A software audit framework for spyware risk mitigation

Our research described in this paper identifies a three part premise relating to the spyware paradigm. Firstly the data suggests spyware is proliferating at an exponential rate. Secondly ongoing research confirms that spyware produces many security risks – including that of privacy/confidentiality breaches via illicit data collection and reporting. Thirdly, anti-spyware controls are improving but are still considered problematic for several reasons. Our research then concludes that control measures to counter this very significant challenge should merit compliance auditing – and this auditing may effectively target the vital message passing performed by all illicit data collection spyware. Our research then evolves into an experiment involving the design and implementation of a software audit tool to conduct the desired compliance auditing. The software audit tool is positioned at the protected network’s gateway. The software audit tool uses ‘phone-home’ IP addresses as spyware signatures to detect the presence of the offending software. The audit tool also has the capability to differentiate legitimate message passing software from that produced by spyware – and ‘learn’ both new spyware signatures and new legitimate message passing profiles. The testing stage of the software has proven successful – albeit using very limited levels of network message passing variety and frequency.

Sense of place: A tool to assist the meaningful engagement of communities in protected area management

This study used ‘sense of place’ as a research tool to help understand the relationship between a community and their local protected area, Brisbane Forest Park. To establish an indication of the community’s relative degree of sense of place, we considered and measured both the strength (intensity) and orientation (focus) of sense of place. We developed a new method to measure sense of place that considers and measures the elements constituting sense of place, independent of one another, utilising qualitative data collected in in-depth semi-structured interviews. Exploring both the strength and orientation of an individual's sense of place provides a way of exploring the desired nature of community involvement in the management of the Park. It was found that the stronger an individuals’ sense of place, the greater their place dependence and commitment, and the greater their desire to be involved in management. Analysing the strength and orientation of sense of place illustrated that there is a high degree of diversity in how individuals perceive and feel about area, and their desire to be involved in management. The type of information obtained in this study is important and useful to the management agencies if they are to successfully engage the community in meaningful ways.