ASICS : authenticated key exchange security incorporating certification systems

Most security models for authenticated key exchange (AKE) do not explicitly model the associated certification system, which includes the certification authority (CA) and its behaviour. However, there are several well-known and realistic attacks on AKE protocols which exploit various forms of malicious key registration and which therefore lie outside the scope of these models. We provide the first systematic analysis of AKE security incorporating certification systems (ASICS). We define a family of security models that, in addition to allowing different sets of standard AKE adversary queries, also permit the adversary to register arbitrary bitstrings as keys. For this model family we prove generic results that enable the design and verification of protocols that achieve security even if some keys have been produced maliciously. Our approach is applicable to a wide range of models and protocols; as a concrete illustration of its power, we apply it to the CMQV protocol in the natural strengthening of the eCK model to the ASICS setting.

Exploring subscription renewal intention of operational cloud enterprise systems - a stakeholder perspective

Retaining customers is a relevant topic throughout all service industries. However, only limited attention has been directed towards studying the antecedents of subscription renewal in the context of operational cloud enterprise systems. Cloud services have historically been offered as subscription-based services with the (theoretical) possibility of seamless service cancellation, in contrast to classical IT-Outsourcing contracts or license-based software installations of on-premise enterprise systems. In this work, we investigate the central concept of subscription renewal by focusing on different facets of IS success and their relevance for distinct employee cohorts. Analyzing inter-cohort differences has strong practical implications, as it helps IT vendors to focus on specific IT-related factors when trying to retain customers. Therefore an empirical study was undertaken. The hypotheses were developed on an individual level and tested using survey responses of IT decision makers within companies which adopted cloud enterprise systems. Gathered data was then analyzed using PLS. The results show that subscription renewal intention of the strategic cohort is mainly based on perceived system quality, whereas information quality explains most of the variance of subscription renewal in the management cohort. Beneath the cloud enterprise systems specific contributions, the work adds to the theoretical body of research related to IS success and IS continuation, as well as stakeholder perspectives.

Yersinia high pathogenicity island genes modify the Escherichia coli primary metabolome independently of siderophore production

Bacterial siderophores may enhance pathogenicity by scavenging iron, but their expression has been proposed to exert a substantial metabolic cost. Here we describe a combined metabolomic-genetic approach to determine how mutations affecting the virulence-associated siderophore yersiniabactin affect the Escherichia coli primary metabolome. Contrary to expectations, we did not find yersiniabactin biosynthesis to correspond to consistent metabolomic shifts. Instead, we found that targeted deletion of ybtU or ybtA, dissimilar genes with similar roles in regulating yersiniabactin expression, were associated with a specific shift in arginine pathway metabolites during growth in minimal media. This interaction was associated with high arginine levels in the model uropathogen Escherichia coli UTI89 compared to its ybtU and ybtA mutants and the K12 strain MG1655, which lacks yersiniabactin-associated genes. Because arginine is not a direct yersiniabactin biosynthetic substrate, these findings show that virulence-associated secondary metabolite systems may shape bacterial primary metabolism independently of substrate consumption

Patient Safety Law: From Silos to Systems

Patient safety has become a significant and pressing policy issue. Around the world, governments, the health care sector and the public are increasingly cognizant of the need to improve the safety of care delivered by their health systems. Pressure for change has been created by highly publicized incidents in a number of countries involving unsafe acts that were significant both in scale and consequence and a number of empirical studies that revealed the high rates of unsafe acts and their consequences. The costs of unsafe health care – both personal and fiscal – to individuals, their families and their communities and to the state are massive. In this research project we explored one particular avenue for change – that is, the use of legal instruments by governments to improve patient safety. We did this through a comparative review of the use of legal instruments or frameworks in other countries (specifically Australia, Denmark, New Zealand, the United Kingdom, and the United States) as well as two non-health care related sectors in Canada (transportation and occupational health and safety). We began this research by reviewing the legal instruments and undertaking extensive literature reviews. Further information was gathered through in-person interviews with policy-makers and academics in the countries studied, and from policy-makers and academics expert in the health, occupational health and safety, and transportation sectors in Canada. Once descriptions of the various countries and sectors were drafted, we held small-group meetings with local experts on particular aspects of patient safety. We then hosted a national consultation meeting. We subsequently drafted this final report and the appendices, which fully describe the results of the background research. Finally, we prepared a summary version of the report as well as posters and papers to be published and delivered at conferences and meetings with relevant groups.

