Scalable model-based configuration management of security services in complex enterprise networks

Security administrators face the challenge of designing, deploying and maintaining a variety of configuration files related to security systems, especially in large-scale networks. These files have heterogeneous syntaxes and follow differing semantic concepts. Nevertheless, they are interdependent due to security services having to cooperate and their configuration to be consistent with each other, so that global security policies are completely and correctly enforced. To tackle this problem, our approach supports a comfortable definition of an abstract high-level security policy and provides an automated derivation of the desired configuration files. It is an extension of policy-based management and policy hierarchies, combining model-based management (MBM) with system modularization. MBM employs an object-oriented model of the managed system to obtain the details needed for automated policy refinement. The modularization into abstract subsystems (ASs) segment the system-and the model-into units which more closely encapsulate related system components and provide focused abstract views. As a result, scalability is achieved and even comprehensive IT systems can be modelled in a unified manner. The associated tool MoBaSeC (Model-Based-Service-Configuration) supports interactive graphical modelling, automated model analysis and policy refinement with the derivation of configuration files. We describe the MBM and AS approaches, outline the tool functions and exemplify their applications and results obtained. Copyright (C) 2010 John Wiley & Sons, Ltd.

(Im)possibilidades de implementar uma direção única no SUS em município de grande porte: o caso de São Paulo, Brasil

A construção da direção única na saúde constitui-se um desafio para a gestão local do SUS, particularmente para municípios de grande porte. Este artigo analisou o processo de implementação do SUS no município de São Paulo, visando identificar estratégias para viabilizar uma direção única, no período de 2001 a 2008. Com base em um estudo de caso, foram utilizados dados obtidos de informantes privilegiados da gestão e de documentos de gestão. O conceito de integração sanitária foi utilizado como categoria analítica. Foram analisados movimentos e estratégias dos atores institucionais envolvidos diretamente na gestão do SUS, os gestores municipal e estadual. Observaram-se avanços institucionais como a municipalização das unidades básicas de saúde estaduais e a habilitação do município na gestão plena do sistema municipal. Apesar dessa condição de gestão e da identidade político-partidária entre os governos municipal e estadual desde 2005, constatou-se a coexistência de dois subsistemas públicos de saúde pouco integrados. Um municipal, que concentrava os serviços de atenção básica; outro estadual, que concentrava parte considerável dos serviços de média e alta complexidades. Instrumentos de gestão adotados, como o sistema de regulação, mostraram-se frágeis para superar a falta de integração entre os referidos subsistemas. Como implementar a direção única no SUS implica uma (re)divisão de recursos e poder, discute-se que não bastam normas nem instrumentos de gestão para viabilizá-la. É um desafio estratégico para o SUS implementar processo de negociação, envolvendo os atores institucionais e políticos, visando a pactuação de um projeto político na saúde.

Regulating industrial forest concessions in Central Africa and South America

Tropical countries face special specific problems in implementing sustainable forest management (SFM). In many countries, questions are raised on whether tropical forests should be publicly, commonly or privately owned and managed in order to enhance sustainability. Other debates also focus on whether small-scale enterprises are better positioned than large-scale industrial concessions to reduce poverty and attain sustainable management. In countries where large tracts of forest are state-owned, concessions are viewed as a means of delivering services of public and collective interest through an association of private investment and public regulation. However, the success of an industrial concession model in countries with large forest resource endowment to achieve multiple goals such as sustainable forest management and local/regional development depends on two critical assumptions. First, forest functions and services should be managed and maintained as public goods. In many cases, additional uses - and corresponding rights - can take place alongside logging activities. Industrial concessions can be more efficient than other tenure models (such as community-based forest management and small-scale enterprises) in achieving SFM, add value to raw material and comply with growing environmental norms. This is especially the case in market-remote areas with low population density and poor infrastructure. Secondly, to achieve these different outcomes, any concession system needs to be monitored and regulated, especially in contexts dominated by asymmetrical information between regulating authorities and concessionaires. New institutional responses have recently been put forward in several countries, providing valuable materials to design a renewed policy mix which associates public and private incentives. This paper provides a survey of the experience of forest concessions in several Central African and South American countries. The concession system is examined in order to clarify the issues involved, the problems encountered, and what can be learned from the shared experience of these countries in the last decade. This paper argues that despite a sometimes patchy record, concessions can help promote SFM so long as they are packaged with a certain number of specific measures. (C) 2008 Elsevier B.V. All rights reserved.

