Insider threats: the major challenge to security risk management

Security risk management is by definition, a subjective and complex exercise and it takes time to perform properly. Human resources are fundamental assets for any organization, and as any other asset, they have inherent vulnerabilities that need to be handled, i.e. managed and assessed. However, the nature that characterize the human behavior and the organizational environment where they develop their work turn these task extremely difficult, hard to accomplish and prone to errors. Assuming security as a cost, organizations are usually focused on the efficiency of the security mechanisms implemented that enable them to protect against external attacks, disregarding the insider risks, which are much more difficult to assess. All these demands an interdisciplinary approach in order to combine technical solutions with psychology approaches in order to understand the organizational staff and detect any changes in their behaviors and characteristics. This paper intends to discuss some methodological challenges to evaluate the insider threats and its impacts, and integrate them in a security risk framework, that was defined according to the security standard ISO/IEC_JTC1, to support the security risk management process.

Design of a case-based reasoner for information security in military organizations

Information security is concerned with the protection of information, which can be stored, processed or transmitted within critical information systems of the organizations, against loss of confidentiality, integrity or availability. Protection measures to prevent these problems result through the implementation of controls at several dimensions: technical, administrative or physical. A vital objective for military organizations is to ensure superiority in contexts of information warfare and competitive intelligence. Therefore, the problem of information security in military organizations has been a topic of intensive work at both national and transnational levels, and extensive conceptual and standardization work is being produced. A current effort is therefore to develop automated decision support systems to assist military decision makers, at different levels in the command chain, to provide suitable control measures that can effectively deal with potential attacks and, at the same time, prevent, detect and contain vulnerabilities targeted at their information systems. The concept and processes of the Case-Based Reasoning (CBR) methodology outstandingly resembles classical military processes and doctrine, in particular the analysis of “lessons learned” and definition of “modes of action”. Therefore, the present paper addresses the modeling and design of a CBR system with two key objectives: to support an effective response in context of information security for military organizations; to allow for scenario planning and analysis for training and auditing processes.

Nickel(II) complexes of bidentate N-N′ ligands containing mixed pyrazole, pyrimidine and pyridine aromatic rings as catalysts for ethylene polymerisation

This work describes the synthesis and characterisation of Ni(II) complexes of the following neutral bidentate nitrogen ligands containing pyrazole (pz), pyrimidine (pm) and pyridine (py) aromatic rings: 2-pyrazol-1-yl-pyrimidine (pzpm), 2-(4-methyl-pyrazol-1-yl)-pyrimidine (4-Mepzpm), 2-(4-bromo-pyrazol-1-yl)-pyrimidine (4-Brpzpm), 2-(3,5-dimethyl-pyrazol-1-yl)-pyrimidine (pz*pm), 2-pyrazol-1-yl-pyridine (pzpy) and bis(3,5-dimethylpyrazol-1-yl)phenylmethane (bpz*mph). The complexes [NiBr2(pzpm)] (1), [NiBr2(4-Mepzpm)] (2), [NiBr2(4-Brpzpm)] (3), [NiBr2(pz*pm)] (4), [NiBr2(pzpy)] (5) and [NiBr2(bpz*mph)] (6) were tested as catalysts for ethylene polymerisation, in the presence of the cocatalysts methylaluminoxane (MAO) or diethylaluminium chloride (AlEt2Cl), the catalyst systems 1-3/MAO showing moderate to high activities up to the temperature of 20 °C only in the presence of MAO, whereas 4-6/MAO revealed to be inactive. Other related Pd(II) complexes, already reported in previous works, such as [PdClMe(pzpm)], [PdClMe(pz*pm)], [PdClMe(pzpy)] and [PdClMe(bpz*mph)], also showed to be inactive in the polymerisation of ethylene, when activated by MAO or AlEt2Cl. Selected samples of polyethylene products were characterised by GPC/SEC, 1H and 13C NMR and DSC, showing to be low molecular weight polymers with Mn values ranging from ca. 550 to 1500 g mol−1 and unusually low dispersities of 1.2–1.7, with total branching degrees generally varying between 2 and 12%, melting temperatures from 40 to 120 °C and crystallinities from 40 to 70%.

