Quality metrics for assessing security-critical computer programs

Existing secure software development principles tend to focus on coding vulnerabilities, such as buffer or integer overflows, that apply to individual program statements, or issues associated with the run-time environment, such as component isolation. Here we instead consider software security from the perspective of potential information flow through a program’s object-oriented module structure. In particular, we define a set of quantifiable "security metrics" which allow programmers to quickly and easily assess the overall security of a given source code program or object-oriented design. Although measuring quality attributes of object-oriented programs for properties such as maintainability and performance has been well-covered in the literature, metrics which measure the quality of information security have received little attention. Moreover, existing securityrelevant metrics assess a system either at a very high level, i.e., the whole system, or at a fine level of granularity, i.e., with respect to individual statements. These approaches make it hard and expensive to recognise a secure system from an early stage of development. Instead, our security metrics are based on well-established compositional properties of object-oriented programs (i.e., data encapsulation, cohesion, coupling, composition, extensibility, inheritance and design size), combined with data flow analysis principles that trace potential information flow between high- and low-security system variables. We first define a set of metrics to assess the security quality of a given object-oriented system based on its design artifacts, allowing defects to be detected at an early stage of development. We then extend these metrics to produce a second set applicable to object-oriented program source code. The resulting metrics make it easy to compare the relative security of functionallyequivalent system designs or source code programs so that, for instance, the security of two different revisions of the same system can be compared directly. This capability is further used to study the impact of specific refactoring rules on system security more generally, at both the design and code levels. By measuring the relative security of various programs refactored using different rules, we thus provide guidelines for the safe application of refactoring steps to security-critical programs. Finally, to make it easy and efficient to measure a system design or program’s security, we have also developed a stand-alone software tool which automatically analyses and measures the security of UML designs and Java program code. The tool’s capabilities are demonstrated by applying it to a number of security-critical system designs and Java programs. Notably, the validity of the metrics is demonstrated empirically through measurements that confirm our expectation that program security typically improves as bugs are fixed, but worsens as new functionality is added.

The GST Compliance Costs Of Nonprofit Organisations

On 2 December 1998, the Federal Government tabled their policy paper entitled Regulation Impact Statement for the Introduction of a Goods and Services Tax (RIS) in the House of Representatives. The Federal Government predicted that total gross GST compliance costs to Australian businesses in the first year of implementation would be approximately $1,912 million (or $1,195 per firm). Furthermore, it is estimated that the recurrent net compliance costs will be much lower at $131 per firm. Whilst the government made brief references to charitable organisations in their analysis, it stated that the compliance costs faced by nonprofits would, in substance, be no different to the compliance costs faced by businesses or government departments. This paper examines the RIS process in relation to nonprofit organisations in the context of recent taxation legislation affecting nonprofit organisations. It argues that the assumption that nonprofit compliance costs are similar to government and business costs is flawed and makes a case for the RIS process to be reformed to include more appropriate assessments of the impact of legislation on nonprofit enterprises.

Principles of taxation law 2008

Covers the fundamental principles of the Australian tax system, providing students with guidance on reading and using tax resources such as legislation, case law and Australian Taxation Office rulings -- Back cover.

Principles of taxation law [2nd Ed.]

"With its clear and concise explanations of taxation law concepts, Principles of Taxation Law 2009 is the ideal text for students studying this complex subject. It covers all major topics underpinning the Australian tax system, including income, deductions, capital gains, tax accounting, international issues, fringe benefits, tax administration, goods and services tax and, in this new edition, offsets and superannuation. Importantly, the book commences with a special chapter on how to study tax law and succeed in taxation law exams."--Publisher description.

