The Internet of Things (IoT) are small, sensing, network enabled computing devices which can extend smart behaviour into resource constrained domains. This thesis focus on evaluating the viability of Linux containers in relation to IoT devices. Three research questions are posed to investigate various aspects of this. (1) Can any guidelines and best practices be derived from creating a Linux container based security enhanced IoT platform? (2) Can the LiCShield project be extended to build dynamic, default deny seccomp configurations? (3) Are Linux containers viable on IoT platforms in regards to operational performance impact? To answer these questions, a literature review was conducted, research gaps identified and a research methodology selected. A Linux-based container platform was then created in which applications could be run. Experimentation was conducted on the platform and operational measurements collected. A number of interesting results was produced during the project. In relation to the first research question, it was discovered that the LXC templating code created could probably benefit other Linux container projects as well as the LXC project itself. Secondly, it was found that a robust, layered containerized security architecture could be created by utilizing basic container configurations and by drawing from best practices from LXC and docker. In relation to the second research question, a proof of concept system was created to profile and build dynamic, default deny seccomp configurations. Analysis of the system shows that the developed method is viable. In relation to the final research question; Container overhead with regards to CPU, memory, network I/O and storage was measured. In this project, there were no CPU overhead and only a slight performance decrease of 0.1 % on memory operations. With regards to network I/O, a speed decrease of 0.2 % was observed when a container received data and utilized NAT. On the other hand, while the container was sending data, a speed increase of 1.4 % was observed while the container was operating in bridge mode and an increase of 0.9 % was observed while utilizing NAT. Regarding storage overhead, a total of 508 KB base overhead was added to each container on creation. Due to these findings, the overhead containers introduce are considered negligible and thus deemed viable on IoT devices.

This dissertation explores the European Union’s (EU) European Neighbourhood Policy (ENP) as a technology of insecurity governance in order to better understand insecurity management practices of the EU bureaucracies and policy elites. The central argument of the project is that security communities are insecurity communities. Rather than trying to maintain a state of non-war, insecurity communities establish and further develop a constant productive field of insecurity management that aims to identify and govern threats and unease. The projects core contributions rest with the security community theory and the literature on the EU’s external governance literatures. Empirically, the dissertation focuses on the human mobility and transportation insecurity management practices of the EU in relation to the uses of e-Passports and intermodal containers.

Five formula methods and three numerical general methods for determining thermal process lethality were compared with a reference method to demonstrate their applicability to conduction heating foods in cylindrical containers. Hypothetical centerpoint temperature history curves for cans with height to diameter (H/D) ratios of 0.1 to 3.0 were generated for a range of processing conditions using computer simulation. A finite-difference model based on Teixeira et al. (1969b) was used as the basis of the simulation program. The delivered lethality to an organism characterized by Z=10C° was evaluated using each of the methods and compared to the lethality calculated using the reference method. For each of the test methods, simulation data were provided for one minute intervals, but for the reference method, data were provided for intervals of 0.05 min. Each of the selected formula methods was adapted to allow calculations to be done by computer without operator intervention. The most significant part of this adaptation was the development of a system that enabled the computer to select the linear portion of the heat penetration curve to facilitate calculation of the parameters f and j which are required by all of the formula methods. A method for handling large tables was also developed for use with some of the formula methods. For the general methods, the deviations from the reference method were greatest when the heating rate index (fh) and H/D were small and the unaccomplished temperature difference (g) was large. Whereas the the value of fh was the most significant factor affecting the accuracy of calculations done using the general method, it did not greatly affect the performance of the formula methods. The factors that most significantly influenced deviations between the formula methods and the reference method were H/D and g. The largest deviations in all cases occurred when g was large and H/D was close to unity. These errors were mostly on the "safe" side, but the energy use implications could be significant, especially for high retort temperature processes. / Land and Food Systems, Faculty of / Graduate

