Multi-factor password-authenticated key exchange

We consider a new form of authenticated key exchange which we call multi-factor password-authenticated key exchange, where session establishment depends on successful authentication of multiple short secrets that are complementary in nature, such as a long-term password and a one-time response, allowing the client and server to be mutually assured of each other's identity without directly disclosing private information to the other party. Multi-factor authentication can provide an enhanced level of assurance in higher-security scenarios such as online banking, virtual private network access, and physical access because a multi-factor protocol is designed to remain secure even if all but one of the factors has been compromised. We introduce a security model for multi-factor password-authenticated key exchange protocols, propose an efficient and secure protocol called MFPAK, and provide a security argument to show that our protocol is secure in this model. Our security model is an extension of the Bellare-Pointcheval-Rogaway security model for password-authenticated key exchange and accommodates an arbitrary number of symmetric and asymmetric authentication factors.

An adaptable framework for the teaching and assessment of software development across year levels

Few frameworks exist for the teaching and assessment of programming subjects that are coherent and logical. Nor are they sufficiently generic and adaptable to be used outside the particular tertiary institutions in which they were developed. This paper presents the Teaching and Assessment of Software Development (TASD) frame-work. We describe its development and implementation at an Australian university and demonstrate, with examples, how it has been used, with supporting data. Extracts of criteria sheets (grading rubrics) for a variety of assessment tasks are included. The numerous advantages of this new framework are discussed with comparisons made to those reported in the published literature.

Beyond charity : outlines of a jurisprudence for civil society

There is not a single, coherent, jurisprudence for civil society organisations. Pressure for a clearly enuciated body of law applying to the whole of this sector of society continues to increase. The rise of third sector scholarship, the retreat of the welfare state, the rediscovery of the concept of civil society and pressures to strengthen social capital have all contributed to an ongoing stream of inquiry into the laws that regulate and favour civil society organisations. There have been almost thirty inquiries over the last sixty years into the doctrine of charitable purpose in common law countries. Those inquiries have established that problems with the law applying to civil society organisations are rooted in the common law adopting a ‘technical’ definition of charitable purpose and the failure of this body of law to develop in response to societal changes. Even though it is now well recognised that problems with law reform stem from problems inherent in the doctrine of charitable purpose, statutory reforms have merely ‘bolted on’ additions to the flawed ‘technical’ definition. In this way the scope of operation of the law has been incrementally expanded to include a larger number of civil society organisations. This piecemeal approach continues the exclusion of most civil society organisations from the law of charities discourse, and fails to address the underlying jurisprudential problems. Comprehensive reform requires revisiting the foundational problems embedded in the doctrine of charitable purpose, being informed by recent scholarship, and a paradigm shift that extends the doctrine to include all civil society organisations. Scholarly inquiry into civil society organisations, particularly from within the discipline of neoclassical economics, has elucidated insights that can inform legal theory development. This theory development requires decoupling the two distinct functions performed by the doctrine of charitable purpose which are: setting the scope of regulation, and determining entitlement to favours, such as tax exemption. If the two different functions of the doctrine are considered separately in the light of theoretical insights from other disciplines, the architecture for a jurisprudence emerges that facilitates regulation, but does not necessarily favour all civil society organisations. Informed by that broader discourse it is argued that when determining the scope of regulation, civil society organisations are identified by reference to charitable purposes that are not technically defined. These charitable purposes are in essence purposes which are: Altruistic, for public Benefit, pursued without Coercion. These charitable puposes differentiate civil society organisations from organisations in the three other sectors namely; Business, which is manifest in lack of altruism; Government, which is characterised by coercion; and Family, which is characterised by benefits being private not public. When determining entitlement to favour, it is theorised that it is the extent or nature of the public benefit evident in the pursuit of a charitable purpose that justifies entitlement to favour. Entitlement to favour based on the extent of public benefit is the theoretically simpler – the greater the public benefit the greater the justification for favour. To be entitled to favour based on the nature of a purpose being charitable the purpose must fall within one of three categories developed from the first three heads of Pemsel’s case (the landmark categorisation case on taxation favour). The three categories proposed are: Dealing with Disadvantage, Encouraging Edification; and Facilitating Freedom. In this alternative paradigm a recast doctrine of charitable purpose underpins a jurisprudence for civil society in a way similar to the way contract underpins the jurisprudence for the business sector, the way that freedom from arbitrary coercion underpins the jurisprudence of the government sector and the way that equity within families underpins succession and family law jurisprudence for the family sector. This alternative architecture for the common law, developed from the doctrine of charitable purpose but inclusive of all civil society purposes, is argued to cover the field of the law applying to civil society organisations and warrants its own third space as a body of law between public law and private law in jurisprudence.