China and India’s Maritime Geostrategies:: Implications for International Maritime Security and Scenarios for 2030

Dissertação de Mestrado em Estratégia

Análisis crítico de la formación y capacitación del profesional de la seguridad en la Provincia de Córdoba en los últimos diez años. A critical analysis of the formation and training of the professional in the area of security in the province of Córdoba in the last 10 years.

El problema que abordaremos es la transformación y la toma de decisiones en los procesos de formación y capacitación de las instituciones de seguridad, específicamente, los motivos y fundamentos de los cambios en los planes de estudios, en relación a los contenidos curriculares de los institutos de formación de los profesionales en seguridad. Esto sobre la hipótesis de que las organizaciones educativas policiales y penitenciarias han llevado a cabo transformaciones en su organización y gestión curricular para adecuarse a las nuevas demandas sociales y políticas. El objetivo del presente proyecto es analizar críticamente los contenidos curriculares de los institutos de formación y capacitación de la Policía y Servicio Penitenciario de la Provincia de Córdoba. Abordaremos el análisis de los planes de dichas instituciones en los últimos 10 años, sus modificaciones y criterios utilizados para responder a los nuevos escenarios sociales. Se hará una exploración de la información y la documentación existente en los ámbitos oficiales. Asimismo, la investigación contará con la realización de entrevistas y encuestas a directivos, docentes, alumnos y demás actores claves, con la finalidad de recabar la opinión de los mismos respecto de las transformaciones en la educación policial y penitenciaria. A partir del proyecto de investigación se pretende construir conocimiento acerca de las políticas educativas en el área de seguridad especialmente sobre la formación y capacitación de recursos profesionales específicos, dentro del ámbito local. De tal modo, se pretende aportar elementos teóricos de análisis al modo en que se han instituido la oferta educativa y las transformaciones en los planes de estudios en las instituciones de formación profesional de la seguridad y cómo éstos han sido implementados a la luz de los nuevos escenarios políticos y sociales. Esto nos permitirá aportar al incipiente campo de los estudios sobre la seguridad, específicamente sobre la formación de los profesionales en seguridad, poniendo a diposición de los responsables gubernamentales e institucionales un estudio que explora y sistematiza las transformaciones y fundamentos de la politica de educación en el campo de la seguridad provincial. Este desarrollo investigativo nos permitirá inagurar la actividad de producción de conocimiento dentro del ámbito académico de la Licenciatura en Seguridad de la Universidad Nacional de Villa María a través del presente proyecto que describirá el proceso de formación y capacitación policial y penitenciaria y los cambios que con el transcurso del tiempo se han verificado.

Resonancia Magnética Nuclear aplicada al estudio de nuevos sistemas farmacéuticos y biológicos, complejos poliméricos y conjuntos de espines modelo. Nuclear Magnetic Resonance applied to the study of new pharmaceutical and biological systems, polymeric complexes and model spin clusters.

