arXiv.itsnick.co

an independent field guide to 23 million papers from arXiv & OpenAlex — not affiliated with arXiv.org

Author

Bernard Butler

25 papers · 2010–2026

2010: 12011: 12012: 22013: 32014: 02015: 12016: 02017: 02018: 12019: 12020: 12021: 32022: 32023: 02024: 32025: 12026: 4
2010peak 4 in 20262026

Frequent co-authors

Papers

showing 1–25 of 25 RSS

Provisioning of requests for virtual machine sets with placement constraints in IaaS clouds

Lei Shi, Bernard Butler, Dmitri Botvich +1 more

Information Systems · Integrated Network Management · · cited 49× · OpenAlex ↗ · more like this ·

We study the problem of optimising the provisioning of collections of virtual machines (VMs) having different placement constraints (e.g., security and anti-collocation) and characteristics (e.g., memory and disk capacity), given a set of physical machines (PMs) with known specifications, in order to achieve the objective of maximising an IaaS cloud provider's revenue. We propose two approaches. The first is based on the formulation of the problem as an integer linear programming (ILP) problem, the solution to which provides an optimal VM placement. The second approach is a heuristic based on classifying the requests into different categories and satisfying the constraints in a particular order using a first lit decreasing (FFD) algorithm for multi-dimensional vector bin packing problem. Given a model of VM placement constraints, offered resources and requests with multiple VM types…

On the Performance of Access Control Policy Evaluation

Leigh Griffin, Bernard Butler, Eamonn de Leastar +2 more

Sociology and Political Science · SETU Waterford Libraries - Open Access Repository · · cited 22× · DOI ↗ · more like this ·

There is growing awareness of the need to protect digital resources and services in both corporate and home ICT scenarios. Meanwhile, communication tools tailored for corporations are blurring the line between communication mechanisms and (near) real-time resource sharing. The resulting requirement for near real-time policy-based access control is technically challenging. In a corporate domain, such access control mechanisms must be unobtrusive and comply with strict security objectives. Thus policy evaluation performance needs to be considered while addressing traditional security concerns. This paper discusses policy system design principles that motivate a novel Policy Decision Point (PDP) implementation and associated policy language. These principles are consistent with recent web development techniques designed to improve performance and scalability. Given a modern web development…

XACML policy performance evaluation using a flexible load testing framework

Bernard Butler, Brendan Jennings, Dmitri Botvich

Sociology and Political Science · SETU Waterford Libraries - Open Access Repository · · cited 9× · DOI ↗ · more like this ·

The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

An experimental testbed to predict the performance of XACML Policy Decision Points

Bernard Butler, Brendan Jennings, Dmitri Botvich

Computer Networks and Communications · SETU Waterford Libraries - Open Access Repository · · cited 8× · DOI ↗ · more like this ·

The performance and scalability of access control systems is a growing concern as organisations deploy ever more complex communications and content management systems. This paper describes how an (offline) experimental testbed may be used to address performance concerns. To begin, timing measurements are collected from a server component incorporating the Policy Decision Point (PDP) under test, using representative policies and corresponding requests. Our experiments with two XACML PDP implementations show that measured request service times are typically clustered by request type; thus an algorithm for request cluster identification is presented. Cluster characterisations are used as inputs to a PDP performance model for a given policy/request mix and an analytic (queueing) model is used to estimate the equilibrium server load for different mixes of request clusters. The analytic…

Optimal placement of virtual machines with different placement constraints in IAAS clouds

Lei Shi, Brendan Jennings, Bernard Butler +2 more

Information Systems · · cited 7× · DOI ↗ · more like this ·

There has been much research activity recently in relation to the optimal placement of virtual machines (VMs) on physical servers. Usually the objective is to consolidate the VMs on servers for energy-saving purposes in a cloud environment. In this paper, we study the problem of optimizing the allocation of VMs having different placement constraints (e.g., security and anti-collocation) and characteristics (e.g., memory and disk capacity), given a set of physical hosts with known specifications, in order to achieve the objective of maximizing the cloud provider's revenue. This is an important resource allocation problem in data centers. Our approach is based on the formulation of the problem as an integer linear programming (ILP) problem. The ILP model produces an optimal placement for VMs with different placement constraints. Given a model of VM placement constraints, offered resources…

Measurement and Prediction of Access Control Policy Evaluation Performance

Bernard Butler, Brendan Jennings

Sociology and Political Science · IEEE Transactions on Network and Service Management · · cited 5× · DOI ↗ · more like this ·

