCHAR(2);
DECLARE jsd VARCHAR(100);
DECLARE cur1 CURSOR FOR SELECT job_id, job_desc FROM mydb.t_job_sector where cws like concat(concat('%',job_id),'%');
DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = 1;
OPEN cur1;
read_loop: LOOP
FETCH cur1 INTO jsid, jsd;
IF done THEN
LEAVE read_loop;
END IF;
IF jsid IS NOT NULL AND jsd IS NOT NULL THEN
INSERT INTO mydb.t_work_choice VALUES (p_id, jsid, jsd, r_id, d_id, s_id);
END IF;
END LOOP;
CLOSE cur1;
RETURN 0;
END $$
DELIMITER ;
.... hopes that helps others too....
Based on that, I create my looping function and would like to share with you guys... Check it out the code below :)
DELIMITER $$
DROP FUNCTION IF EXISTS `myFunc` $$
CREATE DEFINER=`mydb`@`%` FUNCTION `myFunc`(p_id varchar(15), m_id varchar(2), q_id varchar (2), years varchar(4), r_id varchar(5), d_id varchar(10), s_id varchar(10), cws varchar(10)) RETURNS int(11)
READS SQL DATA
BEGIN
DECLARE done INT DEFAULT 0;
DECLARE jsid VARCHAR(2);
DECLARE jsd VARCHAR(100);
DECLARE cur1 CURSOR FOR SELECT job_id, job_desc FROM mydb.t_job_sector where cws like concat(concat('%',job_id),'%');
DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = 1;
OPEN cur1;
read_loop: LOOP
FETCH cur1 INTO jsid, jsd;
IF done THEN
LEAVE read_loop;
END IF;
IF jsid IS NOT NULL AND jsd IS NOT NULL THEN
INSERT INTO mydb.t_work_choice VALUES (p_id, jsid, jsd, r_id, d_id, s_id);
END IF;
END LOOP;
CLOSE cur1;
RETURN 0;
END $$
DELIMITER ;
.... hopes that helps others too....
Sunday, July 24, 2011
Embedded Device Security in the New Connected Era
A technical papers written by Marc Brown and publish at EETimes. It can be read/downloaded from here. It is another good technical papers although it was not really technical enough or the word used was not really technical jargon. It is very easy for non-technical person to read and understand the papers. The only limitation was references our proof on all facts/data used in the paper.
Threat Modeling for Secure Embedded Software
Klocwork had publish a paper on the above title. You can read/access it here.
I won't comments on the paper as it was a good idea/framework they proposed in the paper. The important things I would like to stress here is that the framework or idea is nothing new. It was first established by Microsoft in their SDL. It was already implemented in software development by major software vendor. They might want to re-phrase some of the contents by referring to the giant in doing threat modelling. It does not matter either you are developing normal software or embedded software as it is still treated as a software's project.
I won't comments on the paper as it was a good idea/framework they proposed in the paper. The important things I would like to stress here is that the framework or idea is nothing new. It was first established by Microsoft in their SDL. It was already implemented in software development by major software vendor. They might want to re-phrase some of the contents by referring to the giant in doing threat modelling. It does not matter either you are developing normal software or embedded software as it is still treated as a software's project.
Conference for July 2011
Saturday, July 23, 2011
Uneven maturity obscures cloud platform choice
Platform-as-a-service will play key role in unlocking cloud benefits for many businesses, but varying maturity of technology and lack of interoperability make choosing right vendor tough, industry watchers say. () [more].
That's is from business perspective. In my perspective, cloud provider are lacking of security either in securing their infrastructure (IaaS), platform (PaaS), system (SaaS), etc. Although there are works done on it, but it is yet to reduce the risk of user and provide from attacks. We thought cloud is something new, but to me, it is just an old things re-branded by business people to attract customer. It still carries the old things issues. If your cloud is running on Linux, the security holes of the OS is still there. If you are using Windows, the problems we faced with windows nowadays is still valid in cloud environment. Further more, it is more dangerous in cloud than in normal networked environment because users are sharing across boundaries on the same structures, platform, system, etc. One attacks on single node can cause lots of damages.
That's is from business perspective. In my perspective, cloud provider are lacking of security either in securing their infrastructure (IaaS), platform (PaaS), system (SaaS), etc. Although there are works done on it, but it is yet to reduce the risk of user and provide from attacks. We thought cloud is something new, but to me, it is just an old things re-branded by business people to attract customer. It still carries the old things issues. If your cloud is running on Linux, the security holes of the OS is still there. If you are using Windows, the problems we faced with windows nowadays is still valid in cloud environment. Further more, it is more dangerous in cloud than in normal networked environment because users are sharing across boundaries on the same structures, platform, system, etc. One attacks on single node can cause lots of damages.
Sunday, June 12, 2011
Latest Conference List - Update on June 10, 2011
ICCEE 2011
2011 4th International Conference on Computer
and Electrical Engineering(ICCEE 2011)
14 to 16 October 2011
Singapore, Singapore
The ICCEE 2011 conference proceedings will
proudly published by ASME, and all accepted
papers will be included in the ASME Digital Library,
and indexed by EI Compendex, Thomson ISI
Proceedings.
The deadline for abstracts/proposals is 25 June
2011.
Enquiries: IACSITconferences@gmail.com
Web address: http://www.iccee.org/
Sponsored by: IACSIT, SIE, ASME
and Electrical Engineering(ICCEE 2011)
14 to 16 October 2011
Singapore, Singapore
The ICCEE 2011 conference proceedings will
proudly published by ASME, and all accepted
papers will be included in the ASME Digital Library,
and indexed by EI Compendex, Thomson ISI
Proceedings.
The deadline for abstracts/proposals is 25 June
2011.
Enquiries: IACSITconferences@gmail.com
Web address: http://www.iccee.org/
Sponsored by: IACSIT, SIE, ASME
