Reinforcing bad behaviour : the misuse of security indicators on popular websites

Before making a security or privacy decision, Internet users should evaluate several security indicators in their browser, such as the use of HTTPS (indicated via the lock icon), the domain name of the site, and information from extended validation certificates. However, studies have shown that human subjects infrequently employ these indicators, relying on other indicators that can be spoofed and convey no cryptographic assurances. We identify four simple security indicators that accurately represent security properties of the connection and then examine 125 popular websites to determine if the sites' designs result in correctly displayed security indicators during login. In the vast majority of cases, at least some security indicators are absent or suboptimal. This suggests users are becoming habituated to ignoring recommended security indicators.

Security metrics for object-oriented designs

Several studies have developed metrics for software quality attributes of object-oriented designs such as reusability and functionality. However, metrics which measure the quality attribute of information security have received little attention. Moreover, existing security metrics measure either the system from a high level (i.e. the whole system’s level) or from a low level (i.e. the program code’s level). These approaches make it hard and expensive to discover and fix vulnerabilities caused by software design errors. In this work, we focus on the design of an object-oriented application and define a number of information security metrics derivable from a program’s design artifacts. These metrics allow software designers to discover and fix security vulnerabilities at an early stage, and help compare the potential security of various alternative designs. In particular, we present security metrics based on composition, coupling, extensibility, inheritance, and the design size of a given object-oriented, multi-class program from the point of view of potential information flow.

Assessing the impact of refactoring on security-critical object-oriented designs

Refactoring focuses on improving the reusability, maintainability and performance of programs. However, the impact of refactoring on the security of a given program has received little attention. In this work, we focus on the design of object-oriented applications and use metrics to assess the impact of a number of standard refactoring rules on their security by evaluating the metrics before and after refactoring. This assessment tells us which refactoring steps can increase the security level of a given program from the point of view of potential information flow, allowing application designers to improve their system’s security at an early stage.

Sustainable water provision : challenges, alternative strategies and sources in the era of climate change

As a result of rapid urbanisation, population growth, changes in lifestyle, pollution and the impacts of climate change, water provision has become a critical challenge for planners and policy-makers. In the wake of increasingly difficult water provision and drought, the notion that freshwater is a finite and vulnerable resource is increasingly being realised. Many city administrations around the world are struggling to provide water security for their residents to maintain lifestyle and economic growth. This chapter reviews the global challenge of providing freshwater to sustain lifestyles and economic growth, and the contributing challenges of climate change, urbanisation, population growth and problems in rainfall distribution. The chapter proceeds to evaluate major alternatives to current water sources such as conservation, recycling and reclamation, and desalination. Integrated water resource management is briefly looked at to explore its role in complementing water provision. A comparative study on alternative resources is undertaken to evaluate their strengths, weaknesses, opportunities and constraints, and the results are discussed.

Regional field measurement of soil moisture content with neutron probe

The neutron logging method has been widely used for field measurement of soil moisture content. This non-destructive method permitted the measurement of in-situ soil moisture content at various depths without the need for burying any sensor. Twenty-three sites located around regional Melbourne have been selected for long term monitoring of soil moisture content using neutron probe. Soil samples collected during the installation are used for site characterisation and neutron probe calibration purposes. A linear relationship is obtained between the corrected neutron probe reading and moisture content for both the individual and combined data from seven sites. It is observed that the liner relationship, developed using combined data, can be used for all sites with an average accuracy of about 80%. Monitoring of the variation of soil moisture content with depth in six months for two sites is presented in this paper.

How HCI design influences web security decisions

Even though security protocols are designed to make computer communication secure, it is widely known that there is potential for security breakdowns at the human machine interface. This paper reports on a diary study conducted in order to investigate what people identify as security decisions that they make while using the web. The study aimed to uncover how security is perceived in the individual's context of use. From this data, themes were drawn, with a focus on addressing security goals such as confidentiality and authentication. This study is the first study investigating users' web usage focusing on their self-documented perceptions of security and the security choices they made in their own environment.

