Does counting still count? Revisiting the security of counting based user authentication protocols against statistical attacks

At NDSS 2012, Yan et al. analyzed the security of several challenge-response type user authentication protocols against passive observers, and proposed a generic counting based statistical attack to recover the secret of some counting based protocols given a number of observed authentication sessions. Roughly speaking, the attack is based on the fact that secret (pass) objects appear in challenges with a different probability from non-secret (decoy) objects when the responses are taken into account. Although they mentioned that a protocol susceptible to this attack should minimize this difference, they did not give details as to how this can be achieved barring a few suggestions. In this paper, we attempt to fill this gap by generalizing the attack with a much more comprehensive theoretical analysis. Our treatment is more quantitative which enables us to describe a method to theoretically estimate a lower bound on the number of sessions a protocol can be safely used against the attack. Our results include 1) two proposed fixes to make counting protocols practically safe against the attack at the cost of usability, 2) the observation that the attack can be used on non-counting based protocols too as long as challenge generation is contrived, 3) and two main design principles for user authentication protocols which can be considered as extensions of the principles from Yan et al. This detailed theoretical treatment can be used as a guideline during the design of counting based protocols to determine their susceptibility to this attack. The Foxtail protocol, one of the protocols analyzed by Yan et al., is used as a representative to illustrate our theoretical and experimental results.

An evaluation of crowd counting methods, features and regression models

Existing crowd counting algorithms rely on holistic, local or histogram based features to capture crowd properties. Regression is then employed to estimate the crowd size. Insufficient testing across multiple datasets has made it difficult to compare and contrast different methodologies. This paper presents an evaluation across multiple datasets to compare holistic, local and histogram based methods, and to compare various image features and regression models. A K-fold cross validation protocol is followed to evaluate the performance across five public datasets: UCSD, PETS 2009, Fudan, Mall and Grand Central datasets. Image features are categorised into five types: size, shape, edges, keypoints and textures. The regression models evaluated are: Gaussian process regression (GPR), linear regression, K nearest neighbours (KNN) and neural networks (NN). The results demonstrate that local features outperform equivalent holistic and histogram based features; optimal performance is observed using all image features except for textures; and that GPR outperforms linear, KNN and NN regression

Amplitude of accommodation in type 1 diabetes

Purpose People with diabetes have accelerated age-related biometric ocular changes compared with people without diabetes. We determined the effect of Type 1 diabetes on amplitude of accommodation. Method There were 43 participants (33 ± 8 years) with type 1 diabetes and 32 (34 ± 8 years) age-balanced participants without diabetes. There was no significant difference in the mean equivalent refractive error and visual acuity between the two groups. Amplitude of accommodation was measured using two techniques: objective — by determining the accommodative response to a stimulus in a COAS-HD wavefront aberrometer (Wavefront Sciences), and subjective — with a Badal hand optometer (Rodenstock). The influences of age and diabetes duration (in years) on amplitude of accommodation were analyzed using multiple regression analysis. Results Across both groups, objective amplitude was less than subjective amplitude by 1.4 ± 1.2 D. People with diabetes had lower objective (2.7 ± 1.6 D) and subjective (4.0 ± 1.7 D) amplitudes than people without diabetes (objective 4.1 ± 2.1 D, subjective 5.6 ± 2.1 D). For objective amplitude and the whole group, the duration of diabetes contributed 57% of the variation as did age. For the objective amplitude and only the diabetes group this was 78%. For subjective amplitude, the corresponding proportions were 68% and 103%. Conclusions Both objective and subjective techniques showed lowered amplitude of accommodation in participants with type 1 diabetes when compared with age-matched controls. The loss correlated strongly with duration of diabetes. The results suggest that individuals with diabetes will experience presbyopia earlier in life than people without diabetes, possibly due to metabolic changes in the lens.

Combining opinions for use in Bayesian networks: A measurement error approach

Bayesian networks (BNs) are graphical probabilistic models used for reasoning under uncertainty. These models are becoming increasing popular in a range of fields including ecology, computational biology, medical diagnosis, and forensics. In most of these cases, the BNs are quantified using information from experts, or from user opinions. An interest therefore lies in the way in which multiple opinions can be represented and used in a BN. This paper proposes the use of a measurement error model to combine opinions for use in the quantification of a BN. The multiple opinions are treated as a realisation of measurement error and the model uses the posterior probabilities ascribed to each node in the BN which are computed from the prior information given by each expert. The proposed model addresses the issues associated with current methods of combining opinions such as the absence of a coherent probability model, the lack of the conditional independence structure of the BN being maintained, and the provision of only a point estimate for the consensus. The proposed model is applied an existing Bayesian Network and performed well when compared to existing methods of combining opinions.

