高效率RFID Middleware設計

Abstract

本研究探討一套高效率與多功能的RFID Middleware設計。所提出的研究機制，以EPC ALE(Application Level Event)Middleware為基礎，研究有關如何提高RFID應用系統讀取效率，減少網路頻寬及設計多功能應用模組等議題。Filter、Retransmission及Buffer Size Adjust等策略，可使整個RFID系統提高Tag之讀取速率約20%，並減少網路頻寬的負載及提高Reader之使用率。A worm is usually used to spread the exploit code to attack hosts in the Internet rapidly. Many worms use the encrypting techniques to hide themselves from the intrusion detection system (IDS), which decrease the network defense infrastructures dramatically. The traditional IDS use signatures of shellcode to detect worms, which are not able to detect the encrypted polymorphic worm.
For against the polymorphic worm, we need to study how the polymorphism could mutate themselves hide from the current detection mechanism. In this paper, we use the encryption mechanism and polymorphic decoder to test whether the well-known IDS systems, such as Snort, a signature-based IDS, could detect out penetration testing tool or not. We propose a scheme to mutate the shellcode of a worm, which could be executed normally on destination to evade the IDSs such as STRIDE or APE.
Finally, we use Sasser and Blaster worms as examples to inject into normal traffic in our experiment network, and compare the performance of our penetration testing tool and other IDSs, such as Snort and STRIDE. According to the emulation results, our tool could be successful possess the exploit code and evading the IDS to the end host above 90%.