Fatores influenciadores da implementação de ações de gestão de segurança da informação :um estudo com executivos e gerentes de tecnologia da informação das empresas do Rio Grande do Norte

Information is one of the most valuable organization s assets, mainly on a global and highly competitive world. On this scenery there are two antagonists forces: on one side, organizations struggle for keeping protected its information, specially those considered as strategic, on the other side, the invaders, leaded by innumerous reasons - such as hobby, challenge or one single protest with the intention of capturing and corrupting the information of other organizations. This thesis presents the descriptive results of one research that had as its main objective to identify which variables influence the Executives´ and CIOs´ perceptions toward Information Security. In addition, the research also identified the profile of Rio Grande do Norte s organizations and its Executives/CIOs concerning Information Security, computed the level of agreement of the respondents according to NBR ISO/IEC 17799 (Information technology Code of practice for information security management) on its dimension Access Control. The research was based on a model, which took into account the following variables: origin of the organization s capital, sector of production, number of PCs networked, number of employees with rights to network, number of attacks suffered by the organizations, respondent´s positions, education level, literacy on Information Technology and specific training on network. In the goal´s point of view, the research was classified as exploratory and descriptive, and, in relation of the approach, quantitative. One questionnaire was applied on 33 Executives and CIOs of the 50 Rio Grande do Norte s organizations that collected the highest taxes of ICMS - Imposto sobre Circulação de Mercadorias on 2000. After the data collecting, cluster analysis and chi-square statistical tools were used for data analysis. The research made clear that the Executives and CIOs of Rio Grande do Norte s organizations have low level of agreement concerning the rules of the NBR ISO/IEC 17799. It also made evident that the Executives and CIOs have its perception toward Information Security influenced by the number of PCs networked and by the number of attacks suffered by the organizations

Segurança da informação no correio eletrônico com base na ISO/IEC 17799 :um estudo de caso em uma instituição superior com foco no treinamento

The electronic mail service is one of the most Internet services that grow in the corporate environment. This evolution is bringing several problems for the organizations, especially to information that circulates inside of the corporate net. The lack of correct orientation to the people, about the usage and the security importance of these resources, is leaving breaches and causing misusage and overuse of service, for example. In recent literature, it starts to coming out several ideas, which has helped to rganizations how to plain and how to implement the information security system to the electronic mail in computer environment. However, these ideas are still not placed in practice in many companies, public or private. This dissertation tries to demonstrate the results of a research that has like goal, identify the importance that user training has over the information security policy, through a case study inside of private superior education institute in this state. Besides, this work had by basic orientation the ISO/IEC 17799, which talk about People Security. This study was developed over a proposed model to this research, which looked for offer conditions to guide the institution studied, how to plan better a information security policy to the electronic mail. Also, this research has an exploratory and descreptive nature and your type, qualitative. Firstly, it was applied na questionary to the information technology manager, as better way to get some general data and to deepen the contact which still then, it was being kept through e-mail. Thereupon this first contact, eleven interviews were done with the same manager, beside one interview with twenty-four users, among employees e students. After that to collect and transcript the interviews, were review with the manager all informations given, to correct any mistakes and to update that informations, to then, start the data analyze. The research suggests that the institution has a pro attitude about the information security policy and the electronic mail usage. However, it was clear that answers have their perception about information security under a very inexperient way, derived of a planning lack in relation to training program capable to solve the problem

Proposta de um sistema de segurança eletrônica predial

This work presents a suggestion of a security system of land automation having as objective main the creation of a system capable from easy method, supervise the installations of a building with the goal to preserver security personal and patrimonial necessities, aim at portability low cost and use easiness. Was designed an alarms central and access controller that has digital and analogical inputs for sensors and outputs for buzzer, telephonic dialing and electronic lock. The system is supervised by software that makes solicitations of information to the alarms central through the one computer's serial port (RS-232). The supervisory software was developed in platform LabVIEW with displays the received data on a graphical interface informing the sensors' current states distributed in the building and system events as alarns occurrences. This system also can be viewed through the Internet for people registered by the land security's system administrator

