Formal validation of automated policy refinement in the management of network security systems

Policy hierarchies and automated policy refinement are powerful approaches to simplify administration of security services in complex network environments. A crucial issue for the practical use of these approaches is to ensure the validity of the policy hierarchy, i.e. since the policy sets for the lower levels are automatically derived from the abstract policies (defined by the modeller), we must be sure that the derived policies uphold the high-level ones. This paper builds upon previous work on Model-based Management, particularly on the Diagram of Abstract Subsystems approach, and goes further to propose a formal validation approach for the policy hierarchies yielded by the automated policy refinement process. We establish general validation conditions for a multi-layered policy model, i.e. necessary and sufficient conditions that a policy hierarchy must satisfy so that the lower-level policy sets are valid refinements of the higher-level policies according to the criteria of consistency and completeness. Relying upon the validation conditions and upon axioms about the model representativeness, two theorems are proved to ensure compliance between the resulting system behaviour and the abstract policies that are modelled.

Barriers to interventions aimed at promoting the health of health care workers in Brazil

Objective. To search the literature for circumstances that impede injury and disease prevention and other activities intended to improve the health of the health care worker. Methods. The SciELO database was searched for articles published in 1967-2008. This was supplemented by a PubMed search for the period 1950-2008. The following key words were used to identify articles in English, Portuguese, and Spanish: work, health personnel, occupational, risks, diseases, ergonomics, work ability, quality of life, organization, accidents, work conditions, intervention, and administration. Articles on injury and disease prevention and occupational health in a health care setting in Latin America were selected, along with articles focused on health promotion in the health sector. Results. The following shortcomings were identified: activities lacked a sound theoretical foundation and were not integrated with the health services management; a failure to evaluate the effectiveness of the activity; health surveillance focused solely on a specific disease or injury; management not committed to the proposed activity; miscommunication; inability of workers to participate, or control the work environment; and, programs or efforts that were limited to changing the workers` behaviors. Conclusions. The literature shows that all the barriers identified by this study affect both the health care workers` health as well as their productivity.