A regional construction R&D evaluation system for China

Expenditure on R&D in the China construction industry has been relatively low in comparison with many developed countries for a number of years – a situation considered to be a major barrier to the industry’s competitiveness in general and unsatisfactory industry development of the 31 regions involved. A major problem with this is the lack of a sufficiently sophisticated method of objectively evaluating R&D activity in what are quite complex circumstances considering the size and regional differences that exist in this part of the world. A regional construction R&D evaluation system (RCRES) is presented aimed at rectifying the situation. This is based on 12 indicators drawn from the Chinese Government’s R&D Inventory of Resources in consultation with a small group of experts in the field, and further factor analysed into three groups. From this, the required evaluation is obtained by a simple formula. Examination of the results provides a ranking list of the R&D performance of each of the 31 regions, indicating a general disproportion between coastal and inland regions and highlighting regions receiving special emphasis or currently lacking in development. The understanding on this is vital for the future of China’s construction industry.

Sustainable urban and regional infrastructure development : technologies, applications and management

Sustainable Urban and Regional Infrastructure Development: Technologies, Applications and Management, bridges the gap in the current literature by addressing the overall problems present in society's major infrastructures, and the technologies that may be applied to overcome these problems. It focuses on ways in which energy intensive but 'invisible' (to the general public) facilities can become green or greener. The studies presented re lessons to be learnt from our neighbors and from our own backyard, and provide an excellent general overview of the issues facing us all.

Urban, regional, national and global knowledge capital [Guest editorial]

Purpose – The purpose of this paper is to introduce the JKM 2010 annual special issue on knowledge based development (KBD) with reference to the multi-level analysis characteristic of the field. ----- ----- Design/methodology/approach – A description of the knowledge management approach at ESOC (European Space Operations Centre of the European Space Agency) is provided first. At the core of this approach is the breakdown of knowledge in individual technical domains followed by coverage analysis and criticality assessment. Such a framework becomes the reference for best knowledge acquisition, transfer and storage locus identification and subsequent knowledge management practices and guidelines. ----- ----- Findings – KBD provides an integrated framework to account for multidisciplinary analyses and multilevel practices in knowledge capital generation, distribution and utilization. ----- ----- Originality/value – The collection of papers included in the annual special issue on KBD provides a representative, composite view of the research topics and applications concerns in the field. Involving a number of disciplines and levels of analysis, issues ranging from the technological gatekeeper to global knowledge flows show the interdependence of KBD concepts and tools.

Planning and implementing trajectories for autonomous underwater vehicles to track evolving ocean processes based on predictions from a regional ocean model

Path planning and trajectory design for autonomous underwater vehicles (AUVs) is of great importance to the oceanographic research community because automated data collection is becoming more prevalent. Intelligent planning is required to maneuver a vehicle to high-valued locations to perform data collection. In this paper, we present algorithms that determine paths for AUVs to track evolving features of interest in the ocean by considering the output of predictive ocean models. While traversing the computed path, the vehicle provides near-real-time, in situ measurements back to the model, with the intent to increase the skill of future predictions in the local region. The results presented here extend prelim- inary developments of the path planning portion of an end-to-end autonomous prediction and tasking system for aquatic, mobile sensor networks. This extension is the incorporation of multiple vehicles to track the centroid and the boundary of the extent of a feature of interest. Similar algorithms to those presented here are under development to consider additional locations for multiple types of features. The primary focus here is on algorithm development utilizing model predictions to assist in solving the motion planning problem of steering an AUV to high-valued locations, with respect to the data desired. We discuss the design technique to generate the paths, present simulation results and provide experimental data from field deployments for tracking dynamic features by use of an AUV in the Southern California coastal ocean.

