The Experts below are selected from a list of 14475 Experts worldwide ranked by ideXlab platform

Jason Nieh - One of the best experts on this subject based on the ideXlab platform.

  • thinc a virtual and remote display architecture for Desktop Computing and mobile devices
    2011
    Co-Authors: Jason Nieh, Ricardo A. Baratto
    Abstract:

    THINC is a new virtual and remote display architecture for Desktop Computing. It has been designed to address the limitations and performance shortcomings of existing remote display technology, and to provide a building block around which novel Desktop architectures can be built. THINC is architected around the notion of a virtual display device driver, a software-only component that behaves like a traditional device driver, but instead of managing specific hardware, enables Desktop input and output to be intercepted, manipulated, and redirected at will. On top of this architecture, THINC introduces a simple, low-level, device-independent representation of display changes, and a number of novel optimizations and techniques to perform efficient interception and redirection of display output. This dissertation presents the design and implementation of THINC. It also introduces a number of novel systems which build upon THINC's architecture to provide new and improved Desktop Computing services. The contributions of this dissertation are as follows: (1) A high performance remote display system for LAN and WAN environments. This system differs from existing remote display technologies in that it focuses on the architecture of the system as a mechanism to improve performance, and not just on the remote display protocol and compression techniques. (2) A novel mechanism to natively support multimedia content in a remote display system in a way that is both transparent to applications and format independent. (3) pTHINC, a system to deliver improved remote display support for mobile devices, both in terms of performance and usability, and provide a competitive, and in some cases superior, alternative to native mobile applications. (4) MobiDesk, a Desktop utility Computing infrastructure that enables service providers to host Desktop sessions in fully virtualized environments. Hosted sessions can be remotely accessed using THINC, they can be migrated across computers to provide high-availability, and can be effectively and efficiently protected from denial of service attacks. (5) Moving beyond remote display, we show how THINC's architecture can be used to provide continuous, low overhead recording of a Desktop. Alongside, we introduce a novel way to leverage Desktop accessibility services to allow users to search their recording based on captured text content. We have implemented prototypes for these systems, and evaluated their performance in a number of scenarios, and compared it to representative alternatives whenever possible. Our results demonstrate that THINC can provide superior remote display performance, and can be successfully used as a fundamental building block for new and improved Desktop applications and services.

  • A 2 M: Access-Assured Mobile Desktop Computing
    2010
    Co-Authors: Angelos Stavrou, Ricardo A Barrato, Angelos D Keromytis, Jason Nieh
    Abstract:

    Abstract. Continued improvements in network bandwidth, cost, and ubiquitous access are enabling service providers to host Desktop Computing environments to address the complexity, cost, and mobility limitations of today’s personal Computing infrastructure. However, distributed denial of service attacks can deny use of such services to users. We present A 2 M, a secure and attack-resilient Desktop Computing hosting infrastructure. A 2 M combines a stateless and secure communication protocol, a single-hop Indirection-based network (IBN) and a remote display architecture to provide mobile users with continuous access to their Desktop Computing sessions. Our architecture protects both the hosting infrastructure and the client’s connections against a wide range of service disruption attacks. Unlike any other DoS protection system, A 2 M takes advantage of its low-latency remote display mechanisms and asymmetric traffic characteristics by using multipath routing to send a small number of replicas of each packet transmitted from client to server. This packet replication through different paths, diversifies the client-server communication, boosting system resiliency and reducing end-toend latency. Our analysis and experimental results on PlanetLab demonstrate that A 2 M significantly increases the hosting infrastructure’s attack resilience even for wireless scenarios. Using conservative ISP bandwidth data, we show that we can protect against attacks involving thousands (150, 000) attackers, while providing good performance for multimedia and web applications and basic GUI interactions even when up to 30 % and 50%, respectively, of indirection nodes become unresponsive.

