Experiences in Passively Detecting Session Hijacking Attacks in IEEE 802.11 Networks

Current IEEE 802.11 wireless networks are vulnerable to session hijacking attacks as the existing standards fail to address the lack of authentication of management frames and network card addresses, and rely on loosely coupled state machines. Even the new WLAN security standard - IEEE 802.11i does not address these issues. In our previous work, we proposed two new techniques for improving detection of session hijacking attacks that are passive, computationally inexpensive, reliable, and have minimal impact on network performance. These techniques utilise unspoofable characteristics from the MAC protocol and the physical layer to enhance confidence in the intrusion detection process. This paper extends our earlier work and explores usability, robustness and accuracy of these intrusion detection techniques by applying them to eight distinct test scenarios. A correlation engine has also been introduced to maintain the false positives and false negatives at a manageable level. We also explore the process of selecting optimum thresholds for both detection techniques. For the purposes of our experiments, Snort-Wireless open source wireless intrusion detection system was extended to implement these new techniques and the correlation engine. Absence of any false negatives and low number of false positives in all eight test scenarios successfully demonstrated the effectiveness of the correlation engine and the accuracy of the detection techniques.

A broadcast authentication and integrity augmentation for trusted differential GPS in marine navigation

In this paper we propose an efficient authentication and integrity scheme to support DGPS corrections using the RTCM protocol, such that the identified vulnerabilities in DGPS are mitigated. The proposed scheme is based on the TESLA broadcast protocol with modifications that make it suitable for the bandwidth and processor constrained environment of marine DGPS.

Injury prevention in Queensland : report to Queensland Injury Prevention Council

Injury is the fourth leading cause of death in Australia. Injury rates in Queensland are amongst the highest in Australia and 21.5% of people surveyed for this research reported that their lifestyle or that of an immediate family member had been permanently affected by injury. Injury results in over 40,000 hospital admissions and 200,000 attendances at hospital Emergency Departments in Queensland each year. Queensland's death rate from injuries is higher than the national average, with consistently higher rates of deaths related to transport injuries. Queensland statistics also show higher than national average rates of injuries due to falls, homicide and accidental drowning. (Pike, Muller, Baade & Ward, 2000) In 2000-01 injuries represented over $4 billion (or 8%) of total health system expenditure, and 185,000 disability-adjusted life years (DALYs), or 7% of the total morbidity burden of disease and injury in Australia in 2003. (Begg, Vos, Barker, Stevenson, Stanley & Lopez, 2007). Injury is one of seven key health areas identified by the Commonwealth, state and territory governments for priority attention as National Health Priority Areas

Electronic workplace surveillance and employee privacy : a comparative analysis of privacy protection in Australia and the United States

More than a century ago in their definitive work “The Right to Privacy” Samuel D. Warren and Louis D. Brandeis highlighted the challenges posed to individual privacy by advancing technology. Today’s workplace is characterised by its reliance on computer technology, particularly the use of email and the Internet to perform critical business functions. Increasingly these and other workplace activities are the focus of monitoring by employers. There is little formal regulation of electronic monitoring in Australian or United States workplaces. Without reasonable limits or controls, this has the potential to adversely affect employees’ privacy rights. Australia has a history of legislating to protect privacy rights, whereas the United States has relied on a combination of constitutional guarantees, federal and state statutes, and the common law. This thesis examines a number of existing and proposed statutory and other workplace privacy laws in Australia and the United States. The analysis demonstrates that existing measures fail to adequately regulate monitoring or provide employees with suitable remedies where unjustifiable intrusions occur. The thesis ultimately supports the view that enacting uniform legislation at the national level provides a more effective and comprehensive solution for both employers and employees. Chapter One provides a general introduction and briefly discusses issues relevant to electronic monitoring in the workplace. Chapter Two contains an overview of privacy law as it relates to electronic monitoring in Australian and United States workplaces. In Chapter Three there is an examination of the complaint process and remedies available to a hypothetical employee (Mary) who is concerned about protecting her privacy rights at work. Chapter Four provides an analysis of the major themes emerging from the research, and also discusses the draft national uniform legislation. Chapter Five details the proposed legislation in the form of the Workplace Surveillance and Monitoring Act, and Chapter Six contains the conclusion.

Four years after graduation : occupational therapists' work destinations and perceptions of preparedness for practice

Objective: The present study sought to identify the work destinations of graduates and ascertain their perceived preparedness for practice from a regional occupational therapy program, which had been specifically developed to support the health requirements of northern Australians by having an emphasis on rural practice. ---------- Design: Self-report questionnaires and semistructured in-depth telephone interviews. ---------- Participants: Graduates (n = 15) from the first cohort of occupational therapists from James Cook University, Queensland. ---------- Main outcome measure: The study enabled comparisons to be made between rural and urban based occupational therapists, while the semistructured interviews provided a deeper understanding of participants' experiences regarding their preparation for practice. ---------- Results: Demographic differences were noted between occupational therapists working in rural and urban settings. Rural therapists were predominantly younger and had worked in slightly more positions than their urban counterparts. The study also offered some insights into the value that therapists placed on the subjects taught during their undergraduate occupational therapy training, and had highlighted the differences in perceptions between therapists with rural experience and those with urban experience regarding the subjects that best prepared them for practice. Generally, rural therapists reported that all subjects included in the curriculum had equipped them well for practice. ---------- Conclusions: Findings suggest the need to undertake further research to determine the actual nature of rural practice, the personal characteristics of rural graduates and the experiences of students while on rural clinical placements.