Visualising security incidents through event aggregation

Extracting and aggregating the relevant event records relating to an identified security incident from the multitude of heterogeneous logs in an enterprise network is a difficult challenge. Presenting the information in a meaningful way is an additional challenge. This paper looks at solutions to this problem by first identifying three main transforms; log collection, correlation, and visual transformation. Having identified that the CEE project will address the first transform, this paper focuses on the second, while the third is left for future work. To aggregate by correlating event records we demonstrate the use of two correlation methods, simple and composite. These make use of a defined mapping schema and confidence values to dynamically query the normalised dataset and to constrain result events to within a time window. Doing so improves the quality of results, required for the iterative re-querying process being undertaken. Final results of the process are output as nodes and edges suitable for presentation as a network graph.

The Australian Business Assessment of Computer User Security (ABACUS): A national survey.

The Australian Business Assessment of Computer User Security (ABACUS) survey is a nationwide assessment of the prevalence and nature of computer security incidents experienced by Australian businesses. This report presents the findings of the survey which may be used by businesses in Australia to assess the effectiveness of their information technology security measures.

Indoor aerosols : from personal exposure to risk assessment

Motivated by growing considerations of the scale, severity and risks associated with human exposure to indoor particulate matter, this work reviewed existing literature to: (i) identify state-of-the-art experimental techniques used for personal exposure assessment; (ii) compare exposure levels reported for domestic/school settings in different countries (excluding exposure to environmental tobacco smoke and particulate matter from biomass cooking in developing countries); (iii) assess the contribution of outdoor background vs indoor sources to personal exposure; and (iv) examine scientific understanding of the risks posed by personal exposure to indoor aerosols. Limited studies assessing integrated daily residential exposure to just one particle size fraction, ultrafine particles, show that the contribution of indoor sources ranged from 19-76%. This indicates a strong dependence on resident activities, source events and site specificity, and highlights the importance of indoor sources for total personal exposure. Further, it was assessed that 10-30% of the total burden-of-disease from particulate matter exposure was due to indoor generated particles, signifying that indoor environments are likely to be a dominant environmental factor affecting human health. However, due to challenges associated with conducting epidemiological assessments, the role of indoor generated particles has not been fully acknowledged, and improved exposure/risk assessment methods are still needed, together with a serious focus on exposure control.

Communicating personal amnesty : a dismodernist approach to arts intersections between disability, personal stories and well-being

This thesis investigates the role of narrative devices in the process of improving an individual’s psychological and physiological experience of health and well-being using two methods of inquiry: a theoretical research project and a comparative analysis of two case studies. Through these two approaches the research examines how the health status of people experiencing disability can be re-positioned and re-designed to develop creative, narrative-based approaches to strengthen communication between the mainstream community and those marginalised by pathological, social and biological illness-centric policy. The theoretical section of the thesis examines two different, but complementary bodies of research: health and well-being, and narrative reconstruction. By invoking Antonovksy’s (1985a) theory of salutogenesis and Davis’s (2002) theory of dismodernism, the study examines the role of language and narrative in the defining of health in social, pathological and ableist spheres. The research positions health and well-being as disparate from historical and contemporary readings of illness and disability and presents literature to support the potential to improve health well-being through a creative re-narration of the experience of disability. The research examines the theoretical concepts of resilience, autonomy and social inclusion through a detailed examination of narratology and the amnesty narrative. The study links these theoretical approaches to a practical Arts-Health intersection program developed for the research project called Communicating Personal Amnesty. Through a comparative analysis of a Pilot Study and Major Case study, the research presents findings derived from theory-building participatory action research showing the efficacy of the program. The research provides a detailed analysis of key narrative structures through a variety of experimental methodological approaches to encourage an important dialogue between the creative components of the thesis and the more traditional health-based academic critique. The research is an example of emergent translational health methodologies, in disability studies.

Individual, environmental, and meteorological predictors of daily personal ultraviolet radiation exposure measurements in a United States cohort study

Background Individual exposure to ultraviolet radiation (UVR) is challenging to measure, particularly for diseases with substantial latency periods between first exposure and diagnosis of outcome, such as cancer. To guide the choice of surrogates for long-term UVR exposure in epidemiologic studies, we assessed how well stable sun-related individual characteristics and environmental/meteorological factors predicted daily personal UVR exposure measurements. Methods We evaluated 123 United States Radiologic Technologists subjects who wore personal UVR dosimeters for 8 hours daily for up to 7 days (N = 837 days). Potential predictors of personal UVR derived from a self-administered questionnaire, and public databases that provided daily estimates of ambient UVR and weather conditions. Factors potentially related to personal UVR exposure were tested individually and in a model including all significant variables. Results The strongest predictors of daily personal UVR exposure in the full model were ambient UVR, latitude, daily rainfall, and skin reaction to prolonged sunlight (R2 = 0.30). In a model containing only environmental and meteorological variables, ambient UVR, latitude, and daily rainfall were the strongest predictors of daily personal UVR exposure (R2 = 0.25). Conclusions In the absence of feasible measures of individual longitudinal sun exposure history, stable personal characteristics, ambient UVR, and weather parameters may help estimate long-term personal UVR exposure.

