Biblioteca Digital

(International Journal of Public Administration, vol 12, no. 1 1989).

The United States government requires all federal systems to have a customized security plan. In addition, the National Training Standard for Information Systems Security (INFOSEC) Professionals requires programs that meet this standard to produce students capable of developing a security plan. The Naval Postgraduate School (NPS) teaches courses that comply with several CNSS standards, and therefore requires students to develop a security plan for a hypothetical scenario. Experience in these courses has shown that the same strategies for teaching high school students how to write a research report can successfully be used to teach university students how to write a security plan that is compliant with NIST guidelines.

OOPSLA Workshop on Domain-Specific Modeling (DSM '07). Montreal, Canada.; Evaluation of high assurance secure computer systems requires that they be designed, developed, verified and tested using rigorous processes and formal methods. The evaluation process must include correspondence between security policy objectives, security specifications, and program implementation. This research presents an approach to the verification of programs represented in a specialized Implementation Modeling Language (IML) using a formal security Domain Model (DM). The DM is comprised of an invariant part, which defines the generic concepts of program state, information flow, and other security properties; and a variable part, specifying the behavior of the target program. The DM is written using the Alloy formal specification language, and its verification is accomplished using the Alloy Analyzer tool. It was found that, by separating the structural framework of the security policy from the semantics of the target program, efficiency of the Alloy Analyzer in detecting execution paths that violate the security properties specified in the DM is significantly improved.

Within a multilevel secure (MLS) system, trusted subjects are granted privileges to perform operations that are not possible by ordinary subjects controlled by mandatory access control (MAC) policy enforcement mechanisms. These subjects are trusted not to conduct malicious activity or degrade system security. We present a formal definition for trusted subject behaviors, which depends upon a representation of information flow and control dependencies generated during a program execution. We describe a security Domain Model (DM) designed in the Alloy specification language for conducting static analysis of programs to identify illicit information flows, access control flaws and covert channel vulnerabilities. The DM is compiled from a representation of a target program, written in an intermediate Implementation Modeling Language (IML), and a specification of the security policy written in Alloy. The Alloy Analyzer tool is used to perform static analysis of the DM to detect potential security policy violations in the target program. In particular, since the operating system upon which the trusted subject runs has limited ability to control its actions, static analysis of trusted subject operations can contribute to the security of the system.

Computing systems designed using reconfigurable hardware are now used in many sensitive applications, where security is of utmost importance. Unfortunately, a strong notion of security is not currently present in FPGA hardware and software design flows. In the following, we discuss the security implications of using reconfigurable hardware in sensitive applications, and outline problems, attacks, solutions and topics for future research.

The article of record as published may be located at http://dx.doi.org/10.1145/2775292.2778306; Matlab is a powerful tool to compute high-fidelity engineering model and plot the result in figures. Simulink implements Matlab .m source code into block diagrams and flow charts to execute the simulation. This project demonstrates how physics equations implemented in Simulink can animate X3D or VRML models, along with the methods to convert Matlab .fig format into an X3D object so we can apply it into Web-based animations.

Approved for public release; distribution is unlimited; Grants: National Science Council (Taiwan, CWB, ONR

MESDA's 15th Annual Conference, Maine's Software and Information Technology Industry Association.

Includes Volumes I and II; Sponsored by: The Applied Computational Electromagnetics Society and DOD and DOE in cooperation with IEEE, URSI, ASEE, SIAM and AMTA

NPS Distributed Learning Course, Monterey, CA, May 2009.

Interfaces, 39, 533-539.; The article of record as published may be located at http://dx.doi.org/10.1287/inte.1090.0458; Continuing and expanding on the original work that Michael H. Rothkopf established in 1996, this paper presents the eighth ranking of universities according to their contributions to the INFORMS practice literature. Fittingly, we have named them the “Rothkopf Rankings” in honor of their originator, a scholar and practitioner with a passion for applied, effective, and influential operations research. The rankings assigned are based on two metrics: one measures visibility (the number of times a university is listed as the primary academic affiliation in the INFORMS practice literature), and the second measures yield (the equivalent number of INFORMS practice papers attributable to each university based on author primary academic affiliation). For US universities, the Naval Postgraduate School earns the top ranking for visibility and the second for yield, and the Colorado School of Mines earns the top ranking for yield and the second for visibility. For non-US universities, the University of Chile earns the top ranking for both visibility and yield.

2nd International Conference on Cross-cultural Decision Making, San Francisco, CA, July 2012.

Statistics, Politics, and Policy, 2, issue 1, article 1.; The article of record as published may be found at http://dx.doi.org/10.2202/2151-7509.1018; The Early Aberration Reporting System (EARS) is used by some local health departments (LHDs) to monitor emergency room and clinic data for disease outbreaks. Using actual chief complaint data from local public health clinics, we evaluate how EARS—both the baseline system distributed by the CDC and two variants implemented by one LHD—perform at locally detecting the 2009 influenza A H1N1 pandemic. We also compare the EARS methods to a CUSUM-based method. We find that the baseline EARS system performed poorly in comparison to one of the LHD variants and the CUSUM-based method. These results suggest that changes in how syndromes are defined can substantially improve EARS performance. The results also show that incorporating algorithms that use more historical data will improve EARS performance for routine surveillance by local health departments.

