Quality metrics for assessing security-critical computer programs

Existing secure software development principles tend to focus on coding vulnerabilities, such as buffer or integer overflows, that apply to individual program statements, or issues associated with the run-time environment, such as component isolation. Here we instead consider software security from the perspective of potential information flow through a program’s object-oriented module structure. In particular, we define a set of quantifiable "security metrics" which allow programmers to quickly and easily assess the overall security of a given source code program or object-oriented design. Although measuring quality attributes of object-oriented programs for properties such as maintainability and performance has been well-covered in the literature, metrics which measure the quality of information security have received little attention. Moreover, existing securityrelevant metrics assess a system either at a very high level, i.e., the whole system, or at a fine level of granularity, i.e., with respect to individual statements. These approaches make it hard and expensive to recognise a secure system from an early stage of development. Instead, our security metrics are based on well-established compositional properties of object-oriented programs (i.e., data encapsulation, cohesion, coupling, composition, extensibility, inheritance and design size), combined with data flow analysis principles that trace potential information flow between high- and low-security system variables. We first define a set of metrics to assess the security quality of a given object-oriented system based on its design artifacts, allowing defects to be detected at an early stage of development. We then extend these metrics to produce a second set applicable to object-oriented program source code. The resulting metrics make it easy to compare the relative security of functionallyequivalent system designs or source code programs so that, for instance, the security of two different revisions of the same system can be compared directly. This capability is further used to study the impact of specific refactoring rules on system security more generally, at both the design and code levels. By measuring the relative security of various programs refactored using different rules, we thus provide guidelines for the safe application of refactoring steps to security-critical programs. Finally, to make it easy and efficient to measure a system design or program’s security, we have also developed a stand-alone software tool which automatically analyses and measures the security of UML designs and Java program code. The tool’s capabilities are demonstrated by applying it to a number of security-critical system designs and Java programs. Notably, the validity of the metrics is demonstrated empirically through measurements that confirm our expectation that program security typically improves as bugs are fixed, but worsens as new functionality is added.

Engineering of vascularized adipose constructs

Adipose tissue engineering offers a promising alternative to the current surgical techniques for the treatment of soft tissue defects. It is a challenge to find the appropriate scaffold that not only represents a suitable environment for cells but also allows fabrication of customized tissue constructs, particularly in breast surgery. We investigated two different scaffolds for their potential use in adipose tissue regeneration. Sponge-like polyurethane scaffolds were prepared by mold casting with methylal as foaming agent, whereas polycaprolactone scaffolds with highly regular stacked-fiber architecture were fabricated with fused deposition modeling. Both scaffold types were seeded with human adipose tissuederived precursor cells, cultured and implanted in nude mice using a femoral arteriovenous flow-through vessel loop for angiogenesis. In vitro, cells attached to both scaffolds and differentiated into adipocytes. In vivo, angiogenesis and adipose tissue formation were observed throughout both constructs after 2 and 4 weeks, with angiogenesis being comparable in seeded and unseeded constructs. Fibrous tissue formation and adipogenesis were more pronounced on polyurethane foam scaffolds than on polycaprolactone prototyped scaffolds. In conclusion, both scaffold designs can be effectively used for adipose tissue engineering.

Stakeholders' perceptions of data utility in the context of ERP outcomes

A substantial body of literature exists identifying factors contributing to under-performing Enterprise Resource Planning systems (ERPs), including poor communication, lack of executive support and user dissatisfaction (Calisir et al., 2009). Of particular interest is Momoh et al.’s (2010) recent review identifying poor data quality (DQ) as one of nine critical factors associated with ERP failure. DQ is central to ERP operating processes, ERP facilitated decision-making and inter-organizational cooperation (Batini et al., 2009). Crucial in ERP contexts is that the integrated, automated, process driven nature of ERP data flows can amplify DQ issues, compounding minor errors as they flow through the system (Haug et al., 2009; Xu et al., 2002). However, the growing appreciation of the importance of DQ in determining ERP success lacks research addressing the relationship between stakeholders’ requirements and perceptions of ERP DQ, perceived data utility and the impact of users’ treatment of data on ERP outcomes.

