Abstracting and correlating heterogeneous events to detect complex scenarios

The research presented in this thesis addresses inherent problems in signaturebased intrusion detection systems (IDSs) operating in heterogeneous environments. The research proposes a solution to address the difficulties associated with multistep attack scenario specification and detection for such environments. The research has focused on two distinct problems: the representation of events derived from heterogeneous sources and multi-step attack specification and detection. The first part of the research investigates the application of an event abstraction model to event logs collected from a heterogeneous environment. The event abstraction model comprises a hierarchy of events derived from different log sources such as system audit data, application logs, captured network traffic, and intrusion detection system alerts. Unlike existing event abstraction models where low-level information may be discarded during the abstraction process, the event abstraction model presented in this work preserves all low-level information as well as providing high-level information in the form of abstract events. The event abstraction model presented in this work was designed independently of any particular IDS and thus may be used by any IDS, intrusion forensic tools, or monitoring tools. The second part of the research investigates the use of unification for multi-step attack scenario specification and detection. Multi-step attack scenarios are hard to specify and detect as they often involve the correlation of events from multiple sources which may be affected by time uncertainty. The unification algorithm provides a simple and straightforward scenario matching mechanism by using variable instantiation where variables represent events as defined in the event abstraction model. The third part of the research looks into the solution to address time uncertainty. Clock synchronisation is crucial for detecting multi-step attack scenarios which involve logs from multiple hosts. Issues involving time uncertainty have been largely neglected by intrusion detection research. The system presented in this research introduces two techniques for addressing time uncertainty issues: clock skew compensation and clock drift modelling using linear regression. An off-line IDS prototype for detecting multi-step attacks has been implemented. The prototype comprises two modules: implementation of the abstract event system architecture (AESA) and of the scenario detection module. The scenario detection module implements our signature language developed based on the Python programming language syntax and the unification-based scenario detection engine. The prototype has been evaluated using a publicly available dataset of real attack traffic and event logs and a synthetic dataset. The distinct features of the public dataset are the fact that it contains multi-step attacks which involve multiple hosts with clock skew and clock drift. These features allow us to demonstrate the application and the advantages of the contributions of this research. All instances of multi-step attacks in the dataset have been correctly identified even though there exists a significant clock skew and drift in the dataset. Future work identified by this research would be to develop a refined unification algorithm suitable for processing streams of events to enable an on-line detection. In terms of time uncertainty, identified future work would be to develop mechanisms which allows automatic clock skew and clock drift identification and correction. The immediate application of the research presented in this thesis is the framework of an off-line IDS which processes events from heterogeneous sources using abstraction and which can detect multi-step attack scenarios which may involve time uncertainty.

Measuring the quality of teaching in elementary school classrooms

This paper reviews the means by which teacher quality has been measured. It considers data sources such as students, peers, experts, and examines the psychometrics and scaleproperties of teacher quality assessment instruments with respect to reliability and validity. A list of items for possible inclusion in an elementary student focussed instrument is considered, together with the potential use of such an instrument in measuring teacher quality.

Secondary teachers’ conceptions of teaching and learning

This paper presents a phenomenographic analysis of the conceptions of teaching and learning held by a sample of 16 secondary school teachers in two Australian schools. It provides descriptions of four categories, derived from pooled data, of the ways in which these teachers thought about teaching and about learning, their teaching strategies, and their focus on student or content. The categories for teaching and learning are described with each teacher allocated to the category most typical of their conceptions of teaching and of learning. The lack of congruence, in some cases, between the conceptions of teaching and of learning held by these teachers is discussed.

Evaluation of separation management algorithms in Class G airspace

Use of Unmanned Aerial Vehicles (UAVs) in support of government applications has already seen significant growth and the potential for use of UAVs in commercial applications is expected to rapidly expand in the near future. However, the issue remains on how such automated or operator-controlled aircraft can be safely integrated into current airspace. If the goal of integration is to be realized, issues regarding safe separation in densely populated airspace must be investigated. This paper investigates automated separation management concepts in uncontrolled airspace that may help prepare for an expected growth of UAVs in Class G airspace. Not only are such investigations helpful for the UAV integration issue, the automated separation management concepts investigated by the authors can also be useful for the development of new or improved Air Traffic Control services in remote regions without any existing infrastructure. The paper will also provide an overview of the Smart Skies program and discuss the corresponding Smart Skies research and development effort to evaluate aircraft separation management algorithms using simulations involving realworld data communication channels, and verified against actual flight trials. This paper presents results from a unique flight test concept that uses real-time flight test data from Australia over existing commercial communication channels to a control center in Seattle for real-time separation management of actual and simulated aircraft. The paper also assesses the performance of an automated aircraft separation manager.