Lifting the lifegiving dollar : case samples of creative practice in health and medical research philanthropy

This study aims to stimulate thought, debate and action for change on this question of more vigorous philanthropic funding of Australian health and medical research (HMR). It sharpens the argument with some facts and ideas about HMR funding from overseas sources. It also reports informed opinions from those working, giving and innovating in this area. It pinpoints the range of attitudes to HMR giving, both positive and negative. The study includes some aspects of Government funding as part of the equation, viewing Government as major HMR givers, with particular ability to partner, leverage and create incentives. Stimulating new philanthropy takes active outreach. The opportunity to build more dialogue between the HMR industry and the wider community is timely given the ‘licence to practice’ issues and questioned trust that applies currently somewhat both to science and to the charitable sector. This interest in improving HMR philanthropy also coincides with the launch last year by the Federal Government of Nonprofit Australia Limited (NAL), a group currently assessing infrastructure improvements to the charitable sector. History suggests no one will create this change if Research Australia does not. However, interest in change exists in various quarters. For Research Australia to successfully change the culture of Australian HMR giving, the process will drive the outcomes. Obviously stakeholder buy-in and partners will be needed and the ultimate blueprint for greater philanthropic HMR funding here will not be this document. Instead it will be the one that wears the handprint and ‘mindprint’ of the many architects and implementers interested in promoting HMR philanthropy, from philanthropists to nonprofit peaks to government policy arms. As the African proverb says, ‘If you want to go fast, go alone; but if you want to go far, go with others’.

Physical and environmental determinants

This chapter describes physical and environmental determinants of the health of Australians, providing a background to the development of successful public health activity. Health determinants are the biomedical, genetic, behavioural, socio-economic and environmental factors that impact on health and wellbeing. These determinants can be influenced by interventions and by resources and systems (AIHW 2006). Many factors combine to affect the health of individuals and communities. People’s circumstances and the environment determine whether the population is healthy or not. Factors such as where people live, the state of their environment, genetics, their education level and income, and their relationships with friends and family, all are likely to impact on their health. The determinants of population health reflect the context of people’s lives; however, people are very unlikely to be able to control many of these determinants (WHO 2007). This chapter and Chapter 6 illustrate how various determinants can relate to, and influence other determinants, as well as health and wellbeing. We believe it is particularly important to provide an understanding of determinants and their relationship to health and illness in order to provide a structure in which a broader conceptualisation of health can be placed. Determinants of health do not exist in isolation from one another. More frequently they work together in a complex system. What is clear to anyone who works in public health is that many factors impact on the health and wellbeing of people. For example, in the next chapter we discuss factors such as living and working conditions, social support, ethnicity and class, income, housing, work stress and the impact of education on the length and quality of people’s lives. In 1974, the influential ‘Lalonde Report’ (Lalonde 1974) described key factors that impact on health status. These factors included lifestyle, environment, human biology and health services. Taking a population health approach builds on the Lalonde Report, and recognises that a range of factors, such as living and working conditions and the distribution of wealth in society, interact to determine the health status of a population. Tackling health determinants has great potential to reduce the burden of disease and promote the health of the general population. In summary, we understand very clearly now that health is determined by the complex interactions between individual characteristics, social and economic factors and physical environments; the entire range of factors that impact on health must be addressed if we are to make significant gains in population health, and focussing interventions on the health of the population or significant sub-populations can achieve important health gains. In 2007, the Australian Government included in the list of National Health Priority Areas the following health issues: cancer control, injury prevention and control, cardiovascular health, diabetes mellitus, mental health, asthma, and arthritis and musculoskeletal conditions. The National Health Priority Areas set the agenda for the Commonwealth, States and Territories, Local Governments and not-for-profit organisations to place attention on those areas considered to be the major foci for action. Many of these health issues are discussed in this chapter and the following chapter.

