Yanjun Zuo

University of North Dakota

Author Statistics

Papers

Citation

H-Index

i-10 index

Research Trends

Author Order

Document Type

Co-Authors

Brajendra Panda

University of Arkansas at Fayetteville

Wen‐Chen Hu

University of North Dakota

Jigang Liu

Metropolitan State University

Suhas Lande

University of North Dakota

Naima Kaabouch

University of North Dakota

Timothy P. O’Keefe

University of North Dakota

Malvika Pimple

Visvesvaraya National Institute of Technology

Hung‐Jen Yang

Min Sheng General Hospital

Long Qi

Chang'an University

Lei Chen

Sichuan University

Cooperative Institutions

University of North Dakota

South China Agricultural University

Key Laboratory of Guangdong Province

Metropolitan State University

Sun Yat-sen University

Xi'an University of Science and Technology

National Yang Ming Chiao Tung University

University of Florida

Chang'an University

University of California, San Diego

Author Statistics

Papers

Citation

H-Index

i-10 index

Research Field

Design of Rotary Root Stubble Digging Machine Based on Solidworks

IFIP advances in information and communication technology (2011)

Xinglong Liao Xu Ma Yanjun Zuo

Digging

Parametric model

Parametric design

10.1007/978-3-642-18333-1_63

Cite

Citations (2)

Adaptive Mobile Web Browsing Using Web Mining Technologies

IGI Global eBooks (2009)

Wen‐Chen Hu Yanjun Zuo Lei Chen Chyuan-Huei Thomas Yang

Using mobile handheld devices such as smart cellular phones and personal digital assistants (PDAs) to browse the mobile Internet is a trend of Web browsing. However, the small screens of handheld devices and slow mobile data transmission make the mobile Web browsing awkward. This research applies Web usage mining technologies to adaptive Web viewing for handheld devices. Web usage mining is the application of data mining techniques to the usage logs of large Web data repositories in order to produce results that can be applied to many practical subjects, such as improving Web sites/pages. A Web usage mining system must be able to perform five major functions: (i) usage data gathering, (ii) data preparation, (iii) navigation pattern discovery, (iv) pattern analysis and visualization, and (v) pattern applications. This approach improves the readability and download speed of mobile Web pages.

10.4018/978-1-60566-024-0.ch010

Cite

Citations (0)

Data labeling for integrity in SCADA systems

Yanjun Zuo

Supervisory Control and Data Acquisition (SCADA) systems attain important data for critical infrastructure monitoring and control. The data is also used by various high level applications in automation engineering, decision support, operation planning and scheduling, and measurement and accounting. Due to the increasing security threats and system failures, SCADA data may be compromised, corrupted, or produced by malfunctioned devices/applications. Ensuring a high level of data integrity is critical for the operations of SCADA systems and the supported business functions. In this paper, a data labeling approach is proposed to ensure data integrity in SCADA systems. Essentially, a label records the component information of a data item as well as how the data is generated. This information is used to assess how damage to a component data could result in damage to compound data items and, more importantly, how to detect such damage and correct any affected data. For any compromised data that has been recovered, its label must be updated, called relabeling. We define relabeling strategies and communication models to propagate component updates to all the affected data items to ensure that they can be corrected, thus to maintain data integrity. To our best knowledge, our work is the first of its kind to specifically address data integrity issues in SCADA systems.

SCADA

Data integrity

Component (thermodynamics)

10.1109/icis.2014.6912117

Cite

Citations (0)

Analyzing the Vulnerabilities in GWT Code and Applications

Dave Larson Jigang Liu Yanjun Zuo

The Google Web Toolkit (GWT) is a Java based toolkit for creating client-side Web applications by compiling Java code into Java Script. It also provides a mechanism for asynchronous calls to a Web server. This paper will examine GWT to discover APIs in GWT that may be vulnerable to Web application attacks, such as XSS and XSRF, and then analyze the vulnerabilities based on the cases provided in open source GWT code and applications. The data collected from the source code analysis will provide an indication of the extent of vulnerabilities in GWT and difficulties in securing GWT applications.

Cross-Site Scripting

Code (set theory)

Secure coding

10.1109/candar.2014.115

Cite

Citations (0)

Survivable RFID Systems: Issues, Challenges, and Techniques

IEEE Transactions on Systems Man and Cybernetics Part C (Applications and Reviews) (2010)

Yanjun Zuo

Radio frequency identification (RFID) technique has been applied in high-security and high-integrity settings such as national defense, healthcare, and citizen identification. A tiny RFID tag is attached to a mobile object, which can be scanned and recognized by a reader. RFID offers opportunities for real-time item identification and inventory tracking. For applications using resource-restricted RFID tags and mobile hand-held readers, however, various risks could threaten their abilities to provide essential services to users. High mobility of the RFID system components and the open nature make an RFID system vulnerable to various attacks. Currently, although some techniques exist that might help improve survivability; there is still no complete proposal on survivability of an RFID system despite its growing popularity and importance in many applications. In this paper, we study survivability issues related to RFID systems and survey existing techniques whose usability and adaptability toward survivability would be beneficial. Survivability is defined as the ability of a system to continuously provide essential services to support the system's mission even in the presence of malicious attacks or system failures. We discuss the issues and challenges in developing survivable RFID systems and propose research directions.