Monitoring of complex systems of interacting dynamic systems

Increases in functionality, power and intelligence of modern engineered systems led to complex systems with a large number of interconnected dynamic subsystems. In such machines, faults in one subsystem can cascade and affect the behavior of numerous other subsystems. This complicates the traditional fault monitoring procedures because of the need to train models of the faults that the monitoring system needs to detect and recognize. Unavoidable design defects, quality variations and different usage patterns make it infeasible to foresee all possible faults, resulting in limited diagnostic coverage that can only deal with previously anticipated and modeled failures. This leads to missed detections and costly blind swapping of acceptable components because of one’s inability to accurately isolate the source of previously unseen anomalies. To circumvent these difficulties, a new paradigm for diagnostic systems is proposed and discussed in this paper. Its feasibility is demonstrated through application examples in automotive engine diagnostics.

Climate change adaptation in urban systems : strategies for planning regimes

Adaptation is increasingly being viewed as a necessary response tool in respect of climate change effects. Though the subject of significant scholarly and professional attention, adaptation still continues to lag behind mitigation in the climate change discourse. However, this situation looks likely to change over the coming years due to a increasing scientific acceptance that certain climate change effects are now inevitable. The purpose of this research is to illustrate, consider and demonstrate how urban planning regimes can use some of their professional tools to develop adaptation strategies and interventions in urban systems. These tools include plan-making, development management, urban design and place-making. Urban systems contribute disproportionately to climate change and will also likely suffer considerably from the resulting effects. Moreover, the majority of the world’s population is now urbanised, suggesting that adaptation will be crucial in order to develop urban systems that are resilient to climate change effects. Informed by a reflexive, qualitative methodology, this paper offers an informed understanding and illustration of adaptation as a climate change response, its use in urban systems and some of the roles and strategies that planning may take in developing and implementing urban adaptation. It concludes that urban planning regimes can have key roles in adapting urban systems to numerous climate change effects.

Accountable-eHealth systems : the next step forward for privacy

eHealth systems promise enviable benefits and capabilities for healthcare delivery. However, the technologies that make these capabilities possible introduce undesirable drawbacks such as information security related threats, which need to be appropriately addressed. Lurking in these threats are information privacy concerns. Addressing them has proven to be difficult because they often conflict with information access requirements of healthcare providers. Therefore, it is important to achieve an appropriate balance between these requirements. We contend that information accountability (IA) can achieve this balance. In this paper, we introduce accountable-eHealth (AeH) systems, which are eHealth systems that utilise IA as a measure of information privacy. We discuss how AeH system protocols can successfully achieve the aforementioned balance of requirements. As a means of implementation feasibility, we compare characteristics of AeH systems with Australia’s Personally Controlled Electronic Health Record (PCEHR) sys-tem and identify similarities and highlight the differences and the impact those differences would have to the eHealth domain.

Improving ecological performance of industrialized building systems in Malaysia

For construction stakeholders to fully embrace sustainability, its long-term benefits and associated risks need to be identified through holistic approaches. Consensus among key stakeholders is very important to the improvement of the ecological performance of industrialized building systems (IBS), a building construction method gaining momentum in Malaysia. A questionnaire survey examines the relative significance of 16 potentially important sustainability factors for IBS applications. To present possible solutions,semi-structured interviews solicit views from experienced IBS practitioners, representing the professions involved. Three most critical factors agreed by key stakeholders are material consumption, waste generation and waste disposal. Using SWOT analysis, the positive and negative aspects of these factors are investigated, with action plans formulated for IBS design practitioners. The SWOT analysis based guidelines have the potential to become part of IBS design briefing documents against which sustainability solutions are contemplated, selected and implemented. Existing knowledge on ecological performance issues is extended by considering the unique characteristics of IBS and identifying not only the benefits, but also the potential risks and challenges of pursuing sustainability. This is largely missing in previous research efforts. Findings to date focus on providing much-needed assistance to IBS designers, who are at the forefront of decision-making with a significant level of project influence. Ongoing work will be directed towards other project development phases and consider the inherent linkage between design decisions and subsequent sustainability deliverables in the project life cycle.

