Using honeypots to analyse anomalous Internet activities

Monitoring Internet traffic is critical in order to acquire a good understanding of threats to computer and network security and in designing efficient computer security systems. Researchers and network administrators have applied several approaches to monitoring traffic for malicious content. These techniques include monitoring network components, aggregating IDS alerts, and monitoring unused IP address spaces. Another method for monitoring and analyzing malicious traffic, which has been widely tried and accepted, is the use of honeypots. Honeypots are very valuable security resources for gathering artefacts associated with a variety of Internet attack activities. As honeypots run no production services, any contact with them is considered potentially malicious or suspicious by definition. This unique characteristic of the honeypot reduces the amount of collected traffic and makes it a more valuable source of information than other existing techniques. Currently, there is insufficient research in the honeypot data analysis field. To date, most of the work on honeypots has been devoted to the design of new honeypots or optimizing the current ones. Approaches for analyzing data collected from honeypots, especially low-interaction honeypots, are presently immature, while analysis techniques are manual and focus mainly on identifying existing attacks. This research addresses the need for developing more advanced techniques for analyzing Internet traffic data collected from low-interaction honeypots. We believe that characterizing honeypot traffic will improve the security of networks and, if the honeypot data is handled in time, give early signs of new vulnerabilities or breakouts of new automated malicious codes, such as worms. The outcomes of this research include: • Identification of repeated use of attack tools and attack processes through grouping activities that exhibit similar packet inter-arrival time distributions using the cliquing algorithm; • Application of principal component analysis to detect the structure of attackers’ activities present in low-interaction honeypots and to visualize attackers’ behaviors; • Detection of new attacks in low-interaction honeypot traffic through the use of the principal component’s residual space and the square prediction error statistic; • Real-time detection of new attacks using recursive principal component analysis; • A proof of concept implementation for honeypot traffic analysis and real time monitoring.

Dealing with the problem of cybercrime

Lack of a universally accepted and comprehensive taxonomy of cybercrime seriously impedes international efforts to accurately identify, report and monitor cybercrime trends. There is, not surprisingly, a corresponding disconnect internationally on the cybercrime legislation front, a much more serious problem and one which the International Telecommunication Union (ITU) says requires „the urgent attention of all nations‟. Yet, and despite the existence of the Council of Europe Convention on Cybercrime, a proposal for a global cybercrime treaty was rejected by the United Nations (UN) as recently as April 2010. This paper presents a refined and comprehensive taxonomy of cybercrime and demonstrates its utility for widespread use. It analyses how the USA, the UK, Australia and the UAE align with the CoE Convention and finds that more needs to be done to achieve conformance. We conclude with an analysis of the approaches used in Australia, in Queensland, and in the UAE, in Abu Dhabi, to fight cybercrime and identify a number of shared problems.

Application of an optimisation algorithm to configure an internal fixation device

Fractures of long bones are sometimes treated using various types of fracture fixation devices including internal plate fixators. These are specialised plates which are used to bridge the fracture gap(s) whilst anatomically aligning the bone fragments. The plate is secured in position by screws. The aim of such a device is to support and promote the natural healing of the bone. When using an internal fixation device, it is necessary for the clinician to decide upon many parameters, for example, the type of plate and where to position it; how many and where to position the screws. While there have been a number of experimental and computational studies conducted regarding the configuration of screws in the literature, there is still inadequate information available concerning the influence of screw configuration on fracture healing. Because screw configuration influences the amount of flexibility at the area of fracture, it has a direct influence on the fracture healing process. Therefore, it is important that the chosen screw configuration does not inhibit the healing process. In addition to the impact on the fracture healing process, screw configuration plays an important role in the distribution of stresses in the plate due to the applied loads. A plate that experiences high stresses is prone to early failure. Hence, the screw configuration used should not encourage the occurrence of high stresses. This project develops a computational program in Fortran programming language to perform mathematical optimisation to determine the screw configuration of an internal fixation device within constraints of interfragmentary movement by minimising the corresponding stress in the plate. Thus, the optimal solution suggests the positioning and number of screws which satisfies the predefined constraints of interfragmentary movements. For a set of screw configurations the interfragmentary displacement and the stress occurring in the plate were calculated by the Finite Element Method. The screw configurations were iteratively changed and each time the corresponding interfragmentary displacements were compared with predefined constraints. Additionally, the corresponding stress was compared with the previously calculated stress value to determine if there was a reduction. These processes were continued until an optimal solution was achieved. The optimisation program has been shown to successfully predict the optimal screw configuration in two cases. The first case was a simplified bone construct whereby the screw configuration solution was comparable with those recommended in biomechanical literature. The second case was a femoral construct, of which the resultant screw configuration was shown to be similar to those used in clinical cases. The optimisation method and programming developed in this study has shown that it has potential to be used for further investigations with the improvement of optimisation criteria and the efficiency of the program.

