Program-level support for protecting an application from untrustworthy components

Many software applications extend their functionality by dynamically loading executable components into their allocated address space. Such components, exemplified by browser plugins and other software add-ons, not only enable reusability, but also promote programming simplicity, as they reside in the same address space as their host application, supporting easy sharing of complex data structures and pointers. However, such components are also often of unknown provenance and quality and may be riddled with accidental bugs or, in some cases, deliberately malicious code. Statistics show that such component failures account for a high percentage of software crashes and vulnerabilities. Enabling isolation of such fine-grained components is therefore necessary to increase the stability, security and resilience of computer programs. This thesis addresses this issue by showing how host applications can create isolation domains for individual components, while preserving the benefits of a single address space, via a new architecture for software isolation called LibVM. Towards this end, we define a specification which outlines the functional requirements for LibVM, identify the conditions under which these functional requirements can be met, define an abstract Application Programming Interface (API) that encompasses the general problem of isolating shared libraries, thus separating policy from mechanism, and prove its practicality with two concrete implementations based on hardware virtualization and system call interpositioning, respectively. The results demonstrate that hardware isolation minimises the difficulties encountered with software based approaches, while also reducing the size of the trusted computing base, thus increasing confidence in the solution’s correctness. This thesis concludes that, not only is it feasible to create such isolation domains for individual components, but that it should also be a fundamental operating system supported abstraction, which would lead to more stable and secure applications.

Gamifying everyday activities using mobile sensing

The addition of game design elements to non-game contexts has become known as gamification. Previous research has suggested that framing tedious and non-motivating tasks as game-like can make them enjoyable and motivating (e.g., de Oliveira, et al., 2010; Fujiki, et al., 2007; Chiu, et al., 2009). Smartphone applications lend themselves to being gamified as the underlying mobile technology has the ability to sense user activities and their surrounding environment. These sensed activities can be used to implement and enforce game-like rules based around many physical activities (e.g., exercise, travel, or eating). If researchers wish to investigate this area, they first need an existing gamified application to study. However if an appropriate application does not exist then the researcher may need to create their own gamified prototype to study. Unfortunately, there is little previous research that details or explains the design and integration of game elements to non-game mobile applications. This chapter explores this gap and shares a framework that was used to add videogame-like achievements to an orientation mobile application developed for new university students. The framework proved useful and initial results are discussed from two studies. However, further development of the framework is needed, including further consideration of what makes an effective gamified experience.

The ancient gene C12orf29 : an exploration of its role in the chordate body plan

The sheep (Ovis aries) is commonly used as a large animal model in skeletal research. Although the sheep genome has been sequenced there are still only a limited number of annotated mRNA sequences in public databases. A complementary DNA (cDNA) library was constructed to provide a generic resource for further exploration of genes that are actively expressed in bone cells in sheep. It was anticipated that the cDNA library would provide molecular tools for further research into the process of fracture repair and bone homeostasis, and add to the existing body of knowledge. One of the hallmarks of cDNA libraries has been the identification of novel genes and in this library the full open reading frame of the gene C12orf29 was cloned and characterised. This gene codes for a protein of unknown function with a molecular weight of 37 kDa. A literature search showed that no previous studies had been conducted into the biological role of C12orf29, except for some bioinformatics studies that suggested a possible link with cancer. Phylogenetic analyses revealed that C12orf29 had an ancient pedigree with a homologous gene found in some bacterial taxa. This implied that the gene was present in the last common eukaryotic ancestor, thought to have existed more than 2 billion years ago. This notion was further supported by the fact that the gene is found in taxa belonging to the two major eukaryotic branches, bikonts and unikonts. In the bikont supergroup a C12orf29-like gene was found in the single celled protist Naegleria gruberi, whereas in the unikont supergroup, encompassing the metazoa, the gene is universal to all chordate and, therefore, vertebrate species. It appears to have been lost to the majority of cnidaria and protostomes taxa; however, C12orf29-like genes have been found in the cnidarian freshwater hydra and the protostome Pacific oyster. The experimental data indicate that C12orf29 has a structural role in skeletal development and tissue homeostasis, whereas in silico analysis of the human C12orf29 promoter region suggests that its expression is potentially under the control of the NOTCH, WNT and TGF- developmental pathways, as well SOX9 and BAPX1; pathways that are all heavily involved in skeletogenesis. Taken together, this investigation provides strong evidence that C12orf29 has a very important role in the chordate body plan, in early skeletal development, cartilage homeostasis, and also a possible link with spina bifida in humans.

