Qutaibah M. Malluhi

dblp:99/5275 · also Qutaibah Marwan Malluhi · DBLP profile ↗
← Back
62ranked-venue papers
9as first author
8since 2021 · last 2025
0000-0003-2849-0569ORCID · verified

Domains — the database's venue-derived domains; a paper can count in several

Systems, architecture and hardware · 17 · 6 first-author · 2 since 2021Databases, data management, data science and information retrieval · 16 · 1 since 2021Security and privacy · 12 · 1 first-author · 2 since 2021Applied, interdisciplinary, general and emerging computing · 9 · 1 first-author · 1 since 2021Software engineering, systems software and programming languages · 3Artificial intelligence and machine learning · 2 · 1 since 2021Computer networks · 2 · 1 first-author · 1 since 2021
YearPublicationVenuePosition
2025 Exploiting ftrace's function_graph Tracer Features for Machine Learning: A Case Study on Encryption Detection
abstract
This paper proposes the use of the Linux kernel’s ftrace framework, particularly the function_graph tracer, to generate informative system-level data for machine learning (ML) applications. Experiments on a real-world encryption detection task demonstrate the efficacy of using the proposed features across several learning algorithms. The learner is subjected to the problem of detecting encryption activities across a large dataset of files, where function call traces and graph-based features are used. Empirical results highlight an outstanding accuracy of $99.28 \%$ on the task at hand, underscoring the efficacy of features derived from the function_graph tracer. The results were further validated using an additional experiment targeting a multi-label classification problem by identifying the running programs based on trace data. This work provides comprehensive methodologies for preprocessing raw trace data and extracting graph-based features, offering significant advancements in applying ML to system behavior analysis, program identification, and anomaly detection. By bridging the gap between system tracing and ML, this paper paves the way for innovative solutions in performance monitoring and security analytics.
Kenan Begovic, Abdulaziz Alali 0001, Qutaibah M. Malluhi
AICCSA3
2024 Improving Energy Theft Detection through Time Series Segmentation and Ensemble Learning
abstract
Non-technical loss and energy theft detection are crucial for improving the stability and reducing financial losses in smart grid and power grid utilities. Recently, the availability of massive datasets has improved detection capabilities using sophisticated techniques like deep neural networks. However, training models on extensive feature sets, such as multi-year data, can lead to confusion due to varied behavioral changes in electricity consumption. To address this, we propose a reformulation of the energy theft detection problem by segmenting the time series data and training individual models on each segment. These models’ anomaly scores are then aggregated to produce a final classification. Our framework has shown significant improvement, elevating the F1 score from 0.6 to 0.74, outperforming recent state-of-the-art techniques on the SGCC dataset, the only publicly available dataset labeled for energy theft.
Emran Altamimi, Abdulaziz Alali 0001, Abdulla K. Al-Ali, Qutaibah M. Malluhi
IECON4
2024 Privacy Leakage in Federated Learning for Smart Grid Short-Term Load Forecasting
abstract
Federated Learning (FL) for household-level Short-Term Load Forecasting (STLF) has emerged as a solution to privacy concerns in smart grids, enabling clients to collaboratively train models without sharing their consumption data with a central server. However, sharing model updates can still introduce privacy risks. A common solution to mitigate this risk is the use of differential privacy during the federation process. However, there is a lack of empirical privacy analysis of these techniques in smart grid scenarios. This paper proposes a property inference attack utilizing a single update per client to evaluate privacy risks in federated learning within smart grid contexts. We assess the privacy risk associated with the standard FedAvg algorithm and a differentially private noise-before-aggregation (NBA) FL scheme. Furthermore, we investigate the trade-off between privacy and utility in the NBA-FL scheme. Our empirical findings reveal significant information leakage with standard FedAvg scheme. An adversary with access to a single model update can identify global data properties of the FedAvg client local dataset with an Area Under the Curve (AUC) of 72%. This privacy leakage can be reduced using NBA-FL, which reduces the AUC to 60%. However, the addition of noise to the model updates results in a utility loss of up to 70% in the model’s predictive power. This significant degradation in model performance outweighs the advantages of the scheme.
Hussein A. Aly 0001, Abdulaziz Alali 0001, Abdulla K. Al-Ali, Qutaibah M. Malluhi
IECON4
2024 R-CONV: An Analytical Approach for Efficient Data Reconstruction via Convolutional Gradients
Tamer Eltaras, Qutaibah M. Malluhi, Alessandro Savino 0001, Stefano Di Carlo, Adnan Qayyum
WISE (5)2
2024 Temporal self-attention for risk prediction from electronic health records using non-stationary kernel approximation
abstract
Effective modeling of patient representation from electronic health records (EHRs) is increasingly becoming a vital research topic. Yet, modeling the non-stationarity in EHR data has received less attention. Most existing studies follow a strong assumption of stationarity in patient representation from EHRs. However, in practice, a patient's visits are irregularly spaced over a relatively long period of time, and disease progression patterns exhibit non-stationarity. Furthermore, the time gaps between patient visits often encapsulate significant domain knowledge, potentially revealing undiscovered patterns that characterize specific medical conditions. To address these challenges, we introduce a new method which combines the self-attention mechanism with non-stationary kernel approximation to capture both contextual information and temporal relationships between patient visits in EHRs. To assess the effectiveness of our proposed approach, we use two real-world EHR datasets, comprising a total of 76,925 patients, for the task of predicting the next diagnosis code for a patient, given their EHR history. The first dataset is a general EHR cohort and consists of 11,451 patients with a total of 3,485 unique diagnosis codes. The second dataset is a disease-specific cohort that includes 65,474 pregnant patients and encompasses a total of 9,782 unique diagnosis codes. Our experimental evaluation involved nine prediction models, categorized into three distinct groups. Group 1 comprises the baselines: original self-attention with positional encoding model, RETAIN model, and LSTM model. Group 2 includes models employing self-attention with stationary kernel approximations, specifically incorporating three variations of Bochner's feature maps. Lastly, Group 3 consists of models utilizing self-attention with non-stationary kernel approximations, including quadratic, cubic, and bi-quadratic polynomials. The experimental results demonstrate that non-stationary kernels significantly outperformed baseline methods for NDCG@10 and Hit@10 metrics in both datasets. The performance boost was more substantial in dataset 1 for the NDCG@10 metric. On the other hand, stationary Kernels showed significant but smaller gains over baselines and were nearly as effective as Non-stationary Kernels for Hit@10 in dataset 2. These findings robustly validate the efficacy of employing non-stationary kernels for temporal modeling of EHR data, and emphasize the importance of modeling non-stationary temporal information in healthcare prediction tasks.