Successful deposition of thick copper coatings on low carbon steel is a challenge for the Cold Gas Dynamic Spray (CGDS) process if one is to avoid the use of helium as the process gas for the initial pre-coat layer. The issue stems from the presence of accumulated residual stresses, which causes delamination of the weakly bonded coating. Even after exploring different deposition parameters, several copper powders and various steel substrate preparations, copper coating delamination still occurs. The purpose of the current study is to produce copper coatings using only nitrogen as the process gas, while avoiding delamination of the deposited material. To this end, the current work focuses on the study of the effect of steel substrate temperature on particle deposition and adhesion processes. Steel substrates were heated to temperatures between 25°C and 600°C using induction heating and laser. Once the substrate reached the desired temperature, three different copper particle sizes were deposited using the CGDS process. Individual particle impact tests (wipe-tests) were performed to characterize bonded particles and craters from rebounded particles. Further analysis was performed by extracting particles from the surface to understand the effect of substrate temperature and particle size on the particle/substrate deformation and bonding processes. Mechanical adhesion prediction modeling at substrate preheated was also performed to obtain a greater understanding of the bonding mechanism. This prediction is in order to compare with the coating developed with a bond layer coating with helium as process gas and then build the rest of the coating with nitrogen. The experimental results show a significant trend as the substrate temperature increases, indicating proper conditions for enhanced adhesion.

Despite reasonable advances in public policies for housing in the last two decades, Brazil's current housing deficit is 5.6 million housing units. In São Paulo, Brazil's largest city, an estimated one fifth of the population of 17.5 million is currently living in inadequate housing conditions, like the "favelas" (Shanty Towns) (IBGE). The favelas' houses are made from scrap materials such as wood and metal sheeting, they do not have services such as sanitation, water or electricity, and the settlements are usually very overcrowded. The gigantic rate of illegal occupation of urban land has lead to disastrous consequences not only to the people who live in them, but to society as a whole, and to environment sustainability. At most countries, including Brazil, social housing has little to do with diversity and uniqueness of living. Social housing is influenced by functionalism and the economic cost effectiveness of the production process. Unfortunately, new urban areas are still being built using the same traditional ideas, which results largely in a very functionalistic approach of repetitiveness. One unit is repeated into a row of identical blocks. This concept is still used in most of the new Brazilian urban areas. As a result those areas become monotonous and repetitive, lacking identity and uniqueness. This Thesis objective is to expose the negative impacts of the present social housing mass production model, and then to analyze the possibilities of a coherent alternative to housing based on identity, sense of community and uniqueness present at the favelas, which could consistently improve the dwellings and the built environment. The main idea is to find inspiration on the Brazilian favelas to develop a new concept for social housing. In spite of all the physical, environmental, economic and social problems, favelas are an example of coherent housing production processes where dwellers autonomously decide about the design, building and use of their dwellings. They also are usually linked to a strong sense of community no longer found elsewhere. The pattern of these large areas shows an uncontrolled growth of residential units, which leads to a vast, seemingly chaotic, but yet very structured way of living. (Vanderfeesten) The analysis of this pattern of structures is a very strong foundation to develop a modular system of building blocks. The main idea is to create an urban housing environment consisting of modular blocks to provide a "favela-based" pattern. Multiple modules typologies will be designed in order to correspond to each family's needs. The arrangement of the modules will result in open walkways, small streets, larger open areas and a vast amount of balconies, roof terraces, parks, and gardens. As a result there is a great opportunity for social interaction. The main goal is to design a housing neighborhood where each house is unique in its structural composition, providing a way of living in which social interaction is promoted while maintaining each individuals identity through the uniqueness of each unit.

This is a bachelor thesis regarding the performance differences for hosting a web-application in a virtualized environment. We compare virtual machines against containers and observe their resource usage in categories such as CPU, RAM and disk storage in idle state and perform a range of computation experiments in which response times are measured from a series of request intervals. Response times are measured with the help of a web-application created in Python. The experiments are performed under both normal and stressed conditions to give a better indication in to which virtualized environment outperform the other during different scenarios. The results show that virtual machines and containers remained close to each other in response times during the first request interval, but the containers outperformed virtual machines in terms of resource usages while in idle state, they had less of a burden on the host computer. They were also significantly more rapid in terms of response times. This is also most noticeable during stressed conditions in which the virtual machine almost doubled its sluggishness.