Empirical study to identify the key business activities contributing to manufacturing business performance

Purpose: Within the context of high global competitiveness, knowledge management (KM) has proven to be one of the major factors contributing to enhanced business outcomes. Furthermore, knowledge sharing (KS) is one of the most critical of all KM activities. From a manufacturing industry perspective, supply chain management (SCM) and product development process (PDP) activities, require a high proportion of company resources such as budget and manpower. Therefore, manufacturing companies are striving to strengthen SCM, PDP and KS activities in order to accelerate rates of manufacturing process improvement, ultimately resulting in higher levels of business performance (BP). A theoretical framework along with a number of hypotheses are proposed and empirically tested through correlation, factor and path analyses. Design/methodology/approach: A questionnaire survey was administered to a sample of electronic manufacturing companies operating in Taiwan to facilitate testing the proposed relationships. More than 170 respondents from 83 organisations responded to the survey. The study identified top management commitment and employee empowerment, supplier evaluation and selection, and design simplification and modular design as the key business activities that are strongly associated with the business performance. Findings: The empirical study supports that key manufacturing business activities (i.e., SCM, PDP, and KS) are positively associated with BP. The findings also evealed that some specific business activities such as SCMF1,PDPF2, and KSF1 have the strongest influencing power on particular business outcomes (i.e., BPF1 and BPF2) within the context of electronic manufacturing companies operating in Taiwan. Practical implications: The finding regarding the relationship between SCM and BP identified the essential role of supplier evaluation and selection in improving business competitiveness and long term performance. The process of forming knowledge in companies, such as creation, storage/retrieval, and transfer do not necessarily lead to enhanced business performance; only through effectively applying knowledge to the right person at the right time does. Originality/value: Based on this finding it is recommended that companies should involve suppliers in partnerships to continuously improve operations and enhance product design efforts, which would ultimately enhance business performance. Business performance depends more on an employee’s ability to turn knowledge into effective action.

Microorganisms within human follicular fluid : effects on IVF

Our previous study reported microorganisms in human follicular fluid. The objective of this study was to test human follicular fluid for the presence of microorganisms and to correlate these findings with the in vitro fertilization (IVF) outcomes. In this study, 263 paired follicular fluids and vaginal swabs were collected from women undergoing IVF cycles, with various causes for infertility, and were cultured to detect microorganisms. The cause of infertility and the IVF outcomes for each woman were correlated with the microorganisms detected within follicular fluid collected at the time of trans-vaginal oocyte retrieval. Microorganisms isolated from follicular fluids were classified as: (1) ‘colonizers’ if microorganisms were detected within the follicular fluid, but not within the vaginal swab (at the time of oocyte retrieval); or (2) ‘contaminants’ if microorganisms detected in the vagina at the time of oocyte retrieval were also detected within the follicular fluid. The presence of Lactobacillus spp. in ovarian follicular fluids was associated with embryo maturation and transfer. This study revealed microorganisms in follicular fluid itself and that the presence of particular microorganisms has an adverse affect on IVF outcomes as seen by an overall decrease in embryo transfer rates and pregnancy rates in both fertile and infertile women, and live birth rates in women with idiopathic infertility. Follicular fluid microorganisms are a potential cause of adverse pregnancy outcomes in IVF in both infertile women and in fertile women with infertile male partners.

Principles of Taxation Law 2013

Taxation law can be an incredibly complex subject to absorb, particularly when time is limited. Written specifically for students, Principles of Taxation Law 2013 brings much needed clarity to this area of law. Utilising many methods to make this often daunting subject achievable, particular features of the 2013 edition include: • seven parts: overview and structure, principles of income, deductions and offsets, timing issues, investment and business entities, tax avoidance and administration, and indirect taxes; • clearly structured chapters within those parts grouped under helpful headings; • flowcharts, diagrams and tables, end of chapter practice questions, and case summaries; • an appendix containing all of the up to date and relevant rates; and • the online self-testing component mentor, which provides questions for students of both business and law. Every major aspect of the Australian tax system is covered, with chapters on topics such as goods and services tax, superannuation, offsets, partnerships, capital gains tax, trusts, company tax and tax administration. All chapters have been thoroughly revised. Principles of Taxation Law 2013 is the perfect tool to guide the reader from their initial exposure to the subject to success in taxation law exams.

