Faculty Profiles - YAMAUCHI Toshihiro

Implementation and Evaluation of a Directory Oriented Buffer Cache Mechanism

Other Link： http://id.nii.ac.jp/1001/00009442/

TABATA Toshihiro, KOTOGE Miyuki, NOMURA Yoshinari, TANIGUCHI Hideo

The IEICE transactions on information and systems 91 ( 2 ) 435 - 448 2008.2

Design and evaluation of a Bayesian-filter-based image spam filtering method

Masahiro Uemura, Toshihiro Tabata

Proceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008 49 ( 9 ) 46 - 51 2008

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

In recent years, with the spread of the Internet, the number of spam e-mail has become one of the most serious problems. A recent report reveals that 91% of all e-mail exchanged in 2006 was spam. Using the Bayesian filter is a popular approach to distinguish between spam and legitimate e-mails. It applies the Bayes theory to identify spam. This filter proffers high filtering precision and is capable of detecting spam as per personal preferences. However, the number of image spam, which contains the spam message as an image, has been increasing rapidly. The Bayesian filter is not capable of distinguishing between image spam and legitimate e-mails since it learns from and examines only text data. Therefore, in this study, we propose an anti-image spam technique that uses image information such as file size. This technique can be easily implemented on the existing Bayesian filter. In addition, we report the results of the evaluations of this technique. © 2008 IEEE.

DOI： 10.1109/ISA.2008.84

機密情報の拡散追跡機能を利用した書き出し制御手法

植村晋一郎, 田端利宏, 谷口秀夫, 横山和俊, 箱守聰

マルチメディア，分散，協調とモバイル(DICOMO2008)シンポジウム論文集 768 - 775 2008

Proposal of instant synchronous interprocess communication

Toshihiro Tabata, Kazuhiro Fukutomi, Hideo Taniguchi

Proceedings - 3rd International Conference on Convergence and Hybrid Information Technology, ICCIT 2008 2 146 - 149 2008

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

Interprocess communication (IPC) is often applied to cooperative processes and IPC performance largely determine the processing time. Here, we propose an instant synchronous IPC mechanism for preferential processing of high-priority data. In addition, we present that the results of an evaluation using an application program by using an imprecise computational model. © 2008 IEEE.

DOI： 10.1109/ICCIT.2008.106

I/O buffer cache mechanism based on the frequency of file usage

Tatsuya Katakami, Toshihiro Tabata, Hideo Taniguchi

Proceedings - 3rd International Conference on Convergence and Hybrid Information Technology, ICCIT 2008 2 76 - 82 2008

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

Most operating systems manage buffer caches for buffering I/O blocks, because I/O processing is slower than CPU processing. Application programs request I/O processing from files. In order to improve the performance of I/O processing, a buffer cache should be managed with regard to both blocks and files. This paper proposes an I/O buffer cache mechanism based on the frequency of file usage. This mechanism calculates the importance of each file. Then, blocks of important files are stored in a protected space. The blocks stored in the protected space are given priority for caching. We evaluated the proposed mechanism by kernel make processing. The results show that the proposed mechanism improves the processing time by 18 s (5.7%) as compared to the LRU algorithm. © 2008 IEEE.

DOI： 10.1109/ICCIT.2008.107

An Improved Recyclable Resource Management Method for Fast Process Creation and Reduced Memory Consumption

Toshihiro Tabata, Hideo Taniguchi

International Journal of Hybrid Information Technology (IJHIT) 1 ( 1 ) 31 - 44 2008

Integrated access permission: Secure and simple policy description by integration of file access vector permission

