Wednesday, 22 June 2016
Tuesday, 21 June 2016
FBI approach to investigations puts security at risk
In an essay to be posted on June 17, 2016 in technology magazine Susan Landau, professor of cybersecurity policy at Worcester Polytechnic Institute (WPI), argues that the FBI's latest and widely publicized efforts to compel Apple laptop to write down software program to liberate an iPhone utilized by a terrorist in California displays an old method to law enforcement that threatens to weaken the security of all smartphones, potentially placing the personal information of hundreds of thousands of smartphone customers at risk and undermining the developing use of smartphones as relied on authenticators for having access to on line facts.
The technology essay grew out of testimony Landau delivered in March earlier than a hearing of the U.S. House Judiciary Committee [Landau's testimony begins at 3:35:44]. In that discussion board, Landau countered the argument of FBI director James Comey that encrypted gadgets (which Comey has characterized as "warrant-proof areas") prevent the enterprise's ability to analyze crimes. Landau says the FBI is looking at smartphones thru a 20th century lens, a attitude this is especially troubling given the ability for smartphones to either update or augment static passwords as authenticators for logging into computers or accessing on-line debts.
Login credentials are a desired target of hackers, Landau says, considering they could offer access to treasured statistics and leave laptop structures open to assault. Increasingly more, corporations like facebook and Google and even some excessive-level authorities corporations are using smartphones as authenticators to make on line assets extensively more tough to breach. However for cellphone authentication to be powerful, smartphones, themselves, have to be comfortable.
Landau says the FBI's efforts to weaken telephone security replicate its previous approach to investigating crime and its inadequate sources for conducting current cyber investigations. Landau argues that the organisation needs to invest in constructing up its own "21st century investigative savvy," which include growing "an investigative middle with sellers with deep technical understanding of current communications technology and computer technology."
With the ability to expand new surveillance methods and equipment matched to the modern-day advances in communications technology, the organization will no longer want to searching for to weaken the gadgets that people, groups, and government groups international rely upon to securely speak, transact commercial enterprise, and transmit touchy records.
The technology essay grew out of testimony Landau delivered in March earlier than a hearing of the U.S. House Judiciary Committee [Landau's testimony begins at 3:35:44]. In that discussion board, Landau countered the argument of FBI director James Comey that encrypted gadgets (which Comey has characterized as "warrant-proof areas") prevent the enterprise's ability to analyze crimes. Landau says the FBI is looking at smartphones thru a 20th century lens, a attitude this is especially troubling given the ability for smartphones to either update or augment static passwords as authenticators for logging into computers or accessing on-line debts.
Login credentials are a desired target of hackers, Landau says, considering they could offer access to treasured statistics and leave laptop structures open to assault. Increasingly more, corporations like facebook and Google and even some excessive-level authorities corporations are using smartphones as authenticators to make on line assets extensively more tough to breach. However for cellphone authentication to be powerful, smartphones, themselves, have to be comfortable.
Landau says the FBI's efforts to weaken telephone security replicate its previous approach to investigating crime and its inadequate sources for conducting current cyber investigations. Landau argues that the organisation needs to invest in constructing up its own "21st century investigative savvy," which include growing "an investigative middle with sellers with deep technical understanding of current communications technology and computer technology."
With the ability to expand new surveillance methods and equipment matched to the modern-day advances in communications technology, the organization will no longer want to searching for to weaken the gadgets that people, groups, and government groups international rely upon to securely speak, transact commercial enterprise, and transmit touchy records.
World's first 1,000-processor chip
A microchip containing 1,000 independent programmable processors has been designed by a team at the University of California, Davis, Department of Electrical and Computer Engineering. The energy-efficient "KiloCore" chip has a maximum computation rate of 1.78 trillion instructions per second and contains 621 million transistors. The KiloCore was presented at the 2016 Symposium on VLSI Technology and Circuits in Honolulu on June 16.
"To the best of our knowledge, it is the world's first 1,000-processor chip and it is the highest clock-rate processor ever designed in a university," said Bevan Baas, professor of electrical and computer engineering, who led the team that designed the chip architecture. While other multiple-processor chips have been created, none exceed about 300 processors, according to an analysis by Baas' team. Most were created for research purposes and few are sold commercially. The KiloCore chip was fabricated by IBM using their 32 nm CMOS technology.
Each processor core can run its own small program independently of the others, which is a fundamentally more flexible approach than so-called Single-Instruction-Multiple-Data approaches utilized by processors such as GPUs; the idea is to break an application up into many small pieces, each of which can run in parallel on different processors, enabling high throughput with lower energy use, Baas said.