Embedding university perspectives in university teaching and learning : lessons learnt and possibilities for reforming/decolonising curriculum

Embedding Indigenous knowledge in the curriculum continues to challenge traditional western perspectives on Indigenous epistemologies and cultures. This paper will initially discuss experiences of embedding Indigenous perspectives in the curriculum at an Australian university. The project was inspired by the Reconciliation Statement which ensured funding through Teaching and Learning Large Grants. Its successful outcomes included the creation of identified positions for Indigenous academics within faculties, creation of a resource hub of relevant teaching materials and consistent documentation and awareness of Indigenous perspectives through interviews and workshops. The paper concludes by critically interrogating the methodology used to conceptualise Indigenous knowledge in embedding Indigenous perspectives in a university curriculum. This paper argues for a thorough curriculum reform if a degree of decolonisation of the western constructed Indigenous knowledge and its living systems are desired.

Addressing the needs of struggling literacy learners

Think back to your teaching experiences over the past four years. Were there a number of children or adolescents in your classes who seemed to have learning difficulties? What area of their learning seemed to be of greatest concern for these students? Did most of these struggling learners have difficulty with reading? Was expressing their thoughts in writing also a challenge? Did some of these students also have difficulty in listening to and following directions? And did some of these students seem hesitant when asked to speak to the class?

How can preservice teachers be measured against advocated professional teaching standards?

Australia has had many inquiries into teaching and teacher education over the last decade. Standards for teaching have been produced by national education systems with many state systems following suit. The Queensland College of Teachers (QCT) advocates ten professional teaching standards for teachers and preservice teachers. How can preservice teachers be measured against advocated professional standards? This study investigated 106 second-year preservice teachers’ perceptions of their development against the QCT standards. A pretest-posttest survey instrument was developed based on the QCT standards and administered to these preservice teachers before and after their science education coursework. Percentages, ANOVAs and t-tests were generated to analyse the results. Findings indicated that 22 of the 24 paired pretest-posttest items were highly significant (p<.001). Percentage increases ranged from as low as 27% in the pretest to as high as 97% in the posttest, yet, there were two items with lower significance (i.e., working in professional science education teams and supporting students’ participation in society). Understanding preservice teachers’ perceptions of their abilities to implement these standards may be a step towards the process of determining the achievement of teaching standards; however, more rigorous measurements will need to be developed for both teachers and preservice teachers. University coursework and related assessments can provide an indication of achieving these standards, especially authentic assessment of preservice teachers’ practices.

Teaching young people first aid skills to reduce injury

Background First aid given immediately after a motor vehicle crash can have considerable benefits. Less understood however is first aid training as a prevention strategy for reducing risk-taking. A first step is to understand whether first aid skills are associated with risk-taking and injury experiences. Further, students and teachers who undergo or deliver such training offer important perspectives about implementation. Aims The research has two aims: (i) to identify whether first aid knowledge is associated with road risk-taking and injury and (ii) to examine teachers’ and students’ experiences of first aid activities within a school-based injury prevention and control program. Method Participants were 173 Year 9s (47% male) who completed a survey which included demographic information, first aid knowledge and risk-taking behaviour and injury experiences. Focus groups were held with 8 teachers who delivered, and 70 students who participated in, a school-based injury prevention and control program. Results Results showed a relationship between greater first aid knowledge and reduced engagement in risk-taking and injury experiences. Both students and teachers reported favourably on first aid however teachers also acknowledged challenges in delivering practical activities. Discussion & Conclusion It appears that first aid can be implemented within the school setting, particularly at the Year 9 level, and that both students and teachers involved in such training identify multiple benefits and positive experiences with first aid training. In addition, the findings suggest that first aid knowledge could be an important part of a prevention program.

Teaching business process modelling : experiences and recommendations

A curriculum for a university-level course called Business Process Modeling is presented in order to provide guidance for the increasing number of institutions who are currently developing such contents. The course caters to undergraduate and post graduate students. Its content is drawn from recent research, industry practice, and established teaching material, and teaches ways of specifying business processes for the analysis and design of process-aware information systems. The teaching approach is a blend of lectures and classroom exercises with innovative case studies, as well as reviews of research material. Students are asked to conceptualize, analyze, and articulate real life process scenarios. Tutorials and cheat sheets assist with the learning experience. Course evaluations from 40 students suggest the adequacy of the teaching approach. Specifically, evaluations show a high degree of satisfaction with course relevance, content presentation, and teaching approach.

Documenting reproduction and inequality : revisiting Jean Anyon’s “Social class and school knowledge”

Jean Anyon’s (1981) “Social class and school knowledge” was a landmark work in North American educational research. It provided a richly detailed qualitative description of differential, social-class-based constructions of knowledge and epistemological stance. This essay situates Anyon’s work in two parallel traditions of critical educational research: the sociology of the curriculum and classroom interaction and discourse analysis. It argues for the renewed importance of both quantitative and qualitative research on social reproduction and equity in the current policy context.