Extracorporeal lessons from sheep

Background: Extracorporeal circulation (ECC), the diversion of blood flow through a circuit located outside of the body, has been one of the major advances in modern medicine. Cardio-pulmonary bypass (CPB), renal dialysis, apheresis and extracorporeal membrane oxygenation (ECMO) are all different forms of ECC. Despite its major benefits, when blood comes into contact with foreign material, both the coagulation and inflammation cascades are activated simultaneously. Short periods of exposure to ECC e.g. CPB (�2 h duration), are known to be associated with haemolysis, coagulopathies, bleeding and inflammation which demand blood product support. Therefore, it is not unexpected that these complications would be exaggerated with prolonged periods of ECC such as in ECMO (days to weeks duration). The variability and complexities of the underlying pathologies of patients requiring ECC makes it difficult to study the cause and effect of these complications. To overcome this problem we developed an ovine (sheep) model of ECC. Method: Healthy female sheep (1–3 y.o.) weighing 40–50 kg were fasted overnight, anaesthetised, intubated and ventilated [1]. Half the group received smoke induced acute lung injury (S-ALI group) (n = 8) and the other half did not (healthy group) (n = 8). Sheep were subsequently cannulated (Medtronic Inc, Minneapolis, MN, USA) and veno-venous ECMO commenced using PLS ECMO circuit and Quadrox D oxygenator (Maquet Cardiopulmonary AG, Hechinger Straße, Germany). There was continuous physiological monitoring and blood was collected at specified time intervals for full blood counts, platelet function analysis (by Multiplate®), routine coagulation and assessment of clot formation and lysis (by ROTEM®). Preliminary results Full blood counts and routine coagulation results from normal healthy sheep were comparable to those of normal human adults. Within 15 min of initiating of ECMO, PT, PTT and EXTEM clot formation time increased, whilst EXTEM maximum clot firmness decreased in both cohorts. Discussion & Conclusions: Preliminary results of sheep from both 2 h ECMO cohorts showed that the anatomy, haematology and coagulation parameters of an adult sheep are comparable to that a human adult. Experiments are currently underway with healthy (n = 8) and S-ALI (n = 8) sheep on ECMO for 24 h. In addition to characterising how ECMO alters haematology and coagulation parameters, we hope that it will also define which blood components will be most effective to correct bleeding or clotting complications during ECMO support.

Tracing the influence of non-narrative film and expanded cinema sound on experimental music

This study surveys and interrogates key conceptual frameworks and artistic practises that flow through the distinct but interconnected traditions of non-narrative film and experimental music, and examines how these are articulated in my own creative sound practise.

How long does it take for aquifer recharge or aquifer discharge processes to reach steady state?

Groundwater flow models are usually characterized as being either transient flow models or steady state flow models. Given that steady state groundwater flow conditions arise as a long time asymptotic limit of a particular transient response, it is natural for us to seek a finite estimate of the amount of time required for a particular transient flow problem to effectively reach steady state. Here, we introduce the concept of mean action time (MAT) to address a fundamental question: How long does it take for a groundwater recharge process or discharge processes to effectively reach steady state? This concept relies on identifying a cumulative distribution function, $F(t;x)$, which varies from $F(0;x)=0$ to $F(t;x) \to \infty$ as $t\to \infty$, thereby providing us with a measurement of the progress of the system towards steady state. The MAT corresponds to the mean of the associated probability density function $f(t;x) = \dfrac{dF}{dt}$, and we demonstrate that this framework provides useful analytical insight by explicitly showing how the MAT depends on the parameters in the model and the geometry of the problem. Additional theoretical results relating to the variance of $f(t;x)$, known as the variance of action time (VAT), are also presented. To test our theoretical predictions we include measurements from a laboratory–scale experiment describing flow through a homogeneous porous medium. The laboratory data confirms that the theoretical MAT predictions are in good agreement with measurements from the physical model.