  • a2m access assured mobile Desktop Computing
    International Conference on Information Security, 2009
    Co-Authors: Angelos Stavrou, Ricardo A Barrato, Angelos D Keromytis, Jason Nieh
    Abstract:

    Continued improvements in network bandwidth, cost, and ubiquitous access are enabling service providers to host Desktop Computing environments to address the complexity, cost, and mobility limitations of today's personal Computing infrastructure. However, distributed denial of service attacks can deny use of such services to users. We present A2M, a secure and attack-resilient Desktop Computing hosting infrastructure. A2M combines a stateless and secure communication protocol, a single-hop Indirection-based network (IBN) and a remote display architecture to provide mobile users with continuous access to their Desktop Computing sessions. Our architecture protects both the hosting infrastructure and the client's connections against a wide range of service disruption attacks. Unlike any other DoS protection system, A2M takes advantage of its low-latency remote display mechanisms and asymmetric traffic characteristics by using multi-path routing to send a small number of replicas of each packet transmitted from client to server. This packet replication through different paths, diversifies the client-server communication, boosting system resiliency and reducing end-to-end latency. Our analysis and experimental results on PlanetLab demonstrate that A2M significantly increases the hosting infrastructure's attack resilience even for wireless scenarios. Using conservative ISP bandwidth data, we show that we can protect against attacks involving thousands (150,000) attackers, while providing good performance for multimedia and web applications and basic GUI interactions even when up to 30% and 50%, respectively, of indirection nodes become unresponsive.

  • ISC - A2M: Access-Assured Mobile Desktop Computing
    Lecture Notes in Computer Science, 2009
    Co-Authors: Angelos Stavrou, Ricardo A Barrato, Angelos D Keromytis, Jason Nieh
    Abstract:

    Continued improvements in network bandwidth, cost, and ubiquitous access are enabling service providers to host Desktop Computing environments to address the complexity, cost, and mobility limitations of today's personal Computing infrastructure. However, distributed denial of service attacks can deny use of such services to users. We present A2M, a secure and attack-resilient Desktop Computing hosting infrastructure. A2M combines a stateless and secure communication protocol, a single-hop Indirection-based network (IBN) and a remote display architecture to provide mobile users with continuous access to their Desktop Computing sessions. Our architecture protects both the hosting infrastructure and the client's connections against a wide range of service disruption attacks. Unlike any other DoS protection system, A2M takes advantage of its low-latency remote display mechanisms and asymmetric traffic characteristics by using multi-path routing to send a small number of replicas of each packet transmitted from client to server. This packet replication through different paths, diversifies the client-server communication, boosting system resiliency and reducing end-to-end latency. Our analysis and experimental results on PlanetLab demonstrate that A2M significantly increases the hosting infrastructure's attack resilience even for wireless scenarios. Using conservative ISP bandwidth data, we show that we can protect against attacks involving thousands (150,000) attackers, while providing good performance for multimedia and web applications and basic GUI interactions even when up to 30% and 50%, respectively, of indirection nodes become unresponsive.

  • dejaview a personal virtual computer recorder
    Symposium on Operating Systems Principles, 2007
    Co-Authors: Oren Laadan, Dan B Phung, Shaya Potter, Ricardo A. Baratto, Jason Nieh
    Abstract:

    As users interact with the world and their peers through their computers, it is becoming important to archive and later search the information that they have viewed. We present DejaView, a personal virtual computer recorder that provides a complete record of a Desktop Computing experience that a user can playback, browse, search, and revive seamlessly. DejaView records visual output, checkpoints corresponding application and file system state, and captures displayed text with contextual information to index the record. A user can then browse and search the record for any visual information that has been displayed on the Desktop, and revive and interact with the Desktop Computing state corresponding to any point in the record. DejaView combines display, operating system, and file system virtualization to provide its functionality transparently without any modifications to applications, window systems, or operating system kernels. We have implemented DejaView and evaluated its performance on real-world Desktop applications. Our results demonstrate that DejaView can provide continuous low-overhead recording without any user noticeable performance degradation, and allows browsing, search and playback of records fast enough for interactive use.

Shaya Potter - One of the best experts on this subject based on the ideXlab platform.

  • dejaview a personal virtual computer recorder
    Symposium on Operating Systems Principles, 2007
    Co-Authors: Oren Laadan, Dan B Phung, Shaya Potter, Ricardo A. Baratto, Jason Nieh
    Abstract:

    As users interact with the world and their peers through their computers, it is becoming important to archive and later search the information that they have viewed. We present DejaView, a personal virtual computer recorder that provides a complete record of a Desktop Computing experience that a user can playback, browse, search, and revive seamlessly. DejaView records visual output, checkpoints corresponding application and file system state, and captures displayed text with contextual information to index the record. A user can then browse and search the record for any visual information that has been displayed on the Desktop, and revive and interact with the Desktop Computing state corresponding to any point in the record. DejaView combines display, operating system, and file system virtualization to provide its functionality transparently without any modifications to applications, window systems, or operating system kernels. We have implemented DejaView and evaluated its performance on real-world Desktop applications. Our results demonstrate that DejaView can provide continuous low-overhead recording without any user noticeable performance degradation, and allows browsing, search and playback of records fast enough for interactive use.