El presente proyecto plantea utilizar integralmente la técnica de Resonancia Magnética Nuclear en sólidos como un medio experimental que permite entender fenómenos de la física fundamental, como así también realizar aplicaciones de interés en el campo de la química, los desarrollos farmacéuticos y la biología. Novedosas técnicas experimentales serán empleadas, en conjunción con otras más tradicionales, en la caracterización de nuevas estructuras poliméricas acomplejadas a metales, membranas biológicas y compuestos de interés farmacéutico en vías de desarrollo, los cuales presentan el fenómeno de polimorfismo . Esto se llevará a cabo complementando los resultados de RMN en sólidos con técnicas tanto espectroscópicas como analíticas (Infrarrojo, Difracción de Rayos X, Calorimetría, RMN en solución) y trabajo interdisciplinario. Paralelamente al desarrollo de estos temas, profundizaremos mediante investigación básica, en la compresión de la dinámica cuántica y el surgimiento de la irreversibilidad en sistemas de espines nucleares. Observaremos en particular la generación, evolución y control de las coherencias cuánticas múltiples en sistemas cuánticos abiertos, lo cual nos da información sobre tamaño de clusters de espines. Esto permitirá la correcta implementación de secuencias de pulsos sofisticadas, como así también desarrollar nuevos métodos de medición aplicados a la caracterización estructural y a la dinámica molecular de sólidos complejos. Debemos resaltar que este proyecto está conectado con aspectos tanto básicos como aplicados de la RMN en sólidos como técnica experimental, la cual se desarrolla en el país únicamente en FaMAF-UNC. Se nutre además de trabajo multidisciplinario promoviendo la colaboración con investigadores y becarios de distintas áreas (física, química, farmacia, biología) provenientes de distintos puntos del país. Finalmente podemos afirmar que este plan impulsa la aplicación de la física básica proyectada a diferentes áreas del conocimiento, en el ámbito de la provincia de Córdoba. The aim of the present proyect is to use Nuclear Magnetic Resonance (NMR) as a complete techique that allows the understanding of fundamental physics phenomena and, at the same time, it leads to important applications in the fields of chemistry, pharmaceutical developments and biology. New experiments will be used together with traditional ones, in the characterization of new metal-polymer complexes, biological membranes and pharmaceutical compounds, some of them presenting polymorfism. NMR experiments will be complemented with diverse spectroscopic and analytical techniques: Infrared, X ray Diffraction, Thermal Analysis, solution NMR, as well as multidisciplinary investigation. Additionally, the present proyect plans to study in depth several aspects of quantum dynamics phenomena and decoherence in nuclear spin systems. The present proyect is connected with basic and applied aspects of the solid state NMR technique, developed in our country, only at FaMAF-UNC. It is is composed by multidisciplinary work and it promotes the collaboration with researchers and students coming from different fields (physics, chemistry, pharmaceutical developments, biology) and different points of our country.

An investigation into system security requirements and implementation in an Application Service Provider (ASP) environment

Although the ASP model has been around for over a decade, it has not achieved the expected high level of market uptake. This research project examines the past and present state of ASP adoption and identifies security as a primary factor influencing the uptake of the model. The early chapters of this document examine the ASP model and ASP security in particular. Specifically, the literature and technology review chapter analyses ASP literature, security technologies and best practices with respect to system security in general. Based on this investigation, a prototype to illustrate the range and types of technologies that encompass a security framework was developed and is described in detail. The latter chapters of this document evaluate the practical implementation of system security in an ASP environment. Finally, this document outlines the research outputs, including the conclusions drawn and recommendations with respect to system security in an ASP environment. The primary research output is the recommendation that by following best practices with respect to security, an ASP application can provide the same level of security one would expect from any other n-tier client-server application. In addition, a security evaluation matrix, which could be used to evaluate not only the security of ASP applications but the security of any n-tier application, was developed by the author. This thesis shows that perceptions with regard to fears of inadequate security of ASP solutions and solution data are misguided. Finally, based on the research conducted, the author recommends that ASP solutions should be developed and deployed on tried, tested and trusted infrastructure. Existing Application Programming Interfaces (APIs) should be used where possible and security best practices should be adhered to where feasible.

Georgia: National Security Concept Versus National Security

საქართველოს ეროვნული უსაფრთხოების კონცეფციის განახლებული ვერსიის გამოჩენა შესაძლებლობას იძლევა საიმისოდ, რომ გადავხედოთ საქართველოს ოფიციალურ შეხედულებას უსაფრთხოების შესახებ და შევაფასოთ ქვეყნის დამოკიდებულება საშინაო თუ საგარეო უსაფრთხოების გარემოსადმი;სტატია, პირველ რიგში, განიხილავს საქართველოს ეროვნული უსაფრთხოების დაგეგმვის გარემოებებს. შემდეგ ჩამოთვლილია კონცეფიციის პოზიტიური ასპექტები. ანალიზის ძირითადი ნაწილი მოიცავს ხუთ პრობლემატურ საკითხს. პირველი არის შიდა არასტაბილურობის შესაძლებლობა, რომლის შესახებ კონცეფციაში არაფერია ნათქვამი. მეორე საკითხი ეხება გლობალიზაციისა და ურთიერთდამოკიდებულების უსაფრთხოების ასპექტებს. მესამე საკითხი მოიცავს სამხრეთ კავკასიის რეგიონში არსებულ საფრთხეებს, კერძოდ კი, მთიანი ყარაბახის კონფლიქტს და არასტაბილურ მდგომარეობას ჩრდილოეთ კავკასიაში. მეოთხე საკითხი არის რუსეთისგან მომავალი საფრთხე. ბოლოს, განხილულია საქართველოს დასავლური ორიენტაცია.

