Identity federation allows one to link a user’s digital identities across several identity manage... more Identity federation allows one to link a user’s digital identities across several identity management systems. Federated identity management (FIM) ensures that users have easy access to the available resources. However, scaling FIM to numerous partners is a challenging process due to the interoperability issue between different federation architectures. This study proposes a dynamic identity federation model to eliminate the manual configuration steps needed to establish an organizational identity federation by utilizing the OpenID Connect (OIDC) framework. The proposed model consists of three major steps to establish dynamic FIM: first, the discovery of the OpenID service provider, which indicates the location of the partner organization; second, the registration of the OpenID relying party, which allows the organization and its partner to negotiate information for establishing the federation; finally, establishing the dynamic trust federation. The proposed dynamic FIM model allows...
During the coexistence period between IPv4 and IPv6 networks, it is important to test the effect ... more During the coexistence period between IPv4 and IPv6 networks, it is important to test the effect of using IPv6 transition techniques on applications’ performance. We evaluate the performance of specific user’s applications over three transition techniques: dual-stack, automatic 6to4 and manual tunneling. A set of experiments have been carried out using OPNET network simulator to evaluate the performance of five applications: web browsing, file transfer, voice, email and database access over these transition techniques and comparing with applications’ performance over pure IPv4 and IPv6 networks. The finding results show varying in the applications’ performance between dualstack, automatic 6to4 tunneling, and manual 6to4 tunneling. For most applications, dual-stack performed better than tunneling regarding the response time. In some cases, tunneling performed better than dual-stack regarding other performance parameters, such as throughput and Jitter.
According to International Data Corporation (IDC), the Android operating system has occupied most... more According to International Data Corporation (IDC), the Android operating system has occupied most of the market share and it will increase to 87.4% by the end of 2023. Unfortunately, there is a large number of malicious applications that attack Android OS in different ways. Therefore, much research has been done in this area to detect these malware, but until now there is no complete solution that can detect all malware, especially new malware that increases from year to year. In this research, we proposed MLSecAndroid: an Android anti-malware approach that automatically detects malicious applications in Android applications‘ marketplaces using machine-learning techniques. MLSecAndroid uses 14984 benign applications and 2116 malicious applications from the Google Play and Aptoide stores with their users‘ feedbacks. The collected dataset need for cleaning to be ready for processing. Therefore, the pre-processing stage is applied to clean the data using many steps such as data cleanin...
Lecture Notes in Business Information Processing, 2009
The Shortest-Remaining-Response-Time (SRRT) policy has been proposed for scheduling static HTTP r... more The Shortest-Remaining-Response-Time (SRRT) policy has been proposed for scheduling static HTTP requests in web servers to reduce the mean response time. The SRRT prioritizes requests based on a combination of the current round-trip-time (RTT), TCP ...
2011 17th IEEE International Conference on Networks, 2011
Cryptographically Generated Address (CGA) is one of the most novel security features introduced i... more Cryptographically Generated Address (CGA) is one of the most novel security features introduced in IPv6 suite. CGA is designed to prevent addresses theft without relying on trust authority or additional security infrastructures. However, CGA is relatively computationally intensive, and bandwidth consuming. Besides, it has some security limitations. This paper defines a Compact and more Secure CGA (CS-CGA) version. We adopt
Abstract. Current developments in sensors open new possible uses across numerous real-life applic... more Abstract. Current developments in sensors open new possible uses across numerous real-life applications, including optical character recognition (OCR). An OCR system requires incorporation of text processing tools into the sensor functionality. The most critical stage in OCR systems is the segmentation stage. It refers to the challenge of subdividing a text image into characters, which can be individually processed using a classifier. The cursive nature of the Arabic script such as the existence of different shapes for each character according to its location in the word besides the existence of diacritics makes Arabic character segmentation a very challenging task. A robust offline character segmentation algorithm for printed Arabic text with diacritics is developed based on the contour extraction technique. The algorithm works through extracting the up-contour part of a word and then identifies the splitting areas of the word characters. Then a postprocessing stage is used to handle the over-segmentation problems that appear in the initial segmentation stage. The proposed scheme is benchmarked using the APTI dataset and a manually collected dataset consisting of image texts varying in font size, type, and style for more than 38,000 words. The experiments show that the proposed algorithm is able to segment Arabic words with diacritics with an average accuracy of 98.5%.
