Critical infrastructure protection against cyber threats

A postgraduate seminar series with a title Critical Infrastructure Protection against Cyber Threats held at the Department of Military Technology of the National Defence University in the fall of 2013 and 2014. This book is a collection of some of talks that were presented in the seminar. The papers address origin of critical infrastructure protection, wargaming cyberwar in critical infrastructure defence, cyber-target categorization, supervisory control and data acquisition systems vulnerabilities, electric power as critical infrastructure, improving situational awareness of critical infrastructure and trust based situation awareness in high security cloud environment. This set of papers tries to give some insight to current issues of the network-centric critical infrastructure protection. The seminar has always made a publication of the papers but this has been an internal publication of the Finnish Defence Forces and has not hindered publication of the papers in international conferences. Publication of these papers in peer reviewed conferences has indeed been always the goal of the seminar, since it teaches writing conference level papers. We still hope that an internal publication in the department series is useful to the Finnish Defence Forces by offering an easy access to these papers.

Rigorous development of safety-critical systems

Nowadays, computer-based systems tend to become more complex and control increasingly critical functions affecting different areas of human activities. Failures of such systems might result in loss of human lives as well as significant damage to the environment. Therefore, their safety needs to be ensured. However, the development of safety-critical systems is not a trivial exercise. Hence, to preclude design faults and guarantee the desired behaviour, different industrial standards prescribe the use of rigorous techniques for development and verification of such systems. The more critical the system is, the more rigorous approach should be undertaken. To ensure safety of a critical computer-based system, satisfaction of the safety requirements imposed on this system should be demonstrated. This task involves a number of activities. In particular, a set of the safety requirements is usually derived by conducting various safety analysis techniques. Strong assurance that the system satisfies the safety requirements can be provided by formal methods, i.e., mathematically-based techniques. At the same time, the evidence that the system under consideration meets the imposed safety requirements might be demonstrated by constructing safety cases. However, the overall safety assurance process of critical computerbased systems remains insufficiently defined due to the following reasons. Firstly, there are semantic differences between safety requirements and formal models. Informally represented safety requirements should be translated into the underlying formal language to enable further veri cation. Secondly, the development of formal models of complex systems can be labour-intensive and time consuming. Thirdly, there are only a few well-defined methods for integration of formal verification results into safety cases. This thesis proposes an integrated approach to the rigorous development and verification of safety-critical systems that (1) facilitates elicitation of safety requirements and their incorporation into formal models, (2) simplifies formal modelling and verification by proposing specification and refinement patterns, and (3) assists in the construction of safety cases from the artefacts generated by formal reasoning. Our chosen formal framework is Event-B. It allows us to tackle the complexity of safety-critical systems as well as to structure safety requirements by applying abstraction and stepwise refinement. The Rodin platform, a tool supporting Event-B, assists in automatic model transformations and proof-based verification of the desired system properties. The proposed approach has been validated by several case studies from different application domains.

Issues in the Transatlantic Trade and Investment Partnership: A critical discourse analysis

Negotiating trade agreements is an important part of government trade policies, economic planning and part of the globally operating trading system of today. European Union and the United States have been active in the formation of trade agreements in global comparison. Now these two economic giants are engaged in negotiations to form their own trade agreement, the so called Transnational Trade and Investment Partnership (TTIP). The purpose of this thesis is to understand the reasons for making a trade agreement between two economic areas and understanding the issues it may include in the case of the TTIP. The TTIP has received a great deal of attention in the media. The opinions towards the partnership have been extreme, and the debate has been heated. The purpose of this study is to introduce the nature of the public discussion regarding the TTIP from Spring 2013 until 2014. The research problem is to find out what are the main issues in the agreement and what are the values influencing them. The study was conducted applying methods of critical discourse analysis to the chosen data. This includes gathering the issues from the data based on the attention each has received in the discussion. The underlying motives for raising different issues were analysed by investigating the authors’ position in the political, economic and social circuits. The perceived economic impacts of the TTIP are also under analysis with the same criteria. Some of the most respected economic newspapers globally were included in the research material as well as papers or reports published by the EU and global organisations. The analysis indicates a clear dichotomy of the attitudes towards the TTIP. Key problems include lack of transparency in the negotiations, the misunderstood investor-state dispute settlement, the constantly expanding regulatory issues and the risk of protectionism. The theory and data does suggest that the removal of tariffs is an effective tool for reaching economic gains in the TTIP and even more effective would be the reducing of non-tariff barriers, such as protectionism. Critics are worried over the rising influence of corporations over governments. The discourse analysis reveals that the supporters of the TTIP have values related to increasing welfare through economic growth. Critics do not deny the economic benefits but raise the question of inequality as a consequence. Overall they represent softer values such as sustainable development and democracy as a counter-attack to the corporate values of efficiency and the maximising of profits.