Mecanismos de segurança para um sistema cooperativo de armazenamento de arquivos baseado em P2P

Previous works have studied the characteristics and peculiarities of P2P networks, especially security information aspects. Most works, in some way, deal with the sharing of resources and, in particular, the storage of files. This work complements previous studies and adds new definitions relating to this kind of systems. A system for safe storage of files (SAS-P2P) was specified and built, based on P2P technology, using the JXTA platform. This system uses standard X.509 and PKCS # 12 digital certificates, issued and managed by a public key infrastructure, which was also specified and developed based on P2P technology (PKIX-P2P). The information is stored in a special file with XML format which is especially prepared, facilitating handling and interoperability among applications. The intention of developing the SAS-P2P system was to offer a complementary service for Giga Natal network users, through which the participants in this network can collaboratively build a shared storage area, with important security features such as availability, confidentiality, authenticity and fault tolerance. Besides the specification, development of prototypes and testing of the SAS-P2P system, tests of the PKIX-P2P Manager module were also performed, in order to determine its fault tolerance and the effective calculation of the reputation of the certifying authorities participating in the system

Um estimador de estado trifásico para sistemas de distribuição de energia elétrica com base no método da soma de potências

Conselho Nacional de Desenvolvimento Científico e Tecnológico

Um sistema para gestão do conhecimento em ameaças, vulnerabilidades e seus efeitos

Attacks to devices connected to networks are one of the main problems related to the confidentiality of sensitive data and the correct functioning of computer systems. In spite of the availability of tools and procedures that harden or prevent the occurrence of security incidents, network devices are successfully attacked using strategies applied in previous events. The lack of knowledge about scenarios in which these attacks occurred effectively contributes to the success of new attacks. The development of a tool that makes this kind of information available is, therefore, of great relevance. This work presents a support system to the management of corporate security for the storage, retrieval and help in constructing attack scenarios and related information. If an incident occurs in a corporation, an expert must access the system to store the specific attack scenario. This scenario, made available through controlled access, must be analyzed so that effective decisions or actions can be taken for similar cases. Besides the strategy used by the attacker, attack scenarios also exacerbate vulnerabilities in devices. The access to this kind of information contributes to an increased security level of a corporation's network devices and a decreased response time to occurring incidents

O papel das rotas e da obtenção de informações sobre a eficiência no forrageio de dinoponera quadriceps em ambiente natural

In this study, we investigated the role of routes and information attainment for the queenless ant species Dinoponera quadriceps foraging efficiency. Two queenless ant colonies were observed in an area of Atlantic secondary Forest at the FLONA-ICMBio of Nisia Floresta, in the state of Rio Grande do Norte, northeastern Brazil, at least once a week. In the first stage of the study, we observed the workers, from leaving until returning to the colony. In the second stage, we introduced a acrylic plate (100 x 30 x 0,8 cm) on a selected entrance of the nest early in the morning before the ants left the nest. All behavioral recordings were done through focal time and all occurence samplings. The recording windows were of 15 minutes with 1 minute interval, and 5 minute intervals between each observation window. Foraging was the main activity when the workers were outside the nest. There was a positive correlation between time outside the nest and distance travelled by the ants. These variables influenced the proportion of resource that was taken to the nest, that is, the bigger its proportion, the longer the time outside and distance travelled during the search. That proportion also influenced the time the worker remained in the nest before a new trip, the bigger the proportion of the item, the shorter was the time in the nest. During all the study, workers showed fidelity to the route and to the sectors in the home range, even when the screen was in the ant´s way, once they deviated and kept the route. The features of foraging concerning time, distance, route and flexibility to go astray by the workers indicate that decisions are made by each individual and are optimal in terms of a cost-benefit relation. The strategy chosen by queenless ants fits the central place foraging and marginal value theorem theories and demonstrate its flexibility to new informations. This indicates that the workers can learn new environmental landmarks to guide their routes

A segurança contra incêndio em uma abordagem para edificações históricas: proposta de reuso para o antigo Grupo Escolar Augusto Severo