  • SOSP - DejaView: a personal virtual computer recorder
    Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles - SOSP '07, 2007
    Co-Authors: Oren Laadan, Dan B Phung, Shaya Potter, Ricardo A. Baratto, Jason Nieh
    Abstract:

    As users interact with the world and their peers through their computers, it is becoming important to archive and later search the information that they have viewed. We present DejaView, a personal virtual computer recorder that provides a complete record of a Desktop Computing experience that a user can playback, browse, search, and revive seamlessly. DejaView records visual output, checkpoints corresponding application and file system state, and captures displayed text with contextual information to index the record. A user can then browse and search the record for any visual information that has been displayed on the Desktop, and revive and interact with the Desktop Computing state corresponding to any point in the record. DejaView combines display, operating system, and file system virtualization to provide its functionality transparently without any modifications to applications, window systems, or operating system kernels. We have implemented DejaView and evaluated its performance on real-world Desktop applications. Our results demonstrate that DejaView can provide continuous low-overhead recording without any user noticeable performance degradation, and allows browsing, search and playback of records fast enough for interactive use.

  • highly reliable mobile Desktop Computing in your pocket
    Computer Software and Applications Conference, 2006
    Co-Authors: Shaya Potter, Jason Nieh
    Abstract:

    We present DeskPod, a portable system that provides a highly reliable Desktop Computing environment for mobile users by leveraging rapid improvements in capacity, cost, and size of portable storage devices. DeskPod enables a user?s live Computing environment to be suspended to portable storage, carried around, easily copied for faultresilience, and resumed from the storage device to provide the user with the same persistent, personalized Computing environment on another computer. DeskPod achieves this by providing a virtualization and checkpoint/restart mechanism that decouples a Desktop Computing environment from any single hardware device so that it can be stored and executed anywhere, improving Desktop Computing reliability by eliminating a potential single point of failure. We have implemented a Linux DeskPod prototype and demonstrate its ability to quickly suspend and resume Desktop sessions, enabling a seamless mobile experience.

  • COMPSAC (1) - Highly Reliable Mobile Desktop Computing in Your Pocket
    30th Annual International Computer Software and Applications Conference (COMPSAC'06), 2006
    Co-Authors: Shaya Potter, Jason Nieh
    Abstract:

    We present DeskPod, a portable system that provides a highly reliable Desktop Computing environment for mobile users by leveraging rapid improvements in capacity, cost, and size of portable storage devices. DeskPod enables a user?s live Computing environment to be suspended to portable storage, carried around, easily copied for faultresilience, and resumed from the storage device to provide the user with the same persistent, personalized Computing environment on another computer. DeskPod achieves this by providing a virtualization and checkpoint/restart mechanism that decouples a Desktop Computing environment from any single hardware device so that it can be stored and executed anywhere, improving Desktop Computing reliability by eliminating a potential single point of failure. We have implemented a Linux DeskPod prototype and demonstrate its ability to quickly suspend and resume Desktop sessions, enabling a seamless mobile experience.

  • mobidesk mobile virtual Desktop Computing
    ACM IEEE International Conference on Mobile Computing and Networking, 2004
    Co-Authors: Ricardo A. Baratto, Shaya Potter, Jason Nieh
    Abstract:

    We present MobiDesk, a mobile virtual Desktop Computing hosting infrastructure that leverages continued improvements in network speed, cost, and ubiquity to address the complexity, cost, and mobility limitations of today's personal Computing infrastructure. MobiDesk transparently virtualizes a user's Computing session by abstracting underlying system resources in three key areas: display, operating system, and network. It provides a thin virtualization layer that decouples a user's Computing session from any particular end-user device, and moves all application logic to hosting providers. The virtualization layer decouples a user's Computing session from the underlying operating system and server instance, enabling high-availability service by transparently migrating sessions from one server to another during server maintenance or upgrades. We have implemented a prototype in Linux that works with existing unmodified applications and operating system kernels. Our experimental results demonstrate that MobiDesk has very low virtualization overhead, can provide a full featured Desktop experience including full-motion video support, and is able to migrate users' sessions efficiently and reliably for high-availability, while maintaining existing network connections.

Ricardo A. Baratto - One of the best experts on this subject based on the ideXlab platform.