As the need for more pervasive and more complex access controls grows, the challenge of ensuring the performance of access control systems is becoming apparent. Researchers have proposed several solutions to mitigate performance problems, including: adjusting the policy set; re-engineering the policy decision point (PDP); and decomposing the policies and distributing their evaluation. However, since the benefits and tradeoffs depend heavily upon the actual scenario, security administrators typically do not have objective justification for adopting particular mitigation actions. In response, we present the ATLAS framework, comprising: 1) DomainManager, which facilitates modelling the domain as closely as possible and automatically generates large numbers of representative policies and associated requests; 2) STACS, which enables controlled experiments to be performed using the generated…

An Access Control Implementation Targeting Resource-constrained Environments

Fan Zhang, Bernard Butler, Brendan Jennings

Sociology and Political Science · · cited 2× · DOI ↗ · more like this ·

As more and more services are deployed on devices near the network edge, security operations (such as authentication and authorization) need to move with them. Typically, edge devices have fewer resources than data center servers and so the security operations need to make more efficient use of what is available while offering adequate performance. Authorization adds latency and requires system resources, but the need for security management with strong authorization at the network edge is growing. We have released the first open source, high-performance, resource-efficient, XACML3 standard-compatible Policy Decision Point (PDP) called Luas (means “speed'' in the Irish language) based on an event-driven architecture and a non-blocking computational model, using a Bloom Filter for better performance. We compared its performance, resource usage and reliability against existing open source…

A language driven approach to multi-system access control

Steven Davy, Jason Barron, Lei Shi +4 more

Sociology and Political Science · · cited 1× · OpenAlex ↗ · more like this ·

Resource access control policies for an organization are often derived from best practice standards or from high level business policies. To ensure that access control is enforced effectively, these business policies need to be translated into deployable system configurations or lower level policies for multiple diverse systems. These target policy representations require experts to coordinate and collaborate so that business policies are fully supported. It is difficult and cumbersome to effectively ensure that all access control policies are enforced with the desired effect and in a consistent way, particularly given that there may be many people editing policies and that business policies can change over time. We present a language driven approach that abstracts access control policies into a clear and structured set of rules defined using terms familiar to a non-systems expert…

Beyond Centralized Policy Decision Points: Decentralized Sticky Policy Authorization through Evidence Quorums

Aleena Nazir, Mubashir Husain Rehmani, Bernard Butler +1 more

cs.CR · · cited 0× · arXiv ↗ · more like this ·

Sticky policies remain attached to protected data so that access restrictions can persist across systems, yet request-time authorization often still depends on a centralized Trusted Authority or Policy Decision Point (PDP). This paper presents SPEAR-Q, a decentralized framework in which independent Policy Authority Nodes (PANs) evaluate the active sticky policy using local context, consent, and risk information and generate signed authorization evidence. A strict-majority Evidence quorum determines the global Permit or Deny decision, while a committed policy becomes active only after the required PAN majority applies it. SPEAR-Q was deployed across physically separated hosts in the Airbus Cyber Security Simulation Platform and evaluated using a healthcare workload derived from MIMIC-IV. Across 9,000 performance requests, all requests completed without execution failure or timeout.…

Access Control in Healthcare <scp>IoT</scp> : A Comprehensive Survey

Aleena Nazir, Mubashir Husain Rehmani, Bernard Butler +1 more

Sociology and Political Science · Engineering Reports · · cited 0× · DOI ↗ · more like this ·

ABSTRACT Access control is a critical component of data protection, determining which individuals or systems are permitted to reach particular resources. Its purpose is to safeguard confidential information from unauthorized use, breaches, or unintended disclosure. In general computing environments, access control is relatively straightforward, but in complex domains such as healthcare, its implementation becomes significantly more challenging. The widespread adoption of Internet of Things solutions in medical systems, referred to as Healthcare IoT (H‐IoT), has introduced new layers of complexity. H‐IoT ecosystems combine medical devices, sensors, mobile health applications, and cloud platforms to continuously collect, transmit, and analyze patient data. In such dynamic, data‐intensive environments, traditional access control approaches often fall short. The study explores the…

Access Control in Healthcare IoT: A Comprehensive Survey

Aleena Nazir, Mubashir Husain Rehmani, Bernard Butler +1 more

Sociology and Political Science · Open MIND · · cited 0× · DOI ↗ · more like this ·