Understanding preservice teachers’ predispositions for teaching engineering education in Australian schools.

Engineering education is underrepresented in Australia at the primary, middle school and high school levels. Understanding preservice teachers’ preparedness to be involved in engineering will be important for developing an engineering curriculum. This study administered a literature-based survey to 36 preservice teachers, which gathered data about their perceptions of engineering and their predispositions for teaching engineering. Findings indicated that the four constructs associated with the survey had acceptable Cronbach alpha scores (i.e., personal professional attributes .88, student motivation .91, pedagogical knowledge .91, and fused curricula .89). However, there was no “disagree” or “strongly disagree” response greater than 22% for any of the 25 survey items. Generally, these preservice teachers indicated predispositions for teaching engineering in the middle school. Extensive scaffolding and support with education programs will assist preservice teachers to develop confidence in this field. Governments and education departments need to recognise the importance of engineering education, and universities must take a stronger role in developing engineering education curricula.

Employing the five-factor mentoring instrument : analysing mentoring practices for teaching primary science.

Primary science education is a concern around the world and quality mentoring within schools can develop preservice teachers’ practices. A five-factor model for mentoring has been identified, namely, personal attributes, system requirements, pedagogical knowledge, modelling, and feedback. Final-year preservice teachers (mentees, n=211) from three Turkish universities were administered a previously validated instrument to gather perceptions of their mentoring in primary science teaching. ANOVA indicated that each of these five factors was statistically significant (p<.001) with mean scale scores ranging from 3.36 to 4.12. Although mentees perceived their mentors to provide evaluation feedback (95%), model classroom management (88%), guide their preparation (96%), and outline the science curriculum (92%), the majority of mentors were perceived not to assist their mentees in 10 of the 34 survey items. Professional development programmes that target the specific needs of these mentors may further enhance mentoring practices for advancing primary science teaching.

Preservice EFL teachers’ beliefs about teaching writing and learning to teach writing before their practicum : a case study in Vietnam

The standard of English as a Foreign Language (EFL) education has prompted calls for reform to preservice EFL teacher education. Field experiences are central to their professional development and for implementing reform measures. This study aims to examine preservice EFL teachers’ attitudes, needs, and experiences about learning to teach writing in English before their practicum in Vietnamese high schools. An open-ended questionnaire collected data from 97 preservice EFL teachers at the beginning of their final practicum. The data suggested that these preservice EFL teachers were motivated to learn to teach English in general and teaching writing in particular but required mentors to model effective teaching practices and share their teaching experiences. They also needed their mentors to be enthusiastic and supportive, and provide constructive feedback. These findings may assist teacher educators and school mentors for motivating and developing preservice EFL teachers’ practices.

Losing their marbles : syntax-free programming for assessing problem-solving skills

Novice programmers have difficulty developing an algorithmic solution while simultaneously obeying the syntactic constraints of the target programming language. To see how students fare in algorithmic problem solving when not burdened by syntax, we conducted an experiment in which a large class of beginning programmers were required to write a solution to a computational problem in structured English, as if instructing a child, without reference to program code at all. The students produced an unexpectedly wide range of correct, and attempted, solutions, some of which had not occurred to their teachers. We also found that many common programming errors were evident in the natural language algorithms, including failure to ensure loop termination, hardwiring of solutions, failure to properly initialise the computation, and use of unnecessary temporary variables, suggesting that these mistakes are caused by inexperience at thinking algorithmically, rather than difficulties in expressing solutions as program code.

"Over The Hill" is not so far away : crossing teaching contexts to create benefits for all through rural teaching experiences.

Attracting and retaining quality teachers to rural and remote areas has been a challenge over the last decade. Many preservice teachers are reluctant to experience a rural and remote practicum and may not consider applying to teach in such areas when they graduate. Education departments and universities need to explore innovative ways that will encourage graduates to consider undertaking a teaching position in the bush. As a way forward, preservice teachers from a regional campus of a Queensland University were invited to participate in a six-day rural experience entitled ‘Over the Hill’ that included being billeted with local families, participating in community activities and observing and teaching in classrooms. Fifteen preservice teachers were accompanied by two university academics who returned to work in a classroom as teacher for their own rural and remote professional experience. The aim of this qualitative study was to explore and describe the perceptions of a rural and remote teaching experience from the perspectives of the preservice teachers, the accompanying academics and the school staff hosting the program. Data were collected from the preservice teachers and accompanying academics in the form of written reflections while fourteen school staff completed a related questionnaire. The results indicated that a six-day rural and remote teaching program can provide professional benefits for all involved, preservice teachers, accompanying academics and the school staff hosting the program. Indeed, this study indicates that short experiences such as “Over the Hill” not only assist preservice teachers to make informed decisions about teaching in rural and remote areas but can provide professional benefits for accompanying academics and the schools.