Automatic generation of assertions to detect potential security vulnerabilities in C programs that use union and pointer types

Type unions, pointer variables and function pointers are a long standing source of subtle security bugs in C program code. Their use can lead to hard-to-diagnose crashes or exploitable vulnerabilities that allow an attacker to attain privileged access over classified data. This paper describes an automatable framework for detecting such weaknesses in C programs statically, where possible, and for generating assertions that will detect them dynamically, in other cases. Exclusively based on analysis of the source code, it identifies required assertions using a type inference system supported by a custom made symbol table. In our preliminary findings, our type system was able to infer the correct type of unions in different scopes, without manual code annotations or rewriting. Whenever an evaluation is not possible or is difficult to resolve, appropriate runtime assertions are formed and inserted into the source code. The approach is demonstrated via a prototype C analysis tool.

Who has rights to what? Inclusion in Australian early childhood programs

In early childhood settings prior to school and in the early years of primary school, debate continues over the meaning of inclusion and its scope in terms of the groups under consideration. The genealogies of early childhood education and care, early primary school, special education and cultural education were examined to identify recurring and emerging approaches to inclusion within Australian programs for children aged birth to eight years. Approaches to inclusion encompassing multiple forms of diversity co-exist in the Australian educational literature with targeted approaches focused on disabilities or risk. These differing approaches reflect underlying ideological divisions and varying assumptions about diversity. Multiple approaches, including the expansion of early childhood services, reflect tensions over children’s rights, conceptualisations of inclusion, expectations of teachers, system coordination, economic constraints and political pressure to cater for a complex range of young children in varied settings. The paper incorporates discussion on underlying philosophical tensions within the early childhood field.

When sparks fly : developing formal mentoring programs for the career development of young and emerging artists

Formal mentoring programs are accepted as a valuable strategy for developing young and emerging artists. This thesis presents the results of an evaluation of the SPARK National Young Artists Mentoring Program (SPARK). SPARK was a ten-month formal mentoring program managed by Youth Arts Queensland (YAQ) on behalf of the Australia Council for the Arts from 2003-2009. The program aimed to assist young and emerging Australian artists between the ages of 18-26 to establish a professional career in the arts. It was a highly successful formal arts mentoring program that facilitated 58 mentorships between young and emerging artists and professional artists from across Australia in five program rounds over its seven year lifespan. Interest from other cultural organisations looking to develop their own formal mentoring programs encouraged YAQ to commission this research to determine how the program works to achieve its effects. This study was conducted with young and emerging artists who participated in SPARK from 2003 to 2008. It took a theory-driven evaluation approach to examine SPARK as an example of what makes formal arts mentoring programs effective. It focused on understanding the program’s theory or how the program worked to achieve its desired outcomes. The program activities and assumed responses to program activities were mapped out in a theories of change model. This theoretical framework was then used to plan the points for data collection. Through the process of data collection, actual program developments were compared to the theoretical framework to see what occurred as expected and what did not. The findings were then generalised for knowledge and wider application. The findings demonstrated that SPARK was a successful and effective program and an exemplar model of a formal mentoring program preparing young and emerging artists for professional careers in the arts. They also indicate several ways in which this already strong program could be further improved, including: looking at the way mentoring relationships are set up and how the mentoring process is managed; considering the balance between artistic and professional development; developing career development competencies and networking skills; taking into account the needs of young and emerging artists to develop their professional identity and build confidence; and giving more thought to the desired program outcomes and considering the issue of timeliness and readiness for career transition. From these findings, together with principles outlined in the mentoring and career development literature, a number of necessary conditions have been identified for developing effective mentoring programs in the career development of young and emerging artists.

Introduction : the South Asia Infant Feeding Research Network (SAIFRN)

The South Asia Infant Feeding Research Network (SAIFRN) was established in 2007 to foster and coordinate a research partnership among South Asian and international research groups interested in infant and young child feeding. SAIFRN has brought together a mix of researchers and program managers from Bangladesh, India, Nepal, Pakistan, and Sri Lanka together with international partners from Australia. As the first activity, SAIFRN conducted a series of analyses using Demographic and Health Surveys of Bangladesh, Nepal, and Sri Lanka and the National Family Health Survey of India. The results highlight that most indicators of infant and young child feeding in these four countries have not reached the targeted levels. The rates vary considerably by country, and the factors associated with poor feeding practices were not always consistent across countries. Driven by the ultimate goal of improved child survival in the region, SAIFRN wishes to expand its partnerships with governmental and nongovernmental organizations that share common interests both within and outside the South Asia region. In the future, SAIFRN hopes to provide more opportunities to researchers in the region to improve their skills by participating in capacity-building programs in collaboration with international partner institutions, and looks forward to liaising with potential donors to support such activities.