Because each processor is independently clocked, it can shut itself down to further save energy when not needed, said graduate student Brent Bohnenstiehl, who developed the principal architecture. Cores operate at an average maximum clock frequency of 1.78 GHz, and they transfer data directly to each other rather than using a pooled memory area that can become a bottleneck for data.
The chip is the most energy-efficient "many-core" processor ever reported, Baas said. For example, the 1,000 processors can execute 115 billion instructions per second while dissipating only 0.7 Watts, low enough to be powered by a single AA battery. The KiloCore chip executes instructions more than 100 times more efficiently than a modern laptop processor.
Applications already developed for the chip include wireless coding/decoding, video processing, encryption, and others involving large amounts of parallel data such as scientific data applications and datacenter record processing.
The team has completed a compiler and automatic program mapping tools for use in programming the chip.
"To the best of our knowledge, it is the world's first 1,000-processor chip and it is the highest clock-rate processor ever designed in a university," said Bevan Baas, professor of electrical and computer engineering, who led the team that designed the chip architecture. While other multiple-processor chips have been created, none exceed about 300 processors, according to an analysis by Baas' team. Most were created for research purposes and few are sold commercially. The KiloCore chip was fabricated by IBM using their 32 nm CMOS technology.
Each processor core can run its own small program independently of the others, which is a fundamentally more flexible approach than so-called Single-Instruction-Multiple-Data approaches utilized by processors such as GPUs; the idea is to break an application up into many small pieces, each of which can run in parallel on different processors, enabling high throughput with lower energy use, Baas said.
Because each processor is independently clocked, it can shut itself down to further save energy when not needed, said graduate student Brent Bohnenstiehl, who developed the principal architecture. Cores operate at an average maximum clock frequency of 1.78 GHz, and they transfer data directly to each other rather than using a pooled memory area that can become a bottleneck for data.
The chip is the most energy-efficient "many-core" processor ever reported, Baas said. For example, the 1,000 processors can execute 115 billion instructions per second while dissipating only 0.7 Watts, low enough to be powered by a single AA battery. The KiloCore chip executes instructions more than 100 times more efficiently than a modern laptop processor.
Applications already developed for the chip include wireless coding/decoding, video processing, encryption, and others involving large amounts of parallel data such as scientific data applications and datacenter record processing.
The team has completed a compiler and automatic program mapping tools for use in programming the chip.
Rice University researchers have just the thing for the age of information overload: an app that sees all and remembers only what it should.
RedEye, new generation from Rice's efficient Computing institution that turned into unveiled nowadays at the global Symposium on computer structure (ISCA 2016) convention in Seoul, South Korea, may want to offer computers with continuous imaginative and prescient -- a primary step closer to allowing the gadgets to peer what their proprietors see and preserve tune of what they need to consider.
"The concept is to allow our computers to help us by using displaying them what we see all through the day," said institution chief Lin Zhong, professor of electrical and pc engineering at Rice and the co-creator of a new observe about RedEye. "it might be like having a personal assistant who can keep in mind someone you met, in which you met them, what they instructed you and different particular records like costs, dates and instances."
Zhong stated RedEye is an example of the sort of generation the computing enterprise is developing for use with wearable, fingers-loose, constantly-on devices which might be designed to assist humans in their day by day lives. The fashion, that's every now and then known as "pervasive computing" or "ambient intelligence," centers on technology which can understand or even count on what a person desires and provide it right away.
"The pervasive-computing movement foresees gadgets which might be non-public assistants, which assist us in huge and small methods at almost each second of our lives," Zhong said. "however a key enabler of this era is equipping our gadgets to look what we see and hear what we hear. Scent, flavor and touch might also come later, however vision and sound might be the initial sensory inputs."
Zhong said the bottleneck for non-stop vision is power intake due to the fact modern-day best telephone cameras, although particularly cheaper, are battery killers, in particular when they're processing actual-time video.
Zhong and former Rice graduate scholar Robert LiKamWa started reading the problem inside the summer of 2012 once they worked at Microsoft studies's Mobility and Networking studies institution in Redmond, Wash., in collaboration with institution director and Microsoft prominent Scientist Victor Bahl. LiKamWa stated the crew measured the strength profiles of commercially to be had, off-the-shelf photograph sensors and determined that current generation would need to be approximately 100 instances greater power-efficient for continuous vision to grow to be commercially possible. This became the incentive behind LiKamWa's doctoral thesis, which pursues software program and hardware aid for green laptop imaginative and prescient.