Access control is a critical component of data protection, determining which individuals or systems are permitted to reach particular resources. Its purpose is to safeguard confidential information from unauthorized use, breaches, or unintended disclosure. In general computing environments, access control is relatively straightforward, but in complex domains such as healthcare, its implementation becomes significantly more challenging. The widespread adoption of Internet of Things solutions in medical systems, referred to as Healthcare IoT (H-IoT), has introduced new layers of complexity. H-IoT ecosystems combine medical devices, sensors, mobile health applications, and cloud platforms to continuously collect, transmit, and analyze patient data. In such dynamic, data-intensive environments, traditional access control approaches often fall short. The study explores the application of…

Multi-Graph Convolutional Neural Network forBreast Cancer Multi-Task Classification

Mohammad Ibrahim, Shagufta Henna, Brendan Jennings +2 more

Artificial Intelligence · Research Square · · cited 0× · DOI ↗ · more like this ·

Abstract Mammography is a popular diagnostic imaging procedure for detecting breast cancer at an early stage. Variousdeep learning approaches to breast cancer detection incur high costs and are erroneous. Therefore, they are notreliable to be used by medical practitioners. Specifically, these approaches do not exploit the complex texture patternsand interactions. These approaches warrant the need for labelled data to enable learning, limiting the scalabilityof these methods under insufficient labelled datasets. Further, these models lack generalisation capability to newsynthesizedpatterns/textures. To address these problems, in the first instance, we design a graph model to transform themammograms images into highly correlated multigraph encode rich structural relations and high-level texture features.Then, we consider a self-supervised learning multigraph encoder (SSL-MG) to improve…

Multi-Graph Convolutional Neural Network for Breast Cancer Multi-Task Classification

Mohamed Ibrahim, Shagufta Henna, Gary Cullen +2 more

Artificial Intelligence · · cited 0× · DOI ↗ · more like this ·

Mammography is a popular diagnostic imaging procedure for detecting breast cancer at an early stage. Various deep learning (DL) approaches to breast cancer detection incur high costs and are prone to classify incorrectly. Therefore, they are not sufficiently reliable to replace existing techniques used by medical practitioners. Specifically, these DL approaches do not exploit the complex texture patterns and interactions in mammograms. These DL approaches need labelled data to enable learning, limiting the scalability of these methods because of sufficient labelled datasets. Further, these DL models lack generalisation capability to newly-synthesised patterns/textures. To address these problems, in the first instance, we design a graph model to transform the mammogram images into highly correlated multi-graphs, encoding rich structural relations and high-level texture features. Then, we…

How soon can you decide whether Alice is permitted to communicate or share resources with Bob

Bernard Butler, Brendan Jennings

Sociology and Political Science · Tiny Trans. Comput. Sci. · · cited 0× · OpenAlex ↗ · more like this ·

Organisations are deploying ever more complex communications and content management systems to control entitlements to read, write and share protected digital resources. The resulting access control policy infrastructure defines and resolves the complex decision boundary between safety and openness. Moreover, for information security models enabling ethical wall policies, the decision boundary itself can change dynamically. This complexity poses major usability concerns in realtime corporate communication scenarios (due to high complexity) and in online social networks (due to large scale). Researchers continue to propose improvements designed to increase policy evaluation performance. These proposals include reconfiguration of policies (reordering, regrouping and combining) and re-implementation of Policy Decision Points (PDPs) to, for example, use binary decision diagrams for…

Adaptive Sampling for Spatiotemporal Anomaly Monitoring in Wireless Sensor Networks

Guoqing Lu, Yixuan Sun, Yiwen Jiang +1 more

cs.NI · · arXiv ↗ · more like this ·

Long-term environmental monitoring in wireless sensor networks (WSNs) often uses sparse sampling to extend network lifetime, but sparse sensing can miss short-lived, localized, and potentially diffusive anomalies. This paper proposes a sentinel-assisted adaptive sampling framework as a cooperative sensing-control pipeline for WSN anomaly monitoring. During normal periods, nodes perform sparse sensing driven by Kalman filter (KF) predictive uncertainty. During anomalous periods, continuously sampled sentinel nodes perform hybrid GLR-based detection with node-relative thresholds, and local detections trigger one-hop neighborhood wake-up with recovery-aware alert control. Experiments on the Intel Berkeley Research Lab temperature dataset with abrupt random spatiotemporal anomalies show that the proposed method raises the anomaly-window sampling ratio (AWSR) from 0.439 to 0.933 in the main…

Building Privacy-and-Security-Focused Federated Learning Infrastructure for Global Multi-Centre Healthcare Research

