On the leakage resilience of secure channel establishment

Secure communication channels are typically constructed from an authenticated key exchange (AKE) protocol, which authenticates the communicating parties and establishes shared secret keys, and a secure data transmission layer, which uses the secret keys to encrypt data. We address the partial leakage of communicating parties' long-term secret keys due to various side-channel attacks, and the partial leakage of plaintext due to data compression. Both issues can negatively affect the security of channel establishment and data transmission. In this work, we advance the modelling of security for AKE protocols by considering more granular partial leakage of parties' long-term secrets. We present generic and concrete constructions of two-pass leakage-resilient key exchange protocols that are secure in the proposed security models. We also examine two techniques--heuristic separation of secrets and fixed-dictionary compression--for enabling compression while protecting high-value secrets.

A cryptographic analysis of the TLS 1.3 handshake protocol candidates

The Internet Engineering Task Force (IETF) is currently developing the next version of the Transport Layer Security (TLS) protocol, version 1.3. The transparency of this standardization process allows comprehensive cryptographic analysis of the protocols prior to adoption, whereas previous TLS versions have been scrutinized in the cryptographic literature only after standardization. This is even more important as there are two related, yet slightly different, candidates in discussion for TLS 1.3, called draft-ietf-tls-tls13-05 and draft-ietf-tls-tls13-dh-based. We give a cryptographic analysis of the primary ephemeral Diffie–Hellman-based handshake protocol, which authenticates parties and establishes encryption keys, of both TLS 1.3 candidates. We show that both candidate handshakes achieve the main goal of providing secure authenticated key exchange according to an augmented multi-stage version of the Bellare–Rogaway model. Such a multi-stage approach is convenient for analyzing the design of the candidates, as they establish multiple session keys during the exchange. An important step in our analysis is to consider compositional security guarantees. We show that, since our multi-stage key exchange security notion is composable with arbitrary symmetric-key protocols, the use of session keys in the record layer protocol is safe. Moreover, since we can view the abbreviated TLS resumption procedure also as a symmetric-key protocol, our compositional analysis allows us to directly conclude security of the combined handshake with session resumption. We include a discussion on several design characteristics of the TLS 1.3 drafts based on the observations in our analysis.

Keeping clear on costs: Geatches v Anglo Coal (Moranbah North Management Pty Ltd) [2014] QSC 106

In Geatches v Anglo Coal (Moranbah North Management Pty Ltd [2014] QSC 106, a dispute arose in the context of an assessment of costs as to the meaning to be attributed to particular terms of settlement and discharge signed by the parties. The court was required to consider the implications of those documents, and of a subsequent consent order intended to reflect the agreed settlement. Recovery of costs - terms of settlement and discharge exclude recovery of costs against one party and require other party to pay costs of claim against it - whether only subsequent consent order should be construed - implications where costs were common and mixed costs - whether costs should be apportioned

An abuse of process - traditionally: Smith v Lucht [2014] QDC 302

In Smith v Lucht [2014] QDC 302 McGill DCJ considered whether in Queensland the concept of abuse of process was sufficiently broad as to encompass circumstances in which the resources of the court and the parties to be expended to determine the claim were out of all proportion to the interest at stake. Stay of proceedings - abuse of process - whether disproportionality between interest at stake and costs of litigating may amount to abuse of process - plaintiff with good cause of action entitled to pursue it.

Loyalty (Brand Loyalty)

Loyalty is a desired marketing outcome for products ranging from fast-moving consumer goods, services, durables, and ideas products such as political parties and social behaviors. Evidence has shown that a base of loyal customers is advantageous for an organization as it reduces the marketing cost of doing business and improves profitability. The approaches to loyalty have varied over the decades with various schools of thoughts toward definitions, conceptualizations, and measurement. The need for understanding the nature of the product and consumer's behavior to determine the appropriate approach to loyalty is emphasized in this article. In this article, we outline the historical development of brand loyalty, the major approaches to the construct (attitudinal and behavioral) and new approaches that deconstruct attitudinal loyalty into its subcomponent parts.