The impact of Six Sigma in the performance of a Pollution Prevention program

The diffusion of Pollution Prevention faces organizational barriers as for instance resistance to change, insufficient support from decision-makers, unclear project leadership, insufficient employee accountability and inflexible organizational structures. To understand how to overcome such barriers, the performance of a Pollution Prevention program of a multinational corporation is analyzed. The quantitative analyses of 2096 Pollution Prevention projects conducted between 1995 and 2007 support the conclusion that the performance of the Pollution Prevention program increased after the implementation of the Six Sigma program. Moreover, the analyses of 1906 Pollution Prevention projects and 31,133 Six Sigma projects for cost reduction in 27 countries indicate that in countries where the implementation of Six Sigma is more expressive, pollution is prevented more than in countries with less expressive Six Sigma implementation. In fact, the Six Sigma implementation improved the organizational capability for data based project management. Therefore, comparing six years before and six years after the Six Sigma implementation, the total number of Pollution Prevention projects recognized increased 6.9 times and the total amount of pollution prevented increased by 62%. The qualitative analysis describes how the Six Sigma program interacts with the Pollution Prevention program in the studied company. (C) 2009 Elsevier Ltd. All rights reserved.

Systematic Management of Variability in UML-based Software Product Lines

This paper presents SMarty, a variability management approach for UML-based software product lines (PL). SMarty is supported by a UML profile, the SMartyProfile, and a process for managing variabilities, the SMartyProcess. SMartyProfile aims at representing variabilities, variation points, and variants in UML models by applying a set of stereotypes. SMartyProcess consists of a set of activities that is systematically executed to trace, identify, and control variabilities in a PL based on SMarty. It also identifies variability implementation mechanisms and analyzes specific product configurations. In addition, a more comprehensive application of SMarty is presented using SEI's Arcade Game Maker PL. An evaluation of SMarty and related work are discussed.

Improvement of radiology services based on the process management approach

The health sector requires continuous investments to ensure the improvement of products and services from a technological standpoint, the use of new materials, equipment and tools, and the application of process management methods. Methods associated with the process management approach, such as the development of reference models of business processes, can provide significant innovations in the health sector and respond to the current market trend for modern management in this sector (Gunderman et al. (2008) [4]). This article proposes a process model for diagnostic medical X-ray imaging, from which it derives a primary reference model and describes how this information leads to gains in quality and improvements. (C) 2010 Elsevier Ireland Ltd. All rights reserved.

Integrating toxicity testing in the wastewater management of chemical storage terminals - A proposal based on a ten-year study

Wastewater control at storage terminals of liquid chemical products in bulk is very difficult because of the variety of products handled in the facilities generating effluents of variable composition. The main objective of this work was to verify if the Vibrio fischeri acute toxicity test could be routinely included in the wastewater management of those facilities along with physical and chemical analysis in order to evaluate and improve the quality of the generated effluents. The study was performed in two phases before and after the implementation of better operational practices/treatment technologies. Chemical oxygen demand (COD) and toxicity of treated effluents did not correlate showing that effluents with low COD contain toxic substances and non-biodegradable organic matter, which may be not degraded when discharged into the aquatic environment. Segregation of influents or pre-treatment based on toxicity results and biodegradability index were implemented in the facilities generating significant improvements in the quality of final effluents with reduction of Biochemical oxygen demand (BOD) and toxicity. The integration of physical and chemical analysis with the V.fischeri toxicity test turned out to be an excellent tool for wastewater management in chemical terminals allowing rapid decision making for pollution control and prevention measures. Reuse of rain water was also proposed and when implemented by the facilities resulted in economical and environmental benefits. (C) 2010 Elsevier B.V. All rights reserved.

Surgical management of glomus jugulare tumors: a proposal for approach selection based on tumor relationships with the facial nerve Clinical article

