text:
- About this Journal ·
- Abstracting and Indexing ·
- Aims and Scope ·
- Annual Issues ·
- Article Processing Charges ·
- Articles in Press ·
- Author Guidelines ·
- Bibliographic Information ·
- Citations to this Journal ·
- Contact Information ·
- Editorial Board ·
- Editorial Workflow ·
- Free eTOC Alerts ·
- Publication Ethics ·
- Reviewers Acknowledgment ·
- Submit a Manuscript ·
- Table of Contents
International Journal of Distributed Sensor Networks
Volume 2013 (2013), Article ID 679450, 9 pages
How to Authenticate a Device? Formal Authentication Models for M2M Communications Defending against Ghost Compromising Attack
1School of Computer Science, China University of Geosciences, Wuhan 430074, China
2Shandong Provincial Key Laboratory of Computer Network, Jinan 250014, China
3School of Electronic Engineering, Naval University of Engineering, Wuhan 430033, China
4Department of Computer Science, National Chiao Tung University, Hsinchu 30010, Taiwan
Received 22 August 2012; Revised 27 November 2012; Accepted 29 November 2012
Academic Editor: Liguo Zhang
Copyright © 2013 Wei Ren et al. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
In Machine-to-Machine (M2M) communications, authentication of a device is of upmost importance for applications of Internet of Things. As traditional authentication schemes always assume the presence of a person, most authentication technologies cannot be applied in machine-centric M2M context. In this paper, we make the first attempt to formally model the authentication in M2M. We first model four attacking adversaries that can formulate all possible attacks in M2M, which are channel eavesdropping attack, credential compromise attack, function compromise attack, and ghost compromise attack. Next, we propose four models to tackle those corresponding adversaries, namely, credential-based model, machine-metrics-based model, reference-based model, and witness-based model. We also illustrate several concrete attacking methods and authentication approaches. We proof the authentication security for all proposed models and compare them for clarity. Our models present soundness and completeness in terms of authentication security, which can guide the design and analysis of concrete authentication protocols. Particularly, we construct a uniform authentication framework for M2M context and point out all possible authentication mechanisms in M2M.
1. Introduction
Machine-to-Machine (M2M) communication is a typical communication fashion in the Internet of Things (IoT). It has been envisioned as one of the most promising Internet-accessing approaches in the IoT for long-distance remote devices. M2M networking interface enables wide area communications for mobile or static devices, so that it is quit convenient and easy to deploy remote devices rapidly. M2M thus becomes a typical communication method for most IoT applications such as remote environmental sensing, long-distance controlling, moving object locating, and tracing. Besides, M2M communication further incorporates various novel applications such as smart grid [1], tele-medicine [2], and smart vehicles [3].
As remote devices are always located faraway in unattended or malicious environments, it is very likely that the devices may be hacked by attackers. For example, the software system in devices may be injected or infected by certain malicious codes, which may modify or fabricate forthcoming outgoing data. Moreover, the devices may perform arbitrary (Byzantine) misbehavior after being compromised. Thus, the data sent by remote sensing devices must be authenticated. Otherwise, remote receivers in the other end will receive a lot of garbage information and consequently respond falsely.
We note that the authentication in M2M context is quite different from traditional authentication. Roughly speaking, traditional authentication usually assume the entity being authenticated is a person, or human is involved in authentication procedures. Simply speaking, the authentication methods usually rely on three aspects: "what you know, what you have, and who you are." As the entity authentication in M2M is not a person, the traditional methods such as "what you know and who you are" may not be applied. For example, password-based authentication (by manually inputting password) cannot be applied in M2M context. The biometric-based authentication such as fingerprint recognition cannot be applied in M2M context neither.
Furthermore, traditional authentication methods for wireless sensor networks (WSNs) may not be able to smoothly migrate to M2M situations. That is, the authentication methods in WSNs usually rely on certain secrete credentials in cryptographic building blocks, for example, secrete keys for symmetric key encryptions, or private keys for digital signatures. Those secrete credentials are stored in devices or chips attached to devices (e.g., smart cards). However, such an authentication method still cannot defend against all aforementioned attacks. For example, when devices are compromised, those credentials will be revealed by attackers, by hacking the devices or injecting malicious codes. It again shows the distinction between M2M authentication and person-based authentication where entities (i.e., persons) usually are assumed uncompromising.
Therefore, the entity authentication in M2M context must be reconsidered and reinspected. We also need to explore the tailored authentication methods in M2M context, to guarantee a stronger authentication (that will be formally defined later), in case the devices are compromised and credentials are exposed. Besides, the formal models for authentication are appealing, as the formal models can guarantee the security strength and clarify the core part out from various application details. Unfortunately, such problem has not been explored thoroughly until now, to the best of our knowledge.
Currently, although several related works start to concentrate on M2M security problems [4–8], the strong authentication methods in M2M have not been thoroughly explored yet [9–13]. In this paper, we make the first attempt to figure out the abstract models for M2M context. We adapt a formal and rigorous method used in modern or theoretic cryptography, to strictly state, present, and analyze the security of authentication. More specifically, we firstly formulate attack models regarding to device compromising in M2M context by using interactive Turing machine. We next categorize the classifications in M2M authentication and their security specification. Finally, we propose several abstract authentication models to address different attacking patterns and proof their security. All our presentations strictly follow the formal expressions for better clarity and rigorous generality.
The contributions of the paper are listed as follows: (1) we strictly formulate the possible attacks and adversaries in M2M, which facilities to clearly locate the security fragile point. For example, we point out credential compromising attack, function compromising attack, and ghost compromising attack; (2) we formulate the general and abstract authentication models with provable security in M2M context, which figures out the fundamental characteristics of all possible authentication methods in M2M to guide the further design and security analysis in practices; (3) we point out several concrete attacking methods and propose corresponding authentication approaches to illustrate our models.
The rest of the paper is organized as follows. In Section 2, we discuss the basic assumption and models used throughout the paper. Section 3 provides the detailed description of our proposed models and analysis. Section 4 gives an overview on relevant prior work. Finally, Section 5 concludes the paper.
2. Problem Formulation
2.1. Network Model
In most M2M communications, there exists two major entities: devices, denoted as
In this paper, we focus on above typical fashion in M2M communications—from devices to central servers. It is without loss of generality, because communications between devices and devices far away in M2M are usually relayed by a central server. As the devices are equipped with wide area communication capabilities, multihop M2M relay within remote devices rarely happen. The relay is usually unnecessary, as the devices can upload reports directly to central servers.
Even though multihop relay between devices happens, it is usually local area wireless communication such as wireless personal area network (WPAN), for example, Zigbee, or wireless local area network. That is, the reasonable architecture has two tiers: the communication between devices and gateways is WPAN, but the communication between gateways and a central server is M2M. In this case, the authentication of devices in the former tier has been explored in WSN communities and previous solutions can be migrated; the authentication of gateways in the latter tier is our focus. That is, in this scenario, we look on gateways as devices in our discussion.
