An analysis of TLS handshake proxying

Content delivery networks (CDNs) are an essential component of modern website infrastructures: edge servers located closer to users cache content, increasing robustness and capacity while decreasing latency. However, this situation becomes complicated for HTTPS content that is to be delivered using the Transport Layer Security (TLS) protocol: the edge server must be able to carry out TLS handshakes for the cached domain. Most commercial CDNs require that the domain owner give their certificate's private key to the CDN's edge server or abandon caching of HTTPS content entirely. We examine the security and performance of a recently commercialized delegation technique in which the domain owner retains possession of their private key and splits the TLS state machine geographically with the edge server using a private key proxy service. This allows the domain owner to limit the amount of trust given to the edge server while maintaining the benefits of CDN caching. On the performance front, we find that latency is slightly worse compared to the insecure approach, but still significantly better than the domain owner serving the content directly. On the security front, we enumerate the security goals for TLS handshake proxying and identify a subtle difference between the security of RSA key transport and signed-Diffie--Hellman in TLS handshake proxying; we also discuss timing side channel resistance of the key server and the effect of TLS session resumption.

Continuous after-the-fact leakage-resilient eCK-secure key exchange

Security models for two-party authenticated key exchange (AKE) protocols have developed over time to capture the security of AKE protocols even when the adversary learns certain secret values. Increased granularity of security can be modelled by considering partial leakage of secrets in the manner of models for leakage-resilient cryptography, designed to capture side-channel attacks. In this work, we use the strongest known partial-leakage-based security model for key exchange protocols, namely continuous after-the-fact leakage eCK (CAFL-eCK) model. We resolve an open problem by constructing the first concrete two-pass leakage-resilient key exchange protocol that is secure in the CAFL-eCK model.

Key change: The role of the creative industries in climate change action

The role of the creative industries – arts and artists – in helping to drive the changes in laws and behaviours that are necessary to tackle climate change, while not superficially obvious, is a deep one. Arts and artists of all kinds, as cultural practitioners, have been closely entwined with social change and social control since time immemorial, in large part because they help shape our understanding of the world, framing ideas, prefiguring change, and opening hearts and minds to new ways of thinking. They have played a major role in campaigns for law reform on many issues, and climate change should be no exception. Indeed, with climate change increasingly being seen as a deeply cultural issue, and its solutions as cultural ones to do with changing the way we understand our world and our place in it, the role of cultural practitioners in helping to address it should also increasingly be seen as central. It is curious, then, how comparatively little artistic engagement with climate change has taken place, how little engagement with the arts the climate movement has attempted, and how little theoretical and critical analysis has been undertaken on the role of the creative arts in climate change action. Through a literature review and a series of interviews with individuals working in relevant fields in Australia, this study examines and evaluates the role of the creative industries in climate change action and places it in a historical and theoretical context. It covers examples of the kind of artistic and activist collaborations that have been undertaken, the different roles in communication, campaigning for law reform, and deep culture change that arts and artists can play, and the risks and dangers inherent in the involvement of artists, both to climate change action and to the artist. It concludes that, despite the risks, a deeper and more thoughtful engagement of and by the creative industries in climate action would not only be useful but is perhaps vital to the success of the endeavours.

Impact of online privacy concerns and brand reputation on consumer willingness to provide personal information

The aim of this research was to identify the role of brand reputation in encouraging consumer willingness to provide personal data online, for the benefits of personalisation. This study extends on Malhotra, Kim and Agarwal’s (2004) Internet Users Information Privacy Concerns Model, and uses the theoretical underpinning of Social Contract Theory to assess how brand reputation moderates the relationship between trusting beliefs and perceived value (Privacy Calculus framework) with willingness to give personal information. The research is highly relevant as most privacy research undertaken to date focuses on consumer related concerns. Very little research exists examining the role of brand reputation and online privacy. Practical implications of this research include gaining knowledge as to how to minimise online privacy concerns; improve brand reputation; and provide insight on how to reduce consumer resistance to the collection of personal information and encourage consumer opt-in.