Takuto Yamaguchi, Toshihiro Tabata, Yuichi Nakamura

Proceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008 40 - 45 2008

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

In pervasive computing, embedded systems have a possibility to be attacked by crackers, including 0-day attack, as well as enterprise systems. In particular, in a case where a cracker gets a root privilege, damages are significant. To resolve this problem, Security-Enhanced Linux (SELinux) is useful. However, SELinux has a problem that is significant complexity for configuration because of too fine-grained access control. As a method for resolving this problem, SELinux Policy Editor (SEEdit) has been developed; this is a tool that simplifies the SELinux configuration. SEEdit uses the Simplified Policy Description Language (SPDL) as a policy description language. In the SPDL, we define new access permissions that integrate Access Vector Permissions (AVPs) employed in SELinux to provide access permissions in a security policy. Thus, we propose a set of access permissions named Integrated Access Permissions (IAPs), which enables the achievement of a good balance between reducing the workload of the configurations and guaranteeing security in SELinux. In addition, we evaluate our IAPs and show them almost secure. © 2008 IEEE.

DOI： 10.1109/ISA.2008.21

Mechanism of regulating execution performance for process group by execution resource on tender operating system

Toshihiro Tabata, Yoshinari Nomura, Hideo Taniguchi

Systems and Computers in Japan 38 ( 14 ) 63 - 78 2007.12

Language：English Publishing type：Research paper (scientific journal)

With increases in the performance of computers, it has become possible to provide a large number of services on a single computer. However, since the required execution performance can vary from service to service, it is necessary to guarantee execution performance for each service individually. In addition, it is common for a single service to be composed of multiple processes. Consequently, the ability to regulate execution performance for units consisting of multiple processes is desirable. Therefore, in this paper we propose a mechanism for regulating the execution performance of process groups using execution resources that encapsulate the assignable processor units designed for the Tender operating system. Specifically, executions are managed in a tree-structure and we then regulate execution performance by associating processes with these executions. In addition, we show via an implementation and evaluations that the proposed method is able to regulate the execution performance of process groups well and present an evaluation that makes use of a Web server. © 2007 Wiley Periodicals, Inc.

DOI： 10.1002/scj.20403

J-GLOBAL

An intrusion detection system which can restore altered data

Fumiaki Nagano, Kohei Tatara, Toshihiro Tabata, Kouichi Sakurai

Fourth International Conference on Information Technology and Applications, ICITA 2007 29 - 34 2007

Publishing type：Research paper (international conference proceedings)

We propose an intrusion detection system. Our system can detect the alteration of data in memory and also can restore altered data. This type of intrusion detection system has been proposed variously so far. But many of them can detect only a part of attacks. And as far as we know, few of them can restore altered data. Our system can detect attacks which can not be detected by existing systems and also can restore altered data. Our system protects data in the kernel area using hash functions. The overhead of accessing the kernel area and using a hash function is high. But our system reduces the frequency of accessing the kernel area and using a hash function in safety.

J-GLOBAL

Controlling CPU usage for processes with execution resource for mitigating CPU DoS attack

Toshihiro Tabata, Satoshi Hakomori, Kazutoshi Yokoyama, Hideo Taniguchi

Proceedings - 2007 International Conference on Multimedia and Ubiquitous Engineering, MUE 2007 141 - 146 2007

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

In a ubiquitous environment, the hardware resources are limited; thus, an appropriate resource management mechanism is required for guaranteeing its processing activity. However, most operating systems (OSs) lack an access control mechanism for CPU resources to guarantee satisfactory processing and to safeguard the system from malicious attacks that affect the CPU resources, resulting in denial of service (DoS). Access control is not intended for general OSs and CPU resources, which are important for the execution of a program. As a result, OSs cannot control the usage ratio of CPU resources. In this paper, we propose an access control model for CPU resources based on an execution resource. The proposed model can control the usage ratio of CPU resources appropriately for each program domain. This execution resource can be applied to mitigate DoS attacks. © 2007 IEEE.