Fan Zhang, Daniel Kreuter, Javier Fernandez-Marques +10 more

cs.CR · · arXiv ↗ · more like this ·

Collaborative healthcare research across multiple institutions increasingly requires diverse clinical datasets, but cross-border data sharing is strictly constrained by privacy regulations. Federated learning (FL) enables model training while keeping data local; however, many existing frameworks remain proof-of-concept and do not adequately address governance risks such as unauthorised participation, misuse, and lack of accountability. In particular, enforceable mechanisms for authentication, authorisation, and accounting (AAA) are often missing, limiting real-world clinical deployment. This paper presents FLA$^3$ (Federated Learning with Authentication, Authorisation, and Accounting), a governance-aware federated learning platform that operationalises regulatory obligations through runtime policy enforcement. FLA$^3$ integrates eXtensible Access Control Markup Language (XACML)…

Internet of Paint (IoP): Design, Challenges, Applications and Future Directions

Lasantha Thakshila Wedage, Mehmet C. Vuran, Bernard Butler +2 more

cs.ET · · arXiv ↗ · more like this ·

The proliferation of nano-technology has enabled novel applications in various fields, including the potential for miniaturized terahertz (THz)-enabled devices. The extra-large bandwidth available in the THz spectrum can facilitate high-speed communication, even for transmission through lossy media. Culminating these capabilities, this paper introduces a new paradigm: Internet of Paint (IoP), transforming the 40,000-year-old concept of paint with extensive connectivity and sensing capabilities. IoP will enable seamless, massively parallel, and high-capacity communication and sensing capabilities, enabling innovative applications. IoP is expected to offer communication and sensing using nano-devices embedded in paint. In this paper, challenges towards the realization of IoP are discussed. Simulations indicate that THz signals in this stratified medium can form lateral waves that…

Antennas in Walls: Performance Analysis of Microstrip Patch Antennas Designed for Internet of Paint (IoP)

Lasantha Thakshila Wedage, Bernard Butler, Mehmet Can Vuran +2 more

cs.ET · · arXiv ↗ · more like this ·

This study presents a simulated transceiver with a microstrip patch antenna (MPA) designed to resonate at 150 GHz and embedded in paint. The in-paint MPA (IP-MPA) is designed for the Internet of Paint (IoP) paradigm, which envisions seamless device communication through a paint layer on walls. This study introduces a comprehensive channel model for transceivers in paint at arbitrary depths and IP-MPA orientations. The best antenna orientations are analyzed for IoP channel performance. Extensive simulations indicate that the lateral waves, which propagate along the air-paint interface, exhibit the lowest loss, making this path the most reliable for communication between transceivers in paint. Further, the maximum received power for each propagation path, with the exception of the direct path, depends on depth. The findings suggest that the proposed network of IP-MPA-enabled transceivers…

Internet of Paint (IoP): Channel Modeling and Capacity Analysis for Terahertz Electromagnetic Nanonetworks Embedded in Paint

Lasantha Thakshila Wedage, Mehmet Can Vuran, Bernard Butler +2 more

physics.app-ph · · arXiv ↗ · more like this ·

This work opens a new chapter in the 100,000 year-old concept of paint, by leveraging innovations in nano-technology in the sub-THz frequency range. More specifically, the groundbreaking concept of Internet of Paint (IoP) is introduced along with a comprehensive channel model and a capacity analysis for nano-scale radios embedded in paint and communicating through paint. Nano-network devices, integrated within a paint medium, communicate via a multipath strategy, encompassing direct waves, reflections from interfaces, and lateral wave propagation. The evaluation incorporates three distinct paint types to assess path losses, received powers, and channel capacity. Analysis of path loss indicates a slight non-linear increase with both frequency and Line of Sight (LoS) distance between transceivers. Notably, paints with high refractive indexes result in the highest path loss. Moreover…

Comparative Analysis of Terahertz Propagation Under Dust Storm Conditions on Mars and Earth

Lasantha Thakshila Wedage, Bernard Butler, Sasitharan Balasubramaniam +2 more

cs.IT · · arXiv ↗ · more like this ·

Reliable Terahertz (THz) links are necessary for outdoor point-to-point communication with the exponential growth of wireless data traffic. This study presents a modified Monte Carlo simulation procedure for estimating THz link attenuation due to multiple scattering by dust particles on the THz beam propagation path. Scattering models are developed for beams through dust, based on Mie and Rayleigh approximations for corresponding frequencies for Earth (0.24 THz) and Mars (1.64 THz). The simulation results are compared, considering parameters such as the number of Monte-Carlo photon (MCP) packets, visibility, dust particle placement density along the beam, frequency, and distance between the transmitter and the receiver. Moreover, a channel capacity model was proposed, considering THz link attenuation due to dust storms, spreading loss and molecular absorption loss for Earth and Mars…