A possible role for mitochondrial dysfunction in migraine

Migraine is a common neurological disorder characterised by debilitating head pain and an assortment of additional symptoms which can include nausea, emesis, photophobia, phonophobia and occasionally visual sensory disturbances. Migraine is a complex disease caused by an interplay between predisposing genetic variants and environmental factors. It affects approximately 12 % of studied Caucasian populations with affected individuals being predominantly female. Genes involved in neurological, vascular or hormonal pathways have all been implicated in predisposition towards developing migraine. All of these are nuclear encoded genes, but given the role of mitochondria in a number of neurological disorders and in energy production it is possible that mitochondrial variants may play a role in the pathogenesis of this disease. Mitochondrial DNA has been a useful tool for studying population genetics and human genetic diseases due to the clear inheritance shown through successive generations. Given the clear gender bias found in migraine patients it may be important to investigate X-linked inheritance and mitochondrial-related variants in this disorder. This paper explores the possibility that mitochondrial DNA changes may play a role in migraine. Few variants in the mitochondrial genome have so far been investigated in migraine and new studies should be aimed towards investigating the role of mitochondrial DNA in this common disorder.

Lesion selection by melanoma high-risk consumers during skin self-examination using mobile teledermoscopy

Mobile teledermatoscopy (MTD) for the early detection of skin cancer uses smartphones with dermatoscope attachments to magnify, capture, and transfer images remotely.1 Using the asymmetry–color variation (AC) rule, consumers achieve dermoscopy sensitivity of 92.9% to 94.0% and specificity of 62.0% to 64.2% for melanoma.2 This pilot randomized trial assessed lesions of concern selected by consumers at high risk of melanoma using MTD plus the AC rule (intervention, n = 10) or the AC rule alone (control, n = 12) during skin self-examination (SSE). Also measured were lesion location patterns, lesions overlooked by participants, provisional clinical diagnoses, likelihood of malignant tumor, and participant pressure to excise lesions.

Principles of Taxation Law 2014 [7th Edition]

"Taxation law can be an incredibly complex subject to absorb, particularly when time is limited. Written specifically for students, Principles of Taxation Law 2014 brings much needed clarity to this area of law. Utilising many methods to make this often daunting subject achievable, particular features of the 2014 edition include: seven parts: overview and structure, principles of income, deductions and offsets, timing issues, investment and business entities, tax avoidance and administration, and indirect taxes; clearly structured chapters within those parts grouped under helpful headings;flowcharts, diagrams and tables, end of chapter practice questions, and case summaries; an appendix containing all of the up to date and relevant rates; and the online self-testing component mentor, which provides questions for students of both business and law. Every major aspect of the Australian tax system is covered, with chapters on topics such as goods and services tax, superannuation, offsets, partnerships, capital gains tax, trusts, company tax and tax administration.All chapters have been thoroughly revised"-- Publishers website

Taxation determinations as de facto regulation : private equity exits in Australia

The Australian Taxation Office (AT)) attempted to challenge both the private equity fund reliance on double tax agreements and the assertion that profits were capital in nature in its dispute with private equity group TPG. Failure to resolve the dispute resulted in the ATO issuing two taxation determinations: TD 2010/20 which states that the general anti-avoidance provisions can apply to arrangements designed to alter the intended effect of Australia's international tax agreements net; and TD 2010/21 which states that the profits on the sale of shares in a company group acquired in a leveraged buyout is assessable income. The purpose of this article is to determine the effectiveness of the administrative rulings regime as a regulatory strategy. This article, by using the TPG-Myer scenario and subsequent tax determinations as a case study, collects qualitative data which is then analysed (and triangulated) using tonal and thematic analysis. Contemporaneous commentary of private equity stakeholders, tax professionals, and media observations are analysed and evaluated within a framework of responsive regulation and utilising the current ATO compliance model. Contrary to the stated purpose of the ATO rulings regime to alleviate complexities in Australian taxation law and provide certainty to taxpayers, and despite the de facto law status afforded these rulings, this study found that the majority of private equity stakeholders and their advisors perceived that greater uncertainty was created by the two determinations. Thus, this study found that in the context of private equity fund investors, a responsive regulation measure in the form of taxation determinations was not effective.

