An integrated approach to cryptographic mitigation of denial-of-service attacks

Gradual authentication is a principle proposed by Meadows as a way to tackle denial-of-service attacks on network protocols by gradually increasing the confidence in clients before the server commits resources. In this paper, we propose an efficient method that allows a defending server to authenticate its clients gradually with the help of some fast-to-verify measures. Our method integrates hash-based client puzzles along with a special class of digital signatures supporting fast verification. Our hash-based client puzzle provides finer granularity of difficulty and is proven secure in the puzzle difficulty model of Chen et al. (2009). We integrate this with the fast-verification digital signature scheme proposed by Bernstein (2000, 2008). These schemes can be up to 20 times faster for client authentication compared to RSA-based schemes. Our experimental results show that, in the Secure Sockets Layer (SSL) protocol, fast verification digital signatures can provide a 7% increase in connections per second compared to RSA signatures, and our integration of client puzzles with client authentication imposes no performance penalty on the server since puzzle verification is a part of signature verification.

Vibration of L-shaped plates under a deterministic force or moment excitation : a case of statistical energy analysis application

Analytical and closed form solutions are presented in this paper for the vibration response of an L-shaped plate under a point force or a moment excitation. Inter-relationships between wave components of the source and the receiving plates are clearly defined. Explicit expressions are given for the quadratic quantities such as input power, energy flow and kinetic energy distributions of the L-shaped plate. Applications of statistical energy analysis (SEA) formulation in the prediction of the vibration response of finite coupled plate structures under a single deterministic forcing are examined and quantified. It is found that the SEA method can be employed to predict the frequency averaged vibration response and energy flow of coupled plate structures under a deterministic force or moment excitation when the structural system satisfies the following conditions: (1) the coupling loss factors of the coupled subsystems are known; (2) the source location is more than a quarter of the plate bending wavelength away from the source plate edges in the point force excitation case, or is more than a quarter wavelength away from the pair of source plate edges perpendicular to the moment axis in the moment excitation case due to the directional characteristic of moment excitations. SEA overestimates the response of the L-shaped plate when the source location is less than a quarter bending wavelength away from the respective plate edges owing to wave coherence effect at the plate boundary

A proposed model for successful implementation of e-Government in Malaysia

This paper proposes a theoretical model for e-Government in Malaysia and addresses issues involved in its implementation. It presents three possible models including the Framework for Electronic Government (Grant & Chau, 2005), the Three Pillars Framework (Georgescu, 2007) and The Grid-Group Theory from cultural studies (Douglas, 1996) and integrates and adapts them to the specific needs of the Malaysian environment.

Nursing and competencies - a natural fit : the politics of skill/competency formation in nursing

The last two decades have seen a significant restructuring of work across Australia and other industrialised economies, a critical part of which has been the appearance of competency based education and assessment. The competency movement is about creating a more flexible and mobile labour force to increase productivity and it does so by redefining work as a set of transferable or ‘soft’ generic skills that are transportable and are the possession of the individual. This article sought to develop an analysis of competency based clinical assessment of nursing students across a bachelor of nursing degree course. This involved an examination of a total of 406 clinical assessment tools that covered the years 1992-2009 and the three years of a bachelor degree. Data analysis generated three analytical findings: the existence of a hierarchy of competencies that prioritises soft skills over intellectual and technical skills; the appearance of skills as personal qualities or individual attributes; and the absence of context in assessment. The article argues that the convergence in nursing of soft skills and the professionalisation project reform has seen the former give legitimacy to the enduring invisibility and devaluation of nursing work.

Causing economic harm to property developers : damages for starting an incurably bad appeal?

