Scalable model-based configuration management of security services in complex enterprise networks

Security administrators face the challenge of designing, deploying and maintaining a variety of configuration files related to security systems, especially in large-scale networks. These files have heterogeneous syntaxes and follow differing semantic concepts. Nevertheless, they are interdependent due to security services having to cooperate and their configuration to be consistent with each other, so that global security policies are completely and correctly enforced. To tackle this problem, our approach supports a comfortable definition of an abstract high-level security policy and provides an automated derivation of the desired configuration files. It is an extension of policy-based management and policy hierarchies, combining model-based management (MBM) with system modularization. MBM employs an object-oriented model of the managed system to obtain the details needed for automated policy refinement. The modularization into abstract subsystems (ASs) segment the system-and the model-into units which more closely encapsulate related system components and provide focused abstract views. As a result, scalability is achieved and even comprehensive IT systems can be modelled in a unified manner. The associated tool MoBaSeC (Model-Based-Service-Configuration) supports interactive graphical modelling, automated model analysis and policy refinement with the derivation of configuration files. We describe the MBM and AS approaches, outline the tool functions and exemplify their applications and results obtained. Copyright (C) 2010 John Wiley & Sons, Ltd.

Health surveys and use of maternal and child health care services in three municipalities within the Sao Paulo metropolitan area

Objectives. To describe the changes in the use of maternal and child health care services by residents of three municipalities-Embu, Itapecerica da Serra, and Taboao da Serra-in the Sao Paulo metropolitan area, 12 years after the implementation of the Unified Health System (SUS) in Brazil, and to analyze the potential of population-based health care surveys as sources of data to evaluate these changes. Methods. Two population-based, cross-sectional surveys were carried out in 1990 and 2002 in municipalities located within the Sao Paulo metropolitan area. For children under 1 year of age, the two periods were compared in terms of outpatient services utilization and hospital admission; for the mothers, the periods were compared in terms of prenatal care and deliveries. In both surveys, stratified and multiple-stage conglomerate sampling was employed, with standardization of interview questions. Results. The most important changes observed were regarding the location of services used for prenatal care, deliveries, and hospitalization of children less than 1 year of age. There was a significant increase in the use of services in the surrounding region or hometown, and decrease in the utilization of services in the city of Sao Paulo (in 1990, 80% of deliveries and almost all admissions for children less than 1 year versus 32% and 46%, respectively, in 2002). The use of primary care units and 24-hour walk-in clinics also increased. All these changes reflect care provided by public resources. In the private sector, there was a decrease in direct payments and payments through company-paid health insurance and an increase in payments through self-paid health insurance. Conclusions. The major changes observed in the second survey occurred simultaneous to the changes that resulted from the implementation of the SUS. Population-based health surveys are adequate for analyzing and comparing the utilization of health care services at different times.

Vasectomy within the public health services in Campinas, Sao Paulo, Brazil

Objective: To describe some of the characteristics of men who underwent a vasectomy in the public health network of Campinas, Sao Paulo, Brazil. Methods: A descriptive study including 202 men randomly selected from a list of all the men vasectomized between 1998 and 2004 in the public health network. Results: Most of the men were 30 years of age or older when vasectomized, had completed elementary school and had two or more children of both sexes. Most of the men came from the lowest income segment of the population: 47.6% in 1998-1999 and 61.3% in 2003-2004. Although the men knew various contraceptive methods, 51.2% reported that their partners were using combined oral contraceptives at the time of surgery. Most men initially sought information on vasectomy at health-care clinics where care was provided by a multidisciplinary team; most received counselling, however, 47.9% of the men waited more than 4 months for the vasectomy. Conclusions: The profile of the vasectomized men in this study appears to indicate that the low-income population from Campinas, Sao Paulo, Brazil has access to vasectomy; however, the waiting time for vasectomy reveals that difficulties exist in obtaining this contraceptive method in the public health service.

OCCURRENCE OF PATHOGENIC MICROORGANISMS IN FISH SOLD IN SAO PAULO, BRAZIL

This study investigated the presence of potentially human pathogenic strains of Vibrio spp., Aeromonas spp., Escherichia coli, Salmonella spp. and Staphylococcus aureus in fish commercialized in street markets of Sao Paulo city, Brazil. Twenty fish of different species were analyzed for foodborne pathogens using conventional methods. High levels of fecal contamination were detected in 25% of samples. S. aureus was isolated from 10% of samples. All were negative for Salmonella. Vibrio species, including Vibrio cholerae non-O1/non-O139, were observed in 85% of samples although Vibrio parahaemolyticus was not found in this study. Aeromonas spp., including A. hydrophila, was isolated from 50% of fish samples. The occurrence of these pathogens suggests that the fish commercialized in Sao Paulo may represent a health risk to the consumers.

Screening for endophytic nitrogen-fixing bacteria in Brazilian sugar cane varieties used in organic farming and description of Stenotrophomonas pavanii sp. nov.

A Gram-negative, rod-shaped, non-spore-forming and nitrogen-fixing bacterium, designated ICB 89(T), was isolated from stems of a Brazilian sugar cane variety widely used in organic farming. 16S rRNA gene sequence analysis revealed that strain ICB 89(T) belonged to the genus Stenotrophomonas and was most closely related to Stenotrophomonas maltophilia LMG 958(T), Stenotrophomonas rhizophila LMG 22075(T), Stenotrophomonas nitritireducens L2(T), [Pseudomonas] geniculata ATCC 19374(T), [Pseudomonas] hibiscicola ATCC 19867(T) and [Pseudomonas] beteli ATCC 19861(T). DNA-DNA hybridization together with chemotaxonomic data and biochemical characteristics allowed the differentiation of strain ICB 89(T) from its nearest phylogenetic neighbours. Therefore, strain ICB 89(T) represents a novel species, for which the name Stenotrophomonas pavanii sp. nov. is proposed. The type strain is ICB 89(T) (=CBMAI 564(T) =LMG 25348(T)).