Superando os riscos da segurança baseada em perímetro - Uma abordagem com identificação federada através de certificados digitais A3/ICP-Brasil e SAML

The traditional perimeter-based approach for computer network security (the castle and the moat model) hinders the progress of enterprise systems and promotes, both in administrators and users, the delusion that systems are protected. To deal with the new range of threats, a new data-safety oriented paradigm, called de-perimeterisation , began to be studied in the last decade. One of the requirements for the implementation of the de-perimeterised model of security is the definition of a safe and effective mechanism for federated identity. This work seeks to fill this gap by presenting the specification, modelling and implementation of a mechanism for federated identity, based on the combination of SAML and X.509 digital certificates stored in smart-cards, following the A3 standard of ICP-Brasil (Brazilian official certificate authority and PKI)

Estratégias para elaboração de um plano de segurança da água para abastecimento humano do município do Natal/RN

This research study deals with the production and distribution of drinking water with quality and safety in order to meet the needs of the Man. Points out the limitations of the methodology for assessing water quality in use today. Approaches the recommendations of the World Health Organization (WHO) for adoption, by the companies responsible for producing and distributing water, of assessment methodologies and risk management (HACCP), in order to ensure the quality and safety of water drinking. Suggests strategies for implementing the plan for water safety plan. Uses the process of water production, composed by Maxaranguape river basin, the water treatment plant and distribution system, which is part of the Plan for Expansion of the Supply System of Natal, as case study. The results, it was possible to devise strategies for implementation of the Water Safety Plan (WSP), which comprises the following steps: a) a preliminary stage. b) assessment system. c) process monitoring. d) management plan and e) validation and verification of the PSA. At each stage are included actions for its implementation. The implementation of the PSA shows a new type of water production, in which the fountain as a whole (watershed and point of capture), the Water Treatment Plant (WTP) and distribution, shall compose the production process, over which to build quality and safety of the final product (drinking water)

Diagnóstico operacional de lagoas de estabilização

This work intends to develop an approach based through scientific criteria in the operational diagnosis of ponds of stabilization, starting from analyses accomplished in loco and in laboratory of 78 systems of sewer treatment through ponds of stabilization in the State of Rio Grande do Norte. The objectives of the research are: to map, to evaluate and to diagnose the operational acting of the ponds of stabilization of the state of Rio Grande do Norte, through visits in loco and analyses laboratory; to build a SIG, through the map rain, locate the points of releases of sewages of the systems of existent ponds in Rio Grande do Norte, as well as operational data and his/her respective efficiency diagnosis in the removal of BOD and Coliforms Termotolerantes; to evaluate, in real scale, three systems of ponds of stabilization of RN in the operational efficiency for the parameters BOD5, COD, pH, Temperature, OD and Coliforms Termotolerantes. Of 78 ETEs of appraised RN just, 9% or 7 had maximum concepts in what concerns the removal of BOD and Coliforms Termotolerantes and 41% or 32, they had the worst concepts in term of operational efficiency. The flowing concentrations ETEs of RN of BOD and Coliforms were of 410mg/L and 2,50x107UFC/100ml, the predominant configuration is of the type F1+M1+M2, the relationship BOD/COD revealed for the sewer tributary characteristic biodegradable high. For the study of case of 3 ETEs, the best operational efficiencies in decreasing order were: Cidade (Municipal district), it Roça (State) and São Miguel (SAAE). The removals of final BOD were 51,6mg/L; 108,27mg/L and 62,6mg/L, tends efficiency of 82%; 74% and 81%. In term of coliforms removal in the final effluentes were 1,90x103UFC/100ml; 1,50x104UFC/100ml and 3,10x104UFC/100ml, tends efficiencies of 99,99%; 99,95% and 99,90%. In what it concerns the practice of agricultural reúso of cultures consumed raw, none of 3 ETEs assisted the parameters of the Resolution CONAMA 357/05, for other reúso practices, all assisted the categories B and C of OMS. For release in body receiving ETE Cidade just, they assist the demands of the resolution of CONAMA 357/05, by study of purification solemnity of the receiving body. The maintenance lack and operation; exclusive operator in ETEs and operation knowledge was the contributory factors for the operational fall in appraised ETEs of RN

A influência da prática meditativa sobre parâmetros psicofisiológicos e tarefas de memória operacional em indivíduos saudáveis

Meditation is described as a method for improving attention and promoting psychological and emotional stability, presenting favourable results on memory and stress tolerance as well. Studies have shown differences in physiological and psychological measurements between meditators and non-meditators. The aim of this study was to investigate the influence of regular meditation practice on working memory, psychological measurements and quality of life of healthy practitioners. We carried out a comparative study with meditators and non-meditators. Working memory tests and standard inventories of life quality, anxiety, mood, sleep quality, depression and stress were applied. Our study showed that meditators presented better scores in parameters indicative of life quality, mood, depression and stress when compared with non-meditators. Moreover, there was a trend in best performance of meditators in memory tasks (forward digit span task and Hanoi tower). These findings corroborate other studies showing that regular meditation can provide an improvement in general quality of life and affecting positively the behavioral and attentional functions in individuals

Sistema operacional e biblioteca de funções para plataformas MPSOC: um estudo de caso para simuladores de reservatórios

The increasingly request for processing power during last years has pushed integrated circuit industry to look for ways of providing even more processing power with less heat dissipation, power consumption, and chip area. This goal has been achieved increasing the circuit clock, but since there are physical limits of this approach a new solution emerged as the multiprocessor system on chip (MPSoC). This approach demands new tools and basic software infrastructure to take advantage of the inherent parallelism of these architectures. The oil exploration industry has one of its firsts activities the project decision on exploring oil fields, those decisions are aided by reservoir simulations demanding high processing power, the MPSoC may offer greater performance if its parallelism can be well used. This work presents a proposal of a micro-kernel operating system and auxiliary libraries aimed to the STORM MPSoC platform analyzing its influence on the problem of reservoir simulation