Pregnancy loss and psychiatric disorders in young women : an Australian birth cohort study

Background Recent evidence has linked induced abortion with later adverse psychiatric outcomes in young women. Aims To examine whether abortion or miscarriage are associated with subsequent psychiatric and substance use disorders. Method A sample (n=1223) of women from a cohort born between 1981 and 1984 in Australia were assessed at 21 years for psychiatric and substance use disorders and lifetime pregnancy histories. Results Young women reporting a pregnancy loss had nearly three times the odds of experiencing a lifetime illicit drug disorder (excluding cannabis): abortion odds ratio (OR)=3.6 (95% CI 2.0–6.7) and miscarriage OR=2.6 (95% CI 1.2–5.4). Abortion was associated with alcohol use disorder (OR=2.1, 95% CI 1.3–3.5) and 12-month depression (OR=1.9, 95% CI 1.1–3.1). Conclusions These findings add to the growing body of evidence suggesting that pregnancy loss per se, whether abortion or miscarriage, increases the risk of a range of substance use disorders and affective disorders in young women.

FP01-5 Pregnancy loss and psychiatric disorders in young men and women : results from Australian longitudinal cohort study

Recent evidence has linked induced abortion with later adverse psychiatric outcomes in young women. Little is known about later adverse psychiatric outcomes in young men whose partners have fallen pregnant and either go on to have a child, have an abortion or miscarry. 1223 women and 1159 men, from an Austrailan cohort born between 1981 and 1984, were assessed at 21 years for psychiatric and substance misuse and lifetime pregnancy histories. Young women reporting a pregnancy loss (either miscarriage or abortion) had nearly three times the odds of experiencing a illicit drug disorder (excluding cannabis), and nearly twice the odds of an alcohol misuse compared to never pregnant women. Young men whose partner had an abortion, but not a miscarriage, had nearly twice the odds of cannabis disorder, illicit drug disorder, and mood disorder compared to men that had never fathered a pregnancy. Young women who have lost a pregnancy have an increased risk of developing alcohol or substance abuse in later life. Young men whose partner aborted a pregnancy only had an increased of substance abuse and mood disorder in later life. These findings add to the growing body of evidence suggesting that pregnancy loss per se increases the risk of a range of substance use disorders in young women. The findings for young men are novel and raise the possibility that the associations measured may be due to common unmeasured factors associated with early pregnancy in young people rather than pregnancy loss.

What is a good project manager? Reconceptualizing the “do” : an Aristotelian perspective