Aesthetic tensions : evaluating outcomes for practice-led research and industry

This paper explores principles of contemporary aesthetics to suggest a basis for determining qualitative outcomes of artistic works in two contexts: the arts industry and the academy setting of practice-led research. Commonly articulated measures of quality—creativity and innovation—are questioned as mere rhetoric if not framed in specific ways in the two discrete settings. The paper also interrogates generally held assumptions that a longer time to develop work and greater periods of self-reflexivity will produce higher calibre artistic outcomes. The unease produced by apparent differences in qualitative outcomes between art works created in an industry setting and those created through practice-led research is analysed through three interconnected framing devices: intention, contextual parameters and criteria for evaluation, in conjunction with the relationships between the art work, the artist and the audience/viewer/listener. Common and differentiated criteria in the two contexts are explored, leading to the conclusion that innovation is more likely to be revealed in the end product in an industry context whereas in practice-led research it may be in the methodological processes of creating the work. While identifying and acknowledging that the two contexts encourage and produce distinctive qualitative artistic outcomes, both of value to the arts and the academy, the paper recommends ways in which closer formal liaison between industry artists and practice-led artists and supervisors might occur in order to ensure ongoing mutual influence and relevance.

Which components of heart failure programs are effective? A meta-analysis of the outcomes of structured telephone support or telemonitoring as the primary component of heart failure management in 9,560 patients (Abridged Cochrane Review)

Aims--Telemonitoring (TM) and structured telephone support (STS) have the potential to deliver specialised management to more patients with chronic heart failure (CHF), but their efficacy is still to be proven. Objectives To review randomised controlled trials (RCTs) of TM or STS on all- cause mortality and all-cause and CHF-related hospitalisations in patients with CHF, as a non-invasive remote model of specialised disease-management intervention.--Methods and Results--Data sources:We searched 15 electronic databases and hand-searched bibliographies of relevant studies, systematic reviews, and meeting abstracts. Two reviewers independently extracted all data. Study eligibility and participants: We included any randomised controlled trials (RCT) comparing TM or STS to usual care of patients with CHF. Studies that included intensified management with additional home or clinic visits were excluded. Synthesis: Primary outcomes (mortality and hospitalisations) were analysed; secondary outcomes (cost, length of stay, quality of life) were tabulated.--Results: Thirty RCTs of STS and TM were identified (25 peer-reviewed publications (n=8,323) and five abstracts (n=1,482)). Of the 25 peer-reviewed studies, 11 evaluated TM (2,710 participants), 16 evaluated STS (5,613 participants) and two tested both interventions. TM reduced all-cause mortality (risk ratio (RR 0•66 [95% CI 0•54-0•81], p<0•0001) and STS showed similar trends (RR 0•88 [95% CI 0•76-1•01], p=0•08). Both TM (RR 0•79 [95% CI 0•67-0•94], p=0•008) and STS (RR 0•77 [95% CI 0•68-0•87], p<0•0001) reduced CHF-related hospitalisations. Both interventions improved quality of life, reduced costs, and were acceptable to patients. Improvements in prescribing, patient-knowledge and self-care, and functional class were observed.--Conclusion: TM and STS both appear effective interventions to improve outcomes in patients with CHF.

Participatory action research card set

These cards are designed as a resource for implementing participatory action research (PAR) in social programs. Each card covers one of the five key stages of PAR as outlined in the manual 'On PAR- Using participatory Action Research to Improve Early Intervention' (Crane and O'Regan 2010).