CALV3 - Uma linguagem específica de domínio para segurança em sistemas corporativos: um estudo de caso sistemático na indústria

The academic community and software industry have shown, in recent years, substantial interest in approaches and technologies related to the area of model-driven development (MDD). At the same time, continues the relentless pursuit of industry for technologies to raise productivity and quality in the development of software products. This work aims to explore those two statements, through an experiment carried by using MDD technology and evaluation of its use on solving an actual problem under the security context of enterprise systems. By building and using a tool, a visual DSL denominated CALV3, inspired by the software factory approach: a synergy between software product line, domainspecific languages and MDD, we evaluate the gains in abstraction and productivity through a systematic case study conducted in a development team. The results and lessons learned from the evaluation of this tool within industry are the main contributions of this work

PUPSI :uma proposta de processo unificado para políticas de segurança da informação

The way to deal with information assets means nowadays the main factor not only for the success but also for keeping the companies in the global world. The number of information security incidents has grown for the last years. The establishment of information security policies that search to keep the security requirements of assets in the desired degrees is the major priority for the companies. This dissertation suggests a unified process for elaboration, maintenance and development of information security policies, the Processo Unificado para Políticas de Segurança da Informação - PUPSI. The elaboration of this proposal started with the construction of a structure of knowledge based on documents and official rules, published in the last two decades, about security policies and information security. It's a model based on the examined documents which defines the needed security policies to be established in the organization, its work flow and identifies the sequence of hierarchy among them. It's also made a model of the entities participating in the process. Being the problem treated by the model so complex, which involves all security policies that the company must have. PUPSI has an interative and developing approach. This approach was obtained from the instantiation of the RUP - Rational Unified Process model. RUP is a platform for software development object oriented, of Rational Software (IBM group). Which uses the best practice known by the market. PUPSI got from RUP a structure of process that offers functionality, diffusion capacity and comprehension, performance and agility for the process adjustment, offering yet capacity of adjustment to technological and structural charges of the market and the company

Recurso de interface captcha: segurança e usabilidade na distinção entre humano e máquina

Com o intuito de impedir que computadores enviem mensagens automáticas se passando por usuários reais, desenvolvedores tem utilizado o recurso de interface CAPTCHA para distinguir o preenchimento de dados e submissões realizadas por humanos e por máquinas. Este trabalho apresenta as principais modalidades de CAPTCHAs e discute as implicações na usabilidade. Para tanto, foram aplicados questionários e realizados testes de usabilidade em três modalidades de CAPTCHA. Verificou-se que, embora os usuários tenham consciência da importância do uso do CAPTCHA como ferramenta de segurança, percebeu-se que tal recurso compromete a usabilidade, gerando insatisfação e em alguns casos, a desistência da realização da tarefa

Análise multitemporal dos elementos geoambientais da região da Ponta do Tubarão, área de influência dos campos petrolíferos de Macau e Serra, município de Macau/RN

The study area is inserted in Ponta do Tubarão region, Macau City, setentrional littoral of Rio Grande do Norte State, composed of Tertiary and Quatemary sedimentary rocks and sediments. This region is characterized for the intense action of the coastal processes, causing the morphologic instability in part of the area, beyond the interference of human activities, as the Petroliferous Industrial Polo, salt companies and shrimp farms. This justifies the integration of multidisciplinary and multitemporal detailed scientific studies dealing with the evaluation of the changing behavior of this coastal environment by geoenvironments elements characterization, identifying protected and recuperation areas, mainly those under socioeconomic intervention. The main objective was the coastal monitoring using geoprocessing techniques to prepare thematic maps useful for oil spilling environment risk areas survey. The methodology was based on multitemporal interpretation of remote sensing images and field checking, integrated in a Geographical Information System (GIS). The Geologic, Geomorphologic, Vegetation, Soil and Land Use maps were prepared, and later on they allowed the generation of the Natural Vulnerability and Environmental Vulnerability maps. These maps had been classified in accordance with vulnerability degrees: very low, low, medi um, high and very high. Beyond these maps the GIS allowed the analysis of the shoreline evolution for 10 distinct dates, using Landsat 5 TM and 7 ETM+ and SPOT-HRVIR images. This analysis made possible the attendance of the coastal morphodynamic evolution, where the results had been represented by areasof erosion and accretion (or deposition) of sediments, pointing critical areas under erosive process to the petroliferous industry (Macau and Serra fields). The GIS also provided to prepare the Environmental Sensitivity Maps of Oil Spill (SAO Maps) in operational scale (1: 10.000), according to the norms ofthe Ministério do Meio Ambiente (MMA 2002). The SAO Map in operational scale was based on IKONOS images mosaic where the ESI (Environmental Sensitivity Index) was represented according with two tides phases of theregion. Therewere recognizedfiveESI (3, 4,7,9, 1O) for the low tide; to the high tide the ESI number increased to seven (3, 4, 5, 7, 8, 9, 10). All these information are necessary to the decisions making about oi! spill and its derivatives containment. These techniques application makes possible the optimization and implantation ofnew socioeconomics activities of low environmental impact, indicates areas for better productivity and security exploration, and benefits local communities with fauna and flora preservation. The development of these activities is inserted in the scope of Monitoramento Ambiental de Áreas de Risco a Derrames de Petróleo e Seus Derivados Cooperation Project (Rede 05/01 - PETRORISCO, FINEP/CTPETRO/PETROBRAS) of multidisciplinary and interinstitucional characteristics dealing with subjects involving the environmental monitoring and the petroliferous activity