  • thinc a virtual and remote display architecture for Desktop Computing and mobile devices
    2011
    Co-Authors: Jason Nieh, Ricardo A. Baratto
    Abstract:

    THINC is a new virtual and remote display architecture for Desktop Computing. It has been designed to address the limitations and performance shortcomings of existing remote display technology, and to provide a building block around which novel Desktop architectures can be built. THINC is architected around the notion of a virtual display device driver, a software-only component that behaves like a traditional device driver, but instead of managing specific hardware, enables Desktop input and output to be intercepted, manipulated, and redirected at will. On top of this architecture, THINC introduces a simple, low-level, device-independent representation of display changes, and a number of novel optimizations and techniques to perform efficient interception and redirection of display output. This dissertation presents the design and implementation of THINC. It also introduces a number of novel systems which build upon THINC's architecture to provide new and improved Desktop Computing services. The contributions of this dissertation are as follows: (1) A high performance remote display system for LAN and WAN environments. This system differs from existing remote display technologies in that it focuses on the architecture of the system as a mechanism to improve performance, and not just on the remote display protocol and compression techniques. (2) A novel mechanism to natively support multimedia content in a remote display system in a way that is both transparent to applications and format independent. (3) pTHINC, a system to deliver improved remote display support for mobile devices, both in terms of performance and usability, and provide a competitive, and in some cases superior, alternative to native mobile applications. (4) MobiDesk, a Desktop utility Computing infrastructure that enables service providers to host Desktop sessions in fully virtualized environments. Hosted sessions can be remotely accessed using THINC, they can be migrated across computers to provide high-availability, and can be effectively and efficiently protected from denial of service attacks. (5) Moving beyond remote display, we show how THINC's architecture can be used to provide continuous, low overhead recording of a Desktop. Alongside, we introduce a novel way to leverage Desktop accessibility services to allow users to search their recording based on captured text content. We have implemented prototypes for these systems, and evaluated their performance in a number of scenarios, and compared it to representative alternatives whenever possible. Our results demonstrate that THINC can provide superior remote display performance, and can be successfully used as a fundamental building block for new and improved Desktop applications and services.

  • dejaview a personal virtual computer recorder
    Symposium on Operating Systems Principles, 2007
    Co-Authors: Oren Laadan, Dan B Phung, Shaya Potter, Ricardo A. Baratto, Jason Nieh
    Abstract:

    As users interact with the world and their peers through their computers, it is becoming important to archive and later search the information that they have viewed. We present DejaView, a personal virtual computer recorder that provides a complete record of a Desktop Computing experience that a user can playback, browse, search, and revive seamlessly. DejaView records visual output, checkpoints corresponding application and file system state, and captures displayed text with contextual information to index the record. A user can then browse and search the record for any visual information that has been displayed on the Desktop, and revive and interact with the Desktop Computing state corresponding to any point in the record. DejaView combines display, operating system, and file system virtualization to provide its functionality transparently without any modifications to applications, window systems, or operating system kernels. We have implemented DejaView and evaluated its performance on real-world Desktop applications. Our results demonstrate that DejaView can provide continuous low-overhead recording without any user noticeable performance degradation, and allows browsing, search and playback of records fast enough for interactive use.

  • SOSP - DejaView: a personal virtual computer recorder
    Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles - SOSP '07, 2007
    Co-Authors: Oren Laadan, Dan B Phung, Shaya Potter, Ricardo A. Baratto, Jason Nieh
    Abstract:

    As users interact with the world and their peers through their computers, it is becoming important to archive and later search the information that they have viewed. We present DejaView, a personal virtual computer recorder that provides a complete record of a Desktop Computing experience that a user can playback, browse, search, and revive seamlessly. DejaView records visual output, checkpoints corresponding application and file system state, and captures displayed text with contextual information to index the record. A user can then browse and search the record for any visual information that has been displayed on the Desktop, and revive and interact with the Desktop Computing state corresponding to any point in the record. DejaView combines display, operating system, and file system virtualization to provide its functionality transparently without any modifications to applications, window systems, or operating system kernels. We have implemented DejaView and evaluated its performance on real-world Desktop applications. Our results demonstrate that DejaView can provide continuous low-overhead recording without any user noticeable performance degradation, and allows browsing, search and playback of records fast enough for interactive use.

