Security analysis of Australian and E.U. e-passport implementation

This paper makes a formal security analysis of the current Australian e-passport implementation using model checking tools CASPER/CSP/FDR. We highlight security issues in the current implementation and identify new threats when an e-passport system is integrated with an automated processing system like SmartGate. The paper also provides a security analysis of the European Union (EU) proposal for Extended Access Control (EAC) that is intended to provide improved security in protecting biometric information of the e-passport bearer. The current e-passport specification fails to provide a list of adequate security goals that could be used for security evaluation. We fill this gap; we present a collection of security goals for evaluation of e-passport protocols. Our analysis confirms existing security weaknesses that were previously identified and shows that both the Australian e-passport implementation and the EU proposal fail to address many security and privacy aspects that are paramount in implementing a secure border control mechanism. ACM Classification C.2.2 (Communication/Networking and Information Technology – Network Protocols – Model Checking), D.2.4 (Software Engineering – Software/Program Verification – Formal Methods), D.4.6 (Operating Systems – Security and Privacy Protection – Authentication)

Formal security analysis of Australian e-passport implementation

This paper provides a detailed description of the current Australian e-passport implementation and makes a formal verification using model checking tools CASPER/CSP/FDR. We highlight security issues present in the current e-passport implementation and identify new threats when an e-passport system is integrated with an automated processing systems like SmartGate. Because the current e-passport specification does not provide adequate security goals, to perform a rational security analysis we identify and describe a set of security goals for evaluation of e-passport protocols. Our analysis confirms existing security issues that were previously informally identified and presents weaknesses that exists in the current e-passport implementation.

Process compliance analysis based on behavioural profiles

Process compliance measurement is getting increasing attention in companies due to stricter legal requirements and market pressure for operational excellence. In order to judge on compliance of the business processing, the degree of behavioural deviation of a case, i.e., an observed execution sequence, is quantified with respect to a process model (referred to as fitness, or recall). Recently, different compliance measures have been proposed. Still, nearly all of them are grounded on state-based techniques and the trace equivalence criterion, in particular. As a consequence, these approaches have to deal with the state explosion problem. In this paper, we argue that a behavioural abstraction may be leveraged to measure the compliance of a process log – a collection of cases. To this end, we utilise causal behavioural profiles that capture the behavioural characteristics of process models and cases, and can be computed efficiently. We propose different compliance measures based on these profiles, discuss the impact of noise in process logs on our measures, and show how diagnostic information on non-compliance is derived. As a validation, we report on findings of applying our approach in a case study with an international service provider.

Efficient computation of causal behavioural profiles using structural decomposition

Identification of behavioural contradictions is an important aspect of software engineering, in particular for checking the consistency between a business process model used as system specification and a corresponding workflow model used as implementation. In this paper, we propose causal behavioural profiles as the basis for a consistency notion, which capture essential behavioural information, such as order, exclusiveness, and causality between pairs of activities. Existing notions of behavioural equivalence, such as bisimulation and trace equivalence, might also be applied as consistency notions. Still, they are exponential in computation. Our novel concept of causal behavioural profiles provides a weaker behavioural consistency notion that can be computed efficiently using structural decomposition techniques for sound free-choice workflow systems if unstructured net fragments are acyclic or can be traced back to S- or T-nets.

Mindfulness-meditation on the move : implementation of an ACT-based mindfulness practice intervention and training within a University Dance program

