Scalable model-based configuration management of security services in complex enterprise networks

Security administrators face the challenge of designing, deploying and maintaining a variety of configuration files related to security systems, especially in large-scale networks. These files have heterogeneous syntaxes and follow differing semantic concepts. Nevertheless, they are interdependent due to security services having to cooperate and their configuration to be consistent with each other, so that global security policies are completely and correctly enforced. To tackle this problem, our approach supports a comfortable definition of an abstract high-level security policy and provides an automated derivation of the desired configuration files. It is an extension of policy-based management and policy hierarchies, combining model-based management (MBM) with system modularization. MBM employs an object-oriented model of the managed system to obtain the details needed for automated policy refinement. The modularization into abstract subsystems (ASs) segment the system-and the model-into units which more closely encapsulate related system components and provide focused abstract views. As a result, scalability is achieved and even comprehensive IT systems can be modelled in a unified manner. The associated tool MoBaSeC (Model-Based-Service-Configuration) supports interactive graphical modelling, automated model analysis and policy refinement with the derivation of configuration files. We describe the MBM and AS approaches, outline the tool functions and exemplify their applications and results obtained. Copyright (C) 2010 John Wiley & Sons, Ltd.

Problems with accessibility to health services by persons with disabilities in Sao Paulo, Brazil

Purpose. To describe the occurrence of self-reported problems of accessibility to health services used by persons with disabilities in terms of social and health services variables. Methods. We performed a cross-sectional household survey designed to assess problems with accessibility to health services faced by persons with disabilities. We interviewed 333 persons in Sao Paulo city, in 2007. Variables related to the presence of accessibility problems, disabilities, gender, age, family head income, ethnicity, use of health services and others were analysed using frequencies, percentages, chi(2)-test, ANOVA and Poisson regression models. Results. 15.92% of the interviewed persons reported problems with accessibility to health services. Persons having multiple (prevalence ratios; PR = 2.91) or mobility disability (PR = 6.46) had more problems with accessibility than persons with hearing disability. Persons younger than 78 years old had more problems with accessibility; those who needed help to go to the health service (PR = 3.01) also. Conclusions. Persons with multiple or mobility disability, younger than 78 years, and those who needed help of others to go to the health service were more likely to have problems with accessibility to health services. This information could be one of the first steps to the management and/or planning of appropriate health services for persons with disabilities.

Barriers to interventions aimed at promoting the health of health care workers in Brazil

Objective. To search the literature for circumstances that impede injury and disease prevention and other activities intended to improve the health of the health care worker. Methods. The SciELO database was searched for articles published in 1967-2008. This was supplemented by a PubMed search for the period 1950-2008. The following key words were used to identify articles in English, Portuguese, and Spanish: work, health personnel, occupational, risks, diseases, ergonomics, work ability, quality of life, organization, accidents, work conditions, intervention, and administration. Articles on injury and disease prevention and occupational health in a health care setting in Latin America were selected, along with articles focused on health promotion in the health sector. Results. The following shortcomings were identified: activities lacked a sound theoretical foundation and were not integrated with the health services management; a failure to evaluate the effectiveness of the activity; health surveillance focused solely on a specific disease or injury; management not committed to the proposed activity; miscommunication; inability of workers to participate, or control the work environment; and, programs or efforts that were limited to changing the workers` behaviors. Conclusions. The literature shows that all the barriers identified by this study affect both the health care workers` health as well as their productivity.

