Modeling key compromise impersonation attacks on group key exchange protocols

Two-party key exchange (2PKE) protocols have been rigorously analyzed under various models considering different adversarial actions. However, the analysis of group key exchange (GKE) protocols has not been as extensive as that of 2PKE protocols. Particularly, an important security attribute called key compromise impersonation (KCI) resilience has been completely ignored for the case of GKE protocols. Informally, a protocol is said to provide KCI resilience if the compromise of the long-term secret key of a protocol participant A does not allow the adversary to impersonate an honest participant B to A. In this paper, we argue that KCI resilience for GKE protocols is at least as important as it is for 2PKE protocols. Our first contribution is revised definitions of security for GKE protocols considering KCI attacks by both outsider and insider adversaries. We also give a new proof of security for an existing two-round GKE protocol under the revised security definitions assuming random oracles. We then show how to achieve insider KCIR in a generic way using a known compiler in the literature. As one may expect, this additional security assurance comes at the cost of an extra round of communication. Finally, we show that a few existing protocols are not secure against outsider KCI attacks. The attacks on these protocols illustrate the necessity of considering KCI resilience for GKE protocols.

A nod to consent : in step with the UCPR

This article considers the decision of Robin DCJ in CTP Manager Limited v Ascent Pty Ltd [2011] QDC 74 and the likely impact of the decision on the practice in the court registries in similar circumstances.

A framework for analysing system intelligence of the building control system: a study of the integrated building management system

The lack of satisfactory consensus for characterizing the system intelligence and structured analytical decision models has inhibited the developers and practitioners to understand and configure optimum intelligent building systems in a fully informed manner. So far, little research has been conducted in this aspect. This research is designed to identify the key intelligent indicators, and develop analytical models for computing the system intelligence score of smart building system in the intelligent building. The integrated building management system (IBMS) was used as an illustrative example to present a framework. The models presented in this study applied the system intelligence theory, and the conceptual analytical framework. A total of 16 key intelligent indicators were first identified from a general survey. Then, two multi-criteria decision making (MCDM) approaches, the analytic hierarchy process (AHP) and analytic network process (ANP), were employed to develop the system intelligence analytical models. Top intelligence indicators of IBMS include: self-diagnostic of operation deviations; adaptive limiting control algorithm; and, year-round time schedule performance. The developed conceptual framework was then transformed to the practical model. The effectiveness of the practical model was evaluated by means of expert validation. The main contribution of this research is to promote understanding of the intelligent indicators, and to set the foundation for a systemic framework that provide developers and building stakeholders a consolidated inclusive tool for the system intelligence evaluation of the proposed components design configurations.

Measuring complexity for building projects : a Delphi study

Purpose---The aim of this study is to identify complexity measures for building projects in the People’s Republic of China (PRC). Design/Methodology/Approach---A three-round of Delphi questionnaire survey was conducted to identify the key parameters that measure the degree of project complexity. A complexity index (CI) was developed based on the identified measures and their relative importance. Findings---Six key measures of project complexity have been identified, which include, namely (1) building structure & function; (2) construction method; (3) the urgency of the project schedule; (4) project size/scale; (5) geological condition; and (6) neighboring environment. Practical implications---These complexity measures help stakeholders assess degrees of project complexity and better manage the potential risks that might be induced to different levels of project complexity. Originality/Value---The findings provide insightful perspectives to define and understand project complexity. For stakeholders, understanding and addressing the complexity help to improve project planning and implementation.

Identification of selection criteria for operational variations of the design-build system : a delphi study in China

The design-build (DB) system has been demonstrated as an effective delivery method and has gained popularity worldwide. However it is observed that a number of operational variations of DB system have emerged since the last decade to cater for different client’s requirements. After the client decides to procure his project through the DB system, he still has to choose an appropriate configuration to deliver their projects optimally. However, there is little research on the selection of DB operational variations. One of the main reasons for this is the lack of evaluation criteria for determining the appropriateness of each operational variation. To obtain such criteria, a three-round Delphi survey has been conducted with 20 construction experts in the People’s Republic of China (PRC). Seven top selection criteria were identified. These are: (1) availability of competent design-builders; (2) client’s capabilities; (3) project complexity; (4) client’s control of project; (5) early commencement & short duration; (6) reduced responsibility or involvement; and (7) clearly defined end user’s requirements. These selection criteria were found to have a statistically significant agreement. These findings may furnish various stakeholders, DB clients in particular, with better insight to understand and compare the different operational variations of the DB system.