Effect of age and refractive error on the melanopsin mediated Post-Illumination Pupil Response (PIPR)

Melanopsin containing intrinsically photosensitive Retinal Ganglion cells (ipRGCs) mediate the pupil light reflex (PLR) during light onset and at light offset (the post-illumination pupil response, PIPR). Recent evidence shows that the PLR and PIPR can provide non-invasive, objective markers of age-related retinal and optic nerve disease, however there is no consensus on the effects of healthy ageing or refractive error on the ipRGC mediated pupil function. Here we isolated melanopsin contributions to the pupil control pathway in 59 human participants with no ocular pathology across a range of ages and refractive errors. We show that there is no effect of age or refractive error on ipRGC inputs to the human pupil control pathway. The stability of the ipRGC mediated pupil response across the human lifespan provides a functional correlate of their robustness observed during ageing in rodent models.

Counting the cost of fast fashion

There’s a polyester mullet skirt gracing a derrière near you. It’s short at the front, long at the back, and it’s also known as the hi-lo skirt. Like fads that preceded it, the mullet skirt has a short fashion life, and although it will remain potentially wearable for years, it’s likely to soon be heading to the charity shop or to landfill...

Integrated lean six sigma approach for patient flow improvement in hospital emergency department

This research aims to develop an Integrated Lean Six Sigma approach to investigate and resolve the patient flow problems in hospital emergency departments. It was proposed that the voice of the customer and the voice of the process should be considered simultaneously to investigate the current process of patient flow. Statistical analysis, visual process mapping with A3 problem solving sheet, and cause and effect diagrams have been used to identify the major patient flow issues. This research found that engaged frontline workers, long-term leadership obligation, an understanding of patients' requirements and the implementation of a systematic integration of lean strategies could continuously improve patient flow, health care service and growth in the emergency departments.

Human error risk management methodology for rail crack incidents

The paper presents an innovative approach to modelling the causal relationships of human errors in rail crack incidents (RCI) from a managerial perspective. A Bayesian belief network is developed to model RCI by considering the human errors of designers, manufactures, operators and maintainers (DMOM) and the causal relationships involved. A set of dependent variables whose combinations express the relevant functions performed by each DMOM participant is used to model the causal relationships. A total of 14 RCI on Hong Kong’s mass transit railway (MTR) from 2008 to 2011 are used to illustrate the application of the model. Bayesian inference is used to conduct an importance analysis to assess the impact of the participants’ errors. Sensitivity analysis is then employed to gauge the effect the increased probability of occurrence of human errors on RCI. Finally, strategies for human error identification and mitigation of RCI are proposed. The identification of ability of maintainer in the case study as the most important factor influencing the probability of RCI implies the priority need to strengthen the maintenance management of the MTR system and that improving the inspection ability of the maintainer is likely to be an effective strategy for RCI risk mitigation.

Peripartum management of glycemia in women with type 1 diabetes

OBJECTIVE We aimed to 1) describe the peripartum management of type 1 diabetes at an Australian teaching hospital and 2) discuss factors influencing the apparent transient insulin independence postpartum. RESEARCH DESIGN AND METHODS We conducted a retrospective review of women with type 1 diabetes delivering singleton pregnancies from 2005 to 2010. Information was collected regarding demographics, medical history, peripartum management and outcome, and breast-feeding. To detect a difference in time to first postpartum blood glucose level (BGL) >8 mmol/L between women with an early (<4 h) and late (>12 h) requirement for insulin postpartum, with a power of 80% and a type 1 error of 0.05, at least 24 patients were required. RESULTS An intravenous insulin infusion was commenced in almost 95% of women. Univariate analysis showed that increased BMI at term, lower creatinine at term, longer duration from last dose of long- or intermediate-acting insulin, and discontinuation of an insulin infusion postpartum were associated with a shorter time to first requirement of insulin postpartum (P = 0.005, 0.026, 0.026, and <0.001, respectively). There was a correlation between higher doses of insulin commenced postpartum and number of out-of-range BGLs (r[36] = 0.358, P = 0.030) and hypoglycemia (r[36] = 0.434, P = 0.007). Almost 60% had at least one BGL <3.5 mmol/L between delivery and discharge. CONCLUSIONS Changes in the pharmacodynamic profile of insulin may contribute to the transient insulin independence sometimes observed postpartum in type 1 diabetes. A dose of 50–60% of the prepregnancy insulin requirement resulted in the lowest rate of hypoglycemia and glucose excursions. These results require validation in a larger, prospective study.