In addition, no matter in which kind of authentication scenarios, we always assume the peer who authenticates (i.e., verifier) is trusted or secure. It is a baseline for the further meaningful discussion. We thus focus on the peer being authenticated (i.e., prover), which is a device in M2M scenarios. That is, how to authenticate a device in M2M.
2.2. Attack Model
It is required to consider the situation that devices may be compromised, as the devices may be always located in unattended environments. From the viewpoint of security strength, such assumption for the existence of stronger adversary will result in stronger security guarantee, which is mandatory for certain critical applications, such as gas emission monitoring and back-bone smart grid. According to the modeling of networks and devices, we classify the attack models into four folders as follows.(1)Channel eavesdropping attack, denoted as
Note that, the
2.3. Security Definition
Roughly speaking, the secure authentication in this paper is defined as the interactive proof between two probabilistic polynomial interactive Turing machine (ITM) [14].
The ITM being authenticated is called Prover (denoted as ); the ITM authenticating Prover is called Verifier (denoted as ). The and both have one outgoing communication tape, one incoming communication tape, one input computing tape, one output computing tape, and one inner working tape. They also have other auxiliary tapes for interaction and security: one identity tape, one security parameter tape, one random tape, and one-bit activation tape. In this paper, the outgoing communication tape of is the same with the incoming communication tape of . For simplicity, this tape is called interaction tape, denoted as .
The adversary (denoted as
As we have already stated, needs to be secure (or honest) in authentication semantics.
Environmental ITM (denoted as ) exists. can read and write input tapes of and . The protocol result is the output of .
The one interaction between and can be modeled as follows.(1) writes outgoing communication tape ;(2) reads incoming communication tape .
The sequence can be interchangeable. The times of interaction may be more than once.
Next, we state the definition of authentication and its security as follows:
Definition 1 (Authentication). From the transcripts on tape by , can believe the data is indeed from (and data is not modified). More specifically, from in the transcripts on tape , can believe is indeed from the device with the without any change.
Definition 2. Security of Authentication of Protocol in the presence of adversary . From in in the protocol 's transcripts that are tampered to by adversary , the probability that the adversary can fool to believe is from the device with without any change is negligible.
Define attack experiment
Definition 3. Authentication protocol is secure, if for any ITM adversary , it exists a negligible function
Indeed, authentication can be further divided into two types: entity authentication and message authentication. Entity authentication is the concentration in this paper. Message authentication is however usually required also in communication context and can be attained with entity authentication together. We thus later do not explicitly split those two.
Definition 4 (Entity Authentication (Message Source Authentication)). From in the transcripts on tape , can believe is from the device with .
Definition 5 (Message Authentication (Message Integrity Authentication)). From in the transcripts on tape , can believe is transferred without any change.
We can similarly define the attack experiment and corresponding security for entity authentication and message authentication.
3. Proposed Authentication Models
In this section, we propose a family of models to solve the authentication problem in M2M context.
We list all major notations used in the remainder of the paper in Table 1.
3.1. Defending Channel Eavesdropping Attack: Credential-Based Model (CBM)
To defend
(1) One-wayness. From , it is computationally infeasible to compute , even if , and are public. By using a formal notation, that is
(2) Second-Preimage Resistance. Without , it is computationally infeasible to find another such that , even if , and are public. Similarly, without , it is computationally infeasible to find another satisfying , even if , and are public. That is,
Certainly, can be easily computed if are available, especially for resource constraint devices in M2M context. can be instantiated with cryptographic primitives such as one-way function with second-preimage resistance, pseudorandom function, and trapdoor permutation.
Credential-based model can be further divided into two folders: one credential-based model and multicredential-based model. As it is named, multicredential-based model use multiple credentials in each
For only guaranteeing the entity authentication,
Definition 6 (Soundness). The designed protocol can guarantee the required security. That is, the designed protocol is the sufficient condition of the required security.
Definition 7 (Completeness). The required security needs the designed protocol to guarantee. That is, the designed protocol is the necessary condition of the required security.
Proposition 8. Credential-based model is secure in
Proof. It can be proofed by similar methods in Universally Composable security [14]; hereby only sketch is given. The security of the proposed model is guaranteed by the security of . The rationale is from the Turing Test. There exist a reality model and an ideal model. From the viewpoint of environmental machine, if the reality model and ideal model are indistinguishable, the reality model will reach the security of the ideal model. In reality model, there exist adversary, prover, and verifier running protocol; In ideal model, there exist ideal function that emulates the protocol, dummy prover and dummy verifier, and simulated adversary that emulates all possible interactions and attacks. Ideal function is always secure (it is regarded as an imaged trusted third party). If the ideal model and reality model are indistinguishable from the viewpoint of environmental machine, the security of protocol will be guaranteed.
In other words, if environmental machine can distinguish the reality model and the ideal model, a new adversary can be created to subvert a certain security assumption by revoking the environmental machine as a subfunction. In the ideal function, is perfectly secure. In the reality model, is assumed to satisfy certain security requirements (e.g., one-wayness and preimage resistance). If the ideal model is indistinguishable with reality model by environmental machine, the adversary will subvert the assumption by consulting the environmental machine. Finally, the proposition proofs the soundness of credential-based model.
Proposition 9. Credential-based model has completeness for defending Channel Eavesdropping Attack.
Proof. The proof has two folders: the credential is required; the credential is presented properly. On the one hand, as devices need to distinguish themselves with others, they need to show their secretly possessed knowledge—credential—to proof their identity. Thus, there must exist a credential in the tuples in
Besides, multicredential-based model is securer than one credential-based model. That is, the exposure of one credential by eavesdropping adversary will only result in subverting the authentication security guaranteed by that credential. If has multiple credentials, the exposure of credentials will become more difficult. It is natural to extend the security discussion to following statement.
Definition 10 (Forward Authentication Security). That is, if current credential is exposed by eavesdropping adversary , the authentication security before exposure is still guaranteed.
Proposition 11. In
Proof. By using one-way function , , , where . The sequence of using is from to . Due to the one-wayness of , it can guarantee the confidentiality of previous credentials, even if current used credential is revealed by .
Proposition 12. Credential-based model is not secure in
Proof (Straightforward). The authentication security of credential-based model relies on the secrecy of credentials. The presence of will reveal all credentials. Thus, the authentication security is broken.
3.2. Defending Credential Compromising Attack: Machine-Metrics Based Model (MBM)
If the attack model is strengthened to
For simple illustration of