Rawan AlSaad, Qutaibah M. Malluhi, Alaa A. Abd-Alrazaq, Sabri Boughorbel
Artif. Intell. Medicine2
2023 Cryptographic ransomware encryption detection: Survey
abstract
The ransomware threat has loomed over our digital life since 1989. Criminals use this type of cyber attack to lock or encrypt victims' data, often coercing them to pay exorbitant amounts in ransom. The damage ransomware causes ranges from monetary losses paid for ransom at best to endangering human lives. Cryptographic ransomware, where attackers encrypt the victim's data, stands as the predominant ransomware variant. The primary characteristics of these attacks have remained the same since the first ransomware attack. For this reason, we consider this a key factor differentiating ransomware from other cyber attacks, making it vital in tackling the threat of cryptographic ransomware. This paper proposes a cyber kill chain that describes the modern crypto-ransomware attack. The survey focuses on the Encryption phase as described in our proposed cyber kill chain and its detection techniques. We identify three main methods used in detecting encryption-related activities by ransomware, namely API and System calls, I/O monitoring, and file system activities monitoring. Machine learning (ML) is a tool used in all three identified methodologies, and some of the issues within the ML domain related to this survey are also covered as part of their respective methodologies. The survey of selected proposals is conducted through the prism of those three methodologies, showcasing the importance of detecting ransomware during pre-encryption and encryption activities and the windows of opportunity to do so. We also examine commercial crypto-ransomware protection and detection offerings and show the gap between academic research and commercial applications.
Kenan Begovic, Abdulaziz Alali 0001, Qutaibah M. Malluhi
Comput. Secur.3
2022 Privacy Preserving Computation in Cloud Using Reusable Garbled Oblivious RAMs
Yongge Wang 0001, Qutaibah M. Malluhi
ISC2
2021 An efficient secure data compression technique based on chaos and adaptive Huffman coding
abstract
Abstract Data stored in physical storage or transferred over a communication channel includes substantial redundancy. Compression techniques cut down the data redundancy to reduce space and communication time. Nevertheless, compression techniques lack proper security measures, e.g., secret key control, leaving the data susceptible to attack. Data encryption is therefore needed to achieve data security in keeping the data unreadable and unaltered through a secret key. This work concentrates on the problems of data compression and encryption collectively without negatively affecting each other. Towards this end, an efficient, secure data compression technique is introduced, which provides cryptographic capabilities for use in combination with an adaptive Huffman coding, pseudorandom keystream generator, and S-Box to achieve confusion and diffusion properties of cryptography into the compression process and overcome the performance issues. Thus, compression is carried out according to a secret key such that the output will be both encrypted and compressed in a single step. The proposed work demonstrated a congruent fit for real-time implementation, providing robust encryption quality and acceptable compression capability. Experiment results are provided to show that the proposed technique is efficient and produces similar space-saving (%) to standard techniques. Security analysis discloses that the proposed technique is susceptible to the secret key and plaintext. Moreover, the ciphertexts produced by the proposed technique successfully passed all NIST tests, which confirm that the 99% confidence level on the randomness of the ciphertext.
Qutaibah M. Malluhi, Muhammad Imran Razzak, Waheed Iqbal
Peer-to-Peer Netw. Appl.2
2020 Enclave-based oblivious RAM using Intel's SGX
Maan Haj Rachid, Ryan D. Riley, Qutaibah M. Malluhi
Comput. Secur.3
2020 Private Function Evaluation Using Intel's SGX
abstract
Private Function Evaluation (PFE) is the problem of evaluating one party’s private data using a private function owned by another party. Existing solutions for PFE are based on universal circuits evaluated in secure multiparty computations or on hiding the circuit’s topology and the gate’s functionality through additive homomorphic encryption. These solutions, however, are not efficient enough for practical use; hence there is a need for more efficient techniques. This work looks at utilizing the Intel Software Guard Extensions platform (SGX) to provide a more practical solution for PFE where the privacy of the data and the function are both preserved. Notably, our solution carefully avoids the pitfalls of side-channel attacks on SGX. We present solutions for two different scenarios: the first is when the function’s owner has an SGX-enabled device and the other is when a third party (or one of the data owners) has the SGX capability. Our results show a clear expected advantage in terms of running time for the first case over the second. Investigating the slowdown in the second case leads to the garbling time which constitutes more than 60% of the consumed time. Both solutions clearly outperform FairplayPF in our tests.
Omar Abou Selo, Maan Haj Rachid, Abdullatif Shikfa, Yongge Wang 0001, Qutaibah M. Malluhi
Secur. Commun. Networks5
2019 Efficient Parallel Skyline Query Processing for High-Dimensional Data
abstract
Given a set of multidimensional data points, skyline queries retrieve those points that are not dominated by any other points in the set. Due to the ubiquitous use of skyline queries, such as in preference-based query answering and decision making, and the large amount of data that these queries have to deal with, enabling their scalable processing is of critical importance. However, there are several outstanding challenges that have not been well addressed. More specifically, in this paper, we are tackling the data straggler and data skew challenges introduced by distributed skyline query processing, as well as the ensuing high computation cost of merging skyline candidates. We thus introduce a new efficient three-phase approach for large scale processing of skyline queries. In the first preprocessing phase, the data is partitioned along the Z-order curve. We utilize a novel data partitioning approach that formulates data partitioning as an optimization problem to minimize the size of intermediate data. In the second phase, each compute node partitions the input data points into disjoint subsets, and then performs the skyline computation on each subset to produce skyline candidates in parallel. In the final phase, we build an index and employ an efficient algorithm to merge the generated skyline candidates. Extensive experiments demonstrate that the proposed skyline algorithm achieves more than one order of magnitude enhancement in performance compared to existing state-of-the-art approaches.