It is accepted that defective structural designs are mostly caused by insufficient knowledge of input data, such as material properties or loading, rather than inadequate analysis or testing methods. In particular, loads associated with automotive and transport (trucks, trailers, containers, trains) structures are nontrivial to quantify. Such loads arise from stochastic and ill-defined processes such as driver/operator actions and structure-terrain interaction. The fundamental processes involved with the determination of input loading are measurements, surveys, simulation, estimation and calculation from field failures. These processes result in design criteria, code requirements and/or testing requirements. The present study deals with methods for the establishment of input loading for automotive and transport structures. It is attempted to generalise and unify new and existing techniques into a cohesive methodology. This is achieved by combining researched current theory and best practices, with lessons learned during application on, as well as new techniques developed for, a number of complex case studies, involving road tanker vehicles, light commercial vehicles, industrial vehicles, as well as tank containers. Apart from the above, the present study offers four individual, unique contributions. Firstly, two methods, widely applied by industry, namely the Remote Parameter Analysis (RPA) method, which entails deriving time domain dynamic loads by multiplying measured signals from remotely placed transducers with a unit-load static finite element based transfer matrix, as well as the Modal Superposition method, are combined to establish a methodology which accounts for modal response without the need for expensive dynamic response analysis. Secondly, a concept named Fatigue Equivalent Static Load (FESL) is developed, where fatigue load requirements are derived from measurements as quasi-static g-loads, the responses to which are considered as stress ranges applied a said number of times during the lifetime of the structure. In particular, it is demonstrated that the method may be employed for multi-axial g-loading, as well as for cases where constraint conditions change during the mission of the vehicle. The method provides some benefits compared to similar methods employed in the industry. Thirdly, a complex analytical model named Two Parameter Approach (TPA) is developed, defining the usage profile of a vehicle in terms of a bivariate probability density distribution of two parameters (distance/day, fatigue damage/distance), derived from measurements and surveys. Based on an inversion of the TPA model, a robust technique is developed for the derivation of such statistical usage profiles from only field failure data. Lastly, the applicability of the methods is demonstrated on a wide range of comprehensive case studies. Importantly, in most cases, substantiation of the methods is achieved by comparison of predicted failures with ‘real-world’ failures, in some cases made possible by the unusually long duration of the study. / Thesis (PhD (Mechanical Engineering))--University of Pretoria, 2007. / Mechanical and Aeronautical Engineering / PhD / Unrestricted

As a method to manage the large amounts of waste produced in developing India, andsimultaneously give the lower income households a sustainable and simple technique to lightthe houses, this article aims to study, compare, and evaluate three different techniques. It isbased on a literature review and the physical study of a model. Three techniques were chosen:building blocks with glass bottles, building blocks with plastic bottles and a so called solarlight bulb. A literature review showed that the second option was the most suitablealternative, and a model was constructed. Our model showed that the light transmission of ourmodel is significantly lower compared to a conventional window. The masonry block dohowever allow an indoor illuminance higher than 200 lux as recommended by the SwedishWork Environment Authority. The research also showed that the masonry block has lowerisolation properties rather than a conventional window. More research is needed to evaluatethis method with potential. / Den här rapporten undersöker, jämför och utvärderar tre simpla tekniker som potentiellt gerljusinsläpp för låginkomsthushåll och samtidigt är metoder för avfallshantering i Indien. Detre metoderna är cementblock med ingjutna glasflaskor, cementblock med ingjutnaplastflaskor, eller flaskor som insätts i taket och sprider solljus, med såkallad refraktion.Rapporten inleds med en litteraturstudie som sedan kompletteras med en experimentell deldär ett cementblock med ingjutna plastflaskor konstrueras och undersöks. Resultaten visar attljustransmissionen är väsentligt lägre än för konventionella fönster, men dock tillräcklig föratt ge en illuminans över 200 lux inomhus som rekommenderat av svenska arbetsmiljöverket.Utöver detta visade resultaten modellen har lägre isolerande effekt i jämförelse medkonventionella fönster. Detta är en metod med potential, som skulle gynnas av med forskning. / के रूप में एक विधि विकसित कर भारत में उत्पादित कचरे की बड़ी मात्रा का प्रबंिन करने के सिए, औरएक ही िमय में कम आय िािे पररिारों के एक स्थाय़ी और िरि तकऩीक घरों में प्रकाश के सिए िेनेके सिए, इि िेख, अध्ययन की तुिना, और त़ीन अिग-अिग तकऩीकों का मूलयांकन करना है। यहएक िादहत्य की िम़ीक्षा और एक मॉडि के भौततक अध्ययन पर आिाररत है। त़ीन तकऩीकों चुनागया: कांच की बोतिों के िाथ ब्िॉक तनमााण, प्िास्स्िक की बोतिें और एक तथाकधथत िौर प्रकाशबलब के िाथ ब्िॉक का तनमााण। एक िादहत्य की िम़ीक्षा िे पता चिा कक िूिरा विकलप िबिेउपयुक्त विकलप था, और एक मॉडि का तनमााण ककया गया था। हमारे मॉडि है कक हमारे मॉडि केप्रकाश िंचरण काफी कम एक पारंपररक खखडकी की तुिना में है पता चिा है। धचनाई ब्िॉक हािांककएक इनडोर रोशऩी २०० िक्ि िे अधिक की अनुमतत है। और अधिक शोि की क्षमता के िाथ इिविधि का मूलयांकन करने की जरूरत है।

