Sunday, January 27, 2013

ISO 15926 - The Semantic Web for Process Industries

I recently discovered a standard which uses the semantic web for process industries. It is ISO 15926 <1>. Apparently it has been in development for awhile, since the late eighties <2>. It is self-described as the "Semantic Web for Engineering" at its official website <3>, <4>. A brief introduction may be found here <5>. The iRINGTools Software was created "to provide users with a deployable implementation of ISO 15926 services" <6>. Antoly Levenchuck apparently is an expert in the area. He started a blog <7>, and is also the president of the TechInvestLab consulting firm <8>, <9>.

I first learned about ISO 15926 from a presentation <10> by another expert named Adrian Laud who works for Noumenon Consulting Limited <11>. He gave this presentation at the Seminar on Industrial Information Management at VTT in Espoo, Finland <12>.

An overview of some implementations of ISO 15926 is available on the IRING Website <13> which includes work described by Levenchuck and Laud.


<1> http://en.wikipedia.org/wiki/ISO_15926

<2> http://www.infowebml.ws/intro/paper.htm

<3> http://15926.org/index.php

<4> http://www.infowebml.ws/

<5> http://www.infowebml.ws/intro/introduction.htm

<6> http://iringug.org/wiki/index.php?title=IRINGTools

<7> http://levenchuk.com/

<8> http://iringug.org/wiki/index.php?title=TechInvestLab

<9> http://techinvestlab.ru/techinvestlab_en

<10> http://www.ththry.org/datafiles/userfiles/File/THTH_Spring_Seminar_2010_Laud_Proteus.pdf

<11> http://www.noumenon.co.uk/

<12> https://www.simantics.org/simantics/events/the-spring-seminar-of-the-thth-association-and-the-codes-project

<13> http://iringug.org/wiki/index.php?title=IRING_Implementations

Hacking Resources Originally Posted on the WebPayments Mailing List

For what is worth, here are a few things I've found interesting, or would like to learn more about:

TCP/IP/HEX

IBM Red Book: http://www.redbooks.ibm.com/abstracts/gg243376.html
     Hexadecimal: http://en.wikipedia.org/wiki/Hexadecimal
   - Hex Editor: http://en.wikipedia.org/wiki/Hex_editor
   - Hex Dump: http://en.wikipedia.org/wiki/Hexdump


Patvera Maltego (network visualization used for social engineering)

http://www.paterva.com/web6/products/maltego.php


Social Engineering Risks (the weakest link)

- Social Engineering: http://en.wikipedia.org/wiki/Social_engineering_%28security%29
- Hacking the Human, Ian Mann


Rainbow Tables, Dictionary Attacks, Brute Force Attacks  (for Cracking)

https://en.wikipedia.org/wiki/Rainbow_table
https://en.wikipedia.org/wiki/Dictionary_attack
https://en.wikipedia.org/wiki/Brute_force_attack


Rainbow Series (Collection of infosec books)

- https://en.wikipedia.org/wiki/Rainbow_Series


BackTrack Linux (penetration testing distribution)

- http://www.backtrack-linux.org/


Wireshark (packet analyzer)

- http://www.wireshark.org/


Network Security Conferences, such as:

- DEFCON: https://www.defcon.org/   (curiously, no mention of the semantic web)
- Blackhat: http://www.blackhat.com/


Metasploit (platform for exploitation)

- MetaSploit http://www.metasploit.com/
- http://en.wikipedia.org/wiki/Metasploit_Project


SNORT (network intrusion detection and prevention)

- http://en.wikipedia.org/wiki/Snort_%28software%29


netstat (network statistics)

- https://en.wikipedia.org/wiki/Netstat


ISO/IEC 27000-series (standards for information security)

- https://en.wikipedia.org/wiki/ISO/IEC_27000-series


Books:

The Network Security Bible, Eric Cole

Joel Scambray et. al, Hacking Web Applications Exposed, 2nd Ed.


Magazines:

Phrack Magazine: http://phrack.org/

Thursday, January 3, 2013

What do Biohackers (a.k.a Citizen Scientists) believe?

Please see Meredith Patterson's, A Biopunk Manifesto https://www.youtube.com/watch?v=Thn7d7-jywU Perhaps they could benefit from a distributed economy?

Musings

R&D is decreasing in industry, and academia is thought of having the role of picking up the slack. Professors and Graduate students may know a lot in a particular area, but at the same time they may not be well aware of what is going on in other fields. There are cries for creative solutions and collaboration. There are real problems to solve. Citizen Scientists want to help, but face hurdles accessing published literature. Employers are looking for people to fit their positions, and job-seekers are looking for positions they qualify for. It seems a lot of this has to do with linking people with data.

Sunday, December 30, 2012

The Science of Insecurity

A shout to Meredith Patterson's talk, "The Science of Insecurity" at the Chaos Communication's Congress. I cannot say I truly understand what she is saying in this Youtube video, but this seems to be something to keep in mind. In my understanding, this seems to suggest avoiding anything but regular expressions to avoid weird machines (unexpected behavior due to an attacker).

Turtle Files and Trying to set up Sig.ma

So apparently turtle files are useful for configuration. Such files are used in Apache Fuseki as well as sig.ma. Here is Sig.ma's http://vocab.deri.ie/sigma#, and here is Joseki's (what was before Fuseki).

What's with this madness? Well, I'm trying to get sig.ma to search for .rdf files on my local machine. Szymon Danielczyk, the maintainer for sig.ma mentioned that sparql search and lookup providers needed to be configured to find them (see his post in Google groups here).

I'm guessing that I need something else besides Fuseki (if it indeed works with sig.ma), such as a regular search engine. Rather arbitrarily, I searched for Apache search engines on Google and I found Apache Solr.

I'm trying to follow the design of Sindice found in the developer section since Sindice is part of Sig.ma. I also found the metadata extractions link, and the Sindice API link particularly interesting. I may have to check out the paper on Sig.ma titled "Sig.ma: Live views on the Web of Data" found at: http://www.sciencedirect.com/science/article/pii/S1570826810000624. In light of being unsure, I may also check out the SPARQL tutorial as well as SOH - SPARQL over HTTP for Apache Jena. This should be a learning experience! http://vocab.deri.ie/sigma#

Saturday, December 29, 2012

Chat on SWIG

Thanks to a chat that I had online, I am now aware of OpenCyc, Falcons, and UMBEL. Actually, I may have heard of UMBEL before. In any case, UMBEL and OpenCyc are very broad ontologies. OpenCyc is by far the larger one. Falcons is a semantic web search engine. Thanks to the chat, I also found that the goodrelations ontology is useful when someone owns something. In addition, I also found that the UMBEL ontology describes charitable donations.