Developing a fuzzy multi-criteria decision-making model for selecting design-build operational variations

Many academic researchers have conducted studies on the selection of design-build (DB) delivery method; however, there are few studies on the selection of DB operational variations, which poses challenges to many clients. The selection of DB operational variation is a multi-criteria decision making process that requires clients to objectively evaluate the performance of each DB operational variation with reference to the selection criteria. This evaluation process is often characterized by subjectivity and uncertainty. In order to resolve this deficiency, the current investigation aimed to establish a fuzzy multicriteria decision-making (FMCDM) model for selecting the most suitable DB operational variation. A three-round Delphi questionnaire survey was conducted to identify the selection criteria and their relative importance. A fuzzy set theory approach, namely the modified horizontal approach with the bisector error method, was applied to establish the fuzzy membership functions, which enables clients to perform quantitative calculations on the performance of each DB operational variation. The FMCDM was developed using the weighted mean method to aggregate the overall performance of DB operational variations with regard to the selection criteria. The proposed FMCDM model enables clients to perform quantitative calculations in a fuzzy decision-making environment and provides a useful tool to cope with different project attributes.

Identification of key competences of DB clients in the construction market of China

The design-build system has been demonstrated as an effective delivery method and gained popularity worldwide. Although there are an increasing number of clients adopting DB method in China, most of them remain inexperienced with method. The objective of this study is therefore to identify the key competences that a client or its consultant should possess to ensure the success of DB projects. Face-to-face interviews and a two-round Delphi questionnaire survey were conducted to find the following six key competences of clients, which include the (1) ability to clearly articulate project scope and objectives; (2) financial capacity for DB projects; (3) capability in contract management; (4) adequate staff or consulting team; (5) effective coordination with contractors and (6) experience with similar DB projects. This study will hopefully provide clients with measures to evaluate their DB competence and further promote their understanding of DB system in the PRC.

Employer's management of part-time student labour

-

Comparing retail union strategy in a neoliberal context : the case of Australia and New Zealand

Retail employees are amongst the most vulnerable workers in the context of neoliberal market economies. In many countries, low paid retail employees comprise around 10 per cent of the workforce (ABS 2011). The retail labour market is typically highly feminised and youthful, with many employees in part time and various forms of precarious employment (Tailby & Pollert 2011). However, the industry and its trade unions have rarely been the focus of academic study (Tilly & Carré 2011). This paper thus aims to analyse and compare trade union strategies in the retail industry in Australia and New Zealand, by utilising findings from a larger comparative study. The respective unions studied are the Shop Distributive and Allied Workers Union (SDA) in Australia and the National Distribution Union (NDU) in New Zealand. Data from interviews with union officials at different levels and from different regional locations in Australia and NZ are analysed. Union policy documents are also utilised to support the empirical data. Key findings from the comparison of retail unions’ strategy in Australia and NZ include: 1) the importance of institutional factors and internal political differences in shaping and constraining union strategies; 2) different emphases on external relationships and variations in partnership approaches; 3) the need to recruit to ‘stand still’ by retail unions in both countries; and, 4) similarities and differences in the unions’ organising approaches. The paper concludes by examining the implications of these findings for retail unions’ strategic choices and their ability to deliver workplace justice for employees.