Due to the growth of cloud computing in recent years, the use of virtualization has exploded. Virtual machines (VMs) and containers are both virtualization technologies used to create isolated computing environments. While VMs are created and managed by hypervisors and need their own full guest operating system, containers share the kernel of the host computers and do not need a full guest operating system. Because of this, containers are rumored to have less overhead involved, yielding higher performance and less resource usage compared to VMs.  In this paper we perform a literature study along with an empirical study to examine the differences between containers and virtual machines when it comes to cpu, memory and disk performance, cpu and memory resource utilization, and power consumption. To answer the question regarding performance, a series of benchmarks were run inside both a container and a VM. During these benchmarks the resource utilization of the host machine was also measured to answer the second question and to answer the third and final question the power draw was measured while some of the benchmarks were running. The results showed that the cpu performance was extremely similar between the two and memory performance seemed to be similar for the most part but fairly big differences were seen in favor of both depending on the benchmark in some cases. With disk performance the container was between 15-50% faster depending on the benchmark. As for resource usage, the cpu usage was the same for both technologies but memory usage differed greatly in favor of the container. The VM used between 3-4 GiB and the container between 70 MiB - 2.5 GiB depending on the benchmark. The power draw was the same for both technologies when under cpu and memory load but when idle the VM proved to draw around 40% more power.

Deploying virtual network functions (VNFs) such as WAN accelerators, network address translators (NATs) and 5G functions at the network edge (NE) can significantly reduce the experienced latency of delay-ultrasensitive applications (e.g., autonomous vehicles and Internet of things). Nonetheless, a major challenge to their anticipated large-scale deployment is the ability to efficiently allocate and manage the scarce NE resources hosting these functions. In this thesis, we describe a novel containerized infrastructure manager (cIM) that extends current managers, such as Kubernetes, with the necessary building blocks to provide an accurate yet elastic resource allocation service to containerized VNFs at scale. The proposed cIM treats the main modules of the VNFs, i.e., the containerized VNF components (cNFCs), as atomic special-purpose functions that can be rapidly deployed to form complex network services. The main component of the proposed cIM, the resource reservation manager (RRM), employs concepts of risk pooling in the insurance industry to accurately reserve the needed resources for the hosting containers. More precisely, to meet anticipated cNFCs demand fluctuation, the RRM accurately reserves a quota of additional resources that are shared by the containerized functions collected together in clusters. The reserved quota of resources ensures the desired availability level of the cNFCs without over-provisioning the scarce resources of the NE. The RRM considers three different situations namely that of a cNFC instance, a cluster of cNFCs or multiple cNFC clusters sharing the reserved resources. Different allocation approaches are then presented for each of these three situations. Simulation experiments are conducted to evaluate the performance of our reservation schemes from different aspects. The corresponding experimental results demonstrate that our proposed cIM can significantly improve the performance of the cNFCs and guarantee their desired availability with minimal resource reservation. Optimal allocation solutions of the resource pools are further proposed considering the desired availability level and the limit of resource pools. The evaluation results demonstrate that our optimization models and solutions obtain the best performance of relevant testing parameters, e.g., availability.