MingJie Tang, Yongyang Yu, Walid G. Aref, Qutaibah M. Malluhi, Mourad Ouzzani
ICDE4
2019 Breaking HK17 in Practice
abstract
In November 2017, Hecht and Kamlofsky submitted HK17, a quaternion(octonion)-based Diffie-Hellman key exchange protocol, to NIST post-quantum cryptography project, and thought that at least O(p8) arithmetic operations are needed for a passive adversary to recover the shared key where p is the modulo used in the scheme. Later, Bernstein and Lange pointed out that the shared key can be recovered with O(p) arithmetic operations, which implies that HK17 with small p is not secure. However, their attack does not work in practice for the scheme with sufficiently large p, although the scheme is still efficient. In this paper, we propose an attack to show that just constant arithmetic operations, or Õ(log p) bit operations, are enough to recover the shared key for a passive adversary. Note that even the legal party in the protocol needs at least Õ(log p) bit operations to establish the shared key. We break HK17 completely in the practical sense.
Renzhang Liu, Qutaibah M. Malluhi, Yanbin Pan 0001, Yongge Wang 0001, Tianyuan Xie
ISIT3
2019 Decentralized ciphertext-policy attribute-based encryption schemes for lightweight devices
Qutaibah M. Malluhi, Abdullatif Shikfa, Vinh Duc Tran, Viet Cuong Trinh
Comput. Commun.1
2019 Securing Aggregate Queries for DNA Databases
abstract
This paper addresses the problem of sharing person-specific genomic sequences without violating the privacy of their data subjects to support large-scale biomedical research projects. The proposed method builds on the framework proposed by Kantarcioglu et al. [1] but extends the results in a number of ways. One improvement is that our scheme is deterministic, with zero probability of a wrong answer (as opposed to a low probability). We also provide a new operating point in the space-time tradeoff, by offering a scheme that is twice as fast as theirs but uses twice the storage space. This point is motivated by the fact that storage is cheaper than computation in current cloud computing pricing plans. Moreover, our encoding of the data makes it possible for us to handle a richer set of queries than exact matching between the query and each sequence of the database, including: (i) counting the number of matches between the query symbols and a sequence; (ii) logical OR matches where a query symbol is allowed to match a subset of the alphabet thereby making it possible to handle (as a special case) a “not equal to” requirement for a query symbol (e.g., “not a G”); (iii) support for the extended alphabet of nucleotide base codes that encompasses ambiguities in DNA sequences (this happens on the DNA sequence side instead of the query side); (iv) queries that specify the number of occurrences of each kind of symbol in the specified sequence positions (e.g., two `A' and four `C' and one `G' and three `T', occurring in any order in the query-specified sequence positions); (v) a threshold query whose answer is `yes' if the number of matches exceeds a query-specified threshold (e.g., “7 or more matches out of the 15 query-specified positions”). (vi) For all query types, we can hide the answers from the decrypting server, so that only the client learns the answer. (vii) In all cases, the client deterministically learns only the query's answer, except for query type (v) where we quantify the (very small) statistical leakage to the client of the actual count.
Mohamed Nassar 0001, Qutaibah M. Malluhi, Mikhail J. Atallah, Abdullatif Shikfa
IEEE Trans. Cloud Comput.2
2018 A Scheme for Three-way Secure and Verifiable E-Voting
abstract
Online voting systems are gaining acceptance with the widespread use of secure web services and cloud computing such as electronic currency and online banking. However, they still face privacy, security and accountability issues. Designing a system that covers all the general requirements of secure voting is a research challenge. In this paper, we propose a secure online voting protocol based on a partially homomorphic encryption scheme. Our protocol ensures the anonymity of voters while preserving the integrity of the results. Experiments show the viability of our protocol in terms of both security and scalability.
Mohamed Nassar 0001, Qutaibah M. Malluhi, Tanveer Khan
AICCSA2
2018 AUDIT: approving and tracking updates with dependencies in collaborative databases
Khaleel Mershad 0001, Qutaibah M. Malluhi, Mourad Ouzzani, MingJie Tang, Michael Gribskov, Walid G. Aref
Distributed Parallel Databases2
2018 COACT: a query interface language for collaborative databases
Khaleel Mershad 0001, Qutaibah M. Malluhi, Mourad Ouzzani, MingJie Tang, Michael Gribskov, Walid G. Aref, Deo Prakash
Distributed Parallel Databases2
2018 A resource provisioning framework for bioinformatics applications in multi-cloud environments
Izzet F. Senturk, Ponnuraman Balakrishnan, Anas Abu-Doleh, Kamer Kaya, Qutaibah M. Malluhi, Ümit V. Çatalyürek
Future Gener. Comput. Syst.5
2018 Efficient Parallel Skyline Query Processing for High-Dimensional Data
abstract
Given a set of multidimensional data points, skyline queries retrieve those points that are not dominated by any other points in the set. Due to the ubiquitous se of skyline queries, such as in preference-based query answering and decision making, and the large amount of data that these queries have to deal with, enabling their scalable processing is of critical importance. However, there are several outstanding challenges that have not been well addressed. More specifically, in this paper, we are tackling the data straggler and data skew challenges introduced by distributed skyline query processing, as well as the ensuing high computation cost of merging skyline candidates. We thus introduce a new efficient three-phase approach for large scale processing of skyline queries. In the first preprocessing phase, the data is partitioned along the Z-order curve. We utilize a novel data partitioning approach that formulates data partitioning as an optimization problem to minimize the size of intermediate data. In the second phase, each compute node partitions the input data points into disjoint subsets, and then performs the skyline computation on each subset to produce skyline candidates in parallel. In the final phase, we build an index and employ an efficient algorithm to merge the generated skyline candidates. Extensive experiments demonstrate that the proposed skyline algorithm achieves more than one order of magnitude enhancement in performance compared to existing state-of-the-art approaches.
MingJie Tang, Yongyang Yu, Walid G. Aref, Qutaibah M. Malluhi, Mourad Ouzzani
IEEE Trans. Knowl. Data Eng.4
2017 Candidate MDS Array Codes for Tolerating Three Disk Failures in RAID-7 Architectures
Mayur Punekar, Qutaibah M. Malluhi, Yongge Wang 0001, Yvo Desmedt
BDCAT2
2017 Computational Aspects of Ideal (t, n)-Threshold Scheme of Chen, Laing, and Martin
Mayur Punekar, Qutaibah M. Malluhi, Yvo Desmedt, Yongge Wang 0001
CANS2
2017 A Ciphertext-Policy Attribute-based Encryption Scheme With Optimized Ciphertext Size And Fast Decryption
abstract
We address the problem of ciphertext-policy attribute-based encryption with fine access control, a cryptographic primitive which has many concrete application scenarios such as Pay-TV, e-Health, Cloud Storage and so on. In this context we improve on previous LSSS based techniques by building on previous work of Hohenberger and Waters at PKC'13 and proposing a construction that achieves ciphertext size linear in the minimum between the size of the boolean access formula and the number of its clauses. Our construction also supports fast decryption. We also propose two interesting extensions: the first one aims at reducing storage and computation at the user side and is useful in the context of lightweight devices or devices using a cloud operator. The second proposes the use of multiple authorities to mitigate key escrow by the authority.