Late Outcome of a Randomized Study on Oral Magnesium for Premature Complexes

Background:Ventricular and supraventricular premature complexes (PC) are frequent and usually symptomatic. According to a previous study, magnesium pidolate (MgP) administration to symptomatic patients can improve the PC density and symptoms.Objective:To assess the late follow-up of that clinical intervention in patients treated with MgP or placebo.Methods:In the first phase of the study, 90 symptomatic and consecutive patients with PC were randomized (double-blind) to receive either MgP or placebo for 30 days. Monthly follow-up visits were conducted for 15 months to assess symptoms and control electrolytes. 24-hour Holter was performed twice, regardless of symptoms, or whenever symptoms were present. In the second phase of the study, relapsing patients, who had received MgP or placebo (crossing-over) in the first phase, were treated with MgP according to the same protocol.Results:Of the 45 patients initially treated with MgP, 17 (37.8%) relapsed during the 15-month follow-up, and the relapse time varied. Relapsing patients treated again had a statistically significant reduction in the PC density of 138.25/hour (p < 0.001). The crossing-over patients reduced it by 247/hour (p < 0.001). Patients who did not relapse, had a low PC frequency (3 PC/hour). Retreated patients had a 76.5% improvement in symptom, and crossing-over patients, 71.4%.Conclusion:Some patients on MgP had relapse of symptoms and PC, indicating that MgP is neither a definitive nor a curative treatment for late follow-up. However, improvement in the PC frequency and symptoms was observed in the second phase of treatment, similar to the response in the first phase of treatment.

Methodical Bases of the Integrated Electrotechnical Complexes Life Cycle Logistic Support

Complex aspects of management by life cycle ofelectrotechnical complexes of the oil-extracting enterprises by amethod of the integrated logistic support are considered.

Context modelling for IT security in selected application scenarios

Magdeburg, Univ., Fak. für Informatik, Diss., 2015

Security prices and market transparency: the role of prior information

This paper analyzes the role of traders' priors (proper versus improper) on the implications of market transparency by comparing a pre-trade transparent market with an opaque market in a set-up based on Madhavan (1996). We show that prices may be more informative in the opaque market, regardless of how priors are modelled. In contrast, the comparison of market liquidity and volatility in the two market structures are affected by prior specification. Key words: Market microstructure, Transparency, Prior information

The EU as a security provider in its neighbourhood: the case of non-proliferation of WMD in the Mediterranean area

As a consequence of the terrorist attacks of 9/11 and the US-led war against Iraq, WMD and their proliferation have become a central element of the EU security agenda. In December 2003, the European Council adopted even a EU Strategy against Proliferation of WMD. The approach adopted in this Strategy can be largely described as a ‘cooperative security provider’ approach and is based on effective multilateralism, the promotion of a stable international and regional environment and the cooperation with key partners. The principal objective of this paper is to examine in how far the EU has actually implemented the ‘cooperative security provider’ approach in the area which the Non-proliferation Strategy identifies as one of its priorities – the Mediterranean. Focusing on the concept of security interdependence, the paper analyses first the various WMD dangers with which the EU is confronted in the Mediterranean area. Afterwards, it examines how the EU has responded to these hazards in the framework of the Barcelona process and, in particular, the new European Neighbourhood Policy. It is argued that despite its relatively powerful rhetoric, the EU has largely failed, for a wide range of reasons, to apply effectively its non-proliferation approach in the Mediterranean area and, thus, to become a successful security provider.

When ESDP confronts ENP: security sector reform as a bridge in the EU’s foreign policy

The European Neighbourhood Policy’s birth has taken place in parallel with the renewed momentum of the European Security and Defence Policy, which has launched 14 operations since 2003. Both policies’ instruments have converged in the neighbouring area covered by ENP: Georgia, in the East and the Palestinian Territories in the South. In both cases, the Security Sector Reform strategies have been the main focus for ESDP and an important objective for ENP. In this paper, two objectives are pursued: first, to assess the EU’s involvement in both cases in SSR terms; and second, to analyse whether the convergence of ESDP operations with a broader EU neighbourhood policy implies that the former has become an instrument for the a EU external action.