Laboratories transformation

BACKGROUND OR CONTEXT Laboratories provide the physical spaces for engineering students to connect with theory and have a personal hands-on learning experience. Learning space design and development is well established in many universities however laboratories are often not part of that movement. While active, collaborative and group learning pedagogies are all key words in relation to these new spaces the concepts have always been central to laboratory based learning. The opportunity to build on and strengthen good practice in laboratories is immense. In the 2001 review “Universities in Crisis” many references are made to the decline of laboratories. One such comment in the review was made by Professor Ian Chubb (AVCC), who in 2013, as Chief Scientist for Australia, identifies the national concern about STEM education and presents a strategic plan to address the challenges ahead. What has been achieved and changed in engineering teaching and research laboratories in this time? PURPOSE OR GOAL A large number of universities in Australia and New Zealand own laboratory and other infrastructure designed well for the era they were built but now showing signs of their age, unable to meet the needs of today’s students, limiting the effectiveness of learning outcomes and presenting very low utilisation rates. This paper will present a model for new learning space design that improves student experience and engagement, supporting academic aims and significantly raising the space utilisation rate. APPROACH A new approach in laboratory teaching and research including new management has been adopted by the engineering disciplines at QUT. Flexibility is an underpinning principle along with the modularisation of fixed teaching and learning equipment, high utilisation of spaces and dynamic pedagogical approaches. The revitalised laboratories and workshop facilities are used primarily for the engineering disciplines and increasingly for integrated use across many disciplines in the STEM context. The new approach was built upon a base of an integrated faculty structure from 2005 and realised in 2010 as an associated development with the new Science and Engineering Centre (SEC). Evaluation through student feedback surveys for practical activities, utilisation rate statistics and uptake by academic and technical staff indicate a very positive outcome. DISCUSSION Resulting from this implementation has been increased satisfaction by students, creation of social learning and connecting space and an environment that meets the needs and challenges of active, collaborative and group learning pedagogies. Academic staff are supported, technical operations are efficient and laboratories are effectively utilised. RECOMMENDATIONS/IMPLICATIONS/CONCLUSION Future opportunities for continuous improvement are evident in using the student feedback to rectify faults and improve equipment, environment and process. The model is easily articulated and visible to other interested parties to contribute to sector wide development of learning spaces.

Decision examines wrongdoers and liability

In Ligon Sixty-Three Pty Ltd v ClarkeKann [2015] QSC 153 the court considered an application to join parties as defendants when it was alleged they were concurrent wrongdoers for the purpose of the proportionate liability provisions of the Civil Liability Act 2003 (Qld) (the Act).

Agenda-Setting Revisited: Social Media and Sourcing in Mainstream Journalism

In political journalism, the battle over agenda-setting between journalists and their sources has been described using many metaphors and concepts. Herbert Gans saw it as a dance where the two parties competed for leadership, arguing that sources usually got the lead. We address the question of how social media, in particular Twitter, contribute to media agenda-building and agenda-setting by looking at how tweets are sourced in election campaign coverage in Australia, Norway and Sweden. Our findings show that the popularity of elite political sources is a common characteristic across all countries and media. Sourcing from Twitter reinforces the power of the political elites to set the agenda of the news media – they are indeed “still leading the dance”. Twitter content travels to the news media as opinions, comments, announcements, factual statements, and photos. Still, there are variations that must be explained both by reference to different political and cultural characteristics of the three countries, as well as by the available resources and journalistic profiles of each media outlet.

Recognition and enforcement in cross-border insolvency law: A proposal for judicial gap-filling

This Article analyzes the recognition and enforcement of cross-border insolvency judgments from the United States, United Kingdom, and Australia to determine whether the UNCITRAL Model Law’s goal of modified universalism is currently being practiced, and subjects the Model Law to analysis through the lens of international relations theories to elaborate a way forward. We posit that courts could use the express language of the Model Law text to confer recognition and enforcement of foreign insolvency judgments. The adoption of our proposal will reduce costs, maximize recovery for creditors, and ensure predictability for all parties.

Conclaves and concurrent expert evidence: A positive development in Australian legal practice?

Many Australian courts now prefer pre-hearing meetings of experts (conclaves) being convened to prepare joint reports to identify areas of agreement and disagreement, followed by concurrent expert evidence at trial. This contrasts to the traditional approach where experts did not meet before trial and did not give evidence together. Most judges, lawyers and expert witnesses favour this as a positive development in Australian legal practice, at least for civil disputes. This new approach impacts medical practitioners who are called upon to give expert evidence, or who are parties to disputes before the courts. Arguably, it is too soon to tell whether the relative lack of transparency at the conclave stage will give rise to difficulties in the coronial, disciplinary and criminal arenas.