Graph-based Heuristic Solution for Placing Distributed Video Processing Applications on Moving Vehicle Clusters

Kanika Sharma, Bernard Butler, Brendan Jennings

cs.NI · · arXiv ↗ · more like this ·

Vehicular fog computing (VFC) is envisioned as an extension of cloud and mobile edge computing to utilize the rich sensing and processing resources available in vehicles. We focus on slow-moving cars that spend a significant time in urban traffic congestion as a potential pool of on-board sensors, video cameras, and processing capacity. For leveraging the dynamic network and processing resources, we utilize a stochastic mobility model to select nodes with similar mobility patterns. We then design two distributed applications that are scaled in real-time and placed as multiple instances on selected vehicular fog nodes. We handle the unstable vehicular environment by a), Using real vehicle density data to build a realistic mobility model that helps in selecting nodes for service deployment b), Using community-detection algorithms for selecting a robust vehicular cluster using the…

Scaling and Placing Distributed Services on Vehicle Clusters in Urban Environments

Kanika Sharma, Bernard Butler, Brendan Jennings

cs.NI · · arXiv ↗ · more like this ·

Many vehicles spend a significant amount of time in urban traffic congestion. Due to the evolution of autonomous cars, driver assistance systems, and in-vehicle entertainment, many vehicles have plentiful computational and communication capacity. How can we deploy data collection and processing tasks on these (slowly) moving vehicles to productively use any spare resources? To answer this question, we study the efficient placement of distributed services on a moving vehicle cluster. We present a macroscopic flow model for an intersection in Dublin, Ireland, using real vehicle density data. We show that such aggregate flows are highly predictable (even though the paths of individual vehicles are not known in advance), making it viable to deploy services harnessing vehicles' sensing capabilities. Our main contribution is a detailed mathematical specification for a task-based, distributed…

Climate Change Sensing through Terahertz Communications: A Disruptive Application of 6G Networks

Lasantha Thakshila Wedage, Bernard Butler, Sasitharan Balasubramaniam +2 more

eess.SP · · arXiv ↗ · more like this ·

Climate change resulting from the misuse and over-exploitation of natural resources has affected and continues to impact the planet's ecosystem. This pressing issue is leading to the development of novel technologies to sense and measure damaging gas emissions. In parallel, the accelerating evolution of wireless communication networks is resulting in wider deployment of mobile telecommunication infrastructure. With 5G technologies already being commercially deployed, the research community is starting research into new technologies for 6G. One of the visions for 6G is the use of the terahertz (THz) spectrum. In this paper, we propose and explore the use of THz spectrum simultaneously for ultrabroadband communication and atmospheric sensing by leveraging the absorption of THz signals. Through the use of machine learning, we present preliminary results on how we can analyze signal path…

Evolving Intelligent Reflector Surface towards 6G for Public Health: Application in Airborne Virus Detection

Harun Šiljak, Nouman Ashraf, Michael Taynnan Barros +5 more

eess.SP · · arXiv ↗ · more like this ·

While metasurface based intelligent reflecting surfaces (IRS) are an important emerging technology for future generations of wireless connectivity in its own right, the plans for the mass deployment of these surfaces motivate the question of their integration with other new and emerging technologies that would require mass proliferation. This question of integration and the vision of future communication systems as an invaluable component for public health motivated our new concept of Intelligent Reflector-Viral Detectors (IR-VD). In this novel scheme, we propose deployment of intelligent reflectors with strips of receptor-based viral detectors placed between the reflective surface tiles. Our proposed approach encodes information of the virus by flicking the angle of the reflected beams, using time variations between the beam deviations to represent the messages. This information…

Potential of Augmented Reality for Intelligent Transportation Systems

Adnan Mahmood, Bernard Butler, Brendan Jennings

cs.HC · · arXiv ↗ · more like this ·

Rapid advances in wireless communication technologies coupled with ongoing massive development in vehicular networking standards and innovations in computing, sensing, and analytics have paved the way for intelligent transportation systems (ITS) to develop rapidly in the near future. ITS provides a complete solution for the efficient and intelligent management of real-time traffic, wherein sensory data is collected from within the vehicles (i.e., via their onboard units) as well as data exchanged between the vehicles, between the vehicles and their supporting roadside infrastructure/network, among the vehicles and vulnerable pedestrians, subsequently paving the way for the realization of the futuristic Internet of Vehicles. The traditional intent of an ITS system is to detect, monitor, control, and subsequently reduce traffic congestion based on a real-time analysis of the data…