Asleep or not asleep? Evaluation of the Quality of Patients’ Sleep in Critical Care Nursing

Sleep is important for the recovery of a critically ill patient, as lack of sleep is known to influence negatively a person’s cardiovascular system, mood, orientation, and metabolic and immune function and thus, it may prolong patients’ intensive care unit (ICU) and hospital stay. Intubated and mechanically ventilated patients suffer from fragmented and light sleep. However, it is not known well how non-intubated patients sleep. The evaluation of the patients’ sleep may be compromised by their fatigue and still position with no indication if they are asleep or not. The purpose of this study was to evaluate ICU patients’ sleep evaluation methods, the quality of non-intubated patients’ sleep, and the sleep evaluations performed by ICU nurses. The aims were to develop recommendations of patients’ sleep evaluation for ICU nurses and to provide a description of the quality of non-intubated patients’ sleep. The literature review of ICU patients’ sleep evaluation methods was extended to the end of 2014. The evaluation of the quality of patients’ sleep was conducted with four data: A) the nurses’ narrative documentations of the quality of patients’ sleep (n=114), B) the nurses’ sleep evaluations (n=21) with a structured observation instrument C) the patients’ self-evaluations (n=114) with the Richards-Campbell Sleep Questionnaire, and D) polysomnographic evaluations of the quality of patients’ sleep (n=21). The correspondence of data A with data C (collected 4–8/2011), and data B with data D (collected 5–8/2009) were analysed. Content analysis was used for the nurses’ documentations and statistical analyses for all the other data. The quality of non-intubated patients’ sleep varied between individuals. In many patients, sleep was light, awakenings were frequent, and the amount of sleep was insufficient as compared to sleep in healthy people. However, some patients were able to sleep well. The patients evaluated the quality of their sleep on average neither high nor low. Sleep depth was evaluated to be the worst and the speed of falling asleep the best aspect of sleep, on a scale 0 (poor sleep) to 100 (good sleep). Nursing care was mostly performed while the patients were awake, and thus the disturbing effect was low. The instruments available for nurses to evaluate the quality of patients’ sleep were limited and measured mainly the quantity of sleep. Nurses’ structured observatory evaluations of the quality of patients’ sleep were correct for approximately two thirds of the cases, and only regarding total sleep time. Nurses’ narrative documentations of the patients’ sleep corresponded with patients’ self-evaluations in just over half of the cases. However, nurses documented several dimensions of sleep that are not included in the present sleep evaluation instruments. They could be classified according to the components of the nursing process: needs assessment, sleep assessment, intervention, and effect of intervention. Valid, more comprehensive sleep evaluation methods for nurses are needed to evaluate, document, improve and study patients’ quality of sleep.

Critical success factors for improving societal effectiveness of transport sector's R&D

This study investigates societal effectiveness of transport sector’s Research & Development (R&D) operations. In this study effectiveness refers to organization’s capability to produce the intended and desired impacts through its operations. The aim of this study is to identify the motives for evaluating societal effectiveness and recognize the critical success factors for improving effectiveness. The theoretical framework focuses first in the policy context of effectiveness evaluation in public sector and secondly the framework introduces the concept and process of effectiveness evaluation. The empirical part is carried out as a case study, which investigates societal effectiveness of Finnish Transport Agency’s (FTA’s) R&D. The aim is to recognize FTA’s critical success factors for improving R&D operations’ societal effectiveness. Based on these factors, the organization is able to define indicators for measuring effectiveness in the future operations. In this study societal effectiveness is investigated from R&D purchasers’ and R&D end- users’ points of views according to Purchaser-Provider-model. The results indicate that societal effectiveness evaluation is important part of R&D operations, but the implementation of the evaluation as part of daily operations is challenging. Because of limited resources, the organization is forced to strong priorization and therefore R&D tasks are secondary after the operational tasks. Based on the results the critical success factors can be recognized as resources and priorization, clear strategy and objectives, internal communications, cooperation between public and private sector and R&D implementation and dissemination.