European advanced driver training programs : reasons for optimism

Post license advanced driver training programs in the US and early programs in Europe have often failed to accomplish their stated objectives because, it is suspected, that drivers gain self perceived driving skills that exceed their true skills—leading to increased post training crashes. The consensus from the evaluation of countless advanced driver training programs is that these programs are a detriment to safety, especially for novice, young, male drivers. Some European countries including Sweden, Finland, Austria, Luxembourg, and Norway, have continued to refine these programs, with an entirely new training philosophy emerging around 1990. These ‘post-renewal’ programs have shown considerable promise, despite various data quality and availability concerns. These programs share in common a focus on teaching drivers about self assessment and anticipation of risk, as opposed to teaching drivers how to master driving at the limits of tire adhesion. The programs focus on factors such as self actualization and driving discipline, rather than low level mastery of skills. Drivers are meant to depart these renewed programs with a more realistic assessment of their driving abilities. These renewed programs require considerable specialized and costly infrastructure including dedicated driver training facilities with driving modules engineered specifically for advanced driver training and highly structured curricula. They are conspicuously missing from both the US road safety toolbox and academic literature. Given the considerable road safety concerns associated with US novice male drivers in particular, these programs warrant further attention. This paper reviews the predominant features and empirical evidence surrounding post licensing advanced driver training programs focused on novice drivers. A clear articulation of differences between the renewed and current US advanced driver training programs is provided. While the individual quantitative evaluations range from marginally to significantly effective in reducing novice driver crash risk, they have been criticized for evaluation deficiencies ranging from small sample sizes to confounding variables to lack of exposure metrics. Collectively, however, the programs sited in the paper suggest at least a marginally positive effect that needs to be validated with further studies. If additional well controlled studies can validate these programs, a pilot program in the US should be considered.

Exporting educational services : an Australian university’s experience in delivering offshore project management programs

Increasingly, Australian universities are facing the challenges of global education. While overseas students studying in Australia provide the primary source of export earnings for educational institutions, a number of institutions, including QUT, are also involved in international trade in educational services by providing services offshore. This paper discusses driving forces behind moves by Australian universities to enter the international education market. It then briefly describes Queensland University of Technology’s internationalisation strategy. The paper concludes with a case study describing how the School of Construction Management has pioneered the development of offshore courses at QUT. The introduction of the Master of Project Management and Graduate Diploma of Project Management programs in Singapore in November 1993 represented QUT’s first experience in this area. With the experience of 18 months of operation, the School now has the opportunity to reflect on the outcomes of this venture and consider future options.

Exploiting system fluctuations. Differential training in physical prevention and rehabilitation programs for health and exercise

Background: Traditional causal modeling of health interventions tends to be linear in nature and lacks multidisciplinarity. Consequently, strategies for exercise prescription in health maintenance are typically group based and focused on the role of a common optimal health status template toward which all individuals should aspire. ----- ----- Materials and methods: In this paper, we discuss inherent weaknesses of traditional methods and introduce an approach exercise training based on neurobiological system variability. The significance of neurobiological system variability in differential learning and training was highlighted.----- ----- Results: Our theoretical analysis revealed differential training as a method by which neurobiological system variability could be harnessed to facilitate health benefits of exercise training. It was observed that this approach emphasizes the importance of using individualized programs in rehabilitation and exercise, rather than group-based strategies to exercise prescription.----- ----- Conclusion: Research is needed on potential benefits of differential training as an approach to physical rehabilitation and exercise prescription that could counteract psychological and physical effects of disease and illness in subelite populations. For example, enhancing the complexity and variability of movement patterns in exercise prescription programs might alleviate effects of depression in nonathletic populations and physical effects of repetitive strain injuries experienced by athletes in elite and developing sport programs.

A hierarchical security assessment model for object-oriented programs

We present a hierarchical model for assessing an object-oriented program's security. Security is quantified using structural properties of the program code to identify the ways in which `classified' data values may be transferred between objects. The model begins with a set of low-level security metrics based on traditional design characteristics of object-oriented classes, such as data encapsulation, cohesion and coupling. These metrics are then used to characterise higher-level properties concerning the overall readability and writability of classified data throughout the program. In turn, these metrics are then mapped to well-known security design principles such as `assigning the least privilege' and `reducing the size of the attack surface'. Finally, the entire program's security is summarised as a single security index value. These metrics allow different versions of the same program, or different programs intended to perform the same task, to be compared for their relative security at a number of different abstraction levels. The model is validated via an experiment involving five open source Java programs, using a static analysis tool we have developed to automatically extract the security metrics from compiled Java bytecode.

Do programs to improve business performance in small and medium manufacturing enterprise improve opportunity recognition?

Increasing awareness of the benefits of stimulating entrepreneurial behaviour in small and medium enterprises has fostered strong interest in innovation programs. Recently many western countries have invested in design innovation for better firm performance. This research presents some early findings from a study of companies which participated in an holistic approach to design innovation, where the outcomes include better business performance and better market positioning in global markets. Preliminary findings from in-depth semi-structured interviews indicate the importance of firm openness to new ways of working and developing new processes of strategic entrepreneurship. Implications for theory and practice are discussed.