Performance-based contracting for roads – Experiences of Australia and Indonesia

Many countries over the last decade, have used performance-based contracting (PBC) to manage and maintain roads. The implementation of PBC provides additional benefits for the government/public such as cost savings and improved conditions of contracted road assets. In Australia, PBC is already being implemented on all categories of roads: national, state, urban and rural. Australian PBC arrangement is designed to turn over control and responsibility for roadway system maintenance, rehabilitation, and capital improvement projects to private contractors. Contractors’ responsibilities include determination of treatment types, the design, programming and the undertaking of works needed to maintain road networks at predetermined performance levels. Indonesia initiated two PBC pilot projects in 2011, the Pantura Section Demak-Trengguli (7.68 kilometers) in Central Java Province and Section Ciasem-Pamanukan (18.5 kilometers) in West Java Province. Both sections are categorized as national roads. The contract duration for both of these projects is four years. To facilitate a possible way forward, it is proposed to conduct a study to understand Australia's experiences of advancing from pilot projects to nation-wide programs using PBC. The study focuses on the scope of contracts, bidding processes, risk allocation, and key drivers, using relevant PBC case studies from Australia. Recommendations for future PBC deployment nation-wide should be based on more research associated with risk allocation. This will include investigation of standard conditions of contract. Implications of the contract clauses for the risk management strategy to be adopted by contractors. Based on the nature of risks, some are best managed by the project owner. It is very important that all parties involved to be open to the new rules of contract and to convince themselves about the potential increased benefits of the use of PBC. The most recent states of challenging issues were explored and described.

Enterprise education: Learning through personal experience

This paper outlines the development of a reflective process through which student feelings are brought to the surface to advance their learning outcomes. A key notion in relation to the capacity of student development is the ability of students to alter their collective habits of thought and in turn the nature of the learning environment. The paper examines student reflection in the context of students' heightened awareness of self and their potential influence on their environment. The notion of 'surfacing feelings' is used to describe the outcome of individual and group reflection through which several parties become aware of the active reflections of individual students, thereby increasing the potential depth of overall reflection. Finally, the author considers the transferability of the ideas discussed to other educational contexts.

The neuroscience of inspirational leadership: the importance of collective-oriented language and shared group membership

Effective leaders are believed to inspire followers by providing inclusive visions of the future that followers can identify with. In the present study, we examined the neural mechanisms underlying this process, testing key hypotheses derived from transformational and social identity approaches to leadership. While undergoing functional MRI, supporters from the two major Australian political parties (Liberal vs. Labor) were presented with inspirational collective-oriented and noninspirational personal-oriented statements made by in-group and out-group leaders. Imaging data revealed that inspirational (rather than noninspirational) statements from in-group leaders were associated with increased activation in the bilateral rostral inferior parietal lobule, pars opercularis, and posterior midcingulate cortex: brain areas that are typically implicated in controlling semantic information processing. In contrast, for out-group leaders, greater activation in these areas was associated with noninspirational statements. In addition, noninspirational statements by in-group (but not out-group) leaders resulted in increased activation in the medial prefrontal cortex, an area typically associated with reasoning about a person’s mental state. These results show that followers processed identical statements qualitatively differently as a function of leaders’ group membership, thus demonstrating that shared identity acts as an amplifier for inspirational leadership communication.

What does built environment research have to do with risk mitigation, resilience and disaster recovery?

One could argue that the nature of our housing stock is a key determining factor in the ability of our citizens to manage risk, be resilient to various natural and human events, and to recover from these events. Recent research has been examining current challenges posed by our housing stock and exploring potential solutions from a range of perspectives. The aim of this paper is to discuss key findings from recent built environment research in Australia to initiate cross-sectorial discussion and debate about the implications and opportunities for other sectors such as emergency management and insurance. Three recent building research projects are discussed: - Heat waves The impact of heat waves on houses and occupants, and proposed changes to building regulations, air conditioning standards and building design, to reduce risks associated with heat waves. - Net zero energy homes Exploration of the potential benefits of a strategic optimization of building quality, energy and water efficiency, and household or community level distributed energy and water services for disaster management and recovery. - Building information Mapping of the flow of information about residential buildings, and the potential for national or regional building files (in a similar manner to personal medical records) to assist all parties to make more informed decisions that impact on housing sustainability and community resilience. The paper discusses how sustainability, environmental performance and resilience are inter-related, and can be supported by building files. It concludes with a call for increased cross-sectorial collaboration to explore opportunities for a whole-of-systems approach to our built environment that addresses a range of economic and environmental challenges as well as disaster and emergency management.