As part of the introduction of a broader dance medicine and science related health and wellbeing program, a 9 week mindfulness-meditation ACT-based program was delivered to all students undertaking full-time University dance training (N = 106). The aim of the program was to assist students in the further development of performance psychology skills that could be applied in both performance and non-performance settings. Participant groups were comprised of both male (N = 12) and female (N = 94) students from across all three year levels of two undergraduate dance courses, divided into three groups by mixed year levels due to timetable scheduling requirements. Pre- and post-testing was undertaken utilising the Mindful Attention Awareness Scale (MAAS-15), a uni-dimensional measure of mindfulness, in addition to qualitative questions checking the current level of awareness and understanding of mindfulness practice and its application. Weekly sessions were conducted by qualified sport and exercise psychologists and covered key practices such as: Mindfulness of Body, Mindfulness of Breathing, Mindfulness of Sounds, ACT-based and general Imagery exercises, Developing Open Awareness, Mindfulness of Emotions, and Developing Inner Stillness. Students were required to maintain a reflective journal that was utilised at the end of each weekly session, in addition to completion of a mid-Semester reflective debrief. Teaching staff additionally attended the weekly sessions and linked the mindfulness practice learnings into the student’s practical dance and academic classes where appropriate. Anecdotal feedback indicates that participation in the mindfulness-meditation sessions and the development of these mental skills has resulted in positive performance and personal outcomes. Observations collated from staff and students, results from the data collection phases and recommendations regarding future applications within dance training settings will be discussed within the presentation.

From democracy in America to a la francaise accountability. Grasping the sociopolitical origins of accountability [De la démocratie en Amérique du Nord à l’accountability à la française]

Whilst native French speakers oftentimes collapse accountability to account giving, this paper outlines the shape of an accountability ala française. Reading Tocqueville’s (1835) work highlights that accountability as practiced in Anglo-Saxonc countries has been an offspring of American democracy. An accountability a la française would be characterised by conformance to a set or universal values, the submission of minorities to choices made by the majority, a means obligation as well as the rejection of transparency. [Alors que le francophone réduit généralement l’accountability à la reddition de comptes, cet article esquisse les contours d’une véritable accountability à la française. La lecture de Tocqueville (1835) révèle que l’accountability pratiquée dans les pays anglo-saxons trouve ses origines dans les fondements de la démocratie américaine. En France, l’accountability serait caractérisée par le respect d’un ensemble de valeurs universelles, l’adhésion des minorités aux choix majoritaires, l’absence de discriminations, une obligation de moyens et un rejet de la transparence.]

Vertical alignment of process models – how can we get there?

There is a wide variety of drivers for business process modelling initiatives, reaching from business evolution and process optimisation over compliance checking and process certification to process enactment. That, in turn, results in models that differ in content due to serving different purposes. In particular, processes are modelled on different abstraction levels and assume different perspectives. Vertical alignment of process models aims at handling these deviations. While the advantages of such an alignment for inter-model analysis and change propagation are out of question, a number of challenges has still to be addressed. In this paper, we discuss three main challenges for vertical alignment in detail. Against this background, the potential application of techniques from the field of process integration is critically assessed. Based thereon, we identify specific research questions that guide the design of a framework for model alignment.

Consumers persepctive on pharmacists integration into private primary healthcare clinics in Malaysia

Background: Pharmacists are considered medication experts but are underutilised mainly at the periphery of the primary healthcare team. General medical practitioners (GPs) in Malaysian private healthcare clinics are granted rights to prescribe and dispense medications, thus furhter limiting pharmacists involvement in ensuring safe use of medicines. The integration of pharmacist into private primary healthcare clinics has the potential to reduce medication-relation problems. Objective: To explore the views of consumers on the integration of pharmacists within private primary healthcare clinics in Malaysia. Method: A purposive sample of healthcare consumers in Selangor and Kuala Lumpur, Malaysia were invited to participate in focus groups and semi-structured interviews. Sessions were audio recorded and transcribed verbatim and thematically analysed using NVivo 10. Results: A total of 24 healthcare consumers particpated in two focus groups and six semi-structured interviews. Four major themes were identified: (1) Pharmacists role viewed mainly as supplying medications, (2) Readiness to accept pharmacists in private healthcare clinics, (3) Willingness to pay for pharmacy services, and (4) Concerns about GPs resistance to pharmacist integration. Consumers felt that a pharmacist integrated into private prumary healthcare clinics could offer potential benefits such as counter-checking prescriptions to ensure correct medication is supplied and counselling consumers on their medications and the potential side effects. The potential to increase in costs to consumers and GPs reluctance were perceived as barriers to integration. Conclusion: This study provides insights into consumers perspectives on the roles of pharmacists within private primary healthcare clinics in Malaysia. Consumers generally supported pharmacist integration into private primary healthcare clinics. However, for pharmacists to expand their capacity in providing integrated and collaborative primary care services to consumers, barriers to pharmacist integration need to be addressed.