Definition 13 (Credential Relocation Attack). It is an attack that the credentials are relocated to anther device. Although the received is verified valid at , the data do not come from the device with claimed ; indeed, the data come from another device with different .
To tackle the
If we look as a credential in CBM model, we will have similar discussion as follows. and , can be easily computed, especially for resource constraint devices in M2M context. can be instantiated with cryptographic primitives such as one-way function with second-preimage resistance, pseudorandom function, and trapdoor permutation.
Machine-metrics based model can be further divided into two folders: one Machine-Metrics based model and multiple Machine-Metrics based model. As it is named, multiple Machine-Metrics based model use multiple in each
For only guaranteeing the entity authentication,
Proposition 14. Machine-Metrics based model is secure in
Proof. As the function module is secure, adversary cannot compute , (). It can be looked as a computed credential to guarantee the authentication security. The proof thus is reduced to the proof of the Proposition 8. It proofs the soundness of Machine-Metrics based model.
Proposition 15. Machine-Metrics based Model has completeness for defending Credential Compromising Attack.
Proof. The proof can be reduced to the proof of Proposition 9. Concretely, the proof has two folders: a new credential is required; the new credential is presented properly. On the one hand, as devices need to distinguish themselves with others, they need to show their secretly possessed knowledge—credential—to proof their identity. As the credential module can be compromised, the credential must come from the functional module. Thus, there must exist a credential in the tuples in
Similarly, multiple Machine-Metrics based model is securer than one Machine-Metrics based model. The discussion is similar to the one in the previous section. In summary, Machine-Metrics based model can be looked as an analog of biometric-based authentication for human.
Proposition 16. Machine-Metrics based model is not secure in
Proof (Straightforward). The authentication security of Machine-Metrics based model relies on the secure computation of , . The presence of will reveal all , . Thus, the authentication security is broken.
We give three special illustrations on Machine-Metrics based model for defending
Definition 17 (Computation-Based Authentication). Each time sends a one-time random computational puzzle, counts the computation duration time in microsecond or Central Process Unit (CPU) cycles as the result of .
Example 18. sends a computational puzzle , where is a prime number; is an integer; is a positive integer. counts the computation duration time in microsecond as the computation characteristic, in other words, the returning result of .
Definition 19 (Location-Based Authentication). sends an one-time random location puzzle. returns computed location values. verifies the location characteristic of . That is, returns location values of .
Example 20. sends an one-time random location puzzle: the distance from to a randomly chosen point. computes the distance value according to its location values such as global positions and latitudes, as the location characteristic, in other words, the returning result of .
Similarly, we can further define authentication methods by requesting other physical characteristics such as memory size, hardware fingerprints. Note that such kind of requesting must be fresh and generated at real time.
3.3. Defending Function Compromising Attack: Reference-Based Model (RBM)
If the attack model is strengthened to
To illustrate
Definition 21 (Characteristic Replication Attack). The set is replicated to another device by attackers, and they will choose corresponding by elements upon revoking of .
Definition 22 (Data Pollution Attack). Data is polluted by attackers, although the credential is valid to make the data being authenticated. That is, , where is changed to by adversary
To tackle the
The reference-based model is described as follows: where the includes a tag verification function and especially, an extra verification function for data, called .
We give two special illustration on reference-based model in the following.
Definition 23 (History-Based Authentication). The authenticator verifies the history behaviors (e.g., data) to authenticate the trustworthiness of current behavior of , for example, the trustworthiness of . Concretely, the data filter method can be applied at , where data come from the history.
Example 24. Suppose the history set is , which consists of values. That is, . Suppose the history set is trustworthy, the detection of abnormal can be done by the following verification function: where is an alert threshold.
Definition 25 (Neighbor-Based Authentication). The authenticator verifies the other 's behaviors (e.g., neighbors' reporting data) to authenticate the trustworthiness of current behavior of , for example, the trustworthiness of . Concretely, the data filter method can be applied at , where the data come from neighbors.
Example 26. Similar to above example, suppose the neighbor set is , which consists of values. That is, . Suppose the neighbor set is trustworthy, the detection of abnormal can be done by the following verification function: where is an alert threshold.
In the neighbor-based authentication, the reference set may not be always trustworthy. That is, the values in may come from other s that are untrustworthy. To deal with this issue, we propose extra two methods in the following.
Definition 27 (Trustworthy Stunt Authentication). The is from other trustworthy s that are predeployed. That is, the authenticator verifies the trusted stunt's report (e.g., data) to authenticate the trustworthiness of current behavior of , for example, the trustworthiness of . The verification function in this situation is similar to history-based Authentication.
Definition 28 (Threshold Stunt Authentication). Suppose there exists at least nodes in that are trustworthy (i.e., not compromised) in neighbor-based authentication. Simply speaking, the verification function can be designed as follows: select the median values in and then use verification function similarly.
Proposition 29. Reference-based model is secure in
Proof. The message source authentication is guaranteed by Proposition 8. The message integrity authentication is roughly guaranteed by history-based authentication and neighbor-based authentication in reference-based model. It proofs the soundness of reference-based model.
Proposition 30. Reference-based Model has completeness for defending Function Compromising Attack.
Proof. As functional module can be compromised by , computational credential (namely, or ) may be revealed, which is so-called characteristic replication attack. Besides, even though credentials in credential module can grantee that data cannot be modified by adversaries in the channel, the data can still be modified at the devices after the functional module is compromised, which is so-called data pollution attack. Thus, credentials in credential module defend against the former one; history-based authentication and neighbor-based authentication defend against the latter one.
Proposition 31. Reference-based model is not secure in
Proof (Straightforward). As the credential module can be compromised in , the authentication security is broken.
3.4. Defending Ghost Compromising Attack: Witness-Based Model (WBM)
If the adversary has the most powerful strength, namely, the
Proposition 32.
Proof (Straightforward). As the credential module and functional module can both be compromised, any security enhancement will be also compromised. Thus,
To tackle the
Suppose environmental characteristics consist of components. That is, . There exists at least one program that can return . In addition, suppose the device characteristics space is , which consists of characteristics. That is, . There exists at least one program that can return . The witness-based model is described as follows: where the includes a tag verification function , a data verification function , and an environment verification function .
We give an illustration for the witness-based authentication in the following.
Definition 33 (Contamination-Based Authentication). The authentication is provided by witness from other trustworthy peers in different channels.
Example 34. The authenticator verifies whether is touched or moved via the observation of protection lock or surveillance video camera. For example, returns lock status (suppose locked status is 1); returns whether camera picture is in static status (suppose static status is 1 means the monitored device is untouched). The .
