ETYK III-vaihe (Tasavallan Presidentin esittämä Suomen puheenvuoro 31.7.1975 = Conference on Security and Co-operation in Europe = main speech of Finland delivered by President Urho Kekkonen July 31, 1975)

Puhe

Wireless Technologies in e-Business; Services, Security and Management

Uusien mobiilien laitteiden ja palveluiden kehitys ovat herättäneet yritysten mielenkiinnon soveltaa langattomia sovelluksia omassa liiketoiminnassaan. Erilaisten tekniikoiden myötä myös mahdollisuuksien kirjo on laajentumassa, mikä johtaa erilaisten verkkojen ja laitteiden yhtenäiselle hallinnalle asetettavien vaatimusten kasvuun. Yritysten siirtyessä soveltamaan uusia langattomia palveluita ja sovelluksia on myös huomioon otettavaa sovellusten sekä palveluiden vaatima tietoturva ja sen hallittavuus. Tutkimuksessa esitetään langattoman sähköisen liiketoiminnan määritelmä sekä kyseisien teknologioiden käyttöä edistävät tekijät. Tutkimus luo viitekehyksen yrityksen langattomien teknologioiden käytölle ja siihen olennaisesti vaikuttavista tekijöistä. Viitekehystä on käytetty todelliseen esimerkkiin, liikkuva myyntihenkilö, kyseisten teknologioiden, palveluiden, tietoturvan ja hallittavuuden näkökulmasta. Johtopäätöksinä on arvioitu mobiilien ja langattomien teknologioiden sekä palveluiden, tietoturvan ja hallittavuuden tilaa ja analysoimalla niitä tulevaa ajatellen.

Security and Privacy in a Ubiquitous Information Screen

We expose the ubiquitous interaction between an information screen and its’ viewers mobile devices, highlights the communication vulnerabilities, suggest mitigation strategies and finally implement these strategies to secure the communication. The screen infers information preferences’ of viewers within its vicinity transparently from their mobile devices over Bluetooth. Backend processing then retrieves up-to-date versions of preferred information from content providers. Retrieved content such as sporting news, weather forecasts, advertisements, stock markets and aviation schedules, are systematically displayed on the screen. To maximise users’ benefit, experience and acceptance, the service is provided with no user interaction at the screen and securely upholding preferences privacy and viewers anonymity. Compelled by the personal nature of mobile devices, their contents privacy, preferences confidentiality, and vulnerabilities imposed by screen, the service’s security is fortified. Fortification is predominantly through efficient cryptographic algorithms inspired by elliptic curves cryptosystems, access control and anonymity mechanisms. These mechanisms are demonstrated to attain set objectives within reasonable performance.

Probiotic interventions in infancy: Benefit and Safety Assessment of Extended Applications

Immaturity of the gut barrier system in the newborn has been seen to underlie a number of chronic diseases originating in infancy and manifesting later in life. The gut microbiota and breast milk provide the most important maturing signals for the gut-related immune system and reinforcement of the gut mucosal barrier function. Recently, the composition of the gut microbiota has been proposed to be instrumental in control of host body weight and metabolism as well as the inflammatory state characterizing overweight and obesity. On this basis, inflammatory Western lifestyle diseases, including overweight development, may represent a potential target for probiotic interventions beyond the well documented clinical applications. The purpose of the present undertaking was to study the efficacy and safety of perinatal probiotic intervention. The material comprised two ongoing, prospective, double-blind NAMI (Nutrition, Allergy, Mucosal immunology and Intestinal microbiota) probiotic interventions. In the mother-infant nutrition and probiotic study altogether 256 women were randomized at their first trimester of pregnancy into a dietary intervention and a control group. The intervention group received intensive dietary counselling provided by a nutritionist, and were further randomized at baseline, double-blind, to receive probiotics (Lactobacillus rhamnosus GG and Bifidobacterium lactis) or placebo. The intervention period extended from the first trimester of pregnancy to the end of exclusive breastfeeding. In the allergy prevention study altogether 159 women were randomized, double-blind, to receive probiotics (Lactobacillus rhamnosus GG) or placebo 4 weeks before expected delivery, the intervention extending for 6 months postnatally. Additionally, patient data on all premature infants with very low birth weight (VLBW) treated in the Department of Paediatrics, Turku University Hospital, during the years 1997 - 2008 were utilized. The perinatal probiotic intervention reduced the risk of gestational diabetes mellitus (GDM) in the mothers and perinatal dietary counselling reduced that of fetal overgrowth in GDM-affected pregnancies. Early gut microbiota modulation with probiotics modified the growth pattern of the child by restraining excessive weight gain during the first years of life. The colostrum adiponectin concentration was demonstrated to be dependent on maternal diet and nutritional status during pregnancy. It was also higher in the colostrum received by normal-weight compared to overweight children at the age of 10 years. The early perinatal probiotic intervention and the postnatal probiotic intervention in VLBW infants were shown to be safe. To conclude, the findings in this study provided clinical evidence supporting the involvement of the initial microbial and nutritional environment in metabolic programming of the child. The manipulation of early gut microbial communities with probiotics might offer an applicable strategy to impact individual energy homeostasis and thus to prevent excessive body-weight gain. The results add weight to the hypothesis that interventions aiming to prevent obesity and its metabolic consequences later in life should be initiated as early as during the perinatal period.

