Side Channel Analysis of Some Hash Based MACs: A Response to SHA-3 Requirements

The forthcoming NIST’s Advanced Hash Standard (AHS) competition to select SHA-3 hash function requires that each candidate hash function submission must have at least one construction to support FIPS 198 HMAC application. As part of its evaluation, NIST is aiming to select either a candidate hash function which is more resistant to known side channel attacks (SCA) when plugged into HMAC, or that has an alternative MAC mode which is more resistant to known SCA than the other submitted alternatives. In response to this, we perform differential power analysis (DPA) on the possible smart card implementations of some of the recently proposed MAC alternatives to NMAC (a fully analyzed variant of HMAC) and HMAC algorithms and NMAC/HMAC versions of some recently proposed hash and compression function modes. We show that the recently proposed BNMAC and KMDP MAC schemes are even weaker than NMAC/HMAC against the DPA attacks, whereas multi-lane NMAC, EMD MAC and the keyed wide-pipe hash have similar security to NMAC against the DPA attacks. Our DPA attacks do not work on the NMAC setting of MDC-2, Grindahl and MAME compression functions.

Normative requirements for regulatory compliance: An abstract formal framework

By definition, regulatory rules (in legal context called norms) intend to achieve specific behaviour from business processes, and might be relevant to the whole or part of a business process. They can impose conditions on different aspects of process models, e.g., control-flow, data and resources etc. Based on the rules sets, norms can be classified into various classes and sub-classes according to their effects. This paper presents an abstract framework consisting of a list of norms and a generic compliance checking approach on the idea of (possible) execution of processes. The proposed framework is independent of any existing formalism, and provides a conceptually rich and exhaustive ontology and semantics of norms needed for business process compliance checking. The possible uses of the proposed framework include to compare different compliance management frameworks (CMFs).

New paradigm, new educational requirements? Australian viewpoints on education for digital libraries

The rise in popularity of the digital library has lead to studies addressing digital library education and curricula development to emanate from the United States and Europe. However, to date very little research has been conducted with an Australian focus. Additionally, very few studies worldwide have sought the opinions of practitioners and the influence that these opinions may have on developing appropriate digital library curricula. The current paper is drawn from a larger study which sought to determine the skills and knowledge required of library and information professionals to work in a digital library environment. Data were collected via an online questionnaire from two target groups: practitioners working in academic libraries and Library and Information Science (LIS) educators across Australia. This paper examines in depth the findings from the survey specifically relating to the following topics. Firstly, whether or not there is a need for an educational programme to be targeted solely at the digital library environment. Secondly, the preferred delivery options for such a programme, and preferred models of digital library education. In addition, a determination on the elements which should be included in the curricula of a digital library education programme are discussed. Findings are compared and discussed with reference to the literature which informed the study. Finally, implications for the sustainability of library education programmes in Australia are identified and directions for further research highlighted.

Investigation of structural requirements of anticancer activity at the paclitaxel/tubulin binding site using CoMFA and CoMSIA

CoMFA and CoMSIA analysis were utilized in this investigation to define the important interacting regions in paclitaxel/tubulin binding site and to develop selective paclitaxel-like active compounds. The starting geometry of paclitaxel analogs was taken from the crystal structure of docetaxel. A total of 28 derivatives of paclitaxel were divided into two groups—a training set comprising of 19 compounds and a test set comprising of nine compounds. They were constructed and geometrically optimized using SYBYL v6.6. CoMFA studies provided a good predictability (q2 = 0.699, r2 = 0.991, PC = 6, S.E.E. = 0.343 and F = 185.910). They showed the steric and electrostatic properties as the major interacting forces whilst the lipophilic property contribution was a minor factor for recognition forces of the binding site. These results were in agreement with the experimental data of the binding activities of these compounds. Five fields in CoMSIA analysis (steric, electrostatic, hydrophobic, hydrogen-bond acceptor and donor properties) were considered contributors in the ligand–receptor interactions. The results obtained from the CoMSIA studies were: q2 = 0.535, r2 = 0.983, PC = 5, S.E.E. = 0.452 and F = 127.884. The data obtained from both CoMFA and CoMSIA studies were interpreted with respect to the paclitaxel/tubulin binding site. This intuitively suggested where the most significant anchoring points for binding affinity are located. This information could be used for the development of new compounds having paclitaxel-like activity with new chemical entities to overcome the existing pharmaceutical barriers and the economical problem associated with the synthesis of the paclitaxel analogs. These will boost the wide use of this useful class of compounds, i.e. in brain tumors as the most of the present active compounds have poor blood–brain barrier crossing ratios and also, various tubulin isotypes has shown resistance to taxanes and other antimitotic agents.