Electronic Building Passport - Final Report: Project 2 National Energy Efficient Building Project Phase 2

The National Energy Efficient Building Project (NEEBP) Phase One report, published in December 2014, investigated “process issues and systemic failures” in the administration of the energy performance requirements in the National Construction Code. It found that most stakeholders believed that under-compliance with these requirements is widespread across Australia, with similar issues being reported in all states and territories. The report found that many different factors were contributing to this outcome and, as a result, many recommendations were offered that together would be expected to remedy the systemic issues reported. To follow up on this Phase 1 report, three additional projects were commissioned as part of Phase 2 of the overall NEEBP project. This Report deals with the development and piloting of an Electronic Building Passport (EBP) tool – a project undertaken jointly by pitt&sherry and a team at the Queensland University of Technology (QUT) led by Dr Wendy Miller. The other Phase 2 projects cover audits of Class 1 buildings and issues relating to building alterations and additions. The passport concept aims to provide all stakeholders with (controlled) access to the key documentation and information that they need to verify the energy performance of buildings. This trial project deals with residential buildings but in principle could apply to any building type. Nine councils were recruited to help develop and test a pilot electronic building passport tool. The participation of these councils – across all states – enabled an assessment of the extent to which these councils are currently utilising documentation; to track the compliance of residential buildings with the energy performance requirements in the National Construction Code (NCC). Overall we found that none of the participating councils are currently compiling all of the energy performance-related documentation that would demonstrate code compliance. The key reasons for this include: a major lack of clarity on precisely what documentation should be collected; cost and budget pressures; low public/stakeholder demand for the documentation; and a pragmatic judgement that non-compliance with any regulated documentation requirements represents a relatively low risk for them. Some councils reported producing documentation, such as certificates of final completion, only on demand, for example. Only three of the nine council participants reported regularly conducting compliance assessments or audits utilising this documentation and/or inspections. Overall we formed the view that documentation and information tracking processes operating within the building standards and compliance system are not working to assure compliance with the Code’s energy performance requirements. In other words the Code, and its implementation under state and territory regulatory processes, is falling short as a ‘quality assurance’ system for consumers. As a result it is likely that the new housing stock is under-performing relative to policy expectations, consuming unnecessary amounts of energy, imposing unnecessarily high energy bills on occupants, and generating unnecessary greenhouse gas emissions. At the same time, Councils noted that the demand for documentation relating to building energy performance was low. All the participant councils in the EBP pilot agreed that documentation and information processes need to work more effectively if the potential regulatory and market drivers towards energy efficient homes are to be harnessed. These findings are fully consistent with the Phase 1 NEEBP report. It was also agreed that an EBP system could potentially play an important role in improving documentation and information processes. However, only one of the participant councils indicated that they might adopt such a system on a voluntary basis. The majority felt that such a system would only be taken up if it were: - A nationally agreed system, imposed as a mandatory requirement under state or national regulation; - Capable of being used by multiple parties including councils, private certifiers, building regulators, builders and energy assessors in particular; and - Fully integrated into their existing document management systems, or at least seamlessly compatible rather than a separate, unlinked tool. Further, we note that the value of an EBP in capturing statistical information relating to the energy performance of buildings would be much greater if an EBP were adopted on a nationally consistent basis. Councils were clear that a key impediment to the take up of an EBP system is that they are facing very considerable budget and staffing challenges. They report that they are often unable to meet all community demands from the resources available to them. Therefore they are unlikely to provide resources to support the roll out of an EBP system on a voluntary basis. Overall, we conclude from this pilot that the public good would be well served if the Australian, state and territory governments continued to develop and implement an Electronic Building Passport system in a cost-efficient and effective manner. This development should occur with detailed input from building regulators, the Australian Building Codes Board (ABCB), councils and private certifiers in the first instance. This report provides a suite of recommendations (Section 7.2) designed to advance the development and guide the implementation of a national EBP system.