Situational awareness for critical infrastructure protection

Postgraduate seminar series with a title Situational Awareness for Critical Infrastructure Protection held at the Department of Military Technology of the National Defence University in 2015. This book is a collection of some of talks that were presented in the seminar. The papers address designing inter-organizational situation awareness system, principles of designing for situation awareness, situation awareness in distributed teams, vulnerability analysis in a critical system context, tactical Command, Control, Communications, Computers, & Intelligence (C4I) systems, and improving situational awareness in the circle of trust. This set of papers tries to give some insight to current issues of the situation awareness for critical infrastructure protection. The seminar has always made a publication of the papers but this has been an internal publication of the Finnish Defence Forces and has not hindered publication of the papers in international conferences. Publication of these papers in peer reviewed conferences has indeed been always the goal of the seminar, since it teaches writing conference level papers. We still hope that an internal publication in the department series is useful to the Finnish Defence Forces by offering an easy access to these papers.

Critical elements underpinning the emergence of the medical game ecosystem: gamifying traumatic brain injury rehabilitation in Finland

The healthcare sector is currently in the verge of a reform and thus, the medical game research provide an interesting area of research. The aim of this study is to explore the critical elements underpinning the emergence of the medical game ecosystem with three sub-objectives: (1) to seek who are the key actors involved in the medical game ecosystem and identify their needs, (2) to scrutinise what types of resources are required in medical game development and what types of relationships are needed to secure those resources, and (3) to identify the existing institutions (‘the rules of the game’) affecting the emergence of the medical game ecosystem. The theoretical background consists of service ecosystems literature. The empirical study conducted is based on the semi-structured theme interviews of 25 experts in three relevant fields: games and technology, health and funding. The data was analysed through a theoretical framework that was designed based upon service ecosystems literature. The study proposes that the key actors are divided into five groups: medical game companies, customers, funders, regulatory parties and complementors. Their needs are linked to improving patient motivation and enhancing the healthcare processes resulting in lower costs. Several types of resources, especially skills and knowledge, are required to create a medical game. To gain access to those resources, medical game companies need to build complex networks of relationships. Proficiency in managing those value networks is crucial. In addition, the company should take into account the underlying institutions in the healthcare sector affecting the medical game ecosystem. Three crucial institutions were identified: validation, lack of innovation supporting structures in healthcare and the rising consumerisation. Based on the findings, medical games cannot be made in isolation. A developmental trajectory model of the emerging medical game ecosystem was created based on the empirical data. The relevancy of relationships and resources is dependent on the trajectory that the medical game company at that time resides. Furthermore, creating an official and documented database for clinically valdated medical games was proposed to establish the medical game market and ensure an adequate status for the effective medical games. Finally, ecosystems approach provides interesting future opportunities for research on medical game ecosystems.

Individual Crimes or a Sociological Phenomenon: A Critical discourse analysis of the 2014 Royal Canadian Mounted Police National Operational Overview on missing and murdered Indigenous women in Canada