Qutaibah M. Malluhi, Abdullatif Shikfa, Viet Cuong Trinh
AsiaCCS1
2017 In-Memory Distributed Matrix Computation Processing and Optimization
abstract
The use of large-scale machine learning and data mining methods is becoming ubiquitous in many application domains ranging from business intelligence and bioinformatics to self-driving cars. These methods heavily rely on matrix computations, and it is hence critical to make these computations scalable and efficient. These matrix computations are often complex and involve multiple steps that need to be optimized and sequenced properly for efficient execution. This paper presents new efficient and scalable matrix processing and optimization techniques for in-memory distributed clusters. The proposed techniques estimate the sparsity of intermediate matrix-computation results and optimize communication costs. An evaluation plan generator for complex matrix computations is introduced as well as a distributed plan optimizer that exploits dynamic cost-based analysis and rule-based heuristics to optimize the cost of matrix computations in an in-memory distributed environment. The result of a matrix operation will often serve as an input to another matrix operation, thus defining the matrix data dependencies within a matrix program. The matrix query plan generator produces query execution plans that minimize memory usage and communication overhead by partitioning the matrix based on the data dependencies in the execution plan. We implemented the proposed matrix processing and optimization techniques in Spark, a distributed in-memory computing platform. Experiments on both real and synthetic data demonstrate that our proposed techniques achieve up to an order-of-magnitude performance improvement over state-of the-art distributed matrix computation systems on a wide range of applications.
Yongyang Yu, MingJie Tang, Walid G. Aref, Qutaibah M. Malluhi, Mostafa M. Abbas, Mourad Ouzzani
ICDE4
2016 Privacy Preserving Computation in Cloud Using Noise-Free Fully Homomorphic Encryption (FHE) Schemes
Yongge Wang 0001, Qutaibah M. Malluhi
ESORICS (1)2
2016 Similarity Group-By operators for multi-dimensional relational data
abstract
The SQL group-by operator plays an important role in summarizing and aggregating large datasets in a data analytics stack. The Similarity SQL-based Group-By operator (SGB, for short) extends the semantics of the standard SQL Group-by by grouping data with similar but not necessarily equal values. While existing similarity-based grouping operators efficiently realize these approximate semantics, they primarily focus on one-dimensional attributes and treat multi-dimensional attributes independently. However, correlated attributes, such as in spatial data, are processed independently, and hence, groups in the multi-dimensional space are not detected properly. To address this problem, we introduce two new SGB operators for multi-dimensional data. The first operator is the clique (or distance-to-all) SGB, where all the tuples in a group are within some distance from each other. The second operator is the distance-to-any SGB, where a tuple belongs to a group if the tuple is within some distance from any other tuple in the group. Since a tuple may satisfy the membership criterion of multiple groups, we introduce three different semantics to deal with such a case: (i) eliminate the tuple, (ii) put the tuple in any one group, and (iii) create a new group for this tuple. We implement and test the new SGB operators and their algorithms inside PostgreSQL. The overhead introduced by these operators proves to be minimal and the execution times are comparable to those of the standard Group-by. The experimental study, based on TPC-H and a social check-in data, demonstrates that the proposed algorithms can achieve up to three orders of magnitude enhancement in performance over baseline methods developed to solve the same problem.
MingJie Tang, Ruby Y. Tahboub, Walid G. Aref, Mikhail J. Atallah, Qutaibah M. Malluhi, Mourad Ouzzani, Yasin N. Silva
ICDE5
2016 Performance analysis of data intensive cloud systems based on data management and replication: a survey
Saif Ur Rehman Malik, Samee Ullah Khan, Sam J. Ewen, Nikos Tziritas, Joanna Kolodziej, Albert Y. Zomaya, Sajjad Ahmad Madani, Nasro Min-Allah, Lizhe Wang 0001, Cheng-Zhong Xu 0001, Qutaibah M. Malluhi, Johnatan E. Pecero, Pavan Balaji, Abhinav Vishnu, Rajiv Ranjan 0001, Sherali Zeadally, Hongxiang Li 0001
Distributed Parallel Databases11
2016 Garbled computation in cloud
Yongge Wang 0001, Qutaibah M. Malluhi, Khaled M. Khan
Future Gener. Comput. Syst.2
2016 The similarity-aware relational database set operators
Wadha J. Al Marri, Qutaibah M. Malluhi, Mourad Ouzzani, MingJie Tang, Walid G. Aref
Inf. Syst.2
2016 LocationSpark: A Distributed In-Memory Data Management System for Big Spatial Data
abstract
We present LocationSpark, a spatial data processing system built on top of Apache Spark, a widely used distributed data processing system. LocationSpark offers a rich set of spatial query operators, e.g., range search, k NN, spatio-textual operation, spatial-join, and k NN-join. To achieve high performance, LocationSpark employs various spatial indexes for in-memory data, and guarantees that immutable spatial indexes have low overhead with fault tolerance. In addition, we build two new layers over Spark, namely a query scheduler and a query executor. The query scheduler is responsible for mitigating skew in spatial queries, while the query executor selects the best plan based on the indexes and the nature of the spatial queries. Furthermore, to avoid unnecessary network communication overhead when processing overlapped spatial data, We embed an efficient spatial Bloom filter into LocationSpark's indexes. Finally, LocationSpark tracks frequently accessed spatial data, and dynamically flushes less frequently accessed data into disk. We evaluate our system on real workloads and demonstrate that it achieves an order of magnitude performance gain over a baseline framework.