O seguinte trabalho apresenta como tema a segurança contra incêndio aplicada a uma edificação de interesse histórico, sendo proposto o anteprojeto arquitetônico de reuso do antigo Grupo Escolar Augusto Severo, localizado na cidade de Natal, Rio Grande do Norte, como pano de fundo para esta discussão. A proposta arquitetônica contempla a instalação do Centro de Extensão, Cidadania e Cultura da Universidade Federal do Rio Grande do Norte na referida edificação e, partiu de uma demanda real da instituição que na data da pesquisa desenvolvia o mesmo projeto em seu âmbito técnico-administrativo. No desenvolvimento do trabalho é proposto a aplicação da legislação local de proteção e combate contra incêndio e também a análise de risco de incêndio proposta pela metodologia do Programa Monumenta, a qual é adotada pelo Instituto do Patrimônio Histórico e Artístico Nacional (IPHAN) através dos seus Cadernos Técnicos. As duas questões apresentadas se diferem por se tratar a primeira de um modelo tradicional e prescritivo (aplicação estrita da lei), e a segunda de um modelo não prescritivo que procura critérios de desempenho da edificação para elencar as medidas de proteção a serem adotadas, portanto, o trabalho procura abranger na situação de projeto proposta tanto as questões legais, como também considerando o real risco que a edificação apresenta (de acordo com a metodologia escolhida). Estes riscos, no caso de prédios históricos, podem ser maiores que os normalmente associado as edificações contemporâneas devido a uma série de fatores, tais como a baixa compartimentação, falta de proteção passiva, uso de materiais com maior poder de combustão e adaptações diversas decorrente dos usos que a edificação apresentou ao longo de seu tempo. Após esta análise de risco será desenvolvido tanto o anteprojeto arquitetônico como o projeto básico de combate contra incêndio, em consonância com as interferências e demandas geradas pela questão da segurança contra incêndio e pânico na edificação de interesse patrimonial.

Segurança alimentar e nutricional dos agricultores familiares da associação dos produtores e produtoras orgânicas de Ceará Mirim/RN

The proposition of this research is supported by the definition of Food Safety and Nutrition (FSN), established by the II FSN National Conference. Taking this concept as reference, the research instrument aimed to analyze strategies and actions related to FSN, developed by members of Ceará Mirim Organic Producers Association, located in Rio Grande do Norte state (Brazil), from aspects related to family feeding, as well as means of access, quantity and food culture. It was aimed to answer the following questions: Do the families benefited from Ceará Mirim Organic Producers Association have strategies that assure their FSN? If so, do these strategies originate from public policies or own actions? Do these strategies focus on family revenue? In expenses with food and proper feeding? How do these strategies articulate together and which social networks do they form? In this research, there were also approached questionings which comprise market opening through the declaration of the products as Organization of Social Control (OSC), aggregate value and participation in agroecological fairs, aiming to identify and characterize if these strategies contribute for Food Safety and Nutrition of these families. The data here analyzed were obtained from semi-structured interviews, conducted in the production sites of each farmer, and have a qualitative approach. 21 questionnaires were applied to the family farmers, in seven projects of agrarian reform settlements (Carlos Marighella, Nova Esperança II, Aliança, Marcoalhado I, Santa Águeda, Santa Luzia and União). From this study, it was concluded that most of FSN strategies result from a series of distinct public policies, which potentiate the existing strategies and create new ones, such as in the case of organic production, which is the main motivation, even for the organization of the studied group. These strategies brought improvements in feeding and caused changes in eating habits, especially in the diversification of production for own consumption. This, on the other hand, is assuring greater food autonomy and increasing marketing channels, through fairs or institutional markets. It was also verified that reciprocity relations increased after the organic production, and they are indispensable to assure food in difficult times, also contributing to incentive organic production itself, through supplies exchange.

