Protecting encrypted cookies from compression side-channel attacks

Compression is desirable for network applications as it saves bandwidth; however, when data is compressed before being encrypted, the amount of compression leaks information about the amount of redundancy in the plaintext. This side channel has led to successful CRIME and BREACH attacks on web traffic protected by the Transport Layer Security (TLS) protocol. The general guidance in light of these attacks has been to disable compression, preserving confidentiality but sacrificing bandwidth. In this paper, we examine two techniques - heuristic separation of secrets and fixed-dictionary compression|for enabling compression while protecting high-value secrets, such as cookies, from attack. We model the security offered by these techniques and report on the amount of compressibility that they can achieve.

Evaluation of channel congestion in dedicated short-range communication networks

This thesis presents a novel idea for an adaptive prioritized cross-layer design (APCLD) control algorithm to achieve comprehensive channel congestion control for vehicular safety communication based on DSRC technology. An appropriate evaluation metric and two control parameters have been established. Simulation studies have evaluated the DSRC network performance in different traffic scenario and under different channel conditions. The APCLD algorithm is derived from the results of the simulation analysis.

Side Channel Analysis of Some Hash Based MACs: A Response to SHA-3 Requirements

The forthcoming NIST’s Advanced Hash Standard (AHS) competition to select SHA-3 hash function requires that each candidate hash function submission must have at least one construction to support FIPS 198 HMAC application. As part of its evaluation, NIST is aiming to select either a candidate hash function which is more resistant to known side channel attacks (SCA) when plugged into HMAC, or that has an alternative MAC mode which is more resistant to known SCA than the other submitted alternatives. In response to this, we perform differential power analysis (DPA) on the possible smart card implementations of some of the recently proposed MAC alternatives to NMAC (a fully analyzed variant of HMAC) and HMAC algorithms and NMAC/HMAC versions of some recently proposed hash and compression function modes. We show that the recently proposed BNMAC and KMDP MAC schemes are even weaker than NMAC/HMAC against the DPA attacks, whereas multi-lane NMAC, EMD MAC and the keyed wide-pipe hash have similar security to NMAC against the DPA attacks. Our DPA attacks do not work on the NMAC setting of MDC-2, Grindahl and MAME compression functions.

Searching for semantic person queries using channel representations

It is not uncommon to hear a person of interest described by their height, build, and clothing (i.e. type and colour). These semantic descriptions are commonly used by people to describe others, as they are quick to relate and easy to understand. However such queries are not easily utilised within intelligent surveillance systems as they are difficult to transform into a representation that can be searched for automatically in large camera networks. In this paper we propose a novel approach that transforms such a semantic query into an avatar that is searchable within a video stream, and demonstrate state-of-the-art performance for locating a subject in video based on a description.

Powering innovation through tax concessions: The changing research & development tax incentives

The changes to the R&D tax concession in 2011 were touted as the biggest reform to business innovation policy in over a decade. Three years later, as part of the 2014 Federal Budget, a reduction in the concession rates was announced. While the most recent of the pro-posed changes are designed to align with the reduction in company tax rate, the Australian Federal Government also indicated that the gain to revenue from the reduction in the incentive scheme will be redirected by the Government to repair the Budget and fund policy priori-ties. The consequence is that the R&D concessions, while designed to encourage innovation, are clearly linked with the tax system. As such, the first part of this article considers whether the R&D concession is a changing tax for changing times. Leading on from part one, this article also addresses a second question of ‘what’s tax got to do with it’? To answer this question, the article argues that, rather than ever being substantive tax reform, the constantly changing measures simply alter the criteria and means by which companies become eligible for a Federal Government subsidy for qualifying R&D activity, whatever that amount is. It further argues that when considered as part of the broader innovation agenda, all R&D tax concessions should be evaluated as a government spending program in the same way as any direct spending on innovation. When this is done, the tax regime is arguably merely the administrative policy instrument by which the subsidy is delivered. However, this may not be best practice to distribute those funds fairly, efficiently, and without distortion, while at the same time maintaining adequate government control and accountability. Finally, in answering the question of ‘what’s tax got to do with it?’ the article concludes that the answer is: very little.

The small business CGT concessions: Evidence from the perspective of the tax practitioner

On 21 September 1999 Division 152 was inserted into the Income Tax Assessment Act (1997) (ITAA 1997). Division 152 contains the small business CGT concessions, which enables eligible small business taxpayers to reduce the amount of tax payable on capital gains arising from certain CGT events that occur after 11:45 am on 21 September 1999. One of the principal objectives of the legislation is to provide a concessionary regime for small business owners who do not have the same ability to access the concessionary superannuation regime generally available to employees. When announcing the introduction of the concessions the then Federal Treasurer, Mr Peter Costello, specifically stated that the objective of Division 152 was to provide ‘small business people with access to funds for retirement or expansion’. The purpose of this article is to: one, assess the extent to which small business taxpayers understand the CGT small business concessions, particularly when considering the sale of their business; two, determine which of the four small business CGT concessions are most commonly adopted and/or recommended by tax practitioners to clients; and three, to determine whether the superannuation changes in relation to the capping of the concessional superannuation thresholds have had an impact on the use of the small business retirement concession.