Identity federation allows one to link a user’s digital identities across several identity manage... more Identity federation allows one to link a user’s digital identities across several identity management systems. Federated identity management (FIM) ensures that users have easy access to the available resources. However, scaling FIM to numerous partners is a challenging process due to the interoperability issue between different federation architectures. This study proposes a dynamic identity federation model to eliminate the manual configuration steps needed to establish an organizational identity federation by utilizing the OpenID Connect (OIDC) framework. The proposed model consists of three major steps to establish dynamic FIM: first, the discovery of the OpenID service provider, which indicates the location of the partner organization; second, the registration of the OpenID relying party, which allows the organization and its partner to negotiate information for establishing the federation; finally, establishing the dynamic trust federation. The proposed dynamic FIM model allows...
During the coexistence period between IPv4 and IPv6 networks, it is important to test the effect ... more During the coexistence period between IPv4 and IPv6 networks, it is important to test the effect of using IPv6 transition techniques on applications’ performance. We evaluate the performance of specific user’s applications over three transition techniques: dual-stack, automatic 6to4 and manual tunneling. A set of experiments have been carried out using OPNET network simulator to evaluate the performance of five applications: web browsing, file transfer, voice, email and database access over these transition techniques and comparing with applications’ performance over pure IPv4 and IPv6 networks. The finding results show varying in the applications’ performance between dualstack, automatic 6to4 tunneling, and manual 6to4 tunneling. For most applications, dual-stack performed better than tunneling regarding the response time. In some cases, tunneling performed better than dual-stack regarding other performance parameters, such as throughput and Jitter.
According to International Data Corporation (IDC), the Android operating system has occupied most... more According to International Data Corporation (IDC), the Android operating system has occupied most of the market share and it will increase to 87.4% by the end of 2023. Unfortunately, there is a large number of malicious applications that attack Android OS in different ways. Therefore, much research has been done in this area to detect these malware, but until now there is no complete solution that can detect all malware, especially new malware that increases from year to year. In this research, we proposed MLSecAndroid: an Android anti-malware approach that automatically detects malicious applications in Android applications‘ marketplaces using machine-learning techniques. MLSecAndroid uses 14984 benign applications and 2116 malicious applications from the Google Play and Aptoide stores with their users‘ feedbacks. The collected dataset need for cleaning to be ready for processing. Therefore, the pre-processing stage is applied to clean the data using many steps such as data cleanin...
Lecture Notes in Business Information Processing, 2009
The Shortest-Remaining-Response-Time (SRRT) policy has been proposed for scheduling static HTTP r... more The Shortest-Remaining-Response-Time (SRRT) policy has been proposed for scheduling static HTTP requests in web servers to reduce the mean response time. The SRRT prioritizes requests based on a combination of the current round-trip-time (RTT), TCP ...
2011 17th IEEE International Conference on Networks, 2011
Cryptographically Generated Address (CGA) is one of the most novel security features introduced i... more Cryptographically Generated Address (CGA) is one of the most novel security features introduced in IPv6 suite. CGA is designed to prevent addresses theft without relying on trust authority or additional security infrastructures. However, CGA is relatively computationally intensive, and bandwidth consuming. Besides, it has some security limitations. This paper defines a Compact and more Secure CGA (CS-CGA) version. We adopt
Abstract. Current developments in sensors open new possible uses across numerous real-life applic... more Abstract. Current developments in sensors open new possible uses across numerous real-life applications, including optical character recognition (OCR). An OCR system requires incorporation of text processing tools into the sensor functionality. The most critical stage in OCR systems is the segmentation stage. It refers to the challenge of subdividing a text image into characters, which can be individually processed using a classifier. The cursive nature of the Arabic script such as the existence of different shapes for each character according to its location in the word besides the existence of diacritics makes Arabic character segmentation a very challenging task. A robust offline character segmentation algorithm for printed Arabic text with diacritics is developed based on the contour extraction technique. The algorithm works through extracting the up-contour part of a word and then identifies the splitting areas of the word characters. Then a postprocessing stage is used to handle the over-segmentation problems that appear in the initial segmentation stage. The proposed scheme is benchmarked using the APTI dataset and a manually collected dataset consisting of image texts varying in font size, type, and style for more than 38,000 words. The experiments show that the proposed algorithm is able to segment Arabic words with diacritics with an average accuracy of 98.5%.
Uploads