Proposition 35. Witness-based model is secure in
Proof (Sketch). As the proof of authentication relies on the witness from others who are not compromised, the authentication security can be guaranteed. It proofs the soundness of witness-based model.
Proposition 36. Witness-based Model has completeness for defending Ghost Compromising Attack.
Proof (Sketch). As the can be totally compromised, the security enhancement for authentication must come from other trustworthy entities.
Comparison. The security comparison of proposed models is compared and summarized in Tables 2 and 3.
4. Related Work
Security of M2M communications starts to attract more and more attentions [4, 5, 7, 8], but solutions for authentication in M2M context have not been thoroughly explored. Especially, the formal authentication models for M2M have been rarely discussed. In this paper, we made the first attempt in this regard. Zhang et al. [12] provided a practical group-based authentication for Machine Type Communication (MTC) scenario. Each device shares a secret key with home environment, and a group secret key with other devices in the same group. Their discussion focused on roaming cellular networks and human may be involved. He [10] proposed to use machine's fingerprint and encryption technique to conduct remote register authentication of software to prevent unauthorized use. It focused on software copyright safeguard. Lu et al. [5] first pointed out the reliability and security requirements in M2M communications. Many other works addressed security problems in smart grid scenarios, which may be related to M2M communications. For example, Fadlullah et al. [15] studied the detection of malicious activities in smart grid communication and proposed an early warning system. Bartoli et al. [16] studied secure aggregation in smart grid M2M networks. They included the security design in the physical layer and MAC layer. Saied et al. [8] proposed a key establishment solution for heterogeneous M2M communications. Other works explored the security in a broader domain—IoT, which is relevant to M2M. For example, Alam et al. [17] studied the interoperability in security attributes between different administrative domains in IoT. They proposed a layered architecture of IoT framework. As the M2M is still undergoing development, several works studied M2M standards [6, 18–20]. For example, Bartoli et al. [6] reviewed the current undergoing standards for M2M communications.
5. Conclusions
In this paper, we made the first attempt to propose a family of formal models to authenticate devices in M2M context. We first modeled four attacking adversaries that can include all possible attacks in M2M. Next, we proposed four models to tackle corresponding adversaries. We also illustrated several concrete attacking methods and authentication approaches. We proofed the authentication security for all proposed models and compared them for clarity. Our models presented soundness and completeness with respect to necessary and sufficient conditions for authentication security, which can guide the design and analysis of concrete authentication protocols. Especially, we constructed a uniform authentication framework for possible various authentication approaches. Our model also pointed out all possible authentication mechanisms or sufficient solutions for authentications in M2M.
This research was financially supported by National Natural Science Foundation of China (no. 61170217), the Open Research Fund from Shandong provincial Key Laboratory of Computer Network (no. SDKLCN-2011-01), and Fundamental Research Funds for the Central Universities, China University of Geosciences (Wuhan) (nos. 110109 and 090109).
- J. Liu, X. Li, X. Chen, Y. Zhen, and L. Zeng, "Applications of internet of things on smart grid in China," in Proceedings of the 13th International Conference on Advanced Communication Technology: Smart Service Innovation through Mobile Interactivity (ICACT '11), pp. 13–17, Seoul, South Korea, February 2011. View at Scopus
- X. M. Zhang and N. Zhang, "An open, secure and flexible platform based on internet of things and cloud computing for ambient aiding living and telemedicine," in Proceedings of the International Conference on Computer and Management (CAMAN '11), pp. 1–4, Wuhan, China, May 2011. View at Publisher · View at Google Scholar · View at Scopus
- T. Tielert, M. Killat, H. Hartenstein, R. Luz, S. Hausberger, and T. Benz, "The impact of traffic-light-to-vehicle communication on fuel consumption and emissions," in Proceedings of the 2nd International Internet of Things Conference (IoT '10), pp. 1–8, Tokyo, Japan, December 2010. View at Publisher · View at Google Scholar · View at Scopus
- I. Cha, Y. Shah, A. U. Schmidt, A. Leicher, and M. Meyerstein, "Addressing new security threats," IEEE Vehicular Technology Magazine, vol. 4, no. 3, pp. 69–75, 2009. View at Publisher · View at Google Scholar · View at Scopus
- R. Lu, X. Li, X. Liang, X. Shen, and X. Lin, "GRS: the green, reliability, and security of emerging machine to machine communications," IEEE Communications Magazine, vol. 49, no. 4, pp. 28–35, 2011. View at Publisher · View at Google Scholar · View at Scopus
- A. Bartoli, M. Dohler, J. Hernández-Serrano, A. Kountouris, and D. Barthel, "Low-power low-rate goes long-range: the case for secure and cooperative machine-to-machine communications," in Proceedings of the IFIP TC 6th International Conference on Networking (Networking '11), vol. 6827 of Lecture Notes in Computer Science, pp. 219–230, Valencia, Spain, April 2011.
- D. A. Bailey, "Moving 2 mishap: M2M's impact on privacy and safety," IEEE Security & Privacy, vol. 10, no. 1, pp. 84–87, 2012. View at Google Scholar
- Y. B. Saied, A. Olivereau, and M. Laurent, "A distributed approach for secure M2M communications," in Proceedings of the 5th International Conference on New Technologies, Mobility and Security (NTMS '12), pp. 1–7, Istanbul, Turkey, May 2012.
- X. Sun, S. Men, C. Zhao, and Z. Zhou, A Security Authentication Scheme in Machine-to-Machine Home Network Service, Security and Communication Networks, 2012.
- D. He, "Remote authentication of software based on machine's fingerprint," in Proceedings of the IEEE 3rd International Conference on Software Engineering and Service Science (ICSESS '12), pp. 543–546, Beijing, China, June 2012.
- W. Zhang, Y. Zhang, J. Chen, Hui Li, and Y. Wang, "End-to-end security scheme for machine type communication based on generic authentication architecture," in Proceedings of the 4th International Conference on Intelligent Networking and Collaborative Systems (INCoS '12), pp. 353–359, Bucharest, Romania, September 2012.
- Y. Zhang, J. Chen, H. Li, W. Zhang, J. Cao, and C. Lai, "Dynamic group based authentication protocol for machine type communications," in Proceedings of the 4th International Conference on Intelligent Networking and Collaborative Systems (INCoS '12), pp. 334–341, Bucharest, Romania, September 2012.
- Z. Obrenović and B. den Haak, "Integrating user customization and authentication: the identity crisis," IEEE Security & Privacy, vol. 10, no. 5, pp. 82–85, 2012. View at Google Scholar
- R. Canetti, "Universally composable security: a new paradigm for cryptographic protocols. Cryptology ePrint archive," Report 2000/067, 2000, http://eprint.iacr.org/.
- Z. M. Fadlullah, M. M. Fouda, N. Kato, Xuemin Shen, and Y. Nozaki, "An early warning system against malicious activities for smart grid communications," IEEE Network, vol. 25, no. 5, pp. 50–55, 2011. View at Google Scholar
- A. Bartoli, J. Hernandez-Serrano, M. Soriano, M. Dohler, A. Kountouris, and D. Barthel, "Secure lossless aggregation over fading and shadowing channels for smart grid m2m networks," IEEE Transactions on Smart Grid, vol. 2, no. 4, pp. 844–864, 2011. View at Google Scholar
- S. Alam, M. M. R. Chowdhury, and J. Noll, "Interoperability of security-enabled internet of things," Wireless Personal Communications, vol. 61, no. 3, pp. 567–586, 2011. View at Google Scholar
- K. Chang, A. Soong, M. Tseng, and Z. Xiang, "Global wireless machine-to-machine standardization," IEEE Internet Computing, vol. 15, no. 2, pp. 64–69, 2011. View at Publisher · View at Google Scholar · View at Scopus
- G. Wu, S. Talwar, K. Johnsson, N. Himayat, and K. D. Johnson, "M2M: from mobile to embedded internet," IEEE Communications Magazine, vol. 49, no. 4, pp. 36–43, 2011. View at Publisher · View at Google Scholar · View at Scopus
- Y. Zhang, R. Yu, S. Xie, W. Yao, Y. Xiao, and M. Guizani, "Home M2M networks: architectures, standards, and QoS improvement," IEEE Communications Magazine, vol. 49, no. 4, pp. 44–52, 2011. View at Publisher · View at Google Scholar · View at Scopus