Inequalities in dental services utilization among Brazilian low-income children: the role of individual determinants

Objectives: To assess the role of the individual determinants on the inequalities of dental services utilization among low-income children living in the working area of Brazilian`s federal Primary Health Care program, which is called Family Health Program (FHP), in a big city in Southern Brazil. Methods: A cross-sectional population-based study was performed. The sample included 350 children, ages 0 to 14 years, whose parents answered a questionnaire about their socioeconomic conditions, perceived needs, oral hygiene habits, and access to dental services. The data analysis was performed according to a conceptual framework based on Andersen`s behavioral model of health services use. Multivariate models of logistic regression analysis instructed the hypothesis on covariates for never having had a dental visit. Results: Thirty one percent of the surveyed children had never had a dental visit. In the bivariate analysis, higher proportion of children who had never had a dental visit was found among the very young, those with inadequate oral hygiene habits, those without perceived need of dental care, and those whose family homes were under absent ownership. The mechanisms of social support showed to be important enabling factors: children attending schools/kindergartens and being regularly monitored by the FHP teams had higher odds of having gone to the dentist, even after adjusting for socioeconomic, demographic, and need variables. Conclusions: The conceptual framework has confirmed the presence of social and psychosocial inequalities on the utilization pattern of dental services for low-income children. The individual determinants seem to be important predictors of access.

Vasectomy within the public health services in Campinas, Sao Paulo, Brazil

Objective: To describe some of the characteristics of men who underwent a vasectomy in the public health network of Campinas, Sao Paulo, Brazil. Methods: A descriptive study including 202 men randomly selected from a list of all the men vasectomized between 1998 and 2004 in the public health network. Results: Most of the men were 30 years of age or older when vasectomized, had completed elementary school and had two or more children of both sexes. Most of the men came from the lowest income segment of the population: 47.6% in 1998-1999 and 61.3% in 2003-2004. Although the men knew various contraceptive methods, 51.2% reported that their partners were using combined oral contraceptives at the time of surgery. Most men initially sought information on vasectomy at health-care clinics where care was provided by a multidisciplinary team; most received counselling, however, 47.9% of the men waited more than 4 months for the vasectomy. Conclusions: The profile of the vasectomized men in this study appears to indicate that the low-income population from Campinas, Sao Paulo, Brazil has access to vasectomy; however, the waiting time for vasectomy reveals that difficulties exist in obtaining this contraceptive method in the public health service.

Critical, issues and needs in management of primary immunodeficiency diseases in Latin America

Experts from six Latin American countries met to discuss critical issues and needs in the diagnosis and management of primary immunodeficiency diseases (PIDD). The diagnosis of PIDD is generally made following referral to an immunology centre located in a major city, but many paediatricians and general practitioners are not sufficiently trained to suspect PIDD in the first place. Access to laboratory testing is generally limited, and only some screening tests are typically covered by government health programmes. Specialised diagnostic tests are generally not reimbursed. Access to treatment varies by country reflecting differences in healthcare systems and reimbursement policies. An online PIDD Registry Programme for Latin America has been available since 2009, which will provide information about PIDD epidemiology in the region. Additional collaboration across countries appears feasible in at least two areas: a laboratory network to facilitate the diagnosis of PIDD, and educational programmes to improve PIDD awareness. In total, these collaborations should make it possible to advance the diagnosis and management of PIDD in Latin America. (C) 2010 SEICAP. Published by Elsevier Espana, S.L. All rights reserved.

Formal validation of automated policy refinement in the management of network security systems

Policy hierarchies and automated policy refinement are powerful approaches to simplify administration of security services in complex network environments. A crucial issue for the practical use of these approaches is to ensure the validity of the policy hierarchy, i.e. since the policy sets for the lower levels are automatically derived from the abstract policies (defined by the modeller), we must be sure that the derived policies uphold the high-level ones. This paper builds upon previous work on Model-based Management, particularly on the Diagram of Abstract Subsystems approach, and goes further to propose a formal validation approach for the policy hierarchies yielded by the automated policy refinement process. We establish general validation conditions for a multi-layered policy model, i.e. necessary and sufficient conditions that a policy hierarchy must satisfy so that the lower-level policy sets are valid refinements of the higher-level policies according to the criteria of consistency and completeness. Relying upon the validation conditions and upon axioms about the model representativeness, two theorems are proved to ensure compliance between the resulting system behaviour and the abstract policies that are modelled.