A recent decision of the Queensland Court of Appeal involved an unusual statement of claim made on behalf of the developer of a proposed resort in Port Douglas. The decision is The Beach Club Port Douglas Pty Ltd v Page [2005] QCA 475. The issue The defendant had objected to a development application of the plaintiff developer and lodged an appeal in the Planning and Environment Court against the council decision granting a development permit. The main issue in the Planning and Environment Court was whether the site coverage of the proposed resort was excessive. In a separate action (the subject matter of the present appeal), the plaintiff developer claimed damages for ‘negligence’ alleging that the defendant had breached a duty of care not to appeal without properly or reasonably assessing whether the development qualified for a permit given that the resort qualified for the maximum allowable site coverage. It was alleged that the appeal lodged by the defendant in the Planning and Environment Court had no reasonable prospects of success and that any reasonable person properly advised would know, or ought reasonably to have known, that to be so. The defendant had been “put on notice” that the plaintiff would incur loss of $10,000 for every day there was a delay in starting construction of the resort. The claim made by the developer required the court to consider those circumstances where a person may lawfully and deliberately cause economic harm to another. Was a duty of care owed by the defendant for negligent conduct of litigation that caused economic loss to the plaintiff?

Cranes, claims and a statutory right of user

In larger developments there is potential for construction cranes to encroach into the airspace of neighbouring properties. To resolve issues of this nature, a statutory right of user may be sought under s 180 of the Property Law Act 1974 (Qld). Section 180 allows the court to impose a statutory right of user on servient land where it is reasonably necessary in the interests of effective use in any reasonable manner of the dominant land. Such an order will not be made unless the court is satisfied that it is consistent with public interest, the owner of the servient land can be adequately recompensed for any loss or disadvantage which may be suffered from the imposition and the owner of the servient land has refused unreasonably to agree to accept the imposition of that obligation. In applying the statutory provision, a key practical concern for legal advisers will be the basis for assessment of compensation. A recent decision of the Queensland Supreme Court (Douglas J) provides guidance concerning matters relevant to this assessment. The decision is Lang Parade Pty Ltd v Peluso [2005] QSC 112.

Clinical education for nephrology nurse practitioner candidates in Australia : a consensus statement

Objectives: To develop recommendations for the clinical education required to prepare Australian Nurse Practitioner candidates for advanced and extended practice in nephrology settings. Methods: Using the Delphi research technique a consensus statement was developed over a nine month period. All endorsed and candidate Nephrology Nurse Practitioners (NNP) were invited to participate as the expert panel. The Delphi research technique uses a systematic and iterative process. The expert panel were asked to generate a list of items which were then circulated to all NNPs. They were asked to determine their degree of agreement or disagreement with each statement using a 5-point Likert scale There was opportunity for free-text comments to be provided if desired. Results from each round were collated; the document was refined and circulated to the experts for a subsequent round. Consensus was demonstrated after three Delphi rounds. Results: The consensus statement comprises four components explaining the role and membership of the mentorship team, the setting and location of NNP clinical education, learning strategies to support the NNP, and outcomes of NNP clinical education. Demographic questions in the final survey revealed information about the qualifications, years of experience, and practice location of Australian NNPs. Conclusions: The consensus statement is not prescriptive but it will inform NNP candidates, university course providers and mentors about the expected extended nephrology specific clinical education that will enable the NNP to provide advanced nursing care for patients regardless of the stage of chronic kidney disease (CKD) and the practice setting.

Managing wetlands sustainably as ecosystems : The contribution of the law (part 1)