Strengthening the role of the adult education sector in training workers for the digital content industries in Australia and Singapore

In 2009, QUT’s Office of Research and the Institute for Adult Learning Singapore funded a six-month pilot project that represented the first stage of a larger international comparative study. The study is the first of its kind to investigate to what extent and how digital content workers’ learning needs are being met by adult education and training in Australia and Singapore. The pilot project involved consolidating key theoretical literature, studies, policies, programs and statistical data relevant to the digital content industries in Australia and Singapore. This had not been done before, and represented new knowledge generation. Digital content workers include professionals within and beyond the creative industries as follows: Visual effects and animation (including virtual reality and 3D products); Interactive multimedia (e.g. websites, CD-ROMs) and software development; Computer and online games; and Digital film & TV production and film & TV post-production. In the last decade, the digital content industries have been recognised as an industry sector of strong and increasing significance. The project compared Australia and Singapore on aspects of the digital content industries’ labour market, skill requirements, human capital challenges, the role of adult education in building a workforce for the digital content industries, and innovation policies. The consolidated report generated from the project formed the basis of the proposal for an ARC Linkage Project application submitted in the May 2010 round.

Realising dead path elimination in BPMN

The Web Service Business Process Execution Language (BPEL) lacks any standard graphical notation. Various efforts have been undertaken to visualize BPEL using the Business Process Modelling Notation (BPMN). Although this is straightforward for the majority of concepts, it is tricky for the full BPEL standard, partly due to the insufficiently specified BPMN execution semantics. The upcoming BPMN 2.0 revision will provide this clear semantics. In this paper, we show how the dead path elimination (DPE) capabilities of BPEL can be expressed with this new semantics and discuss the limitations. We provide a generic formal definition of DPE and discuss resulting control flow requirements independent of specific process description languages.

Mapping of shallow coastal groundwaters, their hydrology and environmental geochemistry : Pumicestone catchment, Southeast Queensland

Blooms of the toxic cyanobacterium majuscula Lyngbya in the coastal waters of southeast Queensland have caused adverse impacts on both environmental health and human health, and on local economies such as fishing and tourism. A number of studies have confirmed that the main limiting nutrients (“nutrients of concern”) that contribute to these blooms area Fe, DOC, N, P and also pH. This study is conducted to establish the distribution of these parameters in a typical southeast Queensland coastal setting. The study maps the geochemistry of shallow groundwater in the mainland Pumicestone catchment with an emphasis on the nutrients of concern to understand how these nutrients relate to aquifer materials, landuse and anthropogenic activities. The results of the study form a GIS information layer which will be incorporated into a larger GIS model being produced by Queensland Department of Environment and Resource Management (DERM) to support landuse management to avoid/minimize blooms of Lyngbya in Moreton Bay, southeast Queensland, and other similar settings. A total of 38 boreholes were established in the mainland Pumicestone region and four sampling rounds of groundwater carried out in both dry and wet conditions. These groundwater samples were measured in the field for physico-chemical parameters, and in the laboratory analyses for the nutrients of concern, and other major and minor ions. Aquifer materials were confirmed using the Geological Survey of Queensland digital geology map, and geomaterials were assigned to seven categories which are A (sands), B (silts, sandy silts), C (estuarine mud, silts), D (humid soils), E (alluvium), F (sandstone) and G (other bedrock). The results of the water chemistry were examined by use of the software package AquaChem/AqQA, and divided into six groundwater groups, based on groundwater chemical types and location of boreholes. The type of aquifer material and location, and proximity to waterways was found to be important because they affected physico-chemical properties and concentrations of nutrients of concern and dissolved ions. The analytical results showed that iron concentrations of shallow groundwaters were high due to acid sulfate soils, and also mud and silt, but were lower in sand materials. DOC concentrations of these shallow groundwaters in the sand material were high probably due to rapid infiltration. In addition, DOC concentrations in some boreholes were high because they were installed in organic rich wetlands. The pH values of boreholes were from acidic to near neutral; some boreholes with pH values were low (< 4), showing acid sulfate soils in these boreholes. Concentrations of total nitrogen and total phosphorus of groundwaters were generally low, and the main causes of elevated concentrations of total nitrogen and total phosphorus are largely due to animal and human wastes and tend to be found in localized source areas. Comparison of the relative percentage of nitrogen species (NH3/NH4< Org-N, NO3-N and NO2-N) demonstrated that they could be related to sources such as animal waste, residential and agricultural fertilizers, forest and vegetation, mixed residents and farms, and variable setting and vegetation covers. Total concentrations of dissolved ions in sampling round 3 (dry period) were higher than those in sampling round 2 (wet period) due to both evaporation of groundwater in the dry period and the dilution of rainfall in the wet period. This showed that the highest concentrations of nutrients of concern were due to acid sulfate soils, aquifer materials, landuse and anthropogenic activities and were typically in aquifer materials of E (alluvium) and C (estuarine muds) and locations of Burpengary, Caboolture, and Glass Mountain catchments.