A simple test method for profiled steel cladding systems under wind uplift

A new simple test method using small scale models has been developed for testing profiled steel cladding systems under wind uplift/suction forces. This simple method should replace the large scale test method using two-span claddings used at present. It can be used for roof or wall cladding systems fastened with screw fasteners at crests or valleys.

Understanding requirements of novel healthcare information systems for management of advanced prostate cancer

Effective management of chronic diseases is a global health priority. A healthcare information system offers opportunities to address challenges of chronic disease management. However, the requirements of health information systems are often not well understood. The accuracy of requirements has a direct impact on the successful design and implementation of a health information system. Our research describes methods used to understand the requirements of health information systems for advanced prostate cancer management. The research conducted a survey to identify heterogeneous sources of clinical records. Our research showed that the General Practitioner was the common source of patient's clinical records (41%) followed by the Urologist (14%) and other clinicians (14%). Our research describes a method to identify diverse data sources and proposes a novel patient journey browser prototype that integrates disparate data sources.

User expertise in contemporary information systems : conceptualization, measurement and application

This research proposes a method for identifying user expertise in contemporary Information Systems (IS). It also proposes and develops a model for evaluating expertise. The aim of this study was to offer a common instrument that addresses the requirements of a contemporary Information System in a holistic way. This study demonstrates the application of the expertise construct in Information System evaluations, and shows that users of different expertise levels evaluate systems differently.

“Would you; could you; on a boat?” Wait-time and travel-time activities during river ferry journeys and their relationship to overall satisfaction in Brisbane Queensland

This study investigates travel behaviour and wait-time activities as a component of passenger satisfaction with public transport in Brisbane, Australia. Australian transport planners recognise a variety of benefits to encouraging a mode shift away from automobile travel in favour of active and public transport use. Efforts to increase public transport ridership have included introducing state of the art passenger information systems, improving physical station access, and integrating system pricing, routes and scheduling for train, bus and ferry. Previous research regarding satisfaction with public transport emphasizes technical dimensions of service quality, including the timing and reliability of service. Those factors might be especially significant for frequent (commuting) travellers who look to balance the cost and efficiency of their travel options. In contrast, infrequent (leisure) passengers may be more concerned with way finding and the sensory experience of the journey. Perhaps due to the small relative proportion of trips made by river ferry compared to bus and rail, this mode of public transport has not received as much attention in travel-behaviour research. This case study of Brisbane’s river ferry system examines ferry passengers at selected terminals during peak and off-peak travel times to find out how travel behaviours and activities correlate to satisfaction with ferry travel. Data include 416 questionnaires completed by passengers intercepted during wait times at seven CityCat terminals in Brisbane. Descriptive statistical analysis revealed associations between specific wait time activities and satisfaction levels that could inform planners seeking to increase ridership and quality of life through ferry-oriented development.