Detection of sinkhole attack in wireless sensor networks

Generally wireless sensor networks rely of many-to-one communication approach for data gathering. This approach is extremely susceptible to sinkhole attack, where an intruder attracts surrounding nodes with unfaithful routing information, and subsequently presents selective forwarding or change the data that carry through it. A sinkhole attack causes an important threat to sensor networks and it should be considered that the sensor nodes are mostly spread out in open areas and of weak computation and battery power. In order to detect the intruder in a sinkhole attack this paper suggests an algorithm which firstly finds a group of suspected nodes by analyzing the consistency of data. Then, the intruder is recognized efficiently in the group by checking the network flow information. The proposed algorithm's performance has been evaluated by using numerical analysis and simulations. Therefore, accuracy and efficiency of algorithm would be verified.

A comparison of factors influencing perceived risk by French and Australian cyclists and drivers

Differences in the levels of risk perceived by cyclists and car drivers may contribute to the dangers in their interactions. Levels of perceived risk have been shown to vary according to personal and environmental factors and between countries. Cycling rates in France are higher than in Australia, particularly among women. This study investigated whether cultural differences between France and Australia are reflected in perceived risks for experienced adult cyclists and drivers in the two countries. In online surveys, regular cyclists (France 336, Australia 444) and drivers (France 92, Australia 151) were asked to rate the level of risk in six situations: failure to yield; going through a red light; not signalling when turning; swerving; tail-gating; and not checking traffic. The effects of type of interacting vehicle and participant type on perceived risk were similar in France and Australia. However, the influence of responsibility for the risky behaviour differed according to participant type, type of situation and nationality. When the bicycle rider committed the road rule violation, Australian cyclists and drivers gave higher risk ratings than French cyclists and drivers. In both countries, cyclists rated themselves significantly higher than drivers on the perceived control and overconfidence subscales of the perceived skill measure. The French cyclists rated themselves higher than Australian cyclists on these scales, which could be responsible for overall lower perceived risk levels when interacting with a bike. Australian cyclists rated themselves significantly lower than drivers on the incompetence subscale but French cyclists rated themselves higher than drivers. In both countries incompetence scores were positively related to levels of perceived risk. Weekly time was associated with perceived risk in Australia but not in France. Frequency of traffic violations was not associated with perceived risk in either country. In conclusion, levels of perceived risk differed between drivers and cyclists in both countries and were influenced by type of interacting vehicle, experience and perceived skill. However, some differences between the results from the two countries merit further investigation to shed light on potential improvements in safety and cycling participation.

Antisocial behaviour orders : Unanticipated directions in social network site development

Abstract: Social network technologies, as we know them today have become a popular feature of everyday life for many people. As their name suggests, their underlying premise is to enable people to connect with each other for a variety of purposes. These purposes however, are generally thought of in a positive fashion. Based on a multi-method study of two online environments, Habbo Hotel and Second Life, which incorporate social networking functionality, we she light on forms of what can be conceptualized as antisocial behaviours and the rationales for these. Such behaviours included: scamming, racist/homophobic attacks, sim attacks, avatar attacks, non-conformance to contextual norms, counterfeiting and unneighbourly behaviour. The rationales for sub behaviours included: profit, fun, status building, network disruption, accidental acts and prejudice. Through our analysis we are able to comment upon the difficulties of defining antisocial behaviour in such environments, particularly when such environments are subject to interpretation vis their use and expected norms. We also point to the problems we face in conducting our public and private lives given the role ICTs are playing in the convergence of these two spaces and also the convergence of ICTs themselves.