Factors contributing to design-build (DB) project delivery system implementation in road infrastructure projects in Indonesia

Design-build (DB) project delivery systems have increasingly been adopted by many private and public sector organizations worldwide due to the many advantages offered on projects by such systems. However, many Indonesian road infrastructure projects are still delivered using the traditional design-bid-build (DBB) project delivery system. In order to provide evidence of the benefits of DB, it is essential to identify the factors that can contribute to successful DB implementation and this paper aims to provide evidence of such factors that can promote the successful implementation of DB project delivery systems on Indonesian road infrastructure projects. Four main factors and 28 indicators were identified from an extensive literature review, and a Delphi questionnaire survey was conducted amongst 20 experts drawn from the Indonesian road infrastructure construction sector. The first round Delphi study found that regulation, competency of clients, ability to manage DB projects and external conditions were the major factors that can promote successful DB implementation.

The composition of sugarcane juices dervied from burnt cane and whole green cane crop

There has been substantial interest within the Australian sugar industry in product diversification as a means to reduce its exposure to fluctuating raw sugar prices and in order to increase its commercial viability. In particular, the industry is looking at fibrous residues from sugarcane harvesting (trash) and from sugarcane milling (bagasse) for cogeneration and the production of biocommodities, as these are complementary to the core process of sugar production. A means of producing surplus residue (biomass) is to process whole sugarcane crop. In this paper, the composition of different juices derived from different harvesting methods, viz. burnt cane with all trash extracted (BE), green cane with half of the trash extracted (GE), and green cane (whole sugarcane crop) with trash unextracted (GU), were investigated and the results and comparison presented. The determination of electrical conductivity, inorganic composition, and organic acids indicate that both GU and GE cane juice contain a higher proportion of soluble inorganic ions and ionisable organic acids, compared to BE cane juice. It is important to note that there are considerably higher levels of Na ions and citric acid, but relatively low P levels in the GU samples. A higher level of reducing sugars was analysed in the GU samples than the BE samples due to the higher proportion of impurities found naturally in sugarcane tops and leaves. The purity of the first expressed juice (FEJ) of GU cane was on average higher than that of FEJ of BE cane. Results also show that GU juices appear to contain higher levels of proteins and polysaccharides, with no significant difference in starch levels.

Characterisation of sugarcane juice particles that influence the clarification process

Problems associated with processing whole sugarcane crop can be minimised by removing impurities during the clarification stage. As a first step, it is important to understand the colloidal chemistry of juice particles on a molecular level to assist development strategies for effective clarification performance. This paper presents the composition and surface characteristics of colloidal particles originating from various juice types by using scanning electron microscopy with energy-dispersive X-ray spectroscopy (SEM-EDX), X-ray photoelectron spectroscopy (XPS) and zeta potential measurements. The composition and surface characteristics of colloidal juice particles are reported. The results indicate that there are three types of colloidal particles present viz., an aluminosilicate compound, silica and iron oxide, with the latter two being abundant. Proteins, polysaccharides and organic acids were identified on the surface of particles in juice. The overall particle charge varies from –2 mV to –6 mV. In comparison to juice expressed from burnt cane, the zeta potential values were more negative with juice particles originating from whole crop. This in part explains why these juices are difficult to clarify.