CAT Detect (Computer Activity Timeline Detection) : a tool for detecting inconsistency in computer activity timelines

The construction of timelines of computer activity is a part of many digital investigations. These timelines of events are composed of traces of historical activity drawn from system logs and potentially from evidence of events found in the computer file system. A potential problem with the use of such information is that some of it may be inconsistent and contradictory thus compromising its value. This work introduces a software tool (CAT Detect) for the detection of inconsistency within timelines of computer activity. We examine the impact of deliberate tampering through experiments conducted with our prototype software tool. Based on the results of these experiments, we discuss techniques which can be employed to deal with such temporal inconsistencies.

Is language a barrier for quality care in hospitals? A case series from an Emergency Department of a teaching hospital in Brisbane

Aim: The aim of this pilot study is to describe the use of an Emergency Department (ED) at a large metropolitan teaching hospital by patients who speak English or other languages at home. Methods: All data were retrieved from the Emergency Department Information System (EDIS) of this tertiary teaching hospital in Brisbane. Patients were divided into two groups based on the language spoken at home: patients who speak English only at home (SEO) and patients who do not speak English only or speak other language at home (NSEO). Modes of arrival, length of ED stay and the proportion of hospital admission were compared among the two groups of patients by using SPSS V18 software. Results: A total of 69,494 patients visited this hospital ED in 2009 with 67,727 (97.5%) being in the SEO group and 1,281 (1.80%) in the NSEO group. The proportion of ambulance utilisation in arrival mode was significantly higher among SEO 23,172 (34.2%) than NSEO 397 (31.0%), p <0.05. The NSEO patients had longer length of stay in the ED (M = 337.21, SD = 285.9) compared to SEO patients (M= 290.9, SD = 266.8), with 46.3 minutes (95%CI 62.1, 30.5, p <0.001) difference. The admission to the hospital among NSEO was 402 (31.9%) higher than SEO 17,652 (26.6%), p <0.001. Conclusion: The lower utilisation rates of ambulance services, longer length of ED stay and higher hospital admission rates in NSEO patients compared to SEO patients are consistent with other international studies and may be due to the language barriers.

Online multiple profile manager for eHealth information sharing

Online social networks connect millions of people around the globe. These electronic bonds make individuals comfortable with their behaviours. Such positive signs of sharing information is useful phenomena requires consideration to establish a socio-scientific effect. Recently, many web users have more than one social networking account. This means a user may hold multiple profiles which are stored in different Social Network Sites (SNNs). Maintaining these multiple online social network profiles is cumbersome and time-consuming [1]. In this paper we will propose a framework for the management of a user's multiple profiles. A demonstrator, called Multiple Profile Manager (MPM), will be showcased to illustrate how effective the framework will be.