The valuation accuracy of multiples in mergers and acquisitions, and their association with firm misvaluation

This study explores the accuracy and valuation implications of the application of a comprehensive list of equity multiples in the takeover context. Motivating the study is the prevalent use of equity multiples in practice, the observed long-run underperformance of acquirers following takeovers, and the scarcity of multiplesbased research in the merger and acquisition setting. In exploring the application of equity multiples in this context three research questions are addressed: (1) how accurate are equity multiples (RQ1); which equity multiples are more accurate in valuing the firm (RQ2); and which equity multiples are associated with greater misvaluation of the firm (RQ3). Following a comprehensive review of the extant multiples-based literature it is hypothesised that the accuracy of multiples in estimating stock market prices in the takeover context will rank as follows (from best to worst): (1) forecasted earnings multiples, (2) multiples closer to bottom line earnings, (3) multiples based on Net Cash Flow from Operations (NCFO) and trading revenue. The relative inaccuracies in multiples are expected to flow through to equity misvaluation (as measured by the ratio of estimated market capitalisation to residual income value, or P/V). Accordingly, it is hypothesised that greater overvaluation will be exhibited for multiples based on Trading Revenue, NCFO, Book Value (BV) and earnings before interest, tax, depreciation and amortisation (EBITDA) versus multiples based on bottom line earnings; and that multiples based on Intrinsic Value will display the least overvaluation. The hypotheses are tested using a sample of 147 acquirers and 129 targets involved in Australian takeover transactions announced between 1990 and 2005. The results show that first, the majority of computed multiples examined exhibit valuation errors within 30 percent of stock market values. Second, and consistent with expectations, the results provide support for the superiority of multiples based on forecasted earnings in valuing targets and acquirers engaged in takeover transactions. Although a gradual improvement in estimating stock market values is not entirely evident when moving down the Income Statement, historical earnings multiples perform better than multiples based on Trading Revenue or NCFO. Third, while multiples based on forecasted earnings have the highest valuation accuracy they, along with Trading Revenue multiples for targets, produce the most overvalued valuations for acquirers and targets. Consistent with predictions, greater overvaluation is exhibited for multiples based on Trading Revenue for targets, and NCFO and EBITDA for both acquirers and targets. Finally, as expected, multiples based Intrinsic Value (along with BV) are associated with the least overvaluation. Given the widespread usage of valuation multiples in takeover contexts these findings offer a unique insight into their relative effectiveness. Importantly, the findings add to the growing body of valuation accuracy literature, especially within Australia, and should assist market participants to better understand the relative accuracy and misvaluation consequences of various equity multiples used in takeover documentation and assist them in subsequent investment decision making.

A detailed investigation of nominally 2-D radical-farming scramjet combustion

This paper reports on an investigation of the flow/chemistry coupling inside a nominally two-dimensional inlet-fuelled scramjet configuration. The experiments were conducted at a freestream Mach number of 7.3 and a total flow enthalpy of 4.3MJ/kg corresponding to a Mach 9.7 flight condition. The phenomenon of radical-farming has been studied in detail using two-dimensional OH* chemiluminescence imaging and emission spectroscopy. High signal levels of excited OH (OH*) were detected behind the first shock reflections inside the combustion chamber upstream of any measurable pressure rise from combustion, which occurred towards the rear of the combustor. The production of OH in the first hot pocket initiates the ignition process and then accelerates the combustion process in the next downstream hot pocket. This was confirmed by numerical simulations of premixed hydrogen/air flow through the scramjet. Chemical kinetics analyses reveal that the ignition process is governed by the interaction between various reaction groups leading to a chainbranching explosion for low mean temperature and pressure combustion flowfields.