Exploring potential factors leading to effective training : an exclusive study on commercial banks in Cambodia

Purpose A previous study found that the quality of education in Cambodia is poor compared to other developing countries. However, the working performance of commercial banks in Cambodia is high. It was speculated that effective training was the main factor underlying this contradiction. Therefore, the main purpose of this article is to explore the elements of training conducted by commercial banks in Cambodia and to examine their relationship with training effectiveness. Design/methodology/approach The research focuses on six factors: training needs assessment; training program; flexibility of training; self-efficacy; social support; and transfer of knowledge. The data came in the form of questionnaires and desk research. A descriptive analytical approach is then used to describe these six factors. Findings The banking industry in Cambodia offers very effective training to its employees. It is also worth noting that more than 80 percent of employees are satisfied with the training, despite few attempts on the part of management to elicit opinions from employees on what training methods should be employed. Research limitations/implications As research studies involving Cambodia are relatively rare, it was difficult for to gather primary data. Because of this limitation and the purpose of this study, descriptive data interpretation was employed. Practical implications – Even though training can make up for poor education, it is only a short-term solution. In the long term, education needs to be enhanced to increase working performance. Originality/value This research provides a good framework for commercial banks in other developing countries to compare. A cross-cultural study is also proposed for future research.

Antecedent factors of knowledge sharing in research supervision

Today’s economy is a knowledge-based economy in which knowledge is a crucial facilitator to individuals, as well as being an instigator of success. Due to the impact of globalisation, universities face new challenges and opportunities. Accordingly, they ought to be more innovative and have their own competitive advantages. One of the most important goals of universities is the promotion of students as professional knowledge workers. Therefore, knowledge sharing and transfer at the tertiary level between students and supervisors is vital in universities, as it decreases the budget and provides an affordable way to do research. Knowledge-sharing impact factors can be categorised in three groups, namely: organisational, individual, and technical factors. Individual barriers to knowledge sharing include: the lack of time and trust and the lack of communication skills and social networks. IT systems such as elearning, blogs and portals can increase the knowledge-sharing capability. However, it must be stated that IT systems are only tools and not solutions. Individuals are still responsible for sharing information and knowledge. This paper proposes a new research model to examine the effect of individual factors, organisational factors (learning strategy, trust culture, supervisory support) and technological factors on knowledge sharing in the research supervision process.

BIM for sustainable whole-of-life transport infrastructure asset management

The US National Institute of Standards and Technology (NIST) showed that, in 2004, owners and operations managers bore two thirds of the total industry cost burden from inadequate interoperability in construction projects from inception to operation, amounting to USD10.6 billion. Building Information Modelling (BIM) and similar tools were identified by Engineers Australia in 2005 as potential instruments to significantly reduce this sum, which in Australia could amount to total industry-wide cost burden of AUD12 billion. Public sector road authorities in Australia have a key responsibility in driving initiatives to reduce greenhouse gas emissions from the construction and operations of transport infrastructure. However, as previous research has shown the Environmental Impact Assessment process, typically used for project approvals and permitting based on project designs available at the consent stage, lacks Key Performance Indicators (KPIs) that include long-term impact factors and transfer of information throughout the project life cycle. In the building construction industry, BIM is widely used to model sustainability KPIs such as energy consumption, and integrated with facility management systems. This paper proposes that a similar use of BIM in early design phases of transport infrastructure could provide: (i) productivity gains through improved interoperability and documentation; (ii) the opportunity to carry out detailed cost-benefit analyses leading to significant operational cost savings; (iii) coordinated planning of street and highway lighting with other energy and environmental considerations; iv) measurable KPIs that include long-term impact factors which are transferable throughout the project life cycle; and (v) the opportunity for integrating design documentation with sustainability whole-of-life targets.

Does the housing market respond to information disclosure? : Effects of toxicity indices in Japan

The policy instruments that provide information on a firm's or facility's environmental performance, such as the U.S. Toxic Release Inventory (TRI) and the Pollutant Release and Transfer Register system (PRTRs) used in some European countries and Japan, play an important role in encouraging firms or facilities to improve their environmental performance, if investors, consumers and residents recognize their environmental performance. This study uses a hedonic approach to explore how the Japanese rental housing market responds to carcinogenic risk arising from releases and transfers of chemical substances produced and used at close facilities. We found that residents do not perceive carcinogenic risk generated more than 1.0 km away from their residence and that they seem to recognize the increased carcinogenic risk at distances from 0.5 km to 1.0 km away; a 1% increase in carcinogenic risk reduces the average rent by 0.0007%. The distance at which residents perceive the risk arising from such facilities is less than in previous studies. This suggests that the risk perception recognized in previous studies may capture the other externalities in addition to the chemical risk because the risk is measured by the distance.