Establishment of a health and safety management system according to the OHSAS 18001 standard

The thesis develops guidelines for the implementation of the health and safety management system according to the OHSAS 18001 standard, as well as the feasible threat analysis, project proposal schedule, future system quality improvements and organizational change evaluation. The theoretical part clarifies determination of occupational health and safety, its management system, the OHSAS 18001 standard and integrated management system compounded of triple ISO 14001, ISO 9001 and OHSAS 18001 standards. The literature includes such important aspects as human factor, organizational policies, possible benefits, threats, organizational safety culture, Deming’s quality improvement cycle, system implementation, maintenance and cost matters. The empirical part demonstrates real-life situation by using Andritz Pulp & Paper Oy as a case study. Prior the thesis proposal, Andritz Group is analysed including separate business areas, acquisition and integration strategies, current status of the health and safety management and parallel experiences of the largest business area Andritz Hydro. The proposal is aimed at improving the current health and safety system for the permanent and sub-contracted employees at Andritz Pulp & Paper both in Finland and in various projects globally.

Finnish Maritime Personnel's Conceptions on Safety Management and Safety Culture

The purpose of this thesis is to explore Finnish maritime personnel’s conceptions of safety management and its relationship with the concept of safety culture. In addition, the aim is to evaluate the impact of the ISM Code on the prevailing safety culture in the Finnish shipping business. A total of 94 interviewees and seven Finnish shipping companies were involved in this study. Thematic interviews were applied as the main research method for the study. The results were analysed qualitatively. The results indicate that maritime safety culture can simultaneously demonstrate features of integration, differentiation and ambiguity. Basically, maritime personnel have a positive attitude towards safety management systems since they consider safety management beneficial and essential in general. However, the study also found considerable criticism among the interviewees. The interviewed maritime personnel did not criticise the ISM Code as such, yet they criticised the way the ISM Code has been applied in practise. In order to understand the multiple perspectives of safety culture more comprehensively, multiple theoretical perspectives and methodological approaches are needed. This study indicates that safety culture and the impacts of the ISM Code should not be unambiguously studied solely quantitative methods or qualitative methods. By examining safety culture from several methodological and theoretical perspectives, one may gain a more versatile and holistic overview of safety culture.