In Social Science (Organization Studies, Economics, Management Science, Strategy, International Relations, Political Science…) the quest for addressing the question “what is a good practitioner?” has been around for centuries, with the underlying assumptions that good practitioners should lead organizations to higher levels of performance. Hence to ask “what is a good “captain”?” is not a new question, we should add! (e.g. Tsoukas & Cummings, 1997, p. 670; Söderlund, 2004, p. 190). This interrogation leads to consider problems such as the relations between dichotomies Theory and Practice, rigor and relevance of research, ways of knowing and knowledge forms. On the one hand we face the “Enlightenment” assumptions underlying modern positivist Social science, grounded in “unity-of-science dream of transforming and reducing all kinds of knowledge to one basic form and level” and cause-effects relationships (Eikeland, 2012, p. 20), and on the other, the postmodern interpretivist proposal, and its “tendency to make all kinds of knowing equivalent” (Eikeland, 2012, p. 20). In the project management space, this aims at addressing one of the fundamental problems in the field: projects still do not deliver their expected benefits and promises and therefore the socio-economical good (Hodgson & Cicmil, 2007; Bredillet, 2010, Lalonde et al., 2012). The Cartesian tradition supporting projects research and practice for the last 60 years (Bredillet, 2010, p. 4) has led to the lack of relevance to practice of the current conceptual base of project management, despite the sum of research, development of standards, best & good practices and the related development of project management bodies of knowledge (Packendorff, 1995, p. 319-323; Cicmil & Hodgson, 2006, p. 2–6, Hodgson & Cicmil, 2007, p. 436–7; Winter et al., 2006, p. 638). Referring to both Hodgson (2002) and Giddens (1993), we could say that “those who expect a “social-scientific Newton” to revolutionize this young field “are not only waiting for a train that will not arrive, but are in the wrong station altogether” (Hodgson, 2002, p. 809; Giddens, 1993, p. 18). While, in the postmodern stream mainly rooted in the “practice turn” (e.g. Hällgren & Lindahl, 2012), the shift from methodological individualism to social viscosity and the advocated pluralism lead to reinforce the “functional stupidity” (Alvesson & Spicer, 2012, p. 1194) this postmodern stream aims at overcoming. We suggest here that addressing the question “what is a good PM?” requires a philosophy of practice perspective to complement the “usual” philosophy of science perspective. The questioning of the modern Cartesian tradition mirrors a similar one made within Social science (Say, 1964; Koontz, 1961, 1980; Menger, 1985; Warry, 1992; Rothbard, 1997a; Tsoukas & Cummings, 1997; Flyvbjerg, 2001; Boisot & McKelvey, 2010), calling for new thinking. In order to get outside the rationalist ‘box’, Toulmin (1990, p. 11), along with Tsoukas & Cummings (1997, p. 655), suggests a possible path, summarizing the thoughts of many authors: “It can cling to the discredited research program of the purely theoretical (i.e. “modern”) philosophy, which will end up by driving it out of business: it can look for new and less exclusively theoretical ways of working, and develop the methods needed for a more practical (“post-modern”) agenda; or it can return to its pre-17th century traditions, and try to recover the lost (“pre-modern”) topics that were side-tracked by Descartes, but can be usefully taken up for the future” (Toulmin, 1990, p. 11). Thus, paradoxically and interestingly, in their quest for the so-called post-modernism, many authors build on “pre-modern” philosophies such as the Aristotelian one (e.g. MacIntyre, 1985, 2007; Tsoukas & Cummings, 1997; Flyvbjerg, 2001; Blomquist et al., 2010; Lalonde et al., 2012). It is perhaps because the post-modern stream emphasizes a dialogic process restricted to reliance on voice and textual representation, it limits the meaning of communicative praxis, and weaking the practice because it turns away attention from more fundamental issues associated with problem-definition and knowledge-for-use in action (Tedlock, 1983, p. 332–4; Schrag, 1986, p. 30, 46–7; Warry, 1992, p. 157). Eikeland suggests that the Aristotelian “gnoseology allows for reconsidering and reintegrating ways of knowing: traditional, practical, tacit, emotional, experiential, intuitive, etc., marginalised and considered insufficient by modernist [and post-modernist] thinking” (Eikeland, 2012, p. 20—21). By contrast with the modernist one-dimensional thinking and relativist and pluralistic post-modernism, we suggest, in a turn to an Aristotelian pre-modern lens, to re-conceptualise (“re” involving here a “re”-turn to pre-modern thinking) the “do” and to shift the perspective from what a good PM is (philosophy of science lens) to what a good PM does (philosophy of practice lens) (Aristotle, 1926a). As Tsoukas & Cummings put it: “In the Aristotelian tradition to call something good is to make a factual statement. To ask, for example, ’what is a good captain’?’ is not to come up with a list of attributes that good captains share (as modem contingency theorists would have it), but to point out the things that those who are recognized as good captains do.” (Tsoukas & Cummings, 1997, p. 670) Thus, this conversation offers a dialogue and deliberation about a central question: What does a good project manager do? The conversation is organized around a critic of the underlying assumptions supporting the modern, post-modern and pre-modern relations to ways of knowing, forms of knowledge and “practice”.

Learning opportunities : a partnership, connecting learning with projects

Major construction projects undertaken on university campuses are an ideal opportunity to connect learners in related disciplines to the real thing. How often do universities take that opportunity, make the connection and value add to projects being carried out? Discussion with students and academic staff will consistently generate enthusiasm for creating learning activities and resources related to projects. Some typical disciplines are project management, all fields of engineering, architecture, interior design and information technology. Some other areas that may not at first seem obvious are business, marketing, communication and public relations. The authors will provide a case study based on the new Queensland University of Technology (QUT) Science and Engineering Centre project of how the partnership between QUT and Leighton Contractors, the managing contractor, has delivered excellent learning opportunities through the design and construction phases of the Science and Engineering Centre project.