Towards improvement of autonomous glider navigation accuracy through the use of regional ocean models

Autonomous underwater gliders are robust and widely-used ocean sampling platforms that are characterized by their endurance, and are one of the best approaches to gather subsurface data at the appropriate spatial resolution to advance our knowledge of the ocean environment. Gliders generally do not employ sophisticated sensors for underwater localization, but instead dead-reckon between set waypoints. Thus, these vehicles are subject to large positional errors between prescribed and actual surfacing locations. Here, we investigate the implementation of a large-scale, regional ocean model into the trajectory design for autonomous gliders to improve their navigational accuracy. We compute the dead-reckoning error for our Slocum gliders, and compare this to the average positional error recorded from multiple deployments conducted over the past year. We then compare trajectory plans computed on-board the vehicle during recent deployments to our prediction-based trajectory plans for 140 surfacing occurrences.

Preface : sustainable urban and regional infrastructure development : technologies, applications and management

The concept of ‘sustainability’ has been pushed to the forefront of policy-making and politics as the world wakes up to the impacts of climate change and the effects of the modern urban lifestyle. Climate change has emerged to be one of the biggest challenges faced by our planet today, threatening both built and natural systems with long term consequences which may be irreversible. While there is a vast literature in the market on sustainable cities and urban development, there is currently none that bring together the vital issues of urban and regional development, and the planning, management and implementation of sustainable infrastructure. Large scale infrastructure plays an important part in modern society by not only promoting economic growth, but also by acting as a key indicator for it. More importantly, it supplies municipal/local amenity and services: water, electricity, social and communication facilities, waste removal, transport of people and goods, as well as numerous other services. For the most part, infrastructure has been built by teams lead by engineers who are more concerned about functionality than the concept of sustainability. However, it has been widely stated that current practices and lifestyle cannot continue if we are to leave a healthy living planet to not only the next generation, but also to the generations beyond. Therefore, in order to be sustainable, there are drastic measures that need to be taken. Current single purpose and design infrastructures that are open looped are not sustainable; they are too resource intensive, consume too much energy and support the consumption of natural resources at a rate that will exhaust their supply. Because of this, it is vital that modern society, policy-makers, developers, engineers and planners become pioneers in introducing and incorporating sustainable features into urban and regional infrastructure.

Enhancing security and continuity management at international airports

Operators of busy contemporary airports have to balance tensions between the timely flow of passengers, flight operations, the conduct of commercial business activities and the effective application of security processes. In addition to specific onsite issues airport operators liaise with a range of organisations which set and enforce aviation-related policies and regulations as well as border security agencies responsible for customs, quarantine and immigration, in addition to first response security services. The challenging demands of coordinating and planning in such complex socio-technical contexts place considerable pressure on airport management to facilitate coordination of what are often conflicting goals and expectations among groups that have standing in respect to safe and secure air travel. What are, as yet, significantly unexplored issues in large airports are options for the optimal coordination of efforts from the range of public and private sector participants active in airport security and crisis management. A further aspect of this issue is how airport management systems operate when there is a transition from business-as-usual into an emergency/crisis situation and then, on recovery, back to ‘normal’ functioning. Business Continuity Planning (BCP), incorporating sub-plans for emergency response, continuation of output and recovery of degraded operating capacity, would fit such a context. The implementation of BCP practices in such a significant high security setting offers considerable potential benefit yet entails considerable challenges. This paper presents early results of a 4 year nationally funded industry-based research project examining the merger of Business Continuity Planning and Transport Security Planning as a means of generating capability for improved security and reliability and, ultimately, enhanced resilience in major airports. The project is part of a larger research program on the Design of Secure Airports that includes most of the gazetted ‘first response’ international airports in Australia, key Aviation industry groups and all aviation-related border and security regulators as collaborative partners. The paper examines a number of initial themes in the research, including: ? Approaches to integrating Business Continuity & Aviation Security Planning within airport operations; ? Assessment of gaps in management protocols and operational capacities for identifying and responding to crises within and across critical aviation infrastructure; ? Identification of convergent and divergent approaches to crisis management used across Austral-Asia and their alignment to planned and possible infrastructure evolution.