Towards a multi-element simulation of heavily over-consolidated bagasse using a material subroutine

A better understanding of the behaviour of prepared cane and bagasse, and the ability to model the mechanical behaviour of bagasse as it is squeezed in a milling unit to extract juice, would help identify how to improve the current process. There are opportunities to decrease bagasse moisture from a milling unit. The behaviour of bagasse in chutes is poorly understood. Previous investigations have shown that juice flow through bagasse obeys Darcy’s permeability law, that the grip of the rough surface of the grooves on the bagasse can be represented by the Mohr-Coulomb failure criterion for soils, and that the internal mechanical behaviour of the bagasse is critical state behaviour similar to that for sand and clay. Progress has been made in the last 11 years towards implementing a mechanical model for bagasse in finite element software. The objective is to be able to correctly simulate various simple mechanical loading conditions measured in the laboratory. Combining these behaviours together is thought to have a high probability of reproducing the complicated stress conditions in a milling unit. This paper reports on progress made towards modelling the fifth and final (and most challenging) of the simple loading conditions: the shearing of heavily over-consolidated bagasse, using a specific model for bagasse in a multi-element simulation.

Modelling of the mechanical behaviour of heavily over-consolidated bagasse

A better understanding of the behaviour of prepared cane and bagasse, and the ability to model the mechanical behaviour of bagasse as it is squeezed in a milling unit to extract juice, would help identify how to improve the current process, for example to reduce final bagasse moisture. Previous investigations have proven that juice flow through bagasse obeys Darcy’s permeability law, that the grip of the rough surface of the grooves on the bagasse can be represented by the Mohr-Coulomb failure criterion for soils, and that the internal mechanical behaviour of the bagasse is critical state behaviour similar to that for sand and clay. Current Finite Element Models (FEM) available in commercial software have adequate permeability models. However, no commercially available software seems to contain an adequate mechanical model for bagasse. The same software contains a few material models for soil and other materials, while the coding of hundreds of developed models for soil and other materials remains confidential at universities and government research centres. Progress has been made in the last ten years towards implementing a mechanical model for bagasse in finite element software code. This paper builds on that progress and carries out a further step towards obtaining an adequate material model. The fifth and final loading condition outlined previously, shearing of heavily over-consolidated bagasse, is outlined.

Economic development and construction productivity in Malaysia

The productivity of the construction industry has a significant effect on national economic growth. Gains from higher construction productivity flow through the economy, as all industries rely on construction to some extent as part of their business investment. Contractions and expansions of economic activity are common phenomena in an economy. Three construction cycles occurred between the years 1970 and 2011 in Malaysia. The relationships between construction productivity and economic development are examined by the partial correlation method to establish the underlying factors driving the change in construction productivity. Construction productivity is statistically significantly correlated with gross domestic product (GDP) per capita in a positive direction for the 1985–98 and 1998–2009 cycles, but not the 1970–85 cycle. Fluctuations in construction activities and the influx of foreign workers underlie the changes of construction productivity in the 1985–98 cycle. There was less fluctuation in construction activities in the 1998–2009 cycle, with changes being mainly due to the fiscal stimulation policies of the government in attempting to stabilize the economy. The intensive construction of mega-projects resulted in resource constraints and cost pressures during the 1980s and 1990s. A better management of the ‘boom-bust’ nature of the construction business cycle is required to maintain the capability and capacity of the industry.

Acoustic emission activity from the two main types of small multi-cylinder diesel engine fuel injection systems