An alternative approach to setting a mill

The conventional approach to setting a milling unit is essentially based on the desire to achieve a particular bagasse moisture content or fibre fill in each nip of the mill. This approach relies on the selection of the speed at which the mill will operate for the selected fibre rate. There is rarely any checking that the selected speed or the selected fibre fill is achieved and the same set of assumptions is generally carried over to use again in the next year. The conventional approach largely ignores the fact that the selection of mill settings actually determines the speed at which the mill will operate. Making an adjustment with the intent of changing the performance of the mill often also changes the speed of the mill as an unintended consequence. This paper presents an alternative approach to mill setting. The approach discussed makes use of mill feeding theory to define the relationship between fibre rate, mill speed and mill settings and uses that theory to provide an alternative means of determining the settings in some nips of the mill. Mill feeding theory shows that, as the feed work opening reduces, roll speed increases. The theory also shows that there is an optimal underfeed opening and Donnelly chute exit opening that will minimise roll speed and that the current South African guidelines appear to be well away from those optimal values.

Analysis of risk management disclosures by Australian publicly listed companies

In the aftermath of the global financial crisis, effective risk management (RM) and its communication to stakeholders are now considered essential components in corporate governance. However, despite the importance of RM communication, it is still unclear how and to what extent disclosures in financial reports can achieve effective communication of RM activities. The situation is hampered by the paucity of international RM Research that captures institution differences in corporate governance standards. The Australian setting provides an ideal environment in which to examine RM communication because the Australian Securities Exchange (ASX) has since 2007 recommended RM disclosures under its principle-based governance rules. The recommendations are contained in Principle 7 of the Corporate Governance Principles and recommendations (ASX CGPR). Accordingly, to assess the effectiveness of the AXS's RM governance principle, this study examines the nature and extent of RM disclosures reported by major ASX-listed firms. Using a mixed method approach (thematic content analysis and a series of regression analysis) we find widespread divergence in disclosure practices and low conformance with the Principle 7 recommendations. Certain corporate governance mechanisms appear to influence some categories of RM dislcosure but equity risk has surprisingly little explanatory power. These results suggest that the RM disclosures practices observed in the Australian setting may not be meeting the objectives of regulators and the needs of stakeholders.

Setting measureable goals with young people : qualitative feedback from the Goal Attainment Scale in youth mental health

Introduction Measuring occupational performance is an essential part of clinical practice; however, there is little research on service user perceptions of measures. The aim of this investigation was to explore the acceptability and utility of one occupational performance outcome measure, Goal Attainment Scaling, with young people (12–25 years old) seeking psychological help. Method Semi-structured interviews were conducted with ten young people seeking help from a youth mental health clinic. Interviews were audio taped and a field diary kept. Interviews were transcribed verbatim and analysed using content analysis. Results were verified by member checking. Results All participants were able to engage in using Goal Attainment Scaling to set goals for therapy, and reported the process to be useful. The participants identified the physical location and ownership of the scale was important to help motivate them to work on their goals. Conclusion Young help-seekers see Goal Attainment Scaling as an acceptable tool to facilitate the establishment of functional goals. Young service users were particularly keen to maintain control over the physical location of completed forms.

Approximation of Bayesian predictive p-values with regression ABC

In the Bayesian framework a standard approach to model criticism is to compare some function of the observed data to a reference predictive distribution. The result of the comparison can be summarized in the form of a p-value, and it's well known that computation of some kinds of Bayesian predictive p-values can be challenging. The use of regression adjustment approximate Bayesian computation (ABC) methods is explored for this task. Two problems are considered. The first is the calibration of posterior predictive p-values so that they are uniformly distributed under some reference distribution for the data. Computation is difficult because the calibration process requires repeated approximation of the posterior for different data sets under the reference distribution. The second problem considered is approximation of distributions of prior predictive p-values for the purpose of choosing weakly informative priors in the case where the model checking statistic is expensive to compute. Here the computation is difficult because of the need to repeatedly sample from a prior predictive distribution for different values of a prior hyperparameter. In both these problems we argue that high accuracy in the computations is not required, which makes fast approximations such as regression adjustment ABC very useful. We illustrate our methods with several samples.