Saturday, March 27, 2010

You and Social networks


Do you spend more and more time these days on one or more social networking sites like Facebook, Buzz and Twitter? Yep most of us are. But most of us don't think of the hackers, crackers, identity thieves, phishers, cyberstalkers whatever you call them also out there and have turned their attention to the big social sites. The threats are also getting increased in different faces. But most of us don't give much thought to how to defend themselves.

Most of the popular social networks like Facebook and Twitter etc. have been become attractive targets (honey pots) as the huge number of potential victims and the numbers are increasing exponentially. For Facebook it's around 400 million and I don't know exact figures for twitter.:)

Normally in each week we here at least one major attack against big social media sites. like New Twitter Phishing Attack: “You’re On Here?” [WARNING] or like Latest Facebook Scam: Phishers Hit Up "Friends" for Cash.

The main issue here is unknown parities are potential of getting direct access to your personal or sensitive information stored in your computer. They do not need to physically access to your information as these social networks are run on distributed machines.
Let's take an example from a particular social network. Some third party Facebook applications pull out private information to work correctly. These apps even can pull out your friend's info as well. So the potential victim is not only you but your friends as well. Most of those applications are like photo of the day, or some statements, jokes etc. First it asks for some thing like this.



If you allow it, then the risk is all on yours. I do not want you to get the wrong idea, Facebook applications for the most part are safe. Just like anything else on the Internet they can be exploited so it pays to be careful.

If a person that has evil intentions makes a Facebook app, they can now target all of the people who have allowed the application in their Facebook ecosystem and target them for identity theft. As those applications run different from the Facebook main servers, it's nearly impossible to validate the logic of the third party application. So the hackers may use the existing security wholes in the Facebook developer platform and attack the users. As well those social media sites also try to cover those security wholes as much as possible.

I feel user's common sense and the correct attitude towards the social networks are essential as well the technology can help to mitigate the potential risk.

Here are few tips any one can follow
  • Secure your passwords
  • Don't click here and there - The short URLs like "http://bit.ly/9OrLf4" which forward you to a page when you click. Problem is, there's no way to tell where those short URLs really lead without clicking on them.
  • Use a up-to-date browser
  • Read and judge the messages carefully - Sometimes the the site it-self provide some messages if there are potential threats to the user. But if the user does not read the message carefully the risk is all on the user.

Saturday, March 13, 2010

ICT in Sinhala/Tamil or English


Today I was preparing few presentation notes on ICT subject for O/L , A/L students and those for an upcoming ICT awareness seminar series to be held in some schools in rural areas, Sri Lanka. So obviously the content is supposed to be in Sinhala and Tamil medium. When I went through the Sinhala teachers' manual, all most all the content have been explained well, and the editors have done a great job. As well they have taken a great effort to use our own terms instead of English terms.

But what I felt was whether we will able to generate our own knowledge base at least a glossary in our own mother tongue, for a subject like ICT. For subjects like Chemistry, Physics which are more theoretical the case is different as we have our own scientific terms which were generated a long time back.

But for a subject like ICT, the field is changing rapidly, so the existing information get updated rapidly and new information, technologies pop-up like crazy. So it's quite impossible to generate our own terms, with the present pace of change.
It's a good move if the students are motivated to use English terms themselves rather force them to remember the Sinhala terms. Because after they leave the school, those Sinhala terms are not gonna be valid for them anymore.
 

Wednesday, March 10, 2010

Overall view of the Mooshabaya project


Here I have come up with the mind map of the overall view of our final year project Mooshabaya.



For the full-screen mode
 

Saturday, February 13, 2010

3 Idiots and Five Point Someone


I recently watched the Bollywood comedy movie 3 Idiots directed by Rajkumar Hirani. This movie is heartbreaking as well wonderfully entertaining when it comes to the story. Though the movie is said to be an adaptation from the novel "Five Point Someone – What not to do at IIT" by Chetan Bhagat, I feel the book is quite different from the movie. But you may find the book is also interesting, and you may have the same kind of experiences which appear in the book. Yeah, that's the beauty of this story.