Analysis of nonlinear sequences and streamciphers

Streamciphers are common cryptographic algorithms used to protect the confidentiality of frame-based communications like mobile phone conversations and Internet traffic. Streamciphers are ideal cryptographic algorithms to encrypt these types of traffic as they have the potential to encrypt them quickly and securely, and have low error propagation. The main objective of this thesis is to determine whether structural features of keystream generators affect the security provided by stream ciphers.These structural features pertain to the state-update and output functions used in keystream generators. Using linear sequences as keystream to encrypt messages is known to be insecure. Modern keystream generators use nonlinear sequences as keystream.The nonlinearity can be introduced through a keystream generator's state-update function, output function, or both. The first contribution of this thesis relates to nonlinear sequences produced by the well-known Trivium stream cipher. Trivium is one of the stream ciphers selected in a final portfolio resulting from a multi-year project in Europe called the ecrypt project. Trivium's structural simplicity makes it a popular cipher to cryptanalyse, but to date, there are no attacks in the public literature which are faster than exhaustive keysearch. Algebraic analyses are performed on the Trivium stream cipher, which uses a nonlinear state-update and linear output function to produce keystream. Two algebraic investigations are performed: an examination of the sliding property in the initialisation process and algebraic analyses of Trivium-like streamciphers using a combination of the algebraic techniques previously applied separately by Berbain et al. and Raddum. For certain iterations of Trivium's state-update function, we examine the sets of slid pairs, looking particularly to form chains of slid pairs. No chains exist for a small number of iterations.This has implications for the period of keystreams produced by Trivium. Secondly, using our combination of the methods of Berbain et al. and Raddum, we analysed Trivium-like ciphers and improved on previous on previous analysis with regards to forming systems of equations on these ciphers. Using these new systems of equations, we were able to successfully recover the initial state of Bivium-A.The attack complexity for Bivium-B and Trivium were, however, worse than exhaustive keysearch. We also show that the selection of stages which are used as input to the output function and the size of registers which are used in the construction of the system of equations affect the success of the attack. The second contribution of this thesis is the examination of state convergence. State convergence is an undesirable characteristic in keystream generators for stream ciphers, as it implies that the effective session key size of the stream cipher is smaller than the designers intended. We identify methods which can be used to detect state convergence. As a case study, theMixer streamcipher, which uses nonlinear state-update and output functions to produce keystream, is analysed. Mixer is found to suffer from state convergence as the state-update function used in its initialisation process is not one-to-one. A discussion of several other streamciphers which are known to suffer from state convergence is given. From our analysis of these stream ciphers, three mechanisms which can cause state convergence are identified.The effect state convergence can have on stream cipher cryptanalysis is examined. We show that state convergence can have a positive effect if the goal of the attacker is to recover the initial state of the keystream generator. The third contribution of this thesis is the examination of the distributions of bit patterns in the sequences produced by nonlinear filter generators (NLFGs) and linearly filtered nonlinear feedback shift registers. We show that the selection of stages used as input to a keystream generator's output function can affect the distribution of bit patterns in sequences produced by these keystreamgenerators, and that the effect differs for nonlinear filter generators and linearly filtered nonlinear feedback shift registers. In the case of NLFGs, the keystream sequences produced when the output functions take inputs from consecutive register stages are less uniform than sequences produced by NLFGs whose output functions take inputs from unevenly spaced register stages. The opposite is true for keystream sequences produced by linearly filtered nonlinear feedback shift registers.

On effective accounting information systems in a dynamic business environment : the role of complementing capabilities

The global business environment is witnessing tough times, and this situation has significant implications on how organizations manage their processes and resources. Accounting information system (AIS) plays a critical role in this situation to ensure appropriate processing of financial transactions and availability to relevant information for decision-making. We suggest the need for a dynamic AIS environment for today’s turbulent business environment. This environment is possible with a dynamic AIS, complementary business intelligence systems, and technical human capability. Data collected through a field survey suggests that the dynamic AIS environment contributes to an organization’s accounting functions of processing transactions, providing information for decision making, and ensuring an appropriate control environment. These accounting processes contribute to the firm-level performance of the organization. From these outcomes, one can infer that a dynamic AIS environment contributes to organizational performance in today’s challenging business environment.

Design LED innovation to rejuvenate local food systems and healthy communities : an emerging research agenda

Food Sovereignty (food freedom) is about empowering people to develop their own local food system. Food Sovereignty challenges designers to enable people to innovate the local food system, rather than having a food system which is dictated by corporate interests and failed business ethics. Communities are realising the potential for design to assist in the innovation process, and add strategic value to potentially localise the food system. Design Led Innovation (DLI) offers a strategic framework to address large-scale cultural, systemic and economic changes. The DLI approach empowers communities to take organised action to achieve a healthy, prosperous and happy way of life. DLI can assist with business models in the business world and it is evident this approach can assist with creating social change too. This paper presents on an emerging research agenda aimed to assist designer’s focus from individuals and systems to communities and urban problems. This paper also presents the research proposition that DLI and service design coupled with social entrepreneurial ventures such as local food projects and creative community inventions, have the potential to enable social innovation for healthy and happy communities.