Effective fuel injector operation and efficient combustion are two of the most critical aspects when Diesel engine performance, efficiency and reliability are considered. Indeed, it is widely acknowledged that fuel injection equipment faults lead to increased fuel consumption, reduced power, greater levels of exhaust emissions and even unexpected engine failure. Previous investigations have identified fuel injector related acoustic emission activity as being caused by mechanisms such as fuel line pressure build-up; fuel flow through injector nozzles, injector needle opening and closing impacts and premixed combustion related pulses. Few of these investigations however, have attempted to categorise the close association and interrelation that exists between fuel injection equipment function and the acoustic emission generating mechanisms. Consequently, a significant amount of ambiguity remains in the interpretation and categorisation of injector related AE activity with respect to the functional characteristics of specific fuel injection equipment. The investigation presented addresses this ambiguity by detailing a study in which AE signals were recorded and analysed from two different Diesel engines employing the two commonly encountered yet fundamentally different types of fuel injection equipment. Results from tests in which faults were induced into fuel injector nozzles from both indirect-injection and direct-injection engines show that functional differences between the main types of fuel injection equipment results in acoustic emission activity which can be specifically related to the type of fuel injection equipment used.

Numerical treatment of a two-dimensional variable-order fractional nonlinear reaction-diffusion model

A two-dimensional variable-order fractional nonlinear reaction-diffusion model is considered. A second-order spatial accurate semi-implicit alternating direction method for a two-dimensional variable-order fractional nonlinear reaction-diffusion model is proposed. Stability and convergence of the semi-implicit alternating direct method are established. Finally, some numerical examples are given to support our theoretical analysis. These numerical techniques can be used to simulate a two-dimensional variable order fractional FitzHugh-Nagumo model in a rectangular domain. This type of model can be used to describe how electrical currents flow through the heart, controlling its contractions, and are used to ascertain the effects of certain drugs designed to treat arrhythmia.

Trace vapour detection at room temperature using Raman spectroscopy

A miniaturized flow-through system consisting of a gold coated silicon substrate based on enhanced Raman spectroscopy has been used to study the detection of vapour from model explosive compounds. The measurements show that the detectability of the vapour molecules at room temperature depends sensitively on the interaction between the molecule and the substrate. The results highlight the capability of a flow system combined with Raman spectroscopy for detecting low vapour pressure compounds with a limit of detection of 0.2 ppb as demonstrated by the detection of bis(2-ethylhexyl)phthalate, a common polymer additive emitted from a commercial polyvinyl chloride (PVC) tubing at room temperature.

Engineering cellulose nanofibre suspensions to control filtration resistance and sheet permeability

This study examines and quantifies the effect of adding polyelectrolytes to cellulose nanofibre suspensions on the gel point of cellulose nanofibre suspensions, which is the lowest solids concentration at which the suspension forms a continuous network. The lower the gel point, the faster the drainage time to produce a sheet and the higher the porosity of the final sheet formed. Two new techniques were designed to measure the dynamic compressibility and the drainability of nanocellulose–polyelectrolyte suspensions. We developed a master curve which showed that the independent variable controlling the behaviour of nanocellulose suspensions and its composite is the structure of the flocculated suspension which is best quantified as the gel point. This was independent of the type of polyelectrolyte used. At an addition level of 2 mg/g of nanofibre, a reduction in gel point over 50 % was achieved using either a high molecular weight (13 MDa) linear cationic polyacrylamide (CPAM, 40 % charge), a dendrimer polyethylenimine of high molecular weight of 750,000 Da (HPEI) or even a low molecular weight of 2000 Da (LPEI). There was no significant difference in the minimum gel point achieved, despite the difference in polyelectrolyte morphology and molecular weight. In this paper, we show that the gel point controls the flow through the fibre suspension, even when comparing fibre suspensions with solids content above the gel point. A lower gel point makes it easier for water to drain through the fibre network,reducing the pressure required to achieve a given dewatering rate and reducing the filtering time required to form a wet laid sheet. We further show that the lower gel point partially controls the structure of the wet laid sheet after it is dried. Halving the gel point increased the air permeability of the dry sheet by 37, 46 and 25 %, when using CPAM, HPEI and LPEI, respectively. The resistance to liquid flow was reduced by 74 and 90 %, when using CPAM and LPEI. Analysing the paper formed shows that sheet forming process and final sheet properties can be engineered and controlled by adding polyelectrolytes to the nanofibre suspension.