A qualitative analysis of stress, uplifts and coping in the personal and professional lives of Singaporean nurses.

Aim. This paper is a report of a descriptive study of nurses’ experiences of daily stress and coping. Background. Much of the research on stress in nursing is quantitative and has focused on only work stressors. Moreover, few studies have examined the uplifting side of living and the role it may play in moderating stress. A theoretical framework on stress and coping, ‘hassles’ and ‘uplifts’ was used to examine nurses’ experiences across their personal and professional lives from a qualitative perspective. Methods. A purposive sample of Singaporean hospital nurses (n = 23) identified using a snowball sampling technique, participated in two sets of email interviews in 2009. The qualitative data were analysed using thematic analysis. Results. Three themes were identified as constituting daily hassles: (i) time pressures, (ii) nature of nursing work and (iii) multiple roles. Uplifts were expressed in relation to one main theme of feeling good extending across nurses’ personal and professional lives. Three themes were identified as ways of coping: (i) taking time out, (ii) seeking emotional support and (iii) belief systems. Conclusion. The interaction between personal and professional life plays a major role in Singaporean nurses’ experiences of stress and coping. However, stress may be ameliorated through effective management and strong familial support. Nurses and employers are recommended to use uplifts and identify ways of coping to minimize attrition and contribute to the development of a healthy workforce.

Personal processes interface mock up

Situated on Youtube, and shown in various locations. In this video we show a 3D mock up of a personal house purchasing process. A path traversal metaphor is used to give a sense of progression along the process stages. The intention is to be able to use console devices like an Xbox to consume business processes. This is so businesses can expose their internal processes to consumers using sophisticated user interfaces. The demonstrator was developed using Microsoft XNA, with assistance from the Suncorp Bank and the Smart Services CRC. More information at: www.bpmve.org

Background to the development of a curriculum for the history of “cyber” and “communications” security

For any discipline to be regarded as a professional undertaking by which its members may be treated as true “professionals” in a specific area, practitioners must clearly understand that discipline’s history as well as the place and significance of that history in current practice as well as its relevance to available technologies and artefacts at the time. This is common for many professional disciplines such as medicine, pharmacy, engineering, law and so on but not yet, this paper submits, in information technology. Based on twenty five elapsed years of experience in developing and delivering Cybersecurity courses at undergraduate and postgraduate levels, this paper proposes a rationale and set of differing perspectives for the planning and development of curricula relevant to the delivery of appropriate courses in the history of cybersecurity or information assurance to information and communications technology (ICT) students and thus to potential information technology professionals.

Privacy by Design : Does it matter for social networks?

Privacy is an important component of freedom and plays a key role in protecting fundamental human rights. It is becoming increasingly difficult to ignore the fact that without appropriate levels of privacy, a person’s rights are diminished. Users want to protect their privacy - particularly in “privacy invasive” areas such as social networks. However, Social Network users seldom know how protect their own privacy through online mechanisms. What is required is an emerging concept that provides users legitimate control over their own personal information, whilst preserving and maintaining the advantages of engaging with online services such as Social Networks. This paper reviews “Privacy by Design (PbD)” and shows how it applies to diverse privacy areas. Such an approach will move towards mitigating many of the privacy issues in online information systems and can be a potential pathway for protecting user’s personal information. The research has posed many questions in need of further investigation for different open source distributed Social Networks. Findings from this research will lead to a novel distributed architecture that provides more transparent and accountable privacy for the users of online information systems.

Information accountability and usability : are there any connections?

Availability of health information is rapidly increasing and the expansion and proliferation of health information is inevitable. The Electronic Healthcare Record, Electronic Medical Record and Personal Health Record are at the core of this trend and are required for appropriate and practicable exchange and sharing of health information. However, it is becoming increasingly recognized that it is essential to preserve patient privacy and information security when utilising sensitive information for clinical, management and administrative processes. Furthermore, the usability of emerging healthcare applications is also becoming a growing concern. This paper proposes a novel approach for integrating consideration of information accountability with a perspective from usability engineering that can be applied when developing healthcare information technology applications. A social networking user case in the healthcare information exchange will be presented in the context of our approach.