Oviympäristön hallinnan kehittäminen ovitoimittajan ja turvaurakoitsijan yhteistyönä

Työn tavoitteena oli selvittää yhteistyön ja verkostoitumisen mahdollisuuksia ovitoimittajan ja turvaurakoitsijan yhteistyönä pyrkien minimoimaan (uudis)rakennuksen oviympäristöön tapahtuvissa toimituksessa eri suunnittelijoiden suunnittelueriäväisyyksistä johtuvia lisätöitä, kustannuksia ja sähläystä eri toimijoiden kesken. Keskeisenä tavoitteena oli saada malli toimivan ovi-turvallisuusympäristön perustaksi. Lisäksi haettiin turvaurakoitsijalle, ovitoimittajalle ja rakennusliikkeelle suosituksia yhteistyön ja yhteistoiminnan edistämiseksi. Eri osapuolten näkemyksiä ja ongelmakohtia haettiin haastattelujen avulla. Tutkimuksesta kävi selkeästi ilmi ettei kukaan varsinaisesti koordinoi oviympäristön suunnittelua kokonaisuutena. Samanaikaisesti rakennusliike on hakenut halvinta hintaa joka nippelille, mikä taas on johtanut urakoiden pirstoutumiseen ja vaikeuttanut tilannetta entisestään. Toimenpide-ehdotuksena esitetään uutta liiketoimintamallia oviympäristön hallintaan. Mallin avulla on mahdollista saada aikaan säästöjä ja vähentää eri toimijoiden sähläyksestä aiheutuvia lisätöitä kuitenkin loppukäyttäjän tarpeet huomioiden. Lisäksi esitetään toimenpide-suosituksia yllä mainittujen toimittajien yhteistyölle.

Asiakastarpeiden kartoitus kuljetusten häiriöiden analysoinnin ja hallinnan kehittämiseksi

Tämä diplomityö on tehty osana Logproof-tutkimushanketta, joka keskittyy häiriöttömyyden hallintaan logistisissa monitoimijaverkostoissa. Työn tavoitteena on selvittää logistiikkaintensiivisten yritysten tarpeita kuljetusten häiriöiden analysoinnin ja hallinnan kehittämiseksi ja siten ennakoivan riskienhallinnan edistämiseksi. Asiakastarvetietoa on kerätty hyödyntäen puolistrukturoituja haastatteluja ja tietoa on analysoitu käyttäen hyväksi sisällönanalyysiä sekä tulkintataulukkoa. Kiinnostus kuljetusten häiriöitä ja niiden analysointia kohtaan on kasvamassa ja yrityksissä tiedostetaan hallintajärjestelmien ja analysoinnin tarve tulevaisuudessa. Kirjallisuuskatsauksen ja asiakastarpeiden kartoituksen avulla työssä on selvitetty yritysten nykytilaa kuljetusten häiriöiden hallinnan ja analysoinnin osalta ja tarkasteltu mahdollisia tulevaisuuden kehityssuuntia analysoimalla asiakkaiden näkyviä ja piileviä tarpeita. Työssä on edellisten lisäksi tarkasteltu, kuinka havaitut asiakastarpeet ovat sovitettavissa yhteen case-yrityksen, Oy Lars Krogius Ab:n, ARS (Analytic Rou-ting Solution) -palvelun ominaispiirteiden kanssa. Työ tarjoaa tarvetietoa palvelun tulevaisuuden kehitykselle.

Software Security Design and Testing

Elektroninen kaupankäynti ja pankkipalvelut ovat herättäneet toiminnan jatkuvuuden kannalta erittäin kriittisen kysymyksen siitä, kuinka näitä palveluja pystytään suojaamaan järjestäytynyttä rikollisuutta ja erilaisia hyväksikäyttöjä vastaan.