MingJie Tang, Yongyang Yu, Qutaibah M. Malluhi, Mourad Ouzzani, Walid G. Aref
Proc. VLDB Endow.3
2016 Similarity Group-by Operators for Multi-Dimensional Relational Data
abstract
The SQL group-by operator plays an important role in summarizing and aggregating large datasets in a data analytics stack. While the standard group-by operator, which is based on equality, is useful in several applications, allowing similarity aware grouping provides a more realistic view on real-world data that could lead to better insights. The Similarity SQL-based Group-By operator (SGB, for short) extends the semantics of the standard SQL Group-by by grouping data with similar but not necessarily equal values. While existing similarity-based grouping operators efficiently realize these approximate semantics, they primarily focus on one-dimensional attributes and treat multi-dimensional attributes independently. However, correlated attributes, such as in spatial data, are processed independently, and hence, groups in the multi-dimensional space are not detected properly. To address this problem, we introduce two new SGB operators for multi-dimensional data. The first operator is the clique (or distance-to-all) SGB, where all the tuples in a group are within some distance from each other. The second operator is the distance-to-any SGB, where a tuple belongs to a group if the tuple is within some distance from any other tuple in the group. Since a tuple may satisfy the membership criterion of multiple groups, we introduce three different semantics to deal with such a case: (i) eliminate the tuple, (ii) put the tuple in any one group, and (iii) create a new group for this tuple. We implement and test the new SGB operators and their algorithms inside PostgreSQL. The overhead introduced by these operators proves to be minimal and the execution times are comparable to those of the standard Group-by. The experimental study, based on TPC-H and a social check-in data, demonstrates that the proposed algorithms can achieve up to three orders of magnitude enhancement in performance over baseline methods developed to solve the same problem.
MingJie Tang, Ruby Y. Tahboub, Walid G. Aref, Mikhail J. Atallah, Qutaibah M. Malluhi, Mourad Ouzzani, Yasin N. Silva
IEEE Trans. Knowl. Data Eng.5
2016 Skyline Discovery and Composition of Multi-Cloud Mashup Services
abstract
A cloud mashup is composed of multiple services with shared datasets and integrated functionalities. For example, the elastic compute cloud (EC2) provided by Amazon Web Service (AWS), the authentication and authorization services provided by Facebook, and the Map service provided by Google can all be mashed up to deliver real-time, personalized driving route recommendation service. To discover qualified services and compose them with guaranteed quality of service (QoS), we propose an integrated skyline query processing method for building up cloud mashup applications. We use a similarity test to achieve optimal localized skyline. This mashup method scales well with the growing number of cloud sites involved in the mashup applications. Faster skyline selection, reduced composition time, dataset sharing, and resources integration assure the QoS over multiple clouds. We experiment with the quality of Web service (QWS) benchmark over 10,000 Web services along six QoS dimensions. By utilizing block-elimination, data-space partitioning, and service similarity pruning, the skyline process is shortened by three times, when compared with two state-of-the-art methods.
Fan Zhang 0003, Kai Hwang 0001, Samee Ullah Khan, Qutaibah M. Malluhi
IEEE Trans. Serv. Comput.4
2015 Efficient Processing of Hamming-Distance-Based Similarity-Search Queries Over MapReduce
abstract
Similarity search is crucial to many applications. Of particular interest are two flavors of the Hamming distance range query, namely, the Hamming select and the Hamming join (Hamming-select and Hamming-join, respectively). Hamming distance is widely used in approximate near neighbor search for high dimensional data, such as images and document collections. For example, using predefined similarity hash functions, high-dimensional data is mapped into one-dimensional binary codes that are, then linearly scanned to perform Hamming-distance comparisons. These distance comparisons on the binary codes are usually costly and, often involves excessive redundancies. This paper introduces a new index, termed the HA-Index, that speeds up distance comparisons and eliminates redundancies when performing the two flavors of Hamming distance range queries. An efficient search algorithm based on the HA-index is presented. A distributed version of the HA-index is introduced and algorithms for realizing Hamming distance-select and Hamming distance-join operations on a MapReduce platform are prototyped. Extensive experiments using real datasets demonstrates that the HA-index and the corresponding search algorithms achieve up to two orders of magnitude speedup over existing state-of-the-art approaches, while saving more than ten times in memory space.
MingJie Tang, Yongyang Yu, Walid G. Aref, Qutaibah M. Malluhi, Mourad Ouzzani
EDBT4
2015 A Domain Specific Language for Secure Outsourcing of Computation to the Cloud
abstract
Secure outsourcing of computation has gained importance with the proliferation of cloud services. However, existing outsourcing protocol specification languages are mainly suitable for secure multi-party computation. They offer limited support for secure outsourcing of computation of large datasets in cloud computing environments. This paper presents a model driven approach to define then coordinate the execution of secure outsourcing protocols. First we present the details of our Outsourcing Protocol Definition Language (OPDL) used to define a machine-process able protocols in an abstract and declarative way while leaving the implementation details to the underlying runtime components. The proposed language aims to simplify the design of these protocols while allowing their verification and the generation of cloud services composition to coordinate the protocol execution. We evaluated the expressiveness of OPDL by using it to define a set of representative secure outsourcing protocols from the literature.
Mohamed Nassar 0001, Abdelkarim Erradi, Qutaibah M. Malluhi
EDOC3
2015 Approving Updates in Collaborative Databases
abstract
Data curation activities in collaborative databases mandate that collaborators interact until they converge and agree on the content of their data. Typically, updates by a member of the collaboration are made visible to all collaborators for comments but at the same time are pending the approval or rejection of the data custodian, e.g., the principal scientist or investigator (PI). In current database technologies, approval and authorization of updates is based solely on the identity of the user, e.g., via the SQL GRANT and REVOKE commands. However, in collaborative environments, the updated data is open for collaborators for discussion and further editing and is finally approved or rejected by the PI based on the content of the data and not on the identity of the updater. In this paper, we introduce a cloud-based collaborative database system that promotes and enables collaboration and data curation scenarios. We realize content-based update approval and history tracking of updates inside HBase, a distributed and scalable open-source cluster-based database. The design and implementation as well as a detailed performance study of several approaches for update approval are presented and contrasted in the paper.