text:
Come to our December 6th Performances in Oakland Chinatown! Taiko Kids4Kids starts at 2pm and includes a kids performance and workshop. Taiko Wonderland starts at 5pm and features our new songs. In addition, find us at the SF Dragon Boat Festival, the Oakland Marathon, Solano Stroll, Cupertino Cherry Blossom Festival, and many other locations!
Please check the Performance page for updates.
This International Taiko WebRing site is owned by Emeryville Taiko © 2008, 2009, 2010.
| Previous | Next | Taiko Ring Index | Join Taiko WebRing

subset: commoncrawl


text:
Safarica - A trip through Western Africa
Knut Ditlev-Simonsen & Jens Thommesen
This is a book with pictures and diary from an overland trip 3 guys took from North Cape Norway through 26 countries in Africa before they got to Cape Aghulas, the southern most point of Africa.
Great pictures and a funny diary to accompany them.
Comment posted.
Log in
or create an account to post a comment.
Blurb Sites


text:
Third Year at Arizona
22 Years in Coaching
* Coached Mike Thomas to a freshman school-record 52 catches in 2005
* Helped UA's Syndric Steptoe emerge as a big-play perimeter threat, improving from nine catches the year before to 30 in 2004 and 37 in 2005
* Helped develop receiver Troy Williams, 2005 first-round NFL draft pick by Minnesota
?* Spent six seasons as receivers coach with the National Football League's Tampa Bay Buccaneers from 1996 to 2001, tutoring standout performers such as Keyshawn Johnson, Reidel Anthony and Jacquez Green. Johnson was chosen to play in three Pro Bowls while Williams was his position coach.
?* The 2000 and 2001 Tampa Bay offense set several club offensive records, and during his tenure, the team advanced to the playoffs four times.
?* Williams was wide receivers coach at Miami for three years before his NFL stint, two under Dennis Erickson and one under Butch Davis.
?* In 1993 and 1994, Williams coached receiver Chris T. Jones, who led the Hurricanes both years and had a total of 90 catches for 1,462 yards. The 1993 ?'Canes (9-3) fell victim to Arizona in the 1994 Fiesta Bowl, 29-0, with Jones as the only bright spot for Miami with six catches for 98 yards.
?* Part of the 1994 Miami staff that led the Canes to a 10-2 finish and played Nebraska in the Orange Bowl.
?* Played two years of football as a defensive back at Colorado State.
Williams enters his second season on the Arizona staff and brings experience coaching high-caliber players at both the major college and professional ranks. His second group of Wildcats should be a team strong point after a year of indoctrination for the corps.
Williams coaches wide receivers and has a solid background working with the position.
Williams, 48, also adds some Western ties to the staff, having prepped and coached in the greater Los Angeles area and played college ball at Colorado State. He joined Mike Stoops' first UA staff after a year in 2003 as receivers coach at the University of South Carolina under coach Lou Holtz.
Williams' Coaching history
1984 Long Beach City College, assistant
1985 Long Beach City College, assistant
1986 New Mexico State, assistant
1987 New Mexico State, assistant
1988 Texas Christian, assistant
1989 Texas Christian, assistant
1990 Texas Christian, assistant
1991 Texas Christian, assistant
1992 Minnesota, receivers coach
1993 University of Miami, receivers coach
1994 University of Miami, receivers coach
1995 University of Miami, receivers coach
1996 Tampa Bay Buccaneers, receivers coach
1997 Tampa Bay Buccaneers, receivers coach
1998 Tampa Bay Buccaneers, receivers coach
1999 Tampa Bay Buccaneers, receivers coach
2000 Tampa Bay Buccaneers, receivers coach
2001 Tampa Bay Buccaneers, receivers coach
2003 University of South Carolina, receivers coach
2004 Arizona, Wide Receivers coach
2005 Arizona, Wide Receivers coach
Williams in bowl games
1993 Fiesta Bowl Miami receivers coach
1994 Orange Bowl Miami receivers coach
1997 NFL Divisional playoff Tampa Bay receivers coach
1999 NFC Championship game Tampa Bay receivers coach
2000 NFC Wild Card game Tampa Bay receivers coach
2001 NFC Wild Card game Tampa Bay receivers coach
The Williams File
Birthdate: January 31, 1958
High School: Long Beach, Calif., Poly High School
College: Colorado State, 1982
Playing Experience: Colorado State, defensive back, 1978-79
Family: Daughters Sydney and Jada; son Gregory; wife Lisa
Recruiting Areas: Los Angeles Valley, Bakersfield, Long Beach


text:
Tali-Tau by Kain-MoerderWatch
Tali Tau is dancing for the Greater Good of the galaxy! )
OH GOD SUICIDE SCENE RELAPSE!!! QoQ
*Drops in to a fetal position and weeps while shouting "TAAAALIIIIIIHIIIHIIIHIIIHIIIIIIIII~!!!"*
'Just as planned'. )
do the Tau'va
........ No. Noooooooooooooooo. Falls to my knees with my vision of Tali crushed.
Great Piece though.
The face no thats cool. I can see her looking like that. The one Bioware made what a really good photoshop of Mrs. Britian or England. I was doing that to the combined her with the tau thing in the description. Love Tali hate the Tau. Them and their near unlimited range.
You're welcome.
'Hate' the Tau? Oh, c'mon. It's a fictional race in a fictional universe.
I rather they actually made her a real face or took one the face made ones. The photoshoped looked good. But I agree it was a very lazy thing to do. To me it was just an excuse so they didn't have to put a face on her model. So I agree with you.
I know, but the range of their guns, the whole greater good, and the fact they are immune to the warp and not mention it only took them a thousand years to get where they are now just annoys me to no end.


text:
Published on June 25th, 2012 | by TRI Staff0
Physically Impossible for Aaron Carter to Have Beaten Shaq, Researchers Confirm
BOSTON – A new study conducted by Tufts University Department of Physics and The School of Hard Knocks, confirmed that Aaron Carter could not possibly have beaten Shaquille O'Neal in a one-on-one basketball game.
"Look, there have been some short, skinny NBA players before, but David Stern ensures that they're never prepubescent or white," said Jackson Morel, the head researcher of the project tentatively titled "I'm Telling You The Facts: Aaron Carter Did Not Beat Shaq."
Morel continues, "Essentially, we've determined that it's physically impossible for a scrawny pre-teen rapper to put it in the hoop like slam against one of the most dominant centers the NBA has ever known."
"Now, Mr. Carter might be able to take on LeBron in a game consisting solely of 4th quarters, but definitely not Mr. O'Neal during his prime, or even the rotting carcass of O'Neal that played for all thirty NBA teams in his last two seasons."
Following the study's publication, O'Neal tweeted, "as long as I don't have to make Kazaam 2, I will let any and all skinny white boys take me on. Bieber, tell me how my ass tastes."
Charles Barkley chimed in and said that the whole concept was "turrible."
In response, Mac Miller has released an official press statement issuing a challenge to the 2012 NBA Champion Miami Heat. The Heat have agreed to play with Miller as long as he promises to stop rapping.