On the security of TLS renegotiation

The Transport Layer Security (TLS) protocol is the most widely used security protocol on the Internet. It supports negotiation of a wide variety of cryptographic primitives through different cipher suites, various modes of client authentication, and additional features such as renegotiation. Despite its widespread use, only recently has the full TLS protocol been proven secure, and only the core cryptographic protocol with no additional features. These additional features have been the cause of several practical attacks on TLS. In 2009, Ray and Dispensa demonstrated how TLS renegotiation allows an attacker to splice together its own session with that of a victim, resulting in a man-in-the-middle attack on TLS-reliant applications such as HTTP. TLS was subsequently patched with two defence mechanisms for protection against this attack. We present the first formal treatment of renegotiation in secure channel establishment protocols. We add optional renegotiation to the authenticated and confidential channel establishment model of Jager et al., an adaptation of the Bellare--Rogaway authenticated key exchange model. We describe the attack of Ray and Dispensa on TLS within our model. We show generically that the proposed fixes for TLS offer good protection against renegotiation attacks, and give a simple new countermeasure that provides renegotiation security for TLS even in the face of stronger adversaries.

Confirmation that Xq27 and Xq28 are susceptibility loci for migraine in independent pedigrees and a case-control cohort

Investigations into migraine genetics have suggested that susceptibility loci exist on the X chromosome. These reports are supported by evidence that demonstrates male probands as having a higher proportion of affected first-degree relatives as well as the female preponderance of 3:1 that the disorder displays. We have previously implicated the Xq24-28 locus in migraine using two independent multigenerational Australian pedigrees that demonstrated excess allele sharing at the Xq24, Xq27 and Xq28 loci. Here, we expand this work to investigate a further six independent migraine pedigrees using 11 microsatellite markers spanning the Xq27–28 region. Furthermore, 11 candidate genes are investigated in an Australian case-control cohort consisting of 500 cases and 500 controls. Microsatellite analysis showed evidence of excess allele sharing to the Xq27 marker DXS8043 (LOD* 1.38 P = 0.005) in MF879 whilst a second independent pedigree showed excess allele sharing to DXS8061 at Xq28 (LOD* 1.5 P = 0.004). Furthermore, analysis of these key markers in a case control cohort showed significant association to migraine in females at the DXS8043 marker (T1 P = 0.009) and association with MO at DXS8061 (T1 P = 0.05). Further analysis of 11 key genes across these regions showed significant association of a three-marker risk haplotype in the NSDHL gene at Xq28 (P = 0.0082). The results of this study add further support to the presence of migraine susceptibility loci on chromosome Xq27 and Xq28 as well as point to potential candidate genes in the regions that warrant further investigation.

Mating compatibility among four pest members of the Bactrocera dorsalis fruit fly species complex (Diptera : Tephritidae)

Bactrocera dorsalis (Hendel), Bactrocera papayae Drew & Hancock, Bactrocera philippinensis Drew & Hancock, and Bactrocera carambolae Drew & Hancock are pest members within the B. dorsalis species complex of tropical fruit flies. The species status of these taxa is unclear and this confounds quarantine, pest management, and general research. Mating studies carried out under uniform experimental conditions are required as part of resolving their species limits. These four taxa were collected from the wild and established as laboratory cultures for which we subsequently determined levels of prezygotic compatibility, assessed by field cage mating trials for all pair-wise combinations. We demonstrate random mating among all pair-wise combinations involving B. dorsalis, B. papayae, and B. philippinensis. B. carambolae was relatively incompatible with each of these species as evidenced by nonrandom mating for all crosses. Reasons for incompatibility involving B. carambolae remain unclear; however, we observed differences in the location of couples in the field cage for some comparisons. Alongside other factors such as pheromone composition or other courtship signals, this may lead to reduced interspecific mating compatibility with B. carambolae. These data add to evidence that B. dorsalis, B. papayae, and B. philippinensis represent the same biological species, while B. carambolae remains sufficiently different to maintain its current taxonomic identity. This poses significant implications for this group's systematics, impacting on pest management, and international trade.

Multi-gene phylogenetic analysis of south-east Asian pest members of the Bactrocera dorsalis species complex (Diptera: Tephritidae) does not support current taxonomy