Typologies and touchpoints: Designing multi-channel digital strategies

Purpose This study aims to gain a clearer understanding of digital channel design. The emergence of new technologies has revolutionised the way companies interact and engage with customers. The driver for this research was the suggestion that practitioners feel they do not possess the skills to understand and exploit new digital channel opportunities. To gain a clearer understanding of digital channel design, this paper addresses the research question: What digital channels do companies from a wide range of industries and sectors use? Design/methodology/approach A content analysis of 100 international companies was conducted with multiple data sources to form a typology of digital “touchpoints”. The appropriateness of a digital channel typology for this study was for developing rigorous and useful concepts for clarifying and refining the meaning of digital channels. Findings This study identifies what digital channels companies globally currently employ and explores the related needs across industries. A total of 34 digital touchpoints and 4 typologies of digital channels were identified across 16 industries. This research helps to identify the relationship between digital channels and enabling the connections with industry. Research limitations/implications The findings contribute to the growing research area of digital channels. The typology of digital channels is a useful starting point for developing a systematic, theory-based study for enabling the development of broader, comprehensive theories of digital channels. Practical implications Typologies and touchpoints are outlined in relation to industry, company objectives and customer needs to allow businesses to seize opportunities and optimise performance through individual touchpoints. A digital channel model as a key outcome of this research guides practitioners on what touchpoint to implement through an interrelated understanding of industry, company and customer needs. Originality/value This is the first paper to explore a range of industries in relation to their use of digital channels using a unique content analysis. Contributions include clarifying and refining digital channel meaning; identifying and refining the hierarchical relations among digital channels(typologies); and establishing typology and industry relationship model.

Web crippling tests of rivet fastened rectangular hollow flange channel beams under two flange load cases

Recent research on hollow flange beams has led to the development of an innovative rectangular hollow flange channel beam (RHFCB) for use in floor systems. The new RHFCB is a mono-symmetric structural section made by intermittently rivet fastening two torsionally rigid closed rectangular hollow flanges to a web plate element, which allows section optimisation by selecting appropriate combinations of web and flange widths and thicknesses. However, the current design rules for cold-formed steel sections are not directly applicable to rivet fastened RHFCBs. To date, no investigation has been conducted on their web crippling behaviour and strengths. Hence an experimental study was conducted to investigate the web crippling behaviour and capacities of rivet fastened RHFCBs under End Two Flange (ETF) and Interior Two Flange (ITF) load cases. It showed that RHFCBs failed by web crippling, flange crushing and their combinations. Comparison of ultimate web crippling capacities with the predictions from the design equations in AS/NZS 4600 and AISI S100 showed that the current design equations are unconservative for rivet fastened RHFCB sections under ETF and ITF load cases. Hence new equations were proposed to determine the web crippling capacities of rivet fastened RHFCBs. These equations can also be used to predict the capacities of RHFCBs subject to combined web crippling and flange crushing conservatively. However, new capacity equations were proposed in the case of flange crushing failures that occurred in thinner flanges with smaller bearing lengths. This paper presents the details of this web crippling experimental study of RHFCB sections and the results.

Shear tests of hollow flange channel beams with real support conditions

This paper presents the details of experimental studies on the effect of real support conditions on the shear strength of hollow flange channel beams, known as LiteSteel beams (LSB). The LSB has a unique shape of a channel beam with two rectangular hollow flanges, made using a unique manufacturing process. In many applications in the building industry LSBs are used with only one web side plate (WSP) at their supports. The WSPs are also often not full height plates. Past research studies showed that these real support connections did not provide the required simply supported conditions. Many studies have been carried out to evaluate the behaviour and design of LSBs with simply supported conditions subject to pure bending and predominant shear actions. To date, however, no investigation has been conducted into the effect of real support conditions on the shear strength of LSBs. Hence a detailed experimental study based on 25 shear tests was undertaken to investigate the shear behaviour and strength of LSBs with real support conditions. Simply supported test specimens of LSBs with aspect ratios of 1.0 and 1.5 were loaded at mid-span until failure. It was found that the effect of using one WSP on the shear behaviour of LSB is significant and there is about 25% shear capacity reduction due to the lateral movement of the bottom flange at the supports. Shear capacity of LSB was also found to decrease when full height WSPs were not used. Suitably improved support connections were developed to improve the shear capacity of LSBs based on test results. Details of the recommended support connections and shear capacity results are given in this paper.