In an award-triumphing paper a year later, LiKamWa, Zhong, Bahl and colleagues showed they may enhance the power consumption of off-the-shelf picture sensors tenfold really thru software optimization.
"RedEye grew from that because we nevertheless wished another tenfold development in electricity performance, and we knew we would need to redesign both the hardware and software to acquire that," LiKamWa stated.
He stated the power bottleneck changed into the conversion of snap shots from analog to digital layout.
"actual-world alerts are analog, and converting them to digital alerts is luxurious in terms of strength," he said. "there's a physical restriction to how a good deal energy financial savings you could obtain for that conversion. We decided a better alternative might be to research the alerts whilst they have been nevertheless analog."
the main drawback of processing analog alerts -- and the purpose virtual conversion is the standard first step for most photo-processing systems today -- is that analog signals are inherently noisy, LiKamWa said. To make RedEye appealing to tool makers, the team had to reveal that it could reliably interpret analog indicators.
"We wanted to show that we should inform a cat from a canine, as an instance, or a table from a chair," he stated.
Rice graduate pupil Yunhui Hou and undergraduates Mia Polansky and Yuan Gao have been also individuals of the group, which decided to assault the hassle using a combination of the modern techniques from gadget gaining knowledge of, machine architecture and circuit layout. In the case of device mastering, RedEye makes use of a way called a "convolutional neural community," an algorithmic structure inspired by way of the company of the animal visible cortex.
LiKamWa said Hou added new ideas related to gadget structure circuit layout primarily based on preceding enjoy operating with specialized processors referred to as analog-to-virtual converters at Hong Kong university of technology and generation.
"We bounced thoughts off one another concerning architecture and circuit design, and we commenced to recognize the possibilities for doing early processing a good way to accumulate key facts in the analog area," LiKamWa stated.
"traditional structures extract a whole image thru the analog-to-digital converter and conduct image processing at the virtual file," he said. "If you can shift that processing into the analog domain, then you will have a much smaller facts bandwidth that you need to ship through that ADC bottleneck."
LiKamWa stated convolutional neural networks are the cutting-edge way to perform item recognition, and the mixture of these techniques with analog-area processing offers a few unique privateness blessings for RedEye.
"The upshot is that we will recognize objects -- like cats, puppies, keys, telephones, computer systems, faces, and so on. -- without clearly searching at the photograph itself," he stated. "we are simply looking on the analog output from the imaginative and prescient sensor. We have an know-how of what is there while not having an real picture. This will increase power efficiency due to the fact we are able to select to digitize most effective the images which can be well worth expending power to create. It also can also help with privateness implications due to the fact we can define a set of policies wherein the system will mechanically discard the uncooked image after it has completed processing. That picture could by no means be recoverable. So, if there are instances, locations or particular items a person doesn't want to file -- and doesn't need the gadget to don't forget -- we have to layout mechanisms to make sure that photographs of those matters are in no way created inside the first area."
Zhong stated studies on RedEye is ongoing. He said the crew is running on a circuit format for the RedEye structure that can be used to test for layout troubles, factor mismatch, signal crosstalk and different hardware troubles. Work is likewise ongoing to enhance performance in low-mild environments and other settings with low signal-to-noise ratios, he said.
"The concept is to allow our computers to help us by using displaying them what we see all through the day," said institution chief Lin Zhong, professor of electrical and pc engineering at Rice and the co-creator of a new observe about RedEye. "it might be like having a personal assistant who can keep in mind someone you met, in which you met them, what they instructed you and different particular records like costs, dates and instances."
Zhong stated RedEye is an example of the sort of generation the computing enterprise is developing for use with wearable, fingers-loose, constantly-on devices which might be designed to assist humans in their day by day lives. The fashion, that's every now and then known as "pervasive computing" or "ambient intelligence," centers on technology which can understand or even count on what a person desires and provide it right away.
"The pervasive-computing movement foresees gadgets which might be non-public assistants, which assist us in huge and small methods at almost each second of our lives," Zhong said. "however a key enabler of this era is equipping our gadgets to look what we see and hear what we hear. Scent, flavor and touch might also come later, however vision and sound might be the initial sensory inputs."
Zhong said the bottleneck for non-stop vision is power intake due to the fact modern-day best telephone cameras, although particularly cheaper, are battery killers, in particular when they're processing actual-time video.