Bactrocera dorsalis sensu stricto, B. papayae, B. philippinensis and B. carambolae are serious pest fruit fly species of the B. dorsalis complex that predominantly occur in south-east Asia and the Pacific. Identifying molecular diagnostics has proven problematic for these four taxa, a situation that cofounds biosecurity and quarantine efforts and which may be the result of at least some of these taxa representing the same biological species. We therefore conducted a phylogenetic study of these four species (and closely related outgroup taxa) based on the individuals collected from a wide geographic range; sequencing six loci (cox1, nad4-3′, CAD, period, ITS1, ITS2) for approximately 20 individuals from each of 16 sample sites. Data were analysed within maximum likelihood and Bayesian phylogenetic frameworks for individual loci and concatenated data sets for which we applied multiple monophyly and species delimitation tests. Species monophyly was measured by clade support, posterior probability or bootstrap resampling for Bayesian and likelihood analyses respectively, Rosenberg's reciprocal monophyly measure, P(AB), Rodrigo's (P(RD)) and the genealogical sorting index, gsi. We specifically tested whether there was phylogenetic support for the four 'ingroup' pest species using a data set of multiple individuals sampled from a number of populations. Based on our combined data set, Bactrocera carambolae emerges as a distinct monophyletic clade, whereas B. dorsalis s.s., B. papayae and B. philippinensis are unresolved. These data add to the growing body of evidence that B. dorsalis s.s., B. papayae and B. philippinensis are the same biological species, which poses consequences for quarantine, trade and pest management.

Design LED innovation to rejuvenate local food systems and healthy communities : an emerging research agenda

Food Sovereignty (food freedom) is about empowering people to develop their own local food system. Food Sovereignty challenges designers to enable people to innovate the local food system, rather than having a food system which is dictated by corporate interests and failed business ethics. Communities are realising the potential for design to assist in the innovation process, and add strategic value to potentially localise the food system. Design Led Innovation (DLI) offers a strategic framework to address large-scale cultural, systemic and economic changes. The DLI approach empowers communities to take organised action to achieve a healthy, prosperous and happy way of life. DLI can assist with business models in the business world and it is evident this approach can assist with creating social change too. This paper presents on an emerging research agenda aimed to assist designer’s focus from individuals and systems to communities and urban problems. This paper also presents the research proposition that DLI and service design coupled with social entrepreneurial ventures such as local food projects and creative community inventions, have the potential to enable social innovation for healthy and happy communities.

Exploring expedition research methodology : a personal reflection

Research into the human dynamics of expeditions is a potentially rewarding and fruitful area of study. However, the complex nature of expedition work presents the researcher with numerous challenges. This paper presents a personal reflection on the challenges linked to determining appropriate methodological processes for a study into expedition teamwork. Previous expedition research is outlined and reviewed for appropriateness. Some alternative methodological theories are described and limitations highlighted. Lastly the actual data gathering and analysis processes are detailed. The aim being to show that what happened in the field inevitably dictated how methodological processes were adapted. Essentially the paper describes a personal journey into research. A journey that sparked numerous personal insights in the science of human dynamics and expeditions and one that I hope will add to the development of expedition research in general.

A qualitative exploration of young women's drinking experiences and associated protective behaviours

While initial research supports the effectiveness of protective strategies in mitigating young people’s alcohol-related harm, few studies have investigated these behaviours from a uniquely female perspective. Yet, young women consume alcohol within a social context that is distinctly different from that of young men and face risks that are specific to their gender. To explore a group of young Australian women’s experiences, perceptions of risks and use of protective strategies in relation to drinking in public places, we conducted either focus groups or one-on-one telephone interviews with a total of 40 women aged 18–24 years. While young women reported substantial risks associated with drinking, they also reported using a range of protective behaviours that moderated the adverse effects of alcohol, with most of these strategies being derived from the friendship group to which the women belonged. Our findings add to the limited body of knowledge on women’s insights into, and their use of protective strategies to minimise the negative consequences of alcohol.

The Alcohol Intervention Training Program (AITP): a response to alcohol misuse in the farming community

Background Farm men and women in Australia have higher levels of problematic alcohol use than their urban counterparts and experience elevated health risks associated with excessive alcohol consumption. The Sustainable Farm Families (SFF) program has worked successfully with farm men and women to address health, well- being and safety and has identified that further research and training is required to understand and address alcohol misuse behaviours. This project will add an innovative component to the program by training health professionals working with farm men and women to discuss and respond to alcohol-related physical and mental health problems. Methods/Design A mixed method design with multi-level evaluation will be implemented following the development and delivery of a training program (The Alcohol Intervention Training Program {AITP}) for Sustainable Farm Families health professionals. Pre-, post- and follow-up surveys will be used to assess both the impact of the training on the knowledge, confidence and skills of the health professionals to work with alcohol misuse and associated problems, and the impact of the training on the attitudes, behaviour and mental health of farm men and women who participate in the SFF project. Evaluations will take a range of forms including self-rated outcome measures and interviews. Discussion The success of this project will enhance the health and well-being of a critical population, the farm men and women of Australia, by producing an evidence-based strategy to assist them to adopt more positive alcohol-related behaviours that will lead to better physical and mental health.