Investigating in-domain data requirements for PLDA training

This paper analyzes the limitations upon the amount of in- domain (NIST SREs) data required for training a probabilistic linear discriminant analysis (PLDA) speaker verification system based on out-domain (Switchboard) total variability subspaces. By limiting the number of speakers, the number of sessions per speaker and the length of active speech per session available in the target domain for PLDA training, we investigated the relative effect of these three parameters on PLDA speaker verification performance in the NIST 2008 and NIST 2010 speaker recognition evaluation datasets. Experimental results indicate that while these parameters depend highly on each other, to beat out-domain PLDA training, more than 10 seconds of active speech should be available for at least 4 sessions/speaker for a minimum of 800 speakers. If further data is available, considerable improvement can be made over solely out-domain PLDA training.

Colonoscopy requirements of population screening for colorectal cancer in New Zealand

Aim: To estimate the colonoscopy burden of introducing population screening for colorectal cancer in New Zealand. Methods: Screening for colorectal cancer using biennial immunochemical faecal occult blood tests offered to people aged 50-74 years of age was modelled using population estimates from Statistics New Zealand for 2011-2031. Modelling to determine colonoscopy requirements was based on participation and test positivity rates from published results of screening programmes. Estimates of the number of procedures required for ongoing adenoma surveillance were calculated using screening literature results of adenoma yield, and New Zealand Guidelines for Adenoma Surveillance. Sensitivity analysis was undertaken on key parameters. Results: For a test positivity of 6.4%, biennial screening using immunochemical faecal occult blood testing with a 60% participation rate, would require 18,000 colonoscopies nationally, increasing to 28,000 by 2031. The majority of procedures are direct referrals from a positive FOBT, with surveillance colonoscopy numbers building over time. Conclusion: Colonoscopy requirements for immunochemical faecal occult blood based population screening for colorectal cancer are high. Significant expansion of services is required and careful management of surveillance procedures to ensure timely delivery of initial colonoscopies whilst maintaining symptomatic services. A model re-run informed by data from the screening pilot will allow improved estimates for the New Zealand setting.

Tissue requirements for establishing long-term CD4+ T cell-mediated immunity following Leishmania donovani infection

Organ-specific immunity is a feature of many infectious diseases, including visceral leishmaniasis caused by Leishmania donovani. Experimental visceral leishmaniasis in genetically susceptible mice is characterized by an acute, resolving infection in the liver and chronic infection in the spleen. CD4+ T cell responses are critical for the establishment and maintenance of hepatic immunity in this disease model, but their role in chronically infected spleens remains unclear. In this study, we show that dendritic cells are critical for CD4+ T cell activation and expansion in all tissue sites examined. We found that FTY720-mediated blockade of T cell trafficking early in infection prevented Ag-specific CD4+ T cells from appearing in lymph nodes, but not the spleen and liver, suggesting that early CD4+ T cell priming does not occur in liver-draining lymph nodes. Extended treatment with FTY720 over the first month of infection increased parasite burdens, although this associated with blockade of lymphocyte egress from secondary lymphoid tissue, as well as with more generalized splenic lymphopenia. Importantly, we demonstrate that CD4+ T cells are required for the establishment and maintenance of antiparasitic immunity in the liver, as well as for immune surveillance and suppression of parasite outgrowth in chronically infected spleens. Finally, although early CD4+ T cell priming appeared to occur most effectively in the spleen, we unexpectedly revealed that protective CD4+ T cell-mediated hepatic immunity could be generated in the complete absence of all secondary lymphoid tissues.

Understanding data flow and security requirements in wireless Body Area Networks for healthcare

The Body Area Network (BAN) is an emerging technology that focuses on monitoring physiological data in, on and around the human body. BAN technology permits wearable and implanted sensors to collect vital data about the human body and transmit it to other nodes via low-energy communication. In this paper, we investigate interactions in terms of data flows between parties involved in BANs under four different scenarios targeting outdoor and indoor medical environments: hospital, home, emergency and open areas. Based on these scenarios, we identify data flow requirements between BAN elements such as sensors and control units (CUs) and parties involved in BANs such as the patient, doctors, nurses and relatives. Identified requirements are used to generate BAN data flow models. Petri Nets (PNs) are used as the formal modelling language. We check the validity of the models and compare them with the existing related work. Finally, using the models, we identify communication and security requirements based on the most common active and passive attack scenarios.