text:
Mayor Buckhorn Hosts May Food Truck Fiesta This Wednesday
Tampa, Fla. (May 5, 2014) Mayor Buckhorns April Food Truck Fiesta will be this Wednesday, May 7, 2014. The event is from 11 a.m. to 2 p.m. in Lykes Gaslight Square Park on Franklin Street between Madison Street and Kennedy Boulevard.
In conjunction with the Tampa Downtown Partnership, the Mayors Food Truck Fiesta was first launched in Lykes Gaslight Square Park in November 2011.
The May Fiesta will feature the following food trucks:
Kool Breeze NEW
Mixed Breed NEW
Burger Culture
Kings Bistro
La Boutique Fashion Truck
Michelle Faedo
Gone Bananas
HolyHog BBQ
The Mayor's Food Truck Fiesta will be held the first Wednesday of every month at lunchtime from 11 a.m. to 2 p.m. in downtown Tampa.
Source: Tampa Gov Media


text:
A rondel depicting God creating Adam from clay from Hartmann Schedel's The Book of Chronicles, or in German Das Buch der Chroniken (1493).
Listen to the latest episodes of CHF's award-winning podcast.
Help us preserve and share the history of chemistry and related sciences. Make a tax-deductible tax-deductible gift online.
Millipore water testing kit, 1960
©2010–2016 Chemical Heritage Foundation


text:
Softballs From Utah
Aaron Rutkoff reports on friendly questions facing Gonzales at today's hearing.
During today's early rounds of questioning Attorney General Alberto Gonzales, Utah Sen. Orrin Hatch's supportive tone was in direct contrast to his Judiciary Committee colleagues. Even accounting for partisan hostility, Hatch's approach was far more easygoing than his fellow Republicans. Sen. Arlen Specter (R., Pa.), for instance, used the morning session to chide Gonzales for his lack of careful preparation before his earlier public statements. Hatch's positive stance is nothing new: In an appearance on NBC's "Meet the Press" earlier this month, he called Gonzales a "very honest man" who's "done a very good job."
What accounts for Hatch's broad and enduring support? He has deep ties to the person Gonzales has repeatedly singled out as the principal architect of the plan to remove eight U.S. attorneys: Kyle Sampson, the attorney general's former chief of staff.
Both Sampson and Hatch hail from Utah. In 1999, Sampson's links to the state's legal community helped him land a job working for Hatch on the Senate Judiciary Committee staff. From that perch, Sampson launched his Washington career, moving on to a job in the Bush White House in 2000 and then to the Ashcroft Justice Department, where he became Gonzales's top aide in 2006.
Hatch's fateful intervention — although indirect — kept Sampson in his that job, where he helped craft the controversial plan to remove eight U.S. attorneys. Sampson had been one of two candidates replace Paul Warner, the Clinton-appointed federal prosecutor for Utah, when he retired in January 2006. But Hatch was among a group of influential Utah Republicans who threw their support behind Brett Tolman for the job, as reported in the Salt Lake Tribune.


text:
The LINGUIST List is dedicated to providing information on language and language analysis, and to providing the discipline of linguistics with the infrastructure necessary to function in the digital world. LINGUIST is a free resource, run by linguistics students and faculty, and supported primarily by your donations. Please support LINGUIST List during the 2016 Fund Drive.
Personal Directory Information
|Sara L. Sanders
|Coastal Carolina University
|Selected Publications:
|Announced on LINGUIST :
English in the Southern United States
English in the Southern United States
|Reviewed on LINGUIST :
English in the Southern United States
|Add to Linguist Directory
|Update your entry


text:
Interview Schedule for Self Finance Session 2013-2014 — Interview Schedule 2013 for Admission to MBBS and BDS in Government Medical & Dental Colleges of Khyber Pakhtunkhwa
The following lists of candidates are requested to attend their Interviews on the dates mentioned against each for admission to First Year MBBS / BDS Session 2013-14, along with original documents in their respective venues.
It is further added that selected candidates would be required to deposit Rs. 26,155/= (Government dues plus student fund) the same day.


text:
Bestselling author James Patterson, known for crime thriller series such as "Alex Cross," The Women's Murder Club," and "Private;" but also romance and young adult fiction, was recently seen on MSNBC's weekday show "Morning Joe." Patterson has been making his rounds in the media circuit and wants to save bookstores. While discussing his writing career on the program, Patterson revealed he is donating $1millon dollars to save America's bookstores; preferably the smaller and independent ones.
The Morning Joe interview can be viewed here: http://on.msnbc.com/MQDMgU
Patterson is on a mission. In September 2013 on "CBS This Morning," he remarked –
"We're making this big transition right now to e-books, and that's fine and good and terrific and wonderful. But we're not doing it in an organized, sane, civilized way, so what's happening right now is a lot of bookstores are disappearing, a lot of libraries are disappearing or they're not being funded. School libraries are not being funded as well. This is not a good thing."
Julie Bosnan of the New York Times in her article on Feb. 19 wrote –
More than 50 stores across the country will begin receiving cash grants this week, from Percy's Burrow in Topsham, Me., to Page & Palette in Fairhope, Ala., to A Whale of a Tale in Irvine, Calif.
On Feb. 20 Patterson was interviewed by NPR which revealed his following comments –
"We're in a juncture right now where bookstores as we have known them are at risk," Patterson tells NPR's Renee Montagne. "Libraries as we've known them are at risk, publishers are at risk, American literature is at risk, as we've known it, and getting kids reading is at risk."
"The government has stepped in to help banks, automobiles, anything where money is concerned, but nobody seems to care about books and our bookstores," he says. "And I'm telling you, American literature is in jeopardy."
More of this conversation can be heard below.
Patterson has no worry as far as his books being sold. A very rich man who wants to help others and society, here is a summary of Patterson's literary career from amazon.com –
"James Patterson has had more New York Times bestsellers than any other writer, ever, according to Guinness World Records. Since his first novel won the Edgar Award in 1977 James Patterson's books have sold more than 280 million copies. He is the author of the Alex Cross novels, the most popular detective series of the past twenty-five years, including Kiss the Girls and Along Came a Spider. Mr. Patterson also writes the bestselling Women's Murder Club novels, set in San Francisco, and the top-selling New York detective series of all time, featuring Detective Michael Bennett. He writes full-time and lives in Florida with his family."
Patterson has already released novels this year and more are forthcoming. The next one is due on March 24 named NYPD Red 2 under its series.
More information on Patterson saving bookstores can be viewed at www.jamespatterson.com.


text:
OTTAWA - Charlie Graham stopped 33 shots as the Belleville Bulls edged the host Ottawa 67's 3-2 on Sunday afternoon in Ontario Hockey League play.
Joseph Cramarossa had a goal and an assist for the Bulls (10-6-3), who jumped out to a 3-0 first-period lead, and Garrett Hooey and Jordan Subban scored a goal apiece.
"It's been an up and down couple of weeks, but to find a way to get a big win was special," Bulls' coach and general manager George Burnett said. "We've lacked some goal scoring and had some inconsistencies, we've given up leads in three of the past four games, so to find a way to get two points was critical for us. I think for our psyche more than anything else."
Steven Janes and Dante Salituro each had a goal and an assist for the 67's (6-11-2), who have dropped three games in a row.
Keegan Wilson took the loss after allowing three goals on 11 shots through 16 minutes of action. Jacob Blair came in for the final 44 minutes of the game and stopped all 15 shots he faced in relief.
Belleville went 1-for-4 on the power play while Ottawa failed to score on six chances with the man advantage.
|Back to top