DOI： 10.1109/MUE.2007.111

Other Link： https://dblp.uni-trier.de/db/conf/mue/mue2007.html#TabataHYT07

A CPU usage control mechanism for processes with execution resource for mitigating CPU DoS attack

Toshihiro Tabata, Satoshi Hakomori, Kazutoshi Yokoyama, Hideo Taniguchi

International Journal of Smart Home 1 ( 2 ) 109 - 128 2007

Publishing type：Research paper (scientific journal)

In a ubiquitous environment, the hardware resources are limited; thus, an appropriate resource management mechanism is required for guaranteeing its processing activity. However, most operating systems (OSs) lack an access control mechanism for CPU resources to guarantee satisfactory processing and to safeguard the system from malicious attacks that affect the CPU resources, resulting in denial of service (DoS). Access control is not intended for CPU resources, which are important for the execution of a program. As a result, OSs cannot control the usage ratio of CPU resources. In this paper, we propose an access control model for CPU resources based on an execution resource. The proposed model can control the usage ratio of CPU resources appropriately for each user and each program domain. This execution resource can be applied to mitigate DoS attacks. In order to evaluate the effectiveness of the proposed method, we describe the results of a basic performance experiment and a DoS simulation experiment employing the Apache web server. From the results, we show that the proposed method can mitigate DoS attacks and does not have bad effects upon the performance of a target service.

A recyclable resource management method for fast process creation and reduced memory consumption

Toshihiro Tabata, Hideo Taniguchi

Proceedings The 2007 International Conference on Intelligent Pervasive Computing, IPC 2007 194 - 199 2007

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

The costs involved in process creation and termination make this procedure expensive. This procedure expensive, thus degrading the performance of program execution. To solve this problem, a fast process creation and termination mechanism is proposed. This mechanism is implemented by recycling process resources. In order to improve the efficiency of recycling, the management of preserved process resources for recycling is an important factor. In this paper, we propose an improved resource management method for recycling process resources and an adaptive control mechanism. In the method, only one process resource with a program image is preserved for each program that occurs with high frequency of program execution. The proposed method can reduce the amount of memory consumption for preserved process resources in a concurrent execution environment. We also describe the implementation of the proposed method on the Tender operating system and report the results of our experiments. © 2007 IEEE.

DOI： 10.1109/IPC.2007.83

An intrusion detection system using alteration of data

Other Link： https://dblp.uni-trier.de/db/conf/ipc/ipc2007.html#TabataT07

Evaluation for guarantee of service processing by regulating program execution resource

箱守聰, 箱守聰, 田端利宏, 横山和俊, 谷口秀夫

情報処理学会シンポジウム論文集 2007 ( 14 ) 183 - 190 2007

Write Control Method by Using Diffusion Tracing Function of Classified Information

大橋慶, 箱守聰, 箱守聰, 田端利宏, 横山和俊, 谷口秀夫

情報処理学会シンポジウムシリーズ(CD-ROM) 2007 ( 1 ) 690 - 697 2007

Directory Oriented Buffer Cache Mechanism

田端利宏, 小峠みゆき, 齊藤圭, 乃村能成, 谷口秀夫

情報処理学会シンポジウム論文集 2006 ( 14 ) 2006

Usage Control Model and Architecture for Data Confidentiality in a Database Service Provider

SYALIM Amril, TABATA Toshihiro, SAKURAI Kouichi

情報処理学会論文誌 47 ( 2 ) 2006

Fumiaki Nagano, Kohei Tatara, Toshihiro Tabata, Kouichi Sakurai

Proceedings - International Conference on Advanced Information Networking and Applications, AINA 1 243 - 248 2006

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Attacks against data in memory are one of the most serious threats these days. Although many detection systems have been proposed so far, most of them can detect only part of alteration. Some detection systems use canaries to detect alteration. However, if an execution code has bugs that enable attackers to read data in memory, the system could be bypassed by attackers who can guess canaries. To overcome the problems, we propose a system using alteration of data. Our proposed system detects illegal alteration with verifier for vulnerable data. Verifier is made before vulnerable data could be altered by attackers, and verifier is checked when the program uses the vulnerable data. Part of Verifier is stored in kernel area to prevent attackers from reading data in user memory. Our approach can detect illegal alteration of arbitrary data in user memory. Our proposed system, moreover, does not have the problem systems using canaries have. © 2006 IEEE.

DOI： 10.1109/AINA.2006.94