Interfaces, 41, 590-598.; The article of record as published may be found at http://dx.doi.org/10.1287/inte.1110.0602; Continuing the work begun by Michael H. Rothkopf in 1996, this paper presents the ninth ranking of universities according to their contributions to the INFORMS practice literature. Two rankings are given, each based on a different metric: visibility is the number of times a university is listed as the primary academic affiliation in the INFORMS practice literature; yield is the equivalent number of INFORMS practice papers attributable to each university based on author primary academic affiliation. As with the Eighth Rothkopf Rankings for US universities, the Naval Postgraduate School earns the top ranking for visibility and second for yield, whereas the Colorado School of Mines earns the top ranking for yield and second for visibility; for non-US universities, the University of Chile earns the top ranking for both visibility and yield.

Interfaces; This paper presents the 10th ranking of universities according to their contributions to the INFORMS practice literature. Two rankings are given, each based on a different metric: visibility is the number of times a university is listed as the primary academic affiliation in the INFORMS practice literature; yield is the equivalent number of INFORMS practice papers attributable to each university based on author primary academic affiliation. For US universities, Georgia Institute of Technology ranks first in visibility, followed by the Naval Postgraduate School in second, and the Colorado School of Mines in third, while for yield the Naval Postgraduate School ranks first, followed by the Colorado School of Mines in second, and Georgia Institute of Technology third. For non-US universities, the University of Chile ranks first and the University of Toronto ranks second for both visibility and yield, while the Norwegian University of Science and Technology is third for visibility and Cass Business School is third for yield.

Statistics in Medicine, 27, 3407-3429.; The article of record as published may be located at http://dx.doi.org/10.1002/sim.3197; This paper compares the performance of three detection methods, entitled C1, C2, and C3, that are implemented in the early aberration reporting system (EARS) and other syndromic surveillance systems versus the CUSUM applied to model-based prediction errors. The cumulative sum (CUSUM) performed significantly better than the EARS’ methods across all of the scenarios we evaluated. These scenarios consisted of various combinations of large and small background disease incidence rates, seasonal cycles from large to small (as well as no cycle), daily effects, and various types and levels of random daily variation. This leads us to recommend replacing the C1, C2, and C3 methods in existing syndromic surveillance systems with an appropriately implemented CUSUM method. Published in 2008 by John Wiley & Sons, Ltd.

Eighth Conference on Air-Sea Interaction, American Meteorological Society, 176-180; The South China Sea (SCS) has a bottom topography (Fig.1) that makes it unique semi-enclosed ocean basin that is overlaid by a pronounced monsoon surface wind...

Fifth International Symposium on Technology and Mine Problem, Society for Counter-Ordnance Technology, Monterey, in CD-Rom; The purpose of this work is to determine the necessity of a near real time ocean modeling capability such as the Naval Oceanographic Office’s (NAVOCEANO) Modular Ocean Data Assimilation System (MODAS) model in shallow water (such as the Yellow Sea) mine hunting applications using the Navy’s Comprehensive Acoustic Simulation System/Gaussian Ray Bundle (CASS/GRAB) model. Sound speed profiles inputted into the CASS/GRAB were calculated from observational and climatological data sets for different seasons and regions of four different bottom types (sand, gravel, mud, and rock). The CASS/GRAB model outputs were compared to the outputs from corresponding MODAS data sets. The results of the comparisons demonstrated in many cases a significant acoustic difference between the alternate profiles. These results demonstrated that there is a need for a predictive modeling capability such as MODAS to address the Mine Warfare (MIW) needs in the Yellow Sea region. There were some weaknesses detected in the profiles the MODAS model produces in the Yellow Sea, which must be resolved before it can reliably address the MIW needs in that region.

OCEANS2005, MTS/IEEE Conference Proceedings, DVD-ROM, 10 pages; Sidescan sonar detects objects buried in the seafloor through generating images of ordnance such as seamine buried in sediments. The sonar operates by illuminating a broad swath of seabed using a line array of acoustic projectors while acoustic backscattering from the illuminated sediment volume is measured. The effect of suspended sediment on the sonar imagery depends on the volume scattering strength of the suspended sediment layer. Understanding the acoustic characteristics of suspended sediment layer can aid the Navy in the detection of mines using the sonar imagery. This study describes a combined experimental and modeling effort on the volume scattering strength on the burial object detection. A range of critical values of volume scattering strength for the buried object detection were discovered through repeated model simulations.

Q. J. R. Meteorol. Soc., 134 (632), pp. 551-561; The article of record as published may be located at http://dx.doi.org/10.1002/qj.241