Synchronised integrated online e-health profiles

Web-based social networking applications have become increasingly important in recent years. The current applications in the healthcare sphere can support the health management, but to date there is no patient-controlled integrator. This paper proposes a platform called Multiple Profile Manager (MPM) that enables a user to create and manage an integrated profile that can be shared across numerous social network sites. Moreover, it is able to facilitate the collection of personal healthcare data, which makes a contribution to the development of public health informatics. Here we want to illustrate how patients and physicians can be benefited from enabling the platform for online social network sites. The MPM simplifies the management of patients' profiles and allows health professionals to obtain a more complete picture of the patients' background so that they can provide better health care. To do so, we demonstrate a prototype of the platform and describe its protocol specification, which is an XMPP (Extensible Messaging and Presence Protocol) [1] extension, for sharing and synchronising profile data (vCard²) between different social networks.

Urban agriculture : a growing field of research workshop at INTERACT 2013

Growing food presents diverse challenges and opportunities within the urban environment. As cities develop, population density rises, land prices rise, and the opportunity to use land for traditional farming and gardening diminishes. Counter to this trend there are a growing number of both community gardens, city farms, guerrilla gardening, rooftop and vertical gardens, pot plants, windowsill herbs, and other balcony or backyard gardens cropping up in different cities, all with a purpose to produce food. This workshop brings to-gether practitioners and researchers in the field of urban agriculture and Hu-man-Computer Interaction to explore and opportunities for technology design to support the different forms of growing practice and foster local food production in cities. This 1-day workshop will serve as an active forum for researchers and practi-tioners across various fields including, but not limited to, agriculture and gar-dening, education, urban planning, human-computer interaction, and communi-ty engagement. This workshop has three distinct points of focus: i) Individual and small-scale gardening and food production, and how to connect like minded people who are involved in these practices to share their knowledge ii) Com-munities involved in urban agriculture, either through community gardens, city farms, or grassroots movements, often dependant on volunteer participation, providing the challenge of managing limited resources iii) Environmental and sociocultural sustainability through urban agriculture. The participants will have an opportunity to present their own work. This will be followed by a visit to a nearby city farm, which will provide a local context for a group design exercise. Finally the workshop will conclude with panel dis-cussions to review opportunities for further research and collaborations beyond the conference. For more information, please visit the workshop website, at http://www.urbaninformatics.net/resources/interact2013cfp/

Iris based identity verification robust to sample presentation security attacks

Iris based identity verification is highly reliable but it can also be subject to attacks. Pupil dilation or constriction stimulated by the application of drugs are examples of sample presentation security attacks which can lead to higher false rejection rates. Suspects on a watch list can potentially circumvent the iris based system using such methods. This paper investigates a new approach using multiple parts of the iris (instances) and multiple iris samples in a sequential decision fusion framework that can yield robust performance. Results are presented and compared with the standard full iris based approach for a number of iris degradations. An advantage of the proposed fusion scheme is that the trade-off between detection errors can be controlled by setting parameters such as the number of instances and the number of samples used in the system. The system can then be operated to match security threat levels. It is shown that for optimal values of these parameters, the fused system also has a lower total error rate.

Establishing design thinking : accident, program frameworks and personal practices

Distribution through electronic media provides an avenue for promotion, recognition and an outlet of display for graphic designers. The emergence of available media technologies have enabled graphic designers to extend these boundaries of their practice. In this context the designer is constantly striving for aesthetic success and is strongly influenced by the fashion and trends of contemporary design work. The designer is always in a state of inquiry, finding pathways of discovery that lead to innovation and originality that are highly valued criteria for self-evaluation. This research is based on an analysis of the designer perspective and the processes used within an active graphic design practice specializing entirely within a digital collage domain. Contemporary design methodologies were critically examined, compared and refined to reflect the self-practice of the researcher. The refined methodology may assist designers in maintaining systematic work practices, as well as promote the importance of exploration and experimentation processes. Research findings indicate some differences in the identified methodologies and the design practice of the researcher in the sense that many contemporary designers are not confined to a client-base but are self-generating design images influenced by contemporary practitioners. As well as confirming some aspects of more conventional design processes, the researcher found that accidental discoveries and the designer’s interaction with technology plays a significant part in the design process.

Health effects of daily airborne particle dose in children : direct association between personal dose and respiratory health effects

Air pollution is a widespread health problem associated with respiratory symptoms. Continuous exposure monitoring was performed to estimate alveolar and tracheobronchial dose, measured as deposited surface area, for 103 children and to evaluate the long-term effects of exposure to airborne particles through spirometry, skin prick tests and measurement of exhaled nitric oxide (eNO). The mean daily alveolar deposited surface area dose received by children was 1.35×103 mm2. The lowest and highest particle number concentrations were found during sleeping and eating time. A significant negative association was found between changes in pulmonary function tests and individual dose estimates. Significant differences were found for asthmatics, children with allergic rhinitis and sensitive to allergens compared to healthy subjects for eNO. Variation is a child’s activity over time appeared to have a strong impact on respiratory outcomes, which indicates that personal monitoring is vital for assessing the expected health effects of exposure to particles.