An analysis of the RC4 family of stream ciphers against algebraic attacks

To date, most applications of algebraic analysis and attacks on stream ciphers are on those based on lin- ear feedback shift registers (LFSRs). In this paper, we extend algebraic analysis to non-LFSR based stream ciphers. Specifically, we perform an algebraic analysis on the RC4 family of stream ciphers, an example of stream ciphers based on dynamic tables, and inves- tigate its implications to potential algebraic attacks on the cipher. This is, to our knowledge, the first pa- per that evaluates the security of RC4 against alge- braic attacks through providing a full set of equations that describe the complex word manipulations in the system. For an arbitrary word size, we derive alge- braic representations for the three main operations used in RC4, namely state extraction, word addition and state permutation. Equations relating the inter- nal states and keystream of RC4 are then obtained from each component of the cipher based on these al- gebraic representations, and analysed in terms of their contributions to the security of RC4 against algebraic attacks. Interestingly, it is shown that each of the three main operations contained in the components has its own unique algebraic properties, and when their respective equations are combined, the resulting system becomes infeasible to solve. This results in a high level of security being achieved by RC4 against algebraic attacks. On the other hand, the removal of an operation from the cipher could compromise this security. Experiments on reduced versions of RC4 have been performed, which confirms the validity of our algebraic analysis and the conclusion that the full RC4 stream cipher seems to be immune to algebraic attacks at present.

Mapping social enterprise in Australia : conceptual debates and their operational implications

In the last ten years, there has been growing interest in social enterprise by governments, the not for profit sector and philanthropy in Australia The drivers of this interest have been variously understood to be: increasing demands for innovative responses to social and environmental problems; pressures on non-profit organisations to diversify their income sources; and increasing emphases by government on the role of civil society actors in partnering around social policy agendas. Whatever its genesis, very little is known about the scale and scope of the emerging social enterprise sector. In order to research the scope of the sector, an important first step involves understanding just what social enterprise is, and how it may be operationalised. This paper presents the findings from the first stage of a national research project conducted by the authors in conjunction with a new social enterprise development company. The purpose of the project was to provide a comprehensive snapshot of the social enterprise sector in Australia. In this paper, we focus on the definitional debates arising from our workshop discussions, what these mean for understanding contemporary discourses of social enterprise, and their implications for research, policy and practice.

Assessing and learning in internships: Reflecting on pedagogy and progress

An elective internship unit as part of a work integrated learning program in a business faculty is presented as a case study. In the unit, students complete a minimum of 120 hours work placement over the course of a 13 week semester. The students are majoring in advertising, marketing, or public relations and are placed in corporations, government agencies, and not for profit organisations. To support and scaffold the students’ learning in the work environment, a range of classroom and online learning activities are part of the unit. Classroom activities include an introductory workshop to prepare students for placement, an industry panel, and interview workshop. These are delivered as three workshops across the semester. Prior to commencing their placement, students complete a suite of online learning modules. The Work Placement Preparation Program assists students in securing obtaining a placement and make a successful transition to the work environment. It provides an opportunity for students to source possible work placement sites, prepare competitive applications, develop and rehearse interview skills, deal with workplace issues, and use a student ePortfolio to reflect on their skills and achievements. Students contribute to a reflective blog throughout their placement, with feedback from academic supervisors throughout the placement. The completion of the online learning modules and contribution to a reflective blog are assessed as part of the unit. Other assessment tools include a internship plan and learning contract between the student, industry supervisor, and academic supervisor; job application including responses to selection criteria; and presentation to peers, academics and industry representatives at a poster session. The paper discusses the development of the internship unit over three years, particularly learning activities and assessment. The reflection and refinement of the unit is informed by a pedagogical framework, and the development of processes to best manage placement for all stakeholders. A model of best practice is proposed, that can be adapted to a variety of discipline areas.

Early relational reasoning and the novice programmer : swapping as the “hello world” of relational reasoning

We report on a longitudinal research study of the development of novice programmers in their first semester of programming. In the third week, almost half of our sample of students could not answer an explain-in-plain-English question, for code consisting of just three assignment statements, which swapped the values in two variables. We regard code that swaps the values of two variables as the simplest case of where a programming student can manifest a SOLO relational response. Our results demonstrate that the problems many students face with understanding code can begin very early, on relatively trivial code. However, using traditional programming exercises, these problems often go undetected until late in the semester. New approaches are required to detect and fix these problems earlier.