Zhong and former Rice graduate scholar Robert LiKamWa started reading the problem inside the summer of 2012 once they worked at Microsoft studies's Mobility and Networking studies institution in Redmond, Wash., in collaboration with institution director and Microsoft prominent Scientist Victor Bahl. LiKamWa stated the crew measured the strength profiles of commercially to be had, off-the-shelf photograph sensors and determined that current generation would need to be approximately 100 instances greater power-efficient for continuous vision to grow to be commercially possible. This became the incentive behind LiKamWa's doctoral thesis, which pursues software program and hardware aid for green laptop imaginative and prescient.
In an award-triumphing paper a year later, LiKamWa, Zhong, Bahl and colleagues showed they may enhance the power consumption of off-the-shelf picture sensors tenfold really thru software optimization.
"RedEye grew from that because we nevertheless wished another tenfold development in electricity performance, and we knew we would need to redesign both the hardware and software to acquire that," LiKamWa stated.
He stated the power bottleneck changed into the conversion of snap shots from analog to digital layout.
"actual-world alerts are analog, and converting them to digital alerts is luxurious in terms of strength," he said. "there's a physical restriction to how a good deal energy financial savings you could obtain for that conversion. We decided a better alternative might be to research the alerts whilst they have been nevertheless analog."
the main drawback of processing analog alerts -- and the purpose virtual conversion is the standard first step for most photo-processing systems today -- is that analog signals are inherently noisy, LiKamWa said. To make RedEye appealing to tool makers, the team had to reveal that it could reliably interpret analog indicators.
"We wanted to show that we should inform a cat from a canine, as an instance, or a table from a chair," he stated.
Rice graduate pupil Yunhui Hou and undergraduates Mia Polansky and Yuan Gao have been also individuals of the group, which decided to assault the hassle using a combination of the modern techniques from gadget gaining knowledge of, machine architecture and circuit layout. In the case of device mastering, RedEye makes use of a way called a "convolutional neural community," an algorithmic structure inspired by way of the company of the animal visible cortex.
LiKamWa said Hou added new ideas related to gadget structure circuit layout primarily based on preceding enjoy operating with specialized processors referred to as analog-to-virtual converters at Hong Kong university of technology and generation.
"We bounced thoughts off one another concerning architecture and circuit design, and we commenced to recognize the possibilities for doing early processing a good way to accumulate key facts in the analog area," LiKamWa stated.
"traditional structures extract a whole image thru the analog-to-digital converter and conduct image processing at the virtual file," he said. "If you can shift that processing into the analog domain, then you will have a much smaller facts bandwidth that you need to ship through that ADC bottleneck."
LiKamWa stated convolutional neural networks are the cutting-edge way to perform item recognition, and the mixture of these techniques with analog-area processing offers a few unique privateness blessings for RedEye.
"The upshot is that we will recognize objects -- like cats, puppies, keys, telephones, computer systems, faces, and so on. -- without clearly searching at the photograph itself," he stated. "we are simply looking on the analog output from the imaginative and prescient sensor. We have an know-how of what is there while not having an real picture. This will increase power efficiency due to the fact we are able to select to digitize most effective the images which can be well worth expending power to create. It also can also help with privateness implications due to the fact we can define a set of policies wherein the system will mechanically discard the uncooked image after it has completed processing. That picture could by no means be recoverable. So, if there are instances, locations or particular items a person doesn't want to file -- and doesn't need the gadget to don't forget -- we have to layout mechanisms to make sure that photographs of those matters are in no way created inside the first area."
Zhong stated studies on RedEye is ongoing. He said the crew is running on a circuit format for the RedEye structure that can be used to test for layout troubles, factor mismatch, signal crosstalk and different hardware troubles. Work is likewise ongoing to enhance performance in low-mild environments and other settings with low signal-to-noise ratios, he said.
Saturday, 18 June 2016
Tuesday, 14 June 2016
Test Smarter, Not Harder
Creation: Complexity leads to Futility
consider we are growing a web page for customizing a pc buy.In case you've by no means configured a pc on-line earlier than, test Dell's "customize it" web page for an entry degree laptop. The internet page offers 11 inquiries to the consumer which have from two to seven responses each. The person has to pick out from two alternatives in the first control, within the second, and so on. The person has seven feasible picks for the last manage.
When we observe all of the controls combined, the consumer has to make (2,2,2,2,2,3,2,2,three,4,7) choices. That is a easy configuration hassle. The number of possible laptop configurations that would be asked with the aid of the user is the product of all the choices. On this quite simple web page, there are 32,256 possibilities. On the time of this writing, the web page for customizing Dell's excessive-give up pc has a not multiple set of controls, with more choices in each manage: (three,3,three,2,four,2,4,2,2,three,7,four,four). The person of this page can request any of two,322,432 specific computer configurations! If Dell have been to feature one extra manage supplying five one of a kind picks, there might be over ten million possible combos!