Os limites do poder regulamentar do Conselho Nacional de Justiça no contexto do Estado constitucional brasileiro

The creation of the National Council of Justice (CNJ) through the Constitutional Amendment nº 45/2004, derived from countless gaps in Brazilian law, mainly relating to procedural delays, ineffectiveness of judicial decisions, and the lack of mechanisms that enable, effectively, disciplinary accountability of judges. The council is constitutionally designed as a member of the Judiciary, which has administrative nature and laid assignments in art. 103-B, § 4 of the current Constitution, among which is to edit regulations to instrument its performance. However, since it came into force, the amendment raised extensive discussions, linked in particular to the constitutionality of the CNJ, which was made through the direct action of unconstitutionality nº 3367, against the alleged violation of the principles of separation of powers and federative form, as well as the limits of its regulatory powers, as has fanned out in ADI nº 3823/ DF, this one dealing on Resolution nº 07, which regulates the seal of nepotism practice in the judiciary. However, despite the Supreme Court has already pronounced on the matter, recognizing the constitutionality of the council, as well as the resolution already said, the debate is in a state of latency, and may erupt again with each new manifestation of regulatory CNJ, given the lack of agreement between doctrine and jurisprudence around the constitutional treatment of its regulatory powers. In this context undeniably reflection on the definition of the regulatory power of the CNJ, presents itself as extremely relevant, and current, in particular in the ambience of the Constitutional Rule of Law, where he strives for legal certainty and consolidation of regulatory institutions. So that it could reach a satisfactory result, skilled at resolving the problems raised, the present study analyzed the reasons that gave rise to the creation of the CNJ, demonstrating their indispensability, but also sought to characterize the status of their administrative and constitutional body, noting finally, the compatibility of its regulatory activities to constitutional principles. From this perspective, we adopted the deductive method and carried out research and bibliographic nature documentary.

Inclusão social de catadores de materiais recicláveis: estudo da política nacional de resíduos sólidos e da efetivação do trabalho decente em Natal/RN

The integrated management of municipal solid waste in Brazil is held legally responsible by the city council administration. This is done since the year 2010 with the publication of the National Solid Waste Policy term. According to the policy and law, each city must encourage the implementation of selective collection and the participation of waste picker´s entities aiming social inclusion. However, these actions haven’t yet reached its legal aims. These workers are considered regarding collection actions but are stripped of certain basic labor rights not in conformation with the Decent Work concept. This type of work, according to International Labour Organization, must be seen as work that is properly paid for and must be done regarding conditions of freedom, equity, security and able to provide workers with a dignified life conditions. Thus, this work aims to investigate the implementation process regarding the Solid Waste National Policy in Natal-Rio Grande do Norte in Brazil. This is done considering socio-productive insertion of recyclable material collectors. The research is substantiated by a qualitative approach as well as documental and bibliographical research. A field research considering the cooperatives as well “in locco" observation and semi-structured interviews were carried out between the time span of 2013 and 2014. In order to investigate decent daily working conditions the research emphasized municipal management actions in Natal towards social inclusion that aim to reflect on the progress and difficulties experimented. It is seen that even when these cooperatives receive government support there are still important struggles that need to be overcome. The worker´s tasks are risky, the work environment in not safe or is adequate in terms of health issues. There is the stigma of it being considered an occupational task, the low individual income distancing the activity regarding parameters of the Green Employment and Decent Work concept. On the other hand, the survey showed potential as the relentless pursuit on behalf of the cooperatives that still search better work condition improvement.

O ambiente de pesquisas virtuais na biblioteca acadêmica: da implantação à consolidação, um longo percurso.

O ambiente da pesquisa acadêmica nas bibliotecas universitárias se apresenta em constante evolução. Nesta perspectiva, as construções de novos espaços se fazem necessários na promoção e acesso à informação, via vários tipos de suportes. Atualmente, antigos paradigmas são sobrepostos com uma velocidade luz. Neste artigo, apresenta-se a implantação, manutenção e consolidação do Setor de Pesquisas Virtuais em uma biblioteca universitária, com vistas à democratização do acesso à informação eletrônica, como também à criação de uma rede de comunicação rápida, eficaz, tendo como foco central as novas Tecnologias da Informação e Comunicação (TICs). Assim, enfoca-se a construção do espaço físico do Setor de Pesquisas Virtuais, através da criação de normas, produtos, serviços e divulgação desse novo recurso. A consolidação deste espaço encontra-se em pleno desenvolvimento, via aquisição de produtos específicos, consorciamentos junto às redes especializadas, geração de novos produtos e, principalmente, a presença direta de um profissional bibliotecário intervindo e mediando o processo da busca e do acesso às informações com segurança e confiabilidade das fontes. Consequentemente, essas ações estão trazendo benefícios à comunidade atendida.