Modular transactional memory

Software transactional memory has the potential to greatly simplify development of concurrent software, by supporting safe composition of concurrent shared-state abstractions. However, STM semantics are defined in terms of low-level reads and writes on individual memory locations, so implementations are unable to take advantage of the properties of user-defined abstractions. Consequently, the performance of transactions over some structures can be disappointing. ----- ----- We present Modular Transactional Memory, our framework which allows programmers to extend STM with concurrency control algorithms tailored to the data structures they use in concurrent programs. We describe our implementation in Concurrent Haskell, and two example structures: a finite map which allows concurrent transactions to operate on disjoint sets of keys, and a non-deterministic channel which supports concurrent sources and sinks. ----- ----- Our approach is based on previous work by others on boosted and open-nested transactions, with one significant development: transactions are given types which denote the concurrency control algorithms they employ. Typed transactions offer a higher level of assurance for programmers reusing transactional code, and allow more flexible abstract concurrency control.

Motivations and intentions : a case study of design-led activism

With a focus on intention and motivation, this paper describes a study involving three organisational communities and their collective effort to develop and provide more inclusive housing for people with disabilities and their families. While many studies, such as that by Rocha & Miles (2009), focus on commercial organisations, and sustainability from an economic perspective, this study involves a not-for-profit organisation (the accommodation and service provider) as well as a research organisation and a design action group volunteering their services free of charge. From this pro-bono context, the paper describes a case study that explores the nature of the collective as a basis for creative practice and political activism and the theoretical implications and wider application in terms of emerging research in the area of collaborative entrepreneurship and design activism.

Socially adaptable housing new housing model for families living with disability

In Australia as far back as 1993, researchers such as Baladin and Chapmen reported that "18% of the total Australian population and 51% of the population over 60 years of age were identified as having a disability" (2001; p38.2). Statistics such as these are not by any means astonishing, even to members of the general public, and it is widely understood that these are only to increase significantly in our near future. What is particularly surprising however is, in the face of such statistics, the lack of new and creative responses to this demographic shift, particularly by the architecture and construction industries. The common response from a range of sectors seems to be the repetition of a series of models which offer limited, and often undesirable, housing options. It is this against this backdrop, characterized by a lack of original options from mainstream practitioners and relevant government bodies, that the need has arisen to develop alternative models at grass-roots level. This paper reports primarily on the work of one group comprising a not-for-profit organization, a pro-bono design practice group and a local university working together to design a more holistic, emotionally sustainable independent living model of housing for families where a member of the family has a disability. This approach recognizes the limitations of universal design in that it often does not " ... meet all the housing needs that arise for people with moderate to severe disabilities" (Scotts, Margie et al, 2007; p.17). It is hoped that by examining the work of such a collective which is not driven by profit or policy, but rather born with the aim to address first and foremost individual and community need, that better insight can be gained into the real requirements of individuals and families as well as open up a view to new ways of fulfilling them.

Inclusive universal design practice and activism : a case study

This paper reports on a unique approach to inclusive practice that responds to several critical issues highlighted in the first Universal Design (UD) Conference in Yokohama as well as in more recent literature on universal design. The approach, as explained in the paper, involves a not-for-profit community organization, university researchers, and a design action group comprising practitioners from across the design disciplines, together with other specialist consultants, developing a voluntary capacity an independent housing model for people with disabilities and their families or caretakers. With a focus on relationships and "a system that places human beings at the centre in all respects", this paper presents the approach and the ermerging theoretical framework which addresses three issues that afacan and Erbug (2009) propose hinder the integration of universal design with design practice, namely: theory-practice inconsistency involving the lack of flow-on of universal design awareness into design practice; a way of thinking that exhibits very little empathy with and understanding of the requirements of diverse users; and poorly implemented and coordinated collaboration and communication involving designers and other professionals (pp. 731 - 732).

iRAP Malaysia training course : decade of action for road safety

The International Road Assessment Program (iRAP) is a not-for-profit organisation that works in partnership with governments and non-government organisations in all parts of the world to make roads safe. The iRAP Malaysia pilot study on 3700km of road identified the potential to prevent 31,800 deaths and serious injuries over the next 20 years from proven engineering improvements. To help ensure the iRAP data and results are available to planners and engineers, iRAP, together with staff from the Centre for Accident Research and Road Safety – Queensland (CARRS-Q) and the Malaysian Institute of Road Safety Research (MIROS), developed a five-day iRAP training course that covers the background, theory and practical application of iRAP protocols, with a special focus on Malaysian case studies. Funding was provided by a competitive grant from the Australia-Malaysia Institute.