Growing a test suite that tries all million mixtures for a excessive end computer can be automatic, however despite the fact that each check took one tenth of 2d to run, the suite could take over sixty four hours! Dell adjustments their product offerings in less time than that.
However, if we use a server farm to distribute the test suite across ten machines we may want to run it in approximately 6 hours. Ignoring the truth that we would be running this form of take a look at for every customization page Dell has, 6 hours isn't always unreasonable.
Validating the two million outcomes is where the truly massive trouble is awaiting us. We can not rely upon people to manually validate all of the outputs–it's miles just too costly. We may want to write some other application, which inspects the ones outputs and evaluates them the usage of a policies-primarily based machine ("If the user selects 1GB of RAM, then the configuration should encompass 1GB of RAM" and "The rate for the final gadget must be adjusted with the aid of the charge-effect of 1GB of RAM relative to the base gadget price for this model.")
There are some properly rules-based validation gear accessible, however they are either custom software, or so standard as to require a large funding to make them applicable to a particular purchaser. With a policies-based totally inspection system, we've got the cost of retaining the regulations. The validation guidelines are going to must be up to date often, as Dell changes the manner they role, configure, and charge their laptops.
Due to the fact we are not Dell, we do not have the size (billions of bucks of sales) to justify this stage of investment. The lowest line for us is that we can not have the funds for to exhaustively take a look at each mixture. Dell's shareholders require them to develop their commercial enterprise, and these configuration pages are the vehicle by using which Dell generates billions of greenbacks in sales. They've to test it. The cost of mistakes (crashes, misplaced income, mis-priced objects, invalid combinations of functions) is simply too high. With this degree of risk, the price of no longer checking out (the fee of bad nice) is extremely high.
We cannot find the money for to test It
i was capable of attend a education consultation with Kent Beck some years ago. I used to be additionally venerated a good way to enjoy a big steak and some cold beer with him that night after the training. Whilst requested how he responds to people who complain about the cost of pleasant, Kent informed us he has a totally easy answer: "If testing costs extra than no longer trying out then don't do it."I agree. There are few situations where the fee of first-class exceeds the value of poor nice. These are situations in which the wanted infrastructure, take a look at-development time, and protection costs outweigh the predicted fee of getting a trojan horse. (The "anticipated cost" is the probability (as a percent) of the worm manifesting inside the area, increased by way of the cost of managing the bug.)
The strategies described in this newsletter are designed to reduce the cost of high-quality, to make it even less possibly that "now not trying out" is the satisfactory answer.
Just check the whole thing, it is computerized!
Two "solutions" that we ought to consider are to test not anything and to check the whole thing. We would don't forget trying out not anything if we cannot have the funds for to check the software program. While humans do not appreciate the complexities of trying out or the restrictions of computerized trying out, they may be inclined to want to "test the entirety." testing the entirety is tons simpler stated than completed.Have you ever been on a assignment wherein the manager stated some thing like, "I call for complete testing coverage of the software program. Our policy is 0 tolerance. We may not have awful excellent on my watch."?
What we conflict with right here is the lack of appreciation for what it means to have "full insurance" or another guarantee of a particular defect rate.
There are no absolutes in a sufficiently complex gadget–but this is ok. There are records, self assurance tiers, and risk-management plans. As engineers and software developers, our brains are wired to address the predicted, likely, and in all likelihood futures. We need to help our less-technical brethren recognize those standards–or as a minimum placed them in attitude.
We may additionally get requested, "Why can't we simply take a look at each combination of inputs to make certain we get the proper outputs? We have an automated take a look at suite–simply fill it up and run it!"
We want to face up to the urge to respond through saying, "Monkeys with typewriters can have completed the works of Shakespeare before we end a unmarried run of our take a look at suite!"
Solving the problem
There are a lot of programs that have hundreds of thousands or billons of combos of inputs. They've automated trying out. They've solutions to this trouble. We just finished discussing how impractical it is to check exhaustively, so how do corporations take a look at their complex software?Within the relaxation of the object, we are able to explore the following methods to fixing the trouble.
Random sampling
Pairwise testing
N-wise checking out
we will also discover the effect that converting the order of operations has on our testing method, and the techniques for testing while the series topics.
Monday, 13 June 2016
Subscribe to:
Posts (Atom)