Khaleel Mershad 0001, Qutaibah M. Malluhi, Mourad Ouzzani, MingJie Tang, Walid G. Aref
IC2E2
2015 CloudFlow: A data-aware programming model for cloud workflow applications on modern HPC systems
Fan Zhang 0003, Qutaibah M. Malluhi, Tamer Elsayed, Samee Ullah Khan, Keqin Li 0001, Albert Y. Zomaya
Future Gener. Comput. Syst.2
2015 Anonymizing transactional datasets
abstract
In this paper, we study the privacy breach caused by unsafe correlations in transactional data where individuals have multiple tuples in a dataset. We provide two safety constraints to guarantee safe correlation of the data: (1) the safe grouping constraint to ensure that quasi-identifier and sensitive partitions are bounded by l-diversity and (2) the schema decomposition constraint to eliminate non-arbitrary correlations between non-sensitive and sensitive values to protect privacy and at the same time increase the aggregate analysis. In our technique, values are grouped together in unique partitions that enforce l-diversity at the level of individuals. We also propose an association preserving technique to increase the ability to learn/analyze from the anonymized data. To evaluate our approach, we conduct a set of experiments to determine the privacy breach and investigate the anonymization cost of safe grouping and preserving associations.
Bechara al Bouna, Chris Clifton, Qutaibah M. Malluhi
J. Comput. Secur.3
2014 A Model Driven Framework for Secure Outsourcing of Computation to the Cloud
abstract
This paper presents a model driven approach to define then coordinate the execution of protocols for secure outsourcing of computation of large datasets in cloud computing environments. First we present our Outsourcing Protocol Definition Language (OPDL) used to define a machine-processable protocols in an abstract and declarative way while leaving the implementation details to the underlying runtime components. The proposed language aims to simplify the design of these protocols while allowing their verification and the generation of cloud services composition to coordinate the protocol execution. We evaluated the expressiveness of OPDL by using it to define a set of representative secure outsourcing protocols from the literature.
Mohamed Nassar 0001, Abdelkarim Erradi, Farida Sabry, Qutaibah M. Malluhi
IEEE CLOUD4
2014 Automatic Generation of Optimized Workflow for Distributed Computations on Large-Scale Matrices
Farida Sabry, Abdelkarim Erradi, Mohamed Nassar 0001, Qutaibah M. Malluhi
ICSOC4
2014 Scalable Multi-core Implementation for Motif Finding Problem
abstract
The motif finding problem is a key step for understanding the gene regulation and expression, drug design, disease resistance, etc. Many sequential algorithms have been proposed in the literature to find the exact motifs. Voting algorithm is one such memory and time efficient sequential solution for motif finding. In this paper, we develop a parallel version of CVoting algorithm realized using openMP. The paper evaluates this parallel algorithm on a multi-core architecture using both simulated and real datasets. The paper compares the performance against existing multi-core implementations. Our experiments show that, the scalability of our implementation is linear for all challenging instances running on different number of processors, while the scalability of other implementations varies with respect to motif length or the number of processors. The average efficiency of our parallel implementations for all instances is more than 90%.
Mostafa M. Abbas, Qutaibah M. Malluhi, Ponnuraman Balakrishnan
ISPDC2
2014 The Similarity-Aware Relational Intersect Database Operator
Wadha J. Al Marri, Qutaibah M. Malluhi, Mourad Ouzzani, MingJie Tang, Walid G. Aref
SISAP2
2013 Secure Outsourcing of Matrix Operations as a Service
abstract
This paper reports the design of a cloud-based service for coordinating secure outsourcing of storage and computation of scientific data, particularly matrices. While this service may support different secure outsourcing protocols and mechanisms (e.g. homomorphic encryption, secret sharing and randomization), we hide all the complexity from end-users and move it to a middleware broker. The broker manages the communication between the client and one or more clouds. The requests submitted by users are automatically translated into WS-BPEL workflows and then executed by the broker workflow engine to coordinate the control flow and the data flow for outsourcing of matrix operations. We detail the architecture of our framework and the design of its key components. Our work facilitates real-world and practical deployment of recently proposed secure outsourcing protocols.
Mohamed Nassar 0001, Abdelkarim Erradi, Farida Sabry, Qutaibah M. Malluhi
IEEE CLOUD4
2013 Using Safety Constraint for Transactional Dataset Anonymization
Bechara al Bouna, Chris Clifton, Qutaibah M. Malluhi
DBSec3
2013 Updating outsourced anatomized private databases
abstract
We introduce operations to safely update an anatomized database. The result is a database where the view of the server satisfies standards such as k-anonymity or l-diversity, but the client is able to query and modify the original data. By exposing data where possible, the server can perform value-added services such as data analysis not possible with fully encrypted data, while still being unable to violate privacy constraints. Update is a key challenge with this model; naïve application of insertion and deletion operations reveals the actual data to the server. This paper shows how data can be safely inserted, deleted, and updated. The key ideas are that data is inserted or updated into an encrypted temporary table until enough data is available to safely decrypt, and that sensitive information of deleted tuples is left behind to ensure privacy of both deleted and undeleted individuals. This approach is proven effective in maintaining the privacy constraint against an adversarial server. The paper also gives empirical results on how much data remains encrypted, and the resulting quality of the server's (anatomized) view of the data, for various update and delete rates.
Ahmet Erhan Nergiz, Chris Clifton, Qutaibah M. Malluhi
EDBT3
2013 Secure and Private Outsourcing of Shape-Based Feature Extraction
Shumiao Wang, Mohamed Nassar 0001, Mikhail J. Atallah, Qutaibah M. Malluhi
ICICS4
2013 ConMR: Concurrent MapReduce Programming Model for Large Scale Shared-Data Applications
abstract
The rapid growth of large-data processing has brought in the MapReduce programming model as a widely accepted solution. However, MapReduce limits itself to a one map-to-one-reduce framework. Meanwhile, it lacks built-in support and optimization when the input datasets are shared among concurrent applications and/or jobs. The performance might be improved when the shared and frequently accessed data is read from local instead of distributed file system.To enhance the performance of big data applications, this paper presents Concurrent MapReduce, a new programming model built on top of MapReduce that deals with large amount of shared data items. Concurrent MapReduce provides support for processing heterogeneous sources of input datasets and offers optimization when the datasets are partially or fully shared. Experimental evaluation has shown an execution runtime speedup of 4X compared to traditional nonconcurrent MapReduce implementation with a manageable time overhead.