Precious images: Copyright law and television broadcasts

Over the last several years, Australian media magnate Kerry Packer has sought to maximise the value of the intellectual property assets of the television station Channel Nine. He has made a concerted effort to expand the scope of copyright protection over television broadcasts screened. The television station Channel Nine has taken a number of legal actions against its rivals and competitors - including the Australian Broadcasting Corporation and Network Ten. It has alleged that the broadcasters have used substantial parts of copyrighted television broadcasts without their permission.

Reality bites: When copyright law and reality cooking meet, only the lawyers win

There’s nothing new about this recipe for success: toss in high-stress scenarios, flavour generously with competitive chefs, and garnish with a panel of celebrity judges. With all major broadcasters in the country now dishing up some form of reality cooking programme, Australians could be forgiven for having lost any expectation of original TV material. But that didn’t stop Channel Seven from taking Channel Nine to court last week, arguing its copyright in My Kitchen Rules had been infringed with Nine’s latest prime-time effort, The Hotplate. After the first few episodes went to air, Seven asked for an injunction to stop Nine from broadcasting any more episodes of the reality show. So let’s look at some common confusions about copyright law and how it relates to reality television. Because in this context, copyright infringement isn’t about shows sharing major similarities, or about protecting ideas, but rather the expression of these ideas in the final product. Still, stretching copyright law to protect the “vibe” of a work isn’t good for artists, TV producers or viewers: copyright was designed to nurture creativity, not stifle it.

Behaviour and strength of hollow flange channel sections under torsion and bending

Hollow flange channel section is a cold-formed high-strength and thin-walled steel section with a unique shape including two rectangular hollow flanges and a slender web. Due to its mono-symmetric characteristics, it will also be subjected to torsion when subjected to transverse loads in practical applications. Past research on steel beams subject to torsion has concentrated on open sections while very few steel design standards give suitable design rules for torsion design. Since the hollow flange channel section is different from conventional open sections, its torsional behaviour remains unknown to researchers. Therefore the elastic behaviour of hollow flange channel sections subject to uniform and non-uniform torsion, and combined torsion and bending was investigated using the solutions of appropriate differential equilibrium equations. The section torsion shear flow, warping normal stress distribution, and section constants including torsion constant and warping constant were obtained. The results were compared with those from finite element analyses that verified the accuracy of analytical solutions. Parametric studies were undertaken for simply supported beams subject to a uniformly distributed torque and a uniformly distributed transverse load applied away from the shear centre. This paper presents the details of this research into the elastic behaviour and strength of hollow flange channel sections subject to torsion and bending and the results.

Bending and torsion of hollow flange channel beams

The LiteSteel beam (LSB) is a cold-formed high strength steel channel section made of two torsionally rigid closed flanges and a slender web. Due to its mono-symmetric characteristics, its centroid and shear centre do not coincide. The LSBs can be used in floor systems as joists or bearers and in these applications they are often subjected to transverse loads that are applied away from the shear centre. Hence they are often subjected to combined bending and torsion actions. Previous researches on LSBs have concentrated on their bending or shear behaviour and strengths, and only limited research has been undertaken on their combined bending and torsion behaviour. Therefore in this research a series of nine experiments was first conducted on LSBs subject to combined bending and torsion. Three LSB sections were tested to failure under eccentric loading at mid-span, and appropriate results were obtained from seven tests. A special test rig was used to simulate two different eccentricities and to provide accurate simple boundary conditions at the supports. Finite element models of tested LSBs were developed using ANSYS, and the ultimate strengths, failure modes, and load–displacement curves were obtained and compared with corresponding test results. Finite element analyses agreed well with test results and hence the developed models were used in a parametric study to investigate the effects of load locations, eccentricities, and spans on the combined bending and torsion behaviour of LSBs. The interaction between the ultimate bending and torsional moment capacities was studied and a simple design rule was proposed. This paper presents the details of the tests, finite element analyses, and parametric study of LSBs subject to combined bending and torsion, and the results.

Experimental studies of lipped channel beams subject to web crippling under ETF and ITF load cases

Lipped channel beams (LCBs) are commonly used as floor joists and bearers in buildings. However, they are subjected to specific failure modes such as web crippling. Despite considerable web crippling research, recent studies [1-6] have shown that the current web crippling design rules are unable to predict the test capacities under ETF and ITF load cases. In many instances, the predictions by the available design standards such as AISI S100, AS/NZS 4600 and Eurocode 3 Part 1-3 [7-9] are inconsistent. Hence thirty-six tests were conducted to assess the web crippling behaviour and strengths of LCBs under two flange load cases. Experimental web crippling capacities were then compared with the predictions from the current design rules. These comparisons showed that AS/NZS 4600 and AISI S100 design equations are very unconservative for LCB sections under ETF load case and are conservative for ITF load case. Hence improved equations were proposed to determine the web crippling capacities of LCBs. Suitable design rules were also developed using the direct strength method. This paper presents the details of this study and the results including improved design rules.