Object. The goal of this paper is to analyze the extension and relationships of glomus jugulare tumor with the temporal bone and the results of its surgical treatment aiming at preservation of the facial nerve. Based on the tumor extension and its relationships with the facial nerve, new criteria to be used in the selection of different surgical approaches are proposed. Methods. Between December 1997 and December 2007, 34 patients (22 female and 12 male) with glomus jugulare tumors were treated. Their mean age was 48 years. The mean follow-up was 52.5 months. Clinical findings included hearing loss in 88%, swallowing disturbance in 50%, and facial nerve palsy in 41%. Magnetic resonance imaging demonstrated a mass in the jugular foramen in all cases, a mass in the middle ear in 97%, a cervical mass in 85%, and an intradural mass in 41%. The tumor was supplied by the external carotid artery in all cases, the internal carotid artery in 44%, and the vertebral artery in 32%. Preoperative embolization was performed in 15 cases. The approach was tailored to each patient, and 4 types of approaches were designed. The infralabyrinthine retrofacial approach (Type A) was used in 32.5%; infralabyrinthine pre- and retrofacial approach without occlusion of the external acoustic meatus (Type B) in 20.5%; infralabyrinthine pre- and retrofacial approach with occlusion of the external acoustic meatus (Type C) in 41 W. and the infralabyrinthine approach with transposition of the facial nerve and removal of the middle ear structures (Type D) in 6% of the patients. Results. Radical removal was achieved in 91% of the cases and partial removal in 9%. Among 20 patients without preoperative facial nerve dysfunction, the nerve was kept in anatomical position in 19 (95%), and facial nerve function was normal during the immediate postoperative period in 17 (85%). Six patients (17.6%) had a new lower cranial nerve deficit, but recovery of swallowing function was adequate in all cases. Voice disturbance remained in all 6 cases. Cerebrospinal fluid leakage occurred in 6 patients (17.6%), with no need for reoperation in any of them. One patient died in the postoperative period due to pulmonary complications. The global recovery, based on the Karnofsky Performance Scale (KPS), was 100% in 15% of the patients, 90% in 45%, 80% in 33%, and 70% in 6%. Conclusions. Radical removal of glomus jugulare tumor can be achieved without anterior transposition of the facial nerve. The extension of dissection, however, should be tailored to each case based on tumor blood supply, preoperative symptoms, and tumor extension. The operative field provided by the retrofacial infralabyrinthine approach, or the pre- and retrofacial approaches. with or without Closure of the external acoustic meatus, allows a wide exposure of the jugular foramen area. Global functional recovery based on the KPS is acceptable in 94% of the patients. (DOI: 10.3171/2008.10.JNS08612)

Comparative Genetic Diversity of Wild and Captive Populations of the Bare-Faced Curassow (Crax fasciolata) Based on Cross-Species Microsatellite Markers: Implications for Conservation and Management

The bare-faced curassow (Crax fasciolata) is a large Neotropical bird that suffers anthropogenic pressure across much of its range. A captive population is maintained for conservation management, although there has been no genetic screening of stocks. Based on the six microsatellite markers developed for Crax globulosa, the genetic variability of C. fasciolata and possible differences between a wild and a captive population were investigated. Only three loci were polymorphic, with a total of 27 alleles. More than half of these alleles were private to the wild (n = 8) or captive (n = 7) populations. Significant deviations from Hardy-Weinberg equilibrium were restricted to the captive population. Despite the number of private alleles, genetic drift has probably promoted differentiation between populations. Our results indicate that wild C. fasciolata populations are genetically impoverished and structured, but species-specific microsatellite markers will be necessary for a more reliable assessment of the species` genetic diversity.

Asthma management and asthma control in Sao Paulo, Brazil and Uppsala, Sweden: a questionnaire-based comparison

The Global Initiative Against Asthma (GINA) was developed to meet the global challenge of asthma. GINA has been adopted in most countries and comparison of asthma management in different parts of the world may be of help when assessing the global dissemination of the guideline. The overall goals in GINA include that asthma patients should be free of symptoms, acute asthma attacks and activity limitations. The aim of the present study was to compare asthma management and asthma control in Sao Paulo, Brazil and Uppsala, Sweden. Information was collected from asthmatics in Sao Paulo and Uppsala with a questionnaire. The questionnaire dealt with the following issues: symptoms, smoking, self-management, hospital visits, effect on school/work and medication. The Sao Paulo patients were more likely to have uncontrolled asthma (36% vs 13%, P < 0.001), having made emergency room visits (57% vs 29%, P < 0.001) and having lost days at school or work because of their asthma (46% vs 28%, P = 0.03) than the asthmatics from Uppsala. There were no difference in the use of inhaled corticosteroids, but the Brazilian patients were more likely to be using theophylline (18% vs 1%, P = 0.001) and less likely to be using long-acting beta-2 agonists (18% vs 37%, P < 0.001). We conclude that the level of asthma control was lower among the patients from Sao Paulo than Uppsala. Few of the patients in either city reached the goals set up by GINA. Improved asthma management may therefore lead to health-economic benefits in both locations. Please cite this paper as: Skorup P, Rizzo LV, Machado-Boman L and Janson C. Asthma management and asthma control in Sao Paulo, Brazil and Uppsala, Sweden: a questionnaire-based comparison. The Clinical Respiratory Journal 2009; 3: 22-28.