Analyzing the literature for the link between the conservative Islamic culture of Saudi Arabia and the design of sustainable housing

Saudi Arabia experiences housing shortage for mid and low-income families, which is caused by rapid population growth. This condition is worsened by the fact that the current housing supply has problems in meeting both sustainable requirements and cultural needs of those families. This paper aims to investigate the link between the unique conservative Saudi culture and the design of sustainable housing, while keeping the housing cost affordable for mid and low-income families. The paper is based on a review of literatures on the issues of the Islamic culture and how can they be integrated into the design process of a Saudi house. Findings from literature reveiw suggest several design requirements for accommodating the conservative Saudi Culture in low cost sustainable houses. Such requirements include the implementation of proper usage of windows, and house orientation with a courtyard inside rather than facing the main street will provide natural ventilation while maintaining privacy. The main contribution to the body of knowledge is that this is a new approach to sustainable housing in Saudi Arabia considering not only energy use and architectural design issues but also socio-cultural issues as an essential part of sustainability.

Immigrants and the utilization of hospital emergency departments

BACKGROUND: Immigrants with language barriers are at high risk of having poor access to health care services. However, several studies have indicated that immigrants tend to use emergency departments (EDs) as their primary source of care at the expense of primary care. This may place an additional burden on already overcrowded EDs and lead to a low level of patient satisfaction with ED care. The study was to review if immigrants utilize ED care differently from host populations and to assess immigrants’ satisfaction with ED care. DATA SOURCES: Studies about immigrants' utilization of EDs in Australia and worldwide were reviewed. RESULTS: There are confl icting results in the literature about the pattern of ED care use among immigrants. Some studies have shown higher utilization by immigrants compared to host populations and others have shown lower utilization. Overall, immigrants use ED care heavily, make inappropriate visits to EDs, have a longer length of stay in EDs, and are less satisfi ed with ED care as compared to host populations. CONCLUSIONS: Immigrants might use ED care differently from host populations due to language and cultural barriers. There is sparse Australian literature regarding immigrants' access to health care including ED care. To ensure equity, further research is needed to inform policy when planning health care provision to immigrants. KEY WORDS: Emergency department; Health service; Immigrants; Language; Utilization

Language and utilisation of emergency care in Queensland

Objective: To compare access and utilisation of EDs in Queensland public hospitals between people who speak only English at home and those who speak another language at home. Methods: A retrospective analysis of a Queensland statewide hospital ED dataset (ED Information System) from 1 January 2008 to 31 December 2010 was conducted. Access to ED care was measured by the proportion of the state’s population attending EDs. Logistic regression analyses were performed to determine the relationships between ambulance use and language, and between hospital admission and language, both after adjusting for age, sex and triage category. Results: The ED utilisation rate was highest in English only speakers (290 per 1000 population), followed by Arabic speakers (105), and lowest among German speakers (30). Compared with English speakers, there were lower rates of ambulance use in Chinese (odds ratio 0.50, 95% confidence interval, 0.47–0.54), Vietnamese (0.87, 0.79–0.95), Arabic (0.87, 0.78–0.97), Spanish (0.56, 0.50–0.62), Italian (0.88, 0.80–0.96), Hindi (0.61, 0.53–0.70) and German (0.87, 0.79–0.90) speakers. Compared with English speakers, German speakers had higher admission rates (odds ratio 1.17, 95% confidence interval, 1.02–1.34), whereas there were lower admission rates in Chinese (0.90, 0.86–0.99), Arabic (0.76, 0.67–0.85) and Spanish (0.83, 0.75–0.93) speakers. Conclusion: This study showed that there was a significant association between lower utilisation of emergency care and speaking languages other than English at home. Further researches are needed using in-depth methodology to investigate if there are language barriers in accessing emergency care in Queensland.

Glider path-planning for optimal sampling of mesocale eddies

Ocean gliders constitute an important advance in the highly demanding ocean monitoring scenario. Their effciency, endurance and increasing robustness make these vehicles an ideal observing platform for many long term oceanographic applications. However, they have proved to be also useful in the opportunis-tic short term characterization of dynamic structures. Among these, mesoscale eddies are of particular interest due to the relevance they have in many oceano-graphic processes.