Frailty: A key indicator to minimize inappropriate medication in older people

Older populations are more likely to have multiple co-morbid diseases that require multiple treatments, which make them a large consumer of medications. As a person grows older, their ability to tolerate medications becomes less due to age-related changes in pharmacokinetics and pharmacodynamics often heading along a path that leads to frailty. Frail older persons often have multiple co-morbidities with signs of impairment in activities of daily living. Prescribing drugs for these vulnerable individuals is difficult and is a potentially unsafe activity. Inappropriate prescribing in older population can be detected using explicit (criterion-based) or implicit (judgment-based) criteria. Unfortunately, most current therapeutic guidelines are applicable only to healthy older adults and cannot be generalized to frail patients. These discrepancies should be addressed either by developing new criteria or by refining the existing tools for frail older people. The first and foremost step is to identify the frail patient in clinical practice by applying clinically validated tools. Once the frail patient has been identified, there is a need for specific measures or criteria to assess appropriateness of therapy that consider such factors as quality of life, functional status and remaining life expectancy and thus modified goals of care.

Access To Justice In The ASEAN The Key Role Of UNCITRAL

UNCITRAL’s operation as a subsidiary of the UN General Assembly, tasked to unify and harmonise international trade law is a necessary and indispensable element of the UN’s mandate to maintain international peace and security. Strong legal frameworks which are compatible with those of international trading partners often accompany accelerated growth in economic capacity and stability. Over time, access to markets and resultant growth in economic and human development creates a disincentive for instability as incomes and standards of living rise. Human and economic development, facilitated by a modernised and just legal framework that is available to the broadest range of recipients goes hand in hand with the maintenance of domestic and regional peace, particularly in regions such as the ASEAN , one of the fastest growing in the world covering approximately 30% of global population and with a number of strong global economic neighbours including Japan, Korea, China (to the north), Australia (to the south) and Singapore (to the west). In an increasingly interconnected world, the ability of government, enterprise and individuals to participate in the global supply chain offers opportunities for economic growth and development. Over its almost 50 years of operations, UNCITRAL has produced a range of important texts that are designed to underpin world trade. A key implicit assumption underpinning the development of UNCITRAL texts is that the texts, once adopted can and will be applied in adopting states.

Cloud computing services for the small and medium enterprises: Key considerations for sourcing sustainable business value

The concept of cloud computing services (CCS) is appealing to small and medium enterprises (SMEs). However, while there is a significant push by various authorities on SMEs to adopt the CCS, knowledge of the key considerations to adopt the CCS is very limited. We use the technology-organization-environment (TOE) framework to suggest that a strategic and incremental intent, understanding the organizational structure and culture, understanding the external factors, and consideration of the human resource capacity can contribute to sustainable business value from CCS. Using survey data, we find evidence of a positive association between these considerations and the CCS-related business objectives. We also find evidence of positive association between the CCS-related business objectives and CCS-related financial objectives. The results suggest that the proposed considerations can ensure sustainable business value from the CCS. This study provides guidance to SMEs on a path to adopting the CCS with the intention of a long-term commitment and achieving sustainable business value from these services.

Key drivers of the economic burden of community-associated Methicillin-resistant Staphylococcus aureus in Australia

Estimates of the economic cost of community-associated Methicillin-resistant Staphylococcus aureus(CA-MRSA) in the United States (US) are substantial, ranging from $1.4-13.8 billion. In Australia, it has been shown that rates of CA-MRSA are increasing, and individual studies have looked at the morbidity and mortality associated with CA-MRSA, however, it is not clear what is driving the economic burden of CA-MRSA at a national level. This study presents preliminary findings about the key drivers of the economic cost of CA-MRSA infections in Australia

Nutrition during noninvasive ventilation: clinical determinants and key practical recommendations

Malnutrition and poor nutritional intake have been identified as key issues associated with poorer clinical outcomes in chronic obstructive pulmonary disease (COPD) patients. There is strong evidence showing nutritional support is effective in treating malnutrition in stable COPD, but there is only limited research regarding nutritional status in patients treated with noninvasive ventilation (NIV). The impact of NIV during acute exacerbations of respiratory disease on nutritional status requires further investigation.