  • mobidesk mobile virtual Desktop Computing
    ACM IEEE International Conference on Mobile Computing and Networking, 2004
    Co-Authors: Ricardo A. Baratto, Shaya Potter, Jason Nieh
    Abstract:

    We present MobiDesk, a mobile virtual Desktop Computing hosting infrastructure that leverages continued improvements in network speed, cost, and ubiquity to address the complexity, cost, and mobility limitations of today's personal Computing infrastructure. MobiDesk transparently virtualizes a user's Computing session by abstracting underlying system resources in three key areas: display, operating system, and network. It provides a thin virtualization layer that decouples a user's Computing session from any particular end-user device, and moves all application logic to hosting providers. The virtualization layer decouples a user's Computing session from the underlying operating system and server instance, enabling high-availability service by transparently migrating sessions from one server to another during server maintenance or upgrades. We have implemented a prototype in Linux that works with existing unmodified applications and operating system kernels. Our experimental results demonstrate that MobiDesk has very low virtualization overhead, can provide a full featured Desktop experience including full-motion video support, and is able to migrate users' sessions efficiently and reliably for high-availability, while maintaining existing network connections.

  • MobiCom - MobiDesk: mobile virtual Desktop Computing
    Proceedings of the 10th annual international conference on Mobile computing and networking - MobiCom '04, 2004
    Co-Authors: Ricardo A. Baratto, Shaya Potter, Jason Nieh
    Abstract:

    We present MobiDesk, a mobile virtual Desktop Computing hosting infrastructure that leverages continued improvements in network speed, cost, and ubiquity to address the complexity, cost, and mobility limitations of today's personal Computing infrastructure. MobiDesk transparently virtualizes a user's Computing session by abstracting underlying system resources in three key areas: display, operating system, and network. It provides a thin virtualization layer that decouples a user's Computing session from any particular end-user device, and moves all application logic to hosting providers. The virtualization layer decouples a user's Computing session from the underlying operating system and server instance, enabling high-availability service by transparently migrating sessions from one server to another during server maintenance or upgrades. We have implemented a prototype in Linux that works with existing unmodified applications and operating system kernels. Our experimental results demonstrate that MobiDesk has very low virtualization overhead, can provide a full featured Desktop experience including full-motion video support, and is able to migrate users' sessions efficiently and reliably for high-availability, while maintaining existing network connections.

Gael Dias - One of the best experts on this subject based on the ideXlab platform.

  • Universal mobile information retrieval
    Universal Access in …, 2009
    Co-Authors: David Machado, Tiago Barbosa, Sebastião Pais, Bruno Martins, Gael Dias
    Abstract:

    The shift in human computer interaction from Desktop Computing to mobile interaction highly influences the needs for new designed interfaces. In this paper, we address the issue of searching for information on mobile devices, an area also known as Mobile Information Retrieval. In particular, we propose to summarize as much as possible the information retrieved by any search engine to allow universal access to information.

  • HCI (6) - Universal Mobile Information Retrieval
    Universal Access in Human-Computer Interaction. Intelligent and Ubiquitous Interaction Environments, 2009
    Co-Authors: David Machado, Tiago Barbosa, Sebastião Pais, Bruno Martins, Gael Dias
    Abstract:

    The shift in human computer interaction from Desktop Computing to mobile interaction highly influences the needs for new designed interfaces. In this paper, we address the issue of searching for information on mobile devices, an area also known as Mobile Information Retrieval. In particular, we propose to summarize as much as possible the information retrieved by any search engine to allow universal access to information.

Yan Song - One of the best experts on this subject based on the ideXlab platform.

  • vmOS: A virtualization-based, secure Desktop system
    Computers & Security, 2017
    Co-Authors: Hongliang Liang, Xiaoxiao Pei, Xiaodong Jia, Yan Song
    Abstract:

    Abstract Centralized management is typically applied in modern operating system (OS) architecture; however, such systems are prone to crash when any certain component of the OS is explicitly damaged. The basic reason is that these OSes can rarely support a thoroughly secure or isolated environment either between OS kernel-mode components or between user-mode softwares. To mitigate this issue, we propose vmOS, an operating system that aims at improving the security of Desktop Computing environment. vmOS applies isolation technique to reduce attack surface, virtualization and mandatory access control to provide isolated environment among system components, application software and user privacy. We implement vmOS by adopting hardware-supported virtualization technology and modifying several well-known open source softwares, which aim to provide run-time efficiency of integrated system. Finally, we evaluate the security and performance by some vulnerability exploits and benchmark tools, showing that vmOS is capable of assuring the overall security of users' Desktop Computing with less overhead.