Inter-sector leader transitions and organisation transformation : a research agenda

Faced with the need for strategic change, structural and cultural realignment, innovation and value-adding, many public sector organisations are tapping into a wider senior leadership talent pool and attracting successful leaders from other sectors (Flynn and Thompson, 2009). Leadership renewal has resulted, in some cases, in the external recruitment of whole senior leadership teams (Hockridge, 2008), raising issues about the influence of context on leader success (Pawar and Eastman, 1997) and potential leader transition failure, a costly outcome for leaders and organisations (Howard, 2001). There is little research on inter-sector leader transitions, which is surprising given the significant costs associated with leader acquisition and failure(Conger, 2010; Day and Halpin, 2004). For example, it is not clear what organizations do (or do not do) to ensure the outcomes of their significant investment in inter sector transitions are realised. In addition, it is not clear how the individual leader manages the challenging transition into a new leadership context and how their approach to leadership facilitates or inhibits successful transition (Avolio, 2010). Leader assimilation programs have been developed to assimilate new leaders (Manderscheid, 2008); however, assimilation is not necessarily a desired organisational outcome (Denis and Pineault, 2000). In this paper we critically review the limited literature on inter-sector leader transitions and transformational change outcomes and argue for a mutual accommodation approach. We draw on our own initial empirical work to propose the elements of a program for achieving this outcome from the perspective of the public organisation and the inter-sector appointee.

Access and Quality of Heart Failure Management Programs in Australia

Background/aim In response to the high burden of disease associated with chronic heart failure (CHF), in particular the high rates of hospital admissions, dedicated CHF management programs (CHF-MP) have been developed. Over the past five years there has been a rapid growth of CHF-MPs in Australia. Given the apparent mismatch between the demand for, and availability of CHF-MPs, this paper has been designed to discuss the accessibility to and quality of current CHF-MPs in Australia. Methods The data presented in this report has been combined from the research of the co-authors, in particular a review of the inequities in access to chronic heart failure which utilised geographical information systems (GIS) and the survey of heterogeneity in quality and service provision in Australian. Results Of the 62 CHF-MPs surveyed in this study 93% (58) centres had been located areas that are rated as Highly Accessible. This result indicated that most of the CHF-MPs have been located in capital cities or large regional cities. Six percent (4 CHF-MPs) had been located in Accessible areas which were country towns or cities. No CHF-MPs had been established outside of cities to service the estimated 72,000 individuals with CHF living in rural and remote areas. 16% of programs recruited NYHA Class I patients and of these 20% lacked confirmation (echocardiogram) of their diagnosis. Conclusion Overall, these data highlight the urgent need to provide equitable access to CHF-MP's. When establishing CHF-MPs consideration of current evidence based models to ensure quality in practice.

Teachers' personal epistemologies and teacher education : emergent themes and future research

This chapter summarizes the responses to four questions in each of the chapters in this volume. The questions addressed the use of a conceptual framework that guides the chapter, issues of domain-generality, how personal epistemology relates to teaching, and how personal epistemologies change. We concluded that all of the chapters discussed the distinction between constructivist and transmission teaching practices, while suggesting that there are many inconsistencies in understanding the relationship between the nature of beliefs and teachers’ practices regardless of the relative sophistication of teachers’ personal epistemologies. We also summarized a multi-component instructional model for calibrating teaching practices based on suggestions in each of the chapters, and made four suggestions for future research, including the need for an integrated theory that accounts for the development and manifestations of personal pistemology in the classroom, the generalizability of fi ndings across different measurements, a set of guidelines to promote teacher epistemological change, and an explicit instructional model that explains the development and calibration of beliefs and practices. The goal of this volume was to examine the relationship between teachers’ personal epistemologies and teacher education. Sixteen different chapters addressed one or more aspects of this issue. Although each of the chapters addressed different aspects of teachers’ personal epistemologies, a number of common themes are apparent across the chapters. We believe it is useful to articulate these themes in greater detail to provide a better retrospective understanding of this volume, as well as a better prospective framework for future research and changes to teacher training programs. We divide this chapter into two main sections. The fi rst section addresses four key questions about the nature of teachers’ personal epistemologies that were discussed in the introductory chapter as part of a larger set of questions. These questions focus on how to conceptualize these beliefs as explicit models; whether beliefs are domain-specifi c or domain-general; how beliefs are related to teaching; and how beliefs change over time. We provide a summary of each chapter in terms of these four questions. The second section proposes four general suggestions for future research based on the studies reported within this volume.