text:
In a startling memoir reviewed by Bob Woodward of the Washington Post, former Defense Secretary Robert Gates has painted President Obama, former Secretary of State Hilary Clinton, Vice President Joe Biden, and much of the Obama White House as politically motivated tyrants and control freaks who had little regard for military leadership. The statements made by Gates are serious indictments of the Obama White House.
Some of the more serious accusations from Gates are as follows:
Gates asserts that Obama had more than doubts about the course he had charted in Afghanistan. The president was "skeptical if not outright convinced it would fail," Gates writes in "Duty: Memoirs of a Secretary at War." Obama, after months of contentious discussion with Gates and other top advisers, deployed 30,000 more troops in a final push to stabilize Afghanistan before a phased withdrawal beginning in mid-2011. "I never doubted Obama's support for the troops, only his support for their mission," Gates writes.
Why would a President order a strategy that would result in lives lost if he did not believe it would succeed?
Biden is accused of "poisoning the well" against the military leadership. Thomas Donilon, initially Obama's deputy national security adviser, and then-Lt. Gen. Douglas E. Lute, the White House coordinator for the wars, are described as regularly engaged in "aggressive, suspicious, and sometimes condescending and insulting questioning of our military leaders."
"Hillary told the president that her opposition to the [2007] surge in Iraq had been political because she was facing him in the Iowa primary. . . . The president conceded vaguely that opposition to the Iraq surge had been political. To hear the two of them making these admissions, and in front of me, was as surprising as it was dismaying."
Senator Clinton took a position on military strategy purely as a political calculation.
His second year with Obama proved as tough as the first. "For me, 2010 was a year of continued conflict and a couple of important White House breaches of faith," he writes.
The first, he says, was Obama's decision to seek the repeal of the "don't ask, don't tell" policy toward gays serving in the military. Though Gates says he supported the decision, there had been months and months of debate, with details still to work out. On one day's notice, Obama informed Gates and Mullen that he would announce his request for a repeal of the law. Obama had "blindsided Admiral Mullen and me," Gates writes.
Similarly, in a battle over defense spending, "I was extremely angry with President Obama," Gates writes. "I felt he had breached faith with me . . . on the budget numbers." As with "don't ask, don't tell," "I felt that agreements with the Obama White House were good for only as long as they were politically convenient."
Gates acknowledges forthrightly in "Duty" that he did not reveal his dismay. "I never confronted Obama directly over what I (as well as [Hillary] Clinton, [then-CIA Director Leon] Panetta, and others) saw as the president's determination that the White House tightly control every aspect of national security policy and even operations. His White House was by far the most centralized and controlling in national security of any I had seen since Richard Nixon and Henry Kissinger ruled the roost."
It got so bad during internal debates over whether to intervene in Libya in 2011 that Gates says he felt compelled to deliver a "rant" because the White House staff was "talking about military options with the president without Defense being involved."
Gates says his instructions to the Pentagon were: "Don't give the White House staff and [national security staff] too much information on the military options. They don't understand it, and 'experts' like Samantha Power will decide when we should move militarily." Power, then on the national security staff and now U.S. ambassador to the United Nations, has been a strong advocate for humanitarian intervention.
Another time, after Donilon and Biden tried to pass orders to Gates, he told the two, "The last time I checked, neither of you are in the chain of command," and said he expected to get orders directly from Obama.
You may read more from Kevin at his common sense wisdom blog. His book, Discovering Possibility: A Common Sense Conservative Manifesto, is now available on Kindle. The working title for his upcoming book is, Discovering Possibility: The Revolution for Virtue and Common Sense. Kevin offers common sense community building coaching to grass roots groups around the country that are interested in pursuing common sense approaches to community building.
If you would like to receive an update when Kevin Kervick releases another article, click on the Subscribe and Follow on Twitter links below. Please also like, +1, and tweet this article so that others can receive the content.


text:
Bolting Cloth Mesh Datasheets
105 x 105 -- "Tensil Bolt" Bolting Cloth
from Newark Wire Cloth Company
from Newark Wire Cloth Company
Newark Wire Cloth is more than just a supplier of wire cloth, we are the weaver. As 'the source', Newark offers a broad range of wire cloth - Space Cloth, Mesh Cloth and even Micronic Filter Cloth. Many items are considered 'Stock' and are ready for immediate shipment [See More]
- Applications: Bolting Cloth
- WireDiameter: 0.0030
- Opening Size: 0.0065
- Metal: Stainless Steel; 18-8 Stainless Steel


text:
Mary J. Blige on Being Offered a Role in 'Rock of Ages'
Recalls meeting Adam Shankman at the housewarming party for Jennifer Lopez and the director saying he wanted to put her in his movie.
On playing her character Justice Charlier, Mary added, "She is really strong and she always has to be stronger for the woman in the club. Which is a lot like I am I have to be strong for all the woman that say, you saved my life, you help me get out of a terrible marriage with your music and I have to.. I can't let them see me break all though they wouldn't mind. And that's how Justice is."


text:
I want my placenta when I give birth in June. My OB said the hospital wouldn't allow me to take it. I am willing to sign a release of any hospital liability in order to take it. Should the hospital comply with the patient request, as long as there are no liability issues? Or does the placenta become property of the hospital to be sent to pathology and disposed of as medical waste? My state has no laws addressing this issue. An at home birth isn't an option as I am high risk.
Should a hospital be allowed to keep a placenta against patient wishes?
I had dd's clit pierced at birth. It's cleaner and unpierced clits look gross. Besides I didn't want her to be different from me or remember the pain.
and I would never opt for a synthetic pharmaceutical over something that my body made naturally.
Never go with a hippie to a second location
Someone on my July 11 BB posted GRAPHIC pictures of them cooking and eating her placenta. It.was.nasty. They didn't do pills though. They just straight up ate it.
Uhhh I never even saw my placenta...I didn't want to...I'm a whiner...they asked if I wanted a mirror as well when I was pushing I was like...Oh fuck no..
LOL Same here!
There's a battle brewing at the baby factory hospital in my home city over this issue.
Baby factory hospital?
I'm a doula, my partner encapsulates placentas. There is one hospital in our area that makes a stink about taking the placenta. We have had clients find ways to steal their placentas and have some one come to get them lol.
also, i feel like placenta encapsulation is much more common then people realize.
J 12.11 | ^angel^ 8.15 | S 6.16
I have a doula coming to my house to do the boiling and encapsulation. My husband will take the placenta home on ice and she will do it at my house before I get discharged...
I have the waiver in my pre-admission paperwork for the hospital...
ETA: I thought it was a little weird and gross too, until I did the research.
I had dd's clit pierced at birth. It's cleaner and unpierced clits look gross. Besides I didn't want her to be different from me or remember the pain.
partial hippo-
why did your OB say it needed to go to pathology?? if it needs to go to path it will be soaked in formaldahyde (sp) and you will NOT want to ingest that!! (I'm a former L&D nurse)
edit to add: i have never worked at a L&D department (i've been in several due to moving for DH's career) that taking a placenta home was an issue. however unless it was sent to pathology for some reason. not ALL placentas are sent to path in most hospitals....
mom to twins 9/04 and an angel ^6/13^ and twins 12/14!


text: In the final analysis, Shangri-La is an extremely egoistic response to the world. The Lama, after all, is asking a very capable man of the world to withdraw his considerable talents from it, to cultivate his own garden with his beautiful wife until, in time, the world must turn to him. Indeed, the very notion of Shangri-La is rooted in a despair that outweighs any countervailing optimism the valley is intended to inspire. Howard Hawks and John Ford could create groups and societies within the world where friendship and loyalty and justice prevailed; theirs are worlds of middle-distance and long shots. In the one-shot world of Frank Capra, community is an unworldly commodity, and Shangri-La an unworldly repository, not of community, but simply of refuge.