Is it tweet-worthy? Privacy in a time of sharing.

Information professionals and information organisations use Twitter in a variety of ways. Typically both organisations and the individuals that work for them have separate identities on Twitter, but often individuals identify their organization through their profile or Twitter content. This paper considers the way information professionals use Twitter and their practices with regard to privacy, personal disclosure and identifying their organisational affiliations. Drawing on data from a research study involving a questionnaire and social media observation, the paper will provoke discussion about information professionals’ use of Twitter, personal and organizational identity, and the value of Twitter for professional development. In keeping with the subject matter, a curated set of social media content will be available in lieu of a formal paper.

YB-1, a key regulator of androgen receptor signalling

Reactivation of androgen receptor signalling is one of the hallmarks of prostate cancer progression to the terminal castrate resistant stage. A better understanding of mechanisms driving this adaptive response is essential for the development of innovative intervention strategies that effectively delay or halt prostate cancer progression. The Y-box binding protein 1 (YB-1) has been found to be closely associated with prostate cancer progression. By characterising its role in the adaptive process leading to castrate resistance, we aim to promote YB-1 as a novel therapeutic target in advanced prostate cancer.

Decentralised key management for delay tolerant networks

Public key authentication is the verification of the identity-public key binding, and is foundational to the security of any network. The contribution of this thesis has been to provide public key authentication for a decentralised and resource challenged network such as an autonomous Delay Tolerant Network (DTN). It has resulted in the development and evaluation of a combined co-localisation trust system and key distribution scheme evaluated on a realistic large geographic scale mobility model. The thesis also addresses the problem of unplanned key revocation and replacement without any central authority.

Identification methods of key contributing factors in crashes with high numbers of fatalities and injuries in China

Objectives In China, “serious road traffic crashes” (SRTCs) are those in which there are 10-30 fatalities, 50-100 serious injuries or a total cost of 50-100 million RMB ($US8-16m), and “particularly serious road traffic crashes” (PSRTCs) are those which are more severe or costly. Due to the large number of fatalities and injuries as well as the negative public reaction they elicit, SRTCs and PSRTCs have become great concerns to China during recent years. The aim of this study is to identify the main factors contributing to these road traffic crashes and to propose preventive measures to reduce their number. Methods 49 contributing factors of the SRTCs and PSRTCs that occurred from 2007 to 2013 were collected from the database “In-depth Investigation and Analysis System for Major Road traffic crashes” (IIASMRTC) and were analyzed through the integrated use of principal component analysis and hierarchical clustering to determine the primary and secondary groups of contributing factors. Results Speeding and overloading of passengers were the primary contributing factors, featuring in up to 66.3% and 32.6% of accidents respectively. Two secondary contributing factors were road-related: lack of or nonstandard roadside safety infrastructure, and slippery roads due to rain, snow or ice. Conclusions The current approach to SRTCs and PSRTCs is focused on the attribution of responsibility and the enforcement of regulations considered relevant to particular SRTCs and PSRTCs. It would be more effective to investigate contributing factors and characteristics of SRTCs and PSRTCs as a whole, to provide adequate information for safety interventions in regions where SRTCs and PSRTCs are more common. In addition to mandating of a driver training program and publicisation of the hazards associated with traffic violations, implementation of speed cameras, speed signs, markings and vehicle-mounted GPS are suggested to reduce speeding of passenger vehicles, while increasing regular checks by traffic police and passenger station staff, and improving transportation management to increase income of contractors and drivers are feasible measures to prevent overloading of people. Other promising measures include regular inspection of roadside safety infrastructure, and improving skid resistance on dangerous road sections in mountainous areas.