The ways in which a society set standards of behaviour and of conduct for its members vary hugely. For example, accepted practices, recognised customs, spiritually or morally inspired norms, judicially declared rules, executively formulated edicts, formal legislative enactments or constitutionally embedded rights and duties. Whatever form they assume, these standards are the artificial construction of the human mind. Accordingly the law - whatever its form - can do no more and no less than regulate or set standards for human behaviour, human conduct, and human decision-making. The law cannot regulate the environment. It can only regulate human activities that impact directly or indirectly upon the environment. This applies as much to wetlands as components of the environment as it does to any other components of the environment or the environment at large. The capacity of the law to protect the environment and therefore wetlands is thus totally dependent upon the capacity of the law to regulate human behaviour, human conduct and human decision-making. At the same time the law needs to reflect the specific nature, functions and locations of wetlands. A wetland is an ecosystem by itself; it comprises a range of ecosystems within it; and it is part of a wider set of ecosystems. Hence, the significant ecological functions performed by wetlands. Then there are the benefits flowing to humans from wetlands. These may be social, economic, cultural, aesthetic, or a combination of some or of all of these. It is a challenge for a society acting through its legal system to find the appropriate balance between these ecological and these human values. But that is what sustainability requires.The ways in which a society set standards of behaviour and of conduct for its members vary hugely. For example, accepted practices, recognised customs, spiritually or morally inspired norms, judicially declared rules, executively formulated edicts, formal legislative enactments or constitutionally embedded rights and duties. Whatever form they assume, these standards are the artificial construction of the human mind. Accordingly the law - whatever its form - can do no more and no less than regulate or set standards for human behaviour, human conduct, and human decision-making. The law cannot regulate the environment. It can only regulate human activities that impact directly or indirectly upon the environment. This applies as much to wetlands as components of the environment as it does to any other components of the environment or the environment at large. The capacity of the law to protect the environment and therefore wetlands is thus totally dependent upon the capacity of the law to regulate human behaviour, human conduct and human decision-making. At the same time the law needs to reflect the specific nature, functions and locations of wetlands. A wetland is an ecosystem by itself; it comprises a range of ecosystems within it; and it is part of a wider set of ecosystems. Hence, the significant ecological functions performed by wetlands. Then there are the benefits flowing to humans from wetlands. These may be social, economic, cultural, aesthetic, or a combination of some or of all of these. It is a challenge for a society acting through its legal system to find the appropriate balance between these ecological and these human values. But that is what sustainability requires.

Managing Wetlands Sustainably as Ecosystems: The Contribution of the Law (Part 2)

In this Part 2 attention is turned towards the legal arrangements in nation states for managing wetlands. These national arrangements have effect within the international arrangements already mentioned and any regional arrangements that are relevant. However, each national system is a reflection of its own historical, cultural, political and constitutional background. It is the purpose of this Part 2 to review and assess the national approaches to wetlands management. This involves an analysis of a range of instruments. These are: constitutional rules; strategic rules; regulatory rules; and management rules. Each of these sets of rules performs different functions, assumes different forms and is differentially capable of enforcement.

Reflections on a year of engineering leadership

Doug Hargreaves has completed a year as President of Engineers Australia, a 90,000 strong membership based organisation representing the engineering profession. In preparing for the year Doug decided that the core of his own leadership is his values and that the legacy he wanted to be remembered for at the end of his year, was how his values underpinned everything he did. The framework for this values approach was a book he co-authored entitled 'Values Driven Leadership'. The essence of Doug's philosophy is that a leader who bases their leadership on a strong sense of values will create an environment where people have a strong sense of Belonging, Identity and Purpose. This paper reflects on Doug's year of leadership of Engineers Australia and offers insights and examples of where his values driven leadership approach played out and contributed to various scenarios he encountered over the year. The paper will share Doug's approach to leadership and offer an understanding of how an effective leader actually does what he does. Too often leadership is seen as a nebulous capacity that people either have or do not have. In this paper, we will identify the specific skills and abilities within a values framework that will allow any leader to be more effective in their role.

Defending web services against denial of service attacks using client puzzles

The interoperable and loosely-coupled web services architecture, while beneficial, can be resource-intensive, and is thus susceptible to denial of service (DoS) attacks in which an attacker can use a relatively insignificant amount of resources to exhaust the computational resources of a web service. We investigate the effectiveness of defending web services from DoS attacks using client puzzles, a cryptographic countermeasure which provides a form of gradual authentication by requiring the client to solve some computationally difficult problems before access is granted. In particular, we describe a mechanism for integrating a hash-based puzzle into existing web services frameworks and analyze the effectiveness of the countermeasure using a variety of scenarios on a network testbed. Client puzzles are an effective defence against flooding attacks. They can also mitigate certain types of semantic-based attacks, although they may not be the optimal solution.