Pro gradu -tutkielma käsittelee Kanadan poliisivoimien, Royal Canadian Mounted Police (RCMP), vuoden 2014 operationaalista raporttia Kanadan kadonneista ja murhatuista alkuperäiskansojen naisista. Heitä katoaa ja murhataan Kanadassa suhteessa huomattavasti enemmän kuin muita naisia. Aihe on hyvin ajankohtainen sekä kriittinen ja siihen on paikallisten organisaatioiden lisäksi kiinnittänyt huomiota mm. Amnesty International ja Yhdistyneet Kansakunnat. Tilannetta pidetään jo ihmisoikeuskriisinä ja sen puolesta puhuminen voidaan nähdä osana laajempaa kansannousua alkuperäiskansojen oikeuksien puolesta. Kanadan hallitusta sekä poliisivoimia on syytetty välinpitämättömyydestä ja rasismista, poliiseja jopa väkivallasta alkuperäiskansojen naisia kohtaan. Kanadan hallitus ei myönnä ongelman olevan sosiologinen ilmiö, vaan pääministerin mukaan naisten katoamiset ja murhat ovat yksittäisiä rikoksia. Tilanteen taustalla on laajempi ongelma, joka juontaa juurensa kolonialismista, alkuperäiskansojen pakkokoulutuksesta ja heidän kulttuurinsa sekä identiteettinsä tuhoamisesta. Ennakkoluulot ja stereotypiat elävät yhä vahvana luoden heikon aseman alkuperäiskansojen edustajille ja tässä tapauksessa erityisesti naisille, joita myös usein syytetään omista ongelmistaan. Tutkielma selvittää, onko tämä operationaalinen raportti eriarvoisuutta, stereotypioita sekä ennakkoluuloja ylläpitävä ja tukeeko se näkemystä sosiologisesta ilmiöstä. Poliisivoimat ovat yhteiskunnassa vaikutusvaltaisessa asemassa ja voivat edesauttaa, jatkaa ja voimistaa syrjivää ajattelua, käytöstä ja viestintää. Vaikka he myös ajavat alkuperäiskansojen etuja, tulee heidän toimintaansa ja täten tätä kyseistä raporttia tarkastella kriittisesti. Tutkielma keskittyy kriittiseen diskurssianalyysiin (Fairclough 1995, Wodak & Meyer 2009). Raportin teksti ei ole avoimesti diskriminoivaa ja keskittyy tilastojen ja lukujen raportointiin sekä vertailuun, luoden samalla kuvan asianomaisista sekä tilanteesta yleisesti. Makroanalyysi (van Dijk 1977, 1980) mahdollistaa korkeamman tason ajatusten ja ideoiden esille tuonnin paljastaen ns. rivien välistä löytyvän viestinnän. Näistä makroanalyysin tuloksista etsitään erilaisia diskurssistrategioita (Reisigl & Wodak 2001), joiden avulla luodaan mm. kuva positiivisesta itsestä ja negatiivisesta toisesta. Näitä tuloksia tuetaan lyhyellä multimodaalisella analyysillä, joka keskittyy lähinnä raportin kahteen kuvaan (Kress & van Leeuwen 2006). Lopuksi tuloksista keskustellaan suhteessa yhteiskunnan valtasuhteisiin (Foucault 1976), rasismiin ja seksismiin. Analyysin perusteella raportti on selkeästi diskriminoiva. Se tuo esiin vanhoja stereotypioita ja ennakkoluuloja, esittää tilanteen alkuperäiskansojen sisäisenä ongelmana, jättää mainitsematta tilanteen taustat ja luo hyvin positiivisen kuvan poliisivoimista (RCMP). Tällä tavoin se ylläpitää yhteiskunnan epätasapainoisia valtasuhteita ja alkuperäiskansojen naisten heikompaa ja marginalisoitua asemaa. Raportti todistaa kuinka syvällä Kanadan yhteiskunnassa jopa institutionaalisella tasolla nämä ajatukset piilevät, sillä diskriminaatio ulottuu tapausten syistä niiden käsittelyyn ja raportointiin. Tilanne on huolestuttava ja voidaan nähdä sosiologisena ilmiönä. Poliisivoimien tulisi lisätä sisäistä koulutusta asian suhteen sekä hallituksen tutkia tätä ilmiönä ja paneutua sen selvittämiseen laaja-alaisesti ja läpinäkyvästi.