Survivability

Adaptability

Identification

Popularity

10.1109/tsmcc.2010.2043949

Cite

Citations (93)

A Technological Perspective of Mobile and Electronic Commerce Systems

Advances in electronic commerce (AEC) book series/Advances in electronic commerce series (2010)

Wen‐Chen Hu Yanjun Zuo Naima Kaabouch Lei Chen

The emergence of wireless and mobile networks has made possible the introduction of electronic commerce to a new application and research subject: mobile commerce. Mobile commerce is a promising trend of commerce because Internet-enabled smartphones such as iPhones are becoming very popular these days. People use smartphones to perform daily tasks like browsing the mobile Internet and making phone calls anytime and anywhere. However, understanding or constructing a mobile or an electronic commerce system is not easy because the system involves a wide variety of disciplines and technologies and the technologies are constantly changed. To facilitate understanding and constructing such a system, this chapter divides the system into six components: (i) applications, (ii) client devices or computers, (iii) mobile middleware, (iv) wireless networks, (v) wired networks, and (vi) host computers. Elements in these components specifically related to the subject are described in detail and lists of current technologies for component construction are discussed.

Mobile phone

10.4018/978-1-60566-964-9.ch002

Cite

Citations (3)

A Framework of Survivability Requirement Specification for Critical Information Systems

Yanjun Zuo

Survivability represents a system's ability to provide essential services in the presence of attacks and failures, and to recover full services in a timely manner when the environment improves. For many critical systems used in national defense, healthcare, and utility infrastructure, survivability is a key requirement. Currently, there is a lack of research on systematic reasoning and specification of the requirements for system survivability from a user's perspective. In this paper, we present methods that enable users to specify measureable and certifiable survivability requirements and represent their survivability policy. A survivability decision model is proposed which complies with both survivability practical evidence and theoretical models. From the perspective of system acquisition and engineering, survivability requirement is the important first step in survivability specification, compliance formulation, and proof verification. A military Command and Control (C-2) system is used throughout the paper as an illustrative example for user's survivability requirement specification and representation.

Survivability

10.1109/hicss.2010.13

Cite

Citations (18)

Survivability Enhancing Techniques for RFID Systems

International Journal of Handheld Computing Research (2011)

Yanjun Zuo

Radio Frequency Identification (RFID) has been applied in various high security and high integrity settings. As an important ubiquitous technique, RFID offers opportunities for real-time item tracking, object identification, and inventory management. However, due to the high distribution and vulnerability of its components, an RFID system is subject to various threats which could affect the system’s abilities to provide essential services to users. Although there have been intensive studies on RFID security and privacy, there is still no complete solution to RFID survivability. In this paper, the authors classify the RFID security techniques that could be used to enhance an RFID system’s survivability from three aspects, i.e., resilience, robustness and fault tolerance, damage assessment and recovery. A threat model is presented, which can help users identify devastating attacks on an RFID system. An RFID system must be empowered with strong protection to withstand those attacks and provide essential functions to users.

Survivability

Robustness

Vulnerability

Resilience

Identification

Threat model

10.4018/jhcr.2011010102

Cite

Citations (1)

A Logical Framework of Proof-Carrying Survivability

Yanjun Zuo Suhas Lande

Users often need to acquire external software systems or link other software components to their existing systems. It is crucial that those software objects are trustworthy and will not compromise the survivability of the existing systems, particularly for those systems used to support mission-critical services in national defense, healthcare, and financial services. This paper presents a logical framework for proof-carrying survivability: (1) a system user publishes their survivability requirement policy for the system in which they are interested, (2) a system provider collects verification evidence from third-party evaluators, formulates survivability compliance, and compiles a proof to show that their system satisfies the user's requirements, and finally, (3) the system user verifies that the proof is valid. If so, the system can be safely acquired or linked without sacrificing the survivability of the existing system. We specify an application specific logic to facilitate proof compliance and verification. We implemented the framework to show that the proof can be generated automatically by a prover program and verified mechanically in real time by a trustworthy checker program.

Survivability

Proof of concept

Trustworthiness

10.1109/trustcom.2011.61

Cite

Citations (5)

A HOLISTIC APPROACH FOR SECURITY REQUIREMENT SPECIFICATION FOR LOW-COST, DISTRIBUTED UBIQUITOUS SYSTEMS

International Conference on Information Systems (2010)

Yanjun Zuo

The class of low-cost, distributed ubiquitous systems represents a computing mode where a system has small, inexpensive networked processing devices, distributed at all scales throughout business activities and everyday life. The unique features of such a class of ubiquitous systems make the security analysis different from that for the centralized computing paradigms. This paper presents a holistic approach for security requirement analysis for low cost, distributed ubiquitous systems. Rigorous security analysis needs both quantitative and qualitative approaches to produce the holistic view and the robust data regarding the security features that a system must have in order to meet users’ security expectations. Our framework can assist system administrators to specify key security properties for a low-cost, distributed ubiquitous system and to define the specific security requirements for such a system. We applied Bayesian network and stochastic process algebra to incorporate probabilistic analysis to the framework.

Security Testing

Source

Cite

Citations (1)