Fan Zhang 0003, Qutaibah M. Malluhi, Tamer M. Elsyed
ICPP2
2013 Role of contextual properties in enterprise service migration to cloud computing
abstract
SUMMARY This paper attempts to identify the role of contextual properties of enterprise systems architecture in relation to service migration to cloud computing. In a cloud‐based service architecture, the shift of ownership, scope, and control over architectural elements from consumers to cloud providers has a profound impact on ways cloud consumers design and manage their systems architecture. In this perspective, we introduce the concepts of architectural scope, ownership, and control as the contextual properties of systems architecture. The paper explores ways in which these properties can be mapped into a quantifiable framework that could be used to measure the degree of changes of contextual properties due to service migration to cloud computing. We seek here to address the service migration problems from a different perspective, namely, focusing on the contextual properties of architectural elements. Copyright © 2013 John Wiley & Sons, Ltd.
Khaled M. Khan, Qutaibah M. Malluhi
Concurr. Comput. Pract. Exp.2
2012 Secure and Efficient Outsourcing of Sequence Comparisons
Marina Blanton, Mikhail J. Atallah, Keith B. Frikken, Qutaibah M. Malluhi
ESORICS4
2011 Identifying Contextual Properties of Software Architecture in Cloud Computing
abstract
This paper argues that the contextual properties of cloud-enabled software architecture should be identified and understood differently by cloud consumers. The existing architectures are not designed to exploit the contextual properties of cloud computing. The emergence of cloud computing virtually forces cloud consumers to re-evaluate their software architectures in light of the cloud computing context which requires relinquish control over most architectural components to cloud providers. In a cloud-enabled architecture, the shift of ownership of and control over architectural components from consumers to cloud providers has profound impact on the ways cloud consumers design their software architecture. In this perspective, we go beyond the traditional definition of software architecture, and introduce the concepts of architectural scope, ownership, and control as the contextual properties of an architecture.
Khaled M. Khan, Qutaibah M. Malluhi
DASC2
2010 Security-Aware Service Composition for End Users of Small Enterprises
abstract
This paper focuses on the service composition based on security properties of services from an end user perspective. End users are usually not expert in computer security, but expert users of computer software. They typically either own or work for small and medium enterprises (SMEs). The proposed framework attempts to demonstrate that end users of small enterprises can compose a service based application based on the security profiles of software services. The paper argues that the security concerns of various stakeholders of services should be specified differently. The paper envisions a framework with which end users could select services consistent with their preferred security features suitable for their businesses. With the same token, consumers of such applications can easily understand the security profile of services in order to make a B2B transaction. This will provide end users more power to force the service developer to offer better security-aware services. The main contribution of this paper is a framework on which further work could be initiated.
Khaled M. Khan, Qutaibah M. Malluhi
SoMeT2
2008 A system for automatic gathering and intelligent analyses of Doha traffic data
abstract
In recent years, Intelligent Transportation Systems (ITS) have gained increased attention. ITS [1] [2] provide opportunities for traffic engineers and decision-makers to deal with problems related to highway traffic operation and congestion management. This paper deals with building a device for collecting data about Doha traffic and storing this data on a central server. The server maintains a traffic information database that can be used for traffic analysis and prediction.
Noora Al-Naimi, Nuha Barhoum, Abeer Nasser, Alia Swidan, Qutaibah M. Malluhi
AICCSA5
2008 Intelligent virtual archiving for accessing news article repositories
abstract
This paper proposes a news article archiving solution that addresses many of today's systems limitations for effective storage and management of unstructured data items. The proposed system employs formal concept analysis as a means to generate concept lattices. The system is based on a new breed of file systems called content-based file systems. This system provides a flexible way of managing data by employing a mechanism for creating, storing, organizing, searching, and browsing huge libraries of news articles.
Wadha K. Lebda, Noura Fetais, Suad Al Hussaini, Sahar smail, Qutaibah M. Malluhi
AICCSA5
2006 Ragged-Edge Array Coding for Reliable and Efficient Storage Arrays
abstract
This paper presents a new efficient coding technique that employs an irregular array and enables building efficient and reliable storage arrays. It allows for data recovery from up to two failures in storage arrays. The technique is particularly useful for protecting large data blocks against data loss or unavailability and therefore can be applied in storage and memory systems, including disk arrays, distributed storage systems, archival systems, and tape systems. The paper presents efficient encoding and erasure decoding algorithms and illustrates the advantages of the proposed approach as compared to the known art.
Qutaibah M. Malluhi, M. F. Malouhi
AICCSA1
1998 Non-Refreshing Analog Neural Storage Tailored for On-Chip Learning
abstract
In this research, we devised a new simple technique for statically holding analog weights, which does not require periodic refreshing. It further contains a mechanism to locally update the weights from the analog back-propagation signals for fast on-chip learning. In this circuit, the weight is stored as a 5-bit digital number, which controls the gates of five pass transistors allowing five binary-weighted (1,2,4,8,16) voltage references to integrate at a voltage adder. The output of the voltage adder is the analog weight. The 5-bit register is designed as an up/down counter so that every pulse on the up/down input will increase/decrease the weight by one level out of 32 possible levels. The learning circuit takes the analog graded error signal and generates two pulse streams for up/down counting depending on the sign of the error signal. The duration of the pulse stream is proportional to the magnitude of the error signal. This complete modular synaptic body (storage and learning technique) is appropriate for large scaleable analog VLSI neural networks because it handles recall and learning operations at the same speed with full parallelism.
Bassem A. Alhalabi, Qutaibah M. Malluhi, Rafic Ayoubi
Great Lakes Symposium on VLSI2
1998 A Scheme for High-Performance Data Delivery in the Web Environment
abstract
The paper describes a scheme for high performance and dependable data storage and delivery in a large scale distributed computing and communication environment such as the Web environment. The proposed scheme utilizes the parallelism of several distributed data servers storing striped data blocks to achieve high throughput. It employs coding techniques to protect the system against data unavailability and hence achieve dependable service. The performance results show that the proposed method has several advantages over traditional ones, such as data service through mirror sites. The error probability of the proposed method is orders of magnitude smaller than that of the mirroring with the same redundancy rate. The data rates for file downloading could be improved significantly by the proposed scheme.
Gwang S. Jung, Qutaibah M. Malluhi, W. G. Brown
ICPADS2
1998 Coding for High Availability of a Distributed-Parallel Storage System
abstract
We have developed a distributed parallel storage system that employs the aggregate bandwidth of multiple data servers connected by a high-speed wide-area network to achieve scalability and high data throughput. This paper studies different schemes to enhance the reliability and availability of such network-based distributed storage systems. The general approach of this paper employs "erasure" error-correcting codes that can be used to reconstruct missing information caused by hardware, software, or human faults. The paper describes the approach and develops optimized algorithms for the encoding and decoding operations. Moreover, the paper presents techniques for reducing the communication and computation overhead incurred while reconstructing missing data from the redundant information. These techniques include clustering, multidimensional coding, and the full two-dimensional parity schemes. The paper considers trade-offs between redundancy, fault tolerance, and complexity of error recovery.