text:
BEREA — David Nelson might be the only Browns player counting down the minutes until their preseason finale Thursday in Chicago.
The wide receiver hasn't appeared in an NFL game since Sept. 9, 2012, when he tore his right anterior cruciate ligament in Buffalo's season opener against the Jets.
"It's been a crazy ride, a crazy year, the most frustrating year of my life," Nelson said Monday before practice. "I think the trainers have done a great job getting me ready to go and my knee is stronger than ever. I feel 100 percent confident in it and I'm just ready to show what I can do."
The 6-foot-5, 215-pounder underwent reconstructive knee surgery last fall, preventing him from being medically cleared until August.
But shortly after Nelson began practicing with Cleveland, he suffered a bone bruise on the same knee, shutting him down for three more weeks. He insists that the injuries are unrelated, but admits they have prevented him from developing chemistry with quarterback Brandon Weeden.
"I threw with him maybe five times in the entire training camp, so I'm obviously not where I want to be," said Nelson, who owns 94 receptions for 1,042 yards and eight touchdowns in his three-year NFL career. "But Coach (Rob Chudzinski) has done a great job kind of speeding my process along in the past week. I'm extremely confident in what I can do and what my body will be able to let me do."
Though Nelson played in the slot with the Bills, Chudzinski and offensive coordinator Norv Turner envision him lining up all over the field. The 26-year-old Texan hopes that will be the case when the regular season begins Sept. 8.
"Saying this summer has been frustrating is putting it extremely lightly," Nelson said. "You see your teammates going through camp and you feel the atmosphere and everything that's going on, but you're not out there with them.
"I honestly was ready to go last week, but it was a cautionary thing. They just decided not to go (with me) and I had to live with it. I'm ready to go, and it's about time."
If there was any doubt about Nelson's roster status, it was removed later in the day when Cleveland terminated the contract of wide receiver Jordan Norwood.
Norwood, Nelson and Josh Cooper were believed to be battling for two spots, while Greg Little, Josh Gordon, Davone Bess, and Travis Benjamin have long been locks to make the team.
The 26-year-old Norwood was plagued by injuries throughout his stay with the Browns, but did make a team season-high nine receptions on Oct. 7, 2012 at the New York Giants.
"What an awesome three years in Cleveland," Norwood said on his Twitter account. "I thank God for the people I've had the pleasure of coming in contact with. Continued blessings to you all."
Injury update
Tight end Jordan Cameron (groin), defensive end Desmond Bryant (back spasms), safety Jamoris Slaughter (groin), cornerback Chris Owens (foot), wide receiver Naaman Roosevelt (hamstring) and kicker Brandon Bogotay (groin) did not practice, but worked with trainers on the field. Cameron, who has six receptions in the preseason, is listed as day to day with a groin strain.
• Wide receiver Bess (knee tendinitis), outside linebacker Jabaal Sheard (knee) and tight end Gary Barnidge (shoulder) returned to practice.
"I feel good, so it's all on Coach if I play (against the Bears)," Barnidge said.
• Out with significant injuries are outside linebacker Barkevious Mingo (bruised lung), cornerback Trevin Wade (shoulder), running back Montario Hardesty (knee surgery), guards Shawn Lauvao (ankle surgery) and Jason Pinkston (high ankle sprain) and tackles Ryan Miller (concussion) and Chris Faulk (knee surgery).
• Running back Dion Lewis (left leg fracture) was placed on season-ending injured reserve. The third-year pro suffered a broken leg Aug. 15 against Detroit and underwent surgery to repair a fractured fibula four days later.
Cutdown time
The Browns placed four additional players on waivers, reducing their roster to 82. Defensive end Dave Kruger, wide receiver Cordell Roberson, linebacker Tommy Smith and cornerback Vernon Kearney received their pink slips prior to practice. Kruger, an undrafted rookie from Utah, is the younger brother of outside linebacker Paul Kruger. All NFL teams must cut down to 75 players by 4 p.m. today, then reach the regular-season limit of 53 before Saturday at 6 p.m.
• Former Cleveland wide receivers Braylon Edwards (Jets), Joshua Cribbs (Raiders), Donte Stallworth (Redskins) and Carlton Mitchell (Buccaneers) also got the early axe.
Fun with numbers
Cornerback Joe Haden, safety Tashaun Gipson and linebackers Quentin Groves and Paul Kruger played a team-high 46 snaps Saturday in the Browns' 27-6 loss to the Colts. Safety T.J. Ward logged 45 and cornerback Buster Skrine was on the field for 44. Cleveland's offensive snap leaders with 39 were quarterback Brandon Weeden, center Alex Mack, guards John Greco and tackles Joe Thomas and Mitchell Schwartz. Little was next with 38.
Extra points
Miley Cyrus' offensive performance at the MTV Video Music Awards was viewed by the Browns' offensive line before practice. Six-time Pro Bowl tackle Thomas was screening the clip on his iPad.
• Chudzinski was not made available to the media because of a schedule change by the team's public relations staff.
• Cleveland is tied with Baltimore and Cincinnati atop the AFC North Division preseason standings at 2-1. Pittsburgh is last at 0-3.
Contact Brian Dulik at firstname.lastname@example.com.


text:
Cheap Trick Turned Down the RNC's $100,000 Offer"Maybe we should have accepted it – but we would all have got swastika guitars made," said frontman Robin Zander.
Rock Hall Induction Ceremony 2016 Wrap-Up: Cheap Trick, Steve Miller, Chicago, and MoreAn edited version of the ceremony will air on HBO on April 30.
Cheap Trick's Bun E. Carlos to Release Solo AlbumHe's joined by friends including Dave Pirner of Soul Asylum, John Stirratt of Wilco and the members of Hanson.
Cheap Trick's Rick Nielsen Talks All Things Rock HallFounding member, lead guitarist, and songwriter Rick Nielsen called into Scott Shannon in the Morning to talk about the Cheap Trick's induction and more.
Listen to Cheap Trick's New Single 'No Direction Home'Cheap Trick have shared the first single from their forthcoming studio album Bang Zoom Crazy...Hello.
WIN TICKETS TO SEE HEART WITH JOAN JETT & THE BLACKHEARTS!Catch Heart with Joan Jett & the Blackhearts at Ak-Chin Pavilion on Sunday, August 21, 2016.
Heart, Joan Jett & The Blackhearts and Cheap Trick to Tour Together in 2016The three artists will hit the road together this summer.
The Rock Hall Three For All Featuring Heart, Joan Jett & The Blackhearts and Cheap TrickThree of rock music's most iconic bands will hit the road together this summer on The Rock Hall Three For All Featuring Heart, Joan Jett & The Blackhearts and Cheap Trick.
Four 'Hug-It-Outs' We'd Like to See at the Rock Hall InductionChicago said it best: "It's hard to say 'I'm sorry.'" But think of the fans, man!
Cheap Trick, Deep Purple, Chicago, Steve Miller Among Rock Hall InducteesThe induction ceremony takes place in April in New York.
7 Things We Hope to See at the Rock and Roll Hall of Fame InductionFrom N.W.A. with Kendrick Lamar to Chicago reuniting with Peter Cetera, this year's list of nominees has a lot of possibilities for great moments at the induction ceremony next April.
Yes, Deep Purple, the Cars Lead Rock and Roll Hall of Fame NomineesChicago, Chic, Cheap Trick and the Steve Miller Band also are on the ballot.