The book can be found here.

Tuesday, February 9, 2010

Association Rule Mining with Extended Vertical Format Data Mining

I and my final year project team members at Department of Computer Science and Engineering, University of Moratuwa conducted a research on better alternative to the Apriori algorithm, and proving the efficiency enhancement by using a dataset. Under the supervision of Dr. Shehan Perera, we analyzed the Apriori algorithm, and came up with a better implementation which is supposed to be more efficient than its predecessors.

Current databases are very large sizes, reaching Tera-bytes and Peta-bytes, and the trend towards further increase. With this explosion of growth of databases of particular importance is the question of scalability of data mining techniques. Therefore, to find association rules require efficient scalable algorithms that allow solving the problem with in a reasonable time.
Large companies for decades accumulated data on their customers, suppliers, products and services. Due to high rate of development of e-commerce working in Web start-ups can turn into a huge enterprise in a matter of months, rather than something those years. And, as a consequence, will grow rapidly and their databases. Data mining, which is also called knowledge discovery in databases provides organizations with the tools developed to analyze the large collection of information to find trends, patterns and relationships that can help in making strategic decisions.

Traditionally, that the algorithms of data analysis assumed that the input database containing a relatively small number of records. However, the size of modern databases is too large, which is why they can not be fully deployed in the main memory. Extracting data fro m your hard drive is considerably slower access to data located in memory. Therefore, to methods of data mining used to work with very large databases, to become effective, they must possess a significant level of scalability. The algorithm is called scalable, if sustained capacity of main memory with an increase in th e number of records in the input database, its execution time increases linearly.

Recently, researchers have focused their efforts on the study of scalable algorithms for data mining in very large data sets. Here it's described an efficient and scalable frequent item-set mining method with Apriori algorithm.

Apriori algorithm is proposed for mining frequent item sets for Boolean association rules. It operates on databases having transactions to learn the association rules. Apriori algorithm is a base algorithm proposed by R. Agrawal and R. Srikant in 1994, on which many researches are done, and improvements are suggested for the general case as well as a specific subset of the applicable data. Due to the huge amount of data that is mined in the present applications, even a small performance gain on the algorithm will result in a considerable amount of throughput gain. Some enhancements to Apriori algorithm sacrifice the accuracy for a better response time. Sampling is a simplest example, where accuracy is lost in favor of performance gain.

Hash-based technique, Transaction reduction, Partitioning, Dynamic itemset counting, and multilevel and multidimensional association rules are some of the other common enhancements proposed to improve the efficiency of Apriori algorithm.

Apriori algorithm generates candidate sets and tests them to find the frequent itemsets, significantly reducing the size of candidate sets. Algorithms such as Frequent-pattern growth (FP-Growth) mine frequent itemsets without candidate generation. Both the algorithm sets have their own advantages and disadvantages. Many hybrid algorithms have been proposed and still researched to suit the general case, or mostly a particular case specialized for a given dataset.


Related articles - Project proposal

Saturday, February 6, 2010

Happy new year Sri Lanka!


For the past four years, I usually spent the new year's eve at my boarding place with my colleagues as we get ready for exams in the upcoming month of January. (Though it's not official, January seems to be a month for the final semester exams in my university :)).
Though we were away from our homes, somehow we got the chance to celebrate the new year with few of traditional new year foods at our boarding place.


Normally for Sri Lanka , the new year falls on April 13th or 14th every year. Food is the essential part of New Year festivities in Sri Lanka. Sinhalese food is very rich in nutrition. They prepare sweet meats such as mung kavum, konda kavum and unduvel. There is also an old tradition of preparing Kiri Bhath (milk rice) with rice.
Even though Sri Lankans also celebrates new year's day on January 1st as well.
 

Enterprise mashups powered solutions for banking services


I came across an article about a real world implementation of mashup technology in banking services. Here it explains how enterprise mashups bridge the information gap in financial services.