Qutaibah M. Malluhi, William E. Johnston
IEEE Trans. Parallel Distributed Syst.1
1996 Approaches for a Reliable High-Performance Distributed-Parallel Storage System
abstract
The paper studies different schemes to enhance the reliability, availability and security of a high performance distributed storage system. We have previously designed a distributed parallel storage system that employs the aggregate bandwidth of multiple data servers connected by a high speed wide area network to achieve scalability and high data throughput. The general approach of the paper employs erasure error correcting codes to add data redundancy that can be used to retrieve missing information caused by hardware, software, or human faults. The paper suggests techniques for reducing the communication and computation overhead incurred while retrieving missing data blocks form redundant information. These techniques include clustering, multidimensional coding, and the full two dimensional parity scheme.
Qutaibah M. Malluhi, William E. Johnston
HPDC1
1996 The Extended Cube Connected Cycles: An Efficient Interconnection for Massively Parallel Systems
abstract
The hypercube structure is a very widely used interconnection topology because of its appealing topological properties. For massively parallel systems with thousands of processors, the hypercube suffers from a high node fanout which makes such systems impractical and infeasible. In this paper, we introduce an interconnection network called The Extended Cube Connected Cycles (ECCC) which is suitable for massively parallel systems. In this topology the processor fanout is fixed to four. Other attractive properties of the ECCC include a diameter of logarithmic order and a small average interprocessor communication distance which imply fast data transfer. The paper presents two algorithms for data communication in the ECCC. The first algorithm is for node-to-node communication and the second is for node-to-all broadcasting. Both algorithms take O(log N) time units, where N is the total number of processors in the system. In addition, the paper shows that a wide class of problems, the divide and conquer class, is easily and efficiently solvable on the ECCC topology. The solution of a divide and conquer problem of size N requires O(log N) time units.
Rafic Ayoubi, Qutaibah M. Malluhi, Magdy A. Bayoumi
IEEE Trans. Computers2
1996 Correction to "Efficient Mapping of ANNs on Hypercube Massively Parallel Machines"
Qutaibah M. Malluhi, Magdy A. Bayoumi, T. R. N. Rao
IEEE Trans. Computers1
1995 Efficient Mapping of ANNs on Hypercube Massively Parallel Machines
abstract
This paper presents a technique for mapping artificial neural networks (ANNs) on hypercube massively parallel machines. The paper starts by synthesizing a parallel structure, the mesh-of-appendixed-trees (MAT), for fast ANN implementation. Then, it presents a recursive procedure to embed the MAT structure into the hypercube topology. This procedure is used as the basis for an efficient mapping of ANN computations on hypercube systems. Both the multilayer feedforward with backpropagation (FFBP) and the Hopfield ANN models are considered. Algorithms to implement the recall and the training phases of the FFBP model as well as the recall phase of the Hopfield model are provided. The major advantage of our technique is high performance. Unlike the other techniques presented in the literature which require O(n) time, where N is the size of the largest layer, our implementation requires only O(log N) time. Moreover, it allows pipelining of more than one input pattern and thus further improves the performance.>
Qutaibah M. Malluhi, Magdy A. Bayoumi, T. R. N. Rao
IEEE Trans. Computers1
1995 Combinatorial Optimization of Distributed Queries
abstract
In relational distributed databases a query cost consists of a local cost and a transmission cost. Query optimization is a combinatorial optimization problem. As the query size grows, the optimization methods based on exhaustive search become too expensive. We propose the following strategy for solving large distributed query optimization problems in relational database systems: (1) represent each query-processing schedule by a labeled directed graph; (2) reduce the number of different schedules by pruning away invalid or high-cost solutions; and (3) find a suboptimal schedule by combinatorial optimization. We investigate several combinatorial optimization techniques: random search, single start, multistart, simulated annealing, and a combination of random search and local simulated annealing. The utility of combinatorial optimization is demonstrated in the problem of finding the (sub)optimal semijoin schedule that fully reduces all relations of a tree query. The combination of random search and local simulated annealing was superior to other tested methods.
Bojan Groselj, Qutaibah M. Malluhi
IEEE Trans. Knowl. Data Eng.2
1994 The Hierarchical Hypercube: A New Interconnection Topology for Massively Parallel Systems
abstract
Interconnection networks play a crucial role in the performance of parallel systems. This paper introduces a new interconnection topology that is called the hierarchical hypercube (HHC). This topology is suitable for massively parallel systems with thousands of processors. An appealing property of this network is the low number of connections per processor, which enhances the VLSI design and fabrication of the system. Other alluring features include symmetry and logarithmic diameter, which imply easy and fast algorithms for communication. Moreover, the HHC is scalable; that is it can embed HHC's of lower dimensions. The paper presents two algorithms for data communication in the HHC. The first algorithm is for one-to-one transfer, and the second is for one-to-all broadcasting. Both algorithms take O(log/sub 2/ k), where k is the total number of processors in the system. A wide class of problems, the divide & conquer class (D&Q), is shown to be easily and efficiently solvable on the HHC topology. Parallel algorithms are provided to describe how a D&Q problem can be solved efficiently on an HHC structure. The solution of a D&Q problem instance having up to k inputs requires a time complexity of O(log/sub 2/ k).>
Qutaibah M. Malluhi, Magdy A. Bayoumi
IEEE Trans. Parallel Distributed Syst.1
1993 An application-specific array architecture for feedforward with backpropagation ANNs
abstract
An application-specific array architecture for Artificial Neural Networks (ANNs) computation is proposed. This array is configured as a mesh-of-appendixed-trees (MAT). Algorithms to implement both the recall and the training phases of the multilayer feedforward with backpropagation ANN model are developed on MAT. The proposed MAT architecture requires only O(log N) time, while other reported techniques offer O(N) time, where N is the size of the largest layer. Beside the high speed performance, pipelining of more than one input pattern can be achieved which further improves the performance.>
Qutaibah M. Malluhi, Magdy A. Bayoumi, T. R. N. Rao
ASAP1