Fatores que influenciam a aceitação de práticas avançadas de gestão de segurança da informação: um estudo com gestores públicos estaduais no Brasil

This study examines the factors that influence public managers in the adoption of advanced practices related to Information Security Management. This research used, as the basis of assertions, Security Standard ISO 27001:2005 and theoretical model based on TAM (Technology Acceptance Model) from Venkatesh and Davis (2000). The method adopted was field research of national scope with participation of eighty public administrators from states of Brazil, all of them managers and planners of state governments. The approach was quantitative and research methods were descriptive statistics, factor analysis and multiple linear regression for data analysis. The survey results showed correlation between the constructs of the TAM model (ease of use, perceptions of value, attitude and intention to use) and agreement with the assertions made in accordance with ISO 27001, showing that these factors influence the managers in adoption of such practices. On the other independent variables of the model (organizational profile, demographic profile and managers behavior) no significant correlation was identified with the assertions of the same standard, witch means the need for expansion researches using such constructs. It is hoped that this study may contribute positively to the progress on discussions about Information Security Management, Adoption of Safety Standards and Technology Acceptance Model

Projeto café do trabalhador como promotor de segurança alimentar e nutricional: avaliação da eficácia da unidade Natal-RN

The evaluation of public policies that promote Food Security and Nutrition (FSN) it s a multidisciplinary activity extremely relevant to the effectiveness of actions to legitimize the Human Right to Adequate Food (HRAF). This study aimed at assessing the effectiveness of the unit project Natal-RN Café do Trabalhador in promoting SAN to its users. The theoretical framework is based on the public and political and on the dimensions of the concept of FSN (quantity and quality-regularity). Through a qualitative approach, methodologically this was the work of an evaluation of efficiency of the unit Natal-RN of Café do Trabalhador project in light of the assumptions of the concept of SAN. Data collection was conducted through retrospective archival research in official documents of the project, semi-structured interviews with managers involved in its implementation (representative of the Secretary of State for Employment, Housing and Care of RN SETHAS and third party), socioeconomic questionnaire applied to the users of the unit, check the amount, regularity and quality of meals offered for 15 days (menu routine) using the descriptive form menu and form filling type checklist for verification of compliance with good practices . Methods of analysis, we used content analysis, descriptive statistics and compared to previously established parameters for the project. As categories of analysis were defined organizational arrangement, access, user, food quantity-regularity and food quality. The results show that, it was found in the category arrangement that will implement the project dismissed technical criteria for choosing the districts and the quantitative distribution of meals for each location. It was found that the valuation of the shares of the company outsources technical SETHA has not been performed. We observed in the access category, the unit has a strategic location, but lack of space in the refectory. The main obstacle to economic access for users is the lack of a register for the beneficiaries. In the category of users, it was identified that the clientele of the project it is predominantly men, with more than 51 years, low education, earning wages less 1 obtained through informal employment, which they move up through the unit transport collective, go to all days of operation due primarily to price. About the meals category quantity-regularity of food showed that the menu serves 95% of the desired needs, and that holidays and weekends are periods of disrupting the regularity of supply of meals. Regarding the category of food quality, it was found that the nutritional aspect on the menu are food sources rich in sodium, nitrates and low in fiber. In the aspect of hygiene and sanitation are the main limitations related to waste management, lack of exposure controls of food prepared and inadequacies of the physical structure. The results showed that in general and the institutional arrangement of the organs attached to the project should establish a systematic evaluation project is to establish as a promoter of and FSN overcome these obstacles