Five Baltic Ports Togehter: Forecasts, Trends and Recommendations

The ports of Stockholm, Tallinn, Helsinki, Naantali and Turku play key roles in making the Central Baltic region accessible. Effective, competitive, eco-friendly and safe port procedures and solutions for the transportation of goods are of major importance for trade in the Baltic Sea region. This report presents the most essential results and recommendations of the PENTA project, which focused on how ports could better comprehend and face current and future challenges facing carriage of goods by sea. Each of the four work packages (WPs) of the PENTA project analysed the changes from a different perspective. WP2 focused on traffic flows between the PENTA ports. Its main emphasis was on the ports, shipowners, and logistics companies that are the key parties in freight transport and on the changes affecting the economy of those ports. In WP3 noise as an environmental challenge for ports was investigated and the analysis also shed light on the relationship between the port and the city. In WP4 procedures related to safety, security and administrative procedures were researched. The main emphasis was on identifying the requirements for the harmonisation of those procedures. Collaboration is highlighted throughout this report. In order to prepare for the future, it was found that ports need to respond to growing competition, increasing costs and shifts in customer demand by strengthening their existing partnerships with other actors in the maritime cluster. Cargo and passenger transport are the main sources of income for most ports. Cargo traffic between the PENTA ports is expected to grow steadily in the future and the outlook for passenger traffic is positive. However, to prepare for the future, ports should not only secure the core activities which generate revenue but also seek alternative ways to make profit. In order to gain more transit traffic, it is suggested that ports conduct a more thorough study of the future requirements for doing business with Russia. The investigation of noise at ports revealed two specific dilemmas that ports cannot solve alone. Firstly, the noise made by vessels and, secondly, the relationship between the port and the surrounding city. Vessels are the most important single noise source in the PENTA ports and also one of the hardest noise sources to handle. Nevertheless, port authorities in Finland and Sweden are held responsible for all noise in the port area, including noise produced by vessels, which is noise the port authority can only influence indirectly. Building housing by waterfront areas close to ports may also initiate disagreements because inhabitants may want quiet areas, whereas port activities always produce some noise from their traffic. The qualitative aspects of the noise question, cooperating with the stakeholders and the communicating of issues related to noise are just as important. We propose that ports should follow the logic of continuous improvement in their noise management. The administrative barriers discussed in this report are mainly caused by differences in international and national legislation, variations in the customs procedures of each country, the incompatibility of the IT systems used in maritime transport, noncompliance with regulations regarding dangerous goods, and difficulties in applying Schengen regulations to vessels from non-EU countries. Improving the situation is out of the hands of the ports to do alone and requires joint action on a variety of levels, including the EU, national authorities and across administrative borders.

Accelerating food safety and quality control: The use of antibody engineering techniques in the detec-tion of low-molecular weight food contaminants

The increased awareness and evolved consumer habits have set more demanding standards for the quality and safety control of food products. The production of foodstuffs which fulfill these standards can be hampered by different low-molecular weight contaminants. Such compounds can consist of, for example residues of antibiotics in animal use or mycotoxins. The extremely small size of the compounds has hindered the development of analytical methods suitable for routine use, and the methods currently in use require expensive instrumentation and qualified personnel to operate them. There is a need for new, cost-efficient and simple assay concepts which can be used for field testing and are capable of processing large sample quantities rapidly. Immunoassays have been considered as the golden standard for such rapid on-site screening methods. The introduction of directed antibody engineering and in vitro display technologies has facilitated the development of novel antibody based methods for the detection of low-molecular weight food contaminants. The primary aim of this study was to generate and engineer antibodies against low-molecular weight compounds found in various foodstuffs. The three antigen groups selected as targets of antibody development cause food safety and quality defects in wide range of products: 1) fluoroquinolones: a family of synthetic broad-spectrum antibacterial drugs used to treat wide range of human and animal infections, 2) deoxynivalenol: type B trichothecene mycotoxin, a widely recognized problem for crops and animal feeds globally, and 3) skatole, or 3-methyindole is one of the two compounds responsible for boar taint, found in the meat of monogastric animals. This study describes the generation and engineering of antibodies with versatile binding properties against low-molecular weight food contaminants, and the consecutive development of immunoassays for the detection of the respective compounds.

Cyber security in home and small office local area networks - Attack vectors and vulnerabilities

This thesis presents security issues and vulnerabilities in home and small office local area networks that can be used in cyber-attacks. There is previous research done on single vulnerabilities and attack vectors, but not many papers present full scale attack examples towards LAN. First this thesis categorizes different security threads and later in the paper methods to launch the attacks are shown by example. Offensive security and penetration testing is used as research methods in this thesis. As a result of this thesis an attack is conducted using vulnerabilities in WLAN, ARP protocol, browser as well as methods of social engineering. In the end reverse shell access is gained to the target machine. Ready-made tools are used in the attack and their inner workings are described. Prevention methods are presented towards the attacks in the end of the thesis.