Individual Crimes or a Sociological Phenomenon: A Critical discourse analysis of the 2014 Royal Canadian Mounted Police National Operational Overview on missing and murdered Indigenous women in Canada

Pro gradu -tutkielma käsittelee Kanadan poliisivoimien, Royal Canadian Mounted Police (RCMP), vuoden 2014 operationaalista raporttia Kanadan kadonneista ja murhatuista alkuperäiskansojen naisista. Heitä katoaa ja murhataan Kanadassa suhteessa huomattavasti enemmän kuin muita naisia. Aihe on hyvin ajankohtainen sekä kriittinen ja siihen on paikallisten organisaatioiden lisäksi kiinnittänyt huomiota mm. Amnesty International ja Yhdistyneet Kansakunnat. Tilannetta pidetään jo ihmisoikeuskriisinä ja sen puolesta puhuminen voidaan nähdä osana laajempaa kansannousua alkuperäiskansojen oikeuksien puolesta. Kanadan hallitusta sekä poliisivoimia on syytetty välinpitämättömyydestä ja rasismista, poliiseja jopa väkivallasta alkuperäiskansojen naisia kohtaan. Kanadan hallitus ei myönnä ongelman olevan sosiologinen ilmiö, vaan pääministerin mukaan naisten katoamiset ja murhat ovat yksittäisiä rikoksia. Tilanteen taustalla on laajempi ongelma, joka juontaa juurensa kolonialismista, alkuperäiskansojen pakkokoulutuksesta ja heidän kulttuurinsa sekä identiteettinsä tuhoamisesta. Ennakkoluulot ja stereotypiat elävät yhä vahvana luoden heikon aseman alkuperäiskansojen edustajille ja tässä tapauksessa erityisesti naisille, joita myös usein syytetään omista ongelmistaan. Tutkielma selvittää, onko tämä operationaalinen raportti eriarvoisuutta, stereotypioita sekä ennakkoluuloja ylläpitävä ja tukeeko se näkemystä sosiologisesta ilmiöstä. Poliisivoimat ovat yhteiskunnassa vaikutusvaltaisessa asemassa ja voivat edesauttaa, jatkaa ja voimistaa syrjivää ajattelua, käytöstä ja viestintää. Vaikka he myös ajavat alkuperäiskansojen etuja, tulee heidän toimintaansa ja täten tätä kyseistä raporttia tarkastella kriittisesti. Tutkielma keskittyy kriittiseen diskurssianalyysiin (Fairclough 1995, Wodak & Meyer 2009). Raportin teksti ei ole avoimesti diskriminoivaa ja keskittyy tilastojen ja lukujen raportointiin sekä vertailuun, luoden samalla kuvan asianomaisista sekä tilanteesta yleisesti. Makroanalyysi (van Dijk 1977, 1980) mahdollistaa korkeamman tason ajatusten ja ideoiden esille tuonnin paljastaen ns. rivien välistä löytyvän viestinnän. Näistä makroanalyysin tuloksista etsitään erilaisia diskurssistrategioita (Reisigl & Wodak 2001), joiden avulla luodaan mm. kuva positiivisesta itsestä ja negatiivisesta toisesta. Näitä tuloksia tuetaan lyhyellä multimodaalisella analyysillä, joka keskittyy lähinnä raportin kahteen kuvaan (Kress & van Leeuwen 2006). Lopuksi tuloksista keskustellaan suhteessa yhteiskunnan valtasuhteisiin (Foucault 1976), rasismiin ja seksismiin. Analyysin perusteella raportti on selkeästi diskriminoiva. Se tuo esiin vanhoja stereotypioita ja ennakkoluuloja, esittää tilanteen alkuperäiskansojen sisäisenä ongelmana, jättää mainitsematta tilanteen taustat ja luo hyvin positiivisen kuvan poliisivoimista (RCMP). Tällä tavoin se ylläpitää yhteiskunnan epätasapainoisia valtasuhteita ja alkuperäiskansojen naisten heikompaa ja marginalisoitua asemaa. Raportti todistaa kuinka syvällä Kanadan yhteiskunnassa jopa institutionaalisella tasolla nämä ajatukset piilevät, sillä diskriminaatio ulottuu tapausten syistä niiden käsittelyyn ja raportointiin. Tilanne on huolestuttava ja voidaan nähdä sosiologisena ilmiönä. Poliisivoimien tulisi lisätä sisäistä koulutusta asian suhteen sekä hallituksen tutkia tätä ilmiönä ja paneutua sen selvittämiseen laaja-alaisesti ja läpinäkyvästi.