Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: 1) if policies are complex, their enforcement can lead to performance decay of database servers; 2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: (1) if policies are complex, their enforcement can lead to performance decay of database servers; (2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

The effects of acute administration of Chinese aphrodisiacs sold in Blantyre City on sperm characteristics and fertility profile in guinea pigs

Background Chinese aphrodisiacs have become popular remedy for sexual dysfunction and improvement of libido in men in Malawi. However, selling of these drugs seems not to be well regulated. Probably the aphrodisiacs that are currently on the market have unknown efficacy, potency and safety profiles. The aim of this study was to assess the efficacy of imported Chinese aphrodisiacs using guinea pigs as a model. Materials and Methods Two types of drugs were purchased from vendors in Blantyre City. Tonic tea, which was purported to improve erectile function and libido, and sperm multiplier tablets which were claimed to increase the sperm count. The tonic tea was prepared by soaking one tea bag in 100ml boiling water. The tea was cooled and administered to eight male experimental animals in varying doses. Each animal was introduced into a separate cage with a female guinea pig. Sexual behaviour such as mounting, sniffing behind the female were observed and recorded. Each sperm multiplier tablet was dissolved in distilled water and administered to the experimental animals in the morning and evening for seven days. At the end of the treatment, the experimental and control animals were sacrificed, their semen collected and analysed sperm motility, concentration and morphology. Results For the tonic tea, there were no statistical differences between the experimental and the control animals in terms of the number of mountings and sniffing behind the female. The sperm multiplier drug showed statistically significant differences between the experimental and the control animals in terms of the sperm motility (78.24 ± 1.35 vs. 86.54 ± 1.88, p< 0.05), and concentration (54.28 ± 1.24 vs. 67.59 ± 2.12, p<0.05). Conclusion The tonic tea did not show any efficacy in improving erection and libido. The sperm multiplier tablets, purported to increase sperm production, significantly increased the sperm motility, sperm concentration in the treated animals.

Sponsorship and IT vendor management of projects

Project sponsorship is assumed to be critical to the success of information systems development and implementation. However, there is limited research on the effect of vendor-based sponsorship on the management of information technology (IT) projects. This paper contributes to that emerging body of evidence. Drawing on literature on psychological contract, management control and project sponsorship, the authors propose that vendor-based sponsors influence project performance in two main ways. One is to protect project quality by renegotiating contract with the client; and the other is to resource the project. Based on a survey of senior managers in IT services vendor organisations, it reports that project sponsorship improves the quality, but not the cost or timeliness, of vendor delivery of IT projects. The findings suggest that IT services vendors can improve their project delivery capability by appointing project sponsors.

Risk, regulation, and financial incentives for living kidney donation

In his comprehensive review of the hazards of existing,largely unregulated markets in human kidneys, Koplin(2014) argues that advocates of regulated markets mayunderestimate the potential physical, psychosocial andfinancial harms risked by vendors. He acknowledges, however,that market proponents will likely be undeterred incalling for “trials” or “pilot studies” of financial incentivesin developed countries on the grounds that the experienceof international black markets is of limited predictive valuein anticipating the outcomes of regulated markets. We contendthat there is good evidence to support the concernthat living vendors would be at higher risk of adversehealth outcomes compared to altruistic donors in the contextof a regulated market. This has important implicationsnot only for the informed consent of prospective vendors,but also for the potential regulations that would berequired to mitigate these risks. We argue here that pilotstudies would be at the very least premature until suchtime as market proponents have sufficiently engaged withpotential harms to prospective kidney vendors.

Hygienic practices among food vendors in educational institutions in Ghana: the case of Konongo

With the booming street food industry in the developing world there is an urgent need to ensure food vendors adhere to hygienic practices to protect public health. This study assessed the adherence to food hygiene practices by food vendors in educational institutions in Konongo, Ghana. Structured questionnaires, extensive observation and interviews were used for the study involving 60 food vendors from 20 basic schools. Attributable to the influence of school authorities and the level of in-training of food vendors, the study points out that food vendors in educational institutions generally adhered to good food hygiene practices, namely, regular medical examination (93%), protection of food from flies and dust (55%); proper serving of food (100%); good hand hygiene (63%); and the use of personal protective clothing (52%). The training of food vendors on food hygiene, instead of the level of education had a significant association (p < 0.05) with crucial food hygiene practices such as medical examination, hand hygiene and protection of food from flies and dust. Further, regulatory bodies legally mandated to efficiently monitor the activities of food vendors lacked the adequate capacity to do so. The study proposes that efforts should be geared towards developing training programmes for food vendors as well as capacity building of the stakeholders.