Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: 1) if policies are complex, their enforcement can lead to performance decay of database servers; 2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: (1) if policies are complex, their enforcement can lead to performance decay of database servers; (2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Adaptivity and a posteriori error control for bifurcation problems I: the Bratu problem

This article is concerned with the numerical detection of bifurcation points of nonlinear partial differential equations as some parameter of interest is varied. In particular, we study in detail the numerical approximation of the Bratu problem, based on exploiting the symmetric version of the interior penalty discontinuous Galerkin finite element method. A framework for a posteriori control of the discretization error in the computed critical parameter value is developed based upon the application of the dual weighted residual (DWR) approach. Numerical experiments are presented to highlight the practical performance of the proposed a posteriori error estimator.

Adaptivity and a posteriori error control for bifurcation problems II: Incompressible fluid flow in open systems with Z_2 symmetry

In this article we consider the a posteriori error estimation and adaptive mesh refinement of discontinuous Galerkin finite element approximations of the bifurcation problem associated with the steady incompressible Navier-Stokes equations. Particular attention is given to the reliable error estimation of the critical Reynolds number at which a steady pitchfork or Hopf bifurcation occurs when the underlying physical system possesses reflectional or Z_2 symmetry. Here, computable a posteriori error bounds are derived based on employing the generalization of the standard Dual-Weighted-Residual approach, originally developed for the estimation of target functionals of the solution, to bifurcation problems. Numerical experiments highlighting the practical performance of the proposed a posteriori error indicator on adaptively refined computational meshes are presented.

Real-time load-side control of electric power systems

Two trends are emerging from modern electric power systems: the growth of renewable (e.g., solar and wind) generation, and the integration of information technologies and advanced power electronics. The former introduces large, rapid, and random fluctuations in power supply, demand, frequency, and voltage, which become a major challenge for real-time operation of power systems. The latter creates a tremendous number of controllable intelligent endpoints such as smart buildings and appliances, electric vehicles, energy storage devices, and power electronic devices that can sense, compute, communicate, and actuate. Most of these endpoints are distributed on the load side of power systems, in contrast to traditional control resources such as centralized bulk generators. This thesis focuses on controlling power systems in real time, using these load side resources. Specifically, it studies two problems.

(1) Distributed load-side frequency control: We establish a mathematical framework to design distributed frequency control algorithms for flexible electric loads. In this framework, we formulate a category of optimization problems, called optimal load control (OLC), to incorporate the goals of frequency control, such as balancing power supply and demand, restoring frequency to its nominal value, restoring inter-area power flows, etc., in a way that minimizes total disutility for the loads to participate in frequency control by deviating from their nominal power usage. By exploiting distributed algorithms to solve OLC and analyzing convergence of these algorithms, we design distributed load-side controllers and prove stability of closed-loop power systems governed by these controllers. This general framework is adapted and applied to different types of power systems described by different models, or to achieve different levels of control goals under different operation scenarios. We first consider a dynamically coherent power system which can be equivalently modeled with a single synchronous machine. We then extend our framework to a multi-machine power network, where we consider primary and secondary frequency controls, linear and nonlinear power flow models, and the interactions between generator dynamics and load control.

(2) Two-timescale voltage control: The voltage of a power distribution system must be maintained closely around its nominal value in real time, even in the presence of highly volatile power supply or demand. For this purpose, we jointly control two types of reactive power sources: a capacitor operating at a slow timescale, and a power electronic device, such as a smart inverter or a D-STATCOM, operating at a fast timescale. Their control actions are solved from optimal power flow problems at two timescales. Specifically, the slow-timescale problem is a chance-constrained optimization, which minimizes power loss and regulates the voltage at the current time instant while limiting the probability of future voltage violations due to stochastic changes in power supply or demand. This control framework forms the basis of an optimal sizing problem, which determines the installation capacities of the control devices by minimizing the sum of power loss and capital cost. We develop computationally efficient heuristics to solve the optimal sizing problem and implement real-time control. Numerical experiments show that the proposed sizing and control schemes significantly improve the reliability of voltage control with a moderate increase in cost.

Adaptive edge analytics for distributed networked control of water systems

Over the last decade, there has been a trend where water utility companies aim to make water distribution networks more intelligent in order to improve their quality of service, reduce water waste, minimize maintenance costs etc., by incorporating IoT technologies. Current state of the art solutions use expensive power hungry deployments to monitor and transmit water network states periodically in order to detect anomalous behaviors such as water leakage and bursts. However, more than 97% of water network assets are remote away from power and are often in geographically remote underpopulated areas, facts that make current approaches unsuitable for next generation more dynamic adaptive water networks. Battery-driven wireless sensor/actuator based solutions are theoretically the perfect choice to support next generation water distribution. In this paper, we present an end-to-end water leak localization system, which exploits edge processing and enables the use of battery-driven sensor nodes. Our system combines a lightweight edge anomaly detection algorithm based on compression rates and an efficient localization algorithm based on graph theory. The edge anomaly detection and localization elements of the systems produce a timely and accurate localization result and reduce the communication by 99% compared to the traditional periodic communication. We evaluated our schemes by deploying non-intrusive sensors measuring vibrational data on a real-world water test rig that have had controlled leakage and burst scenarios implemented.

New weapons to fight old enemies: novel strategies for the (bio)control of bacterial biofilms in the food industry

Biofilms are microbial communities characterized by their adhesion to solid surfaces and the production of a matrix of exopolymeric substances, consisting of polysaccharides, proteins, DNA and lipids, which surround the microorganisms lending structural integrity and a unique biochemical profile to the biofilm. Biofilm formation enhances the ability of the producer/s to persist in a given environment. Pathogenic and spoilage bacterial species capable of forming biofilms are a significant problem for the healthcare and food industries, as their biofilm-forming ability protects them from common cleaning processes and allows them to remain in the environment post-sanitation. In the food industry, persistent bacteria colonize the inside of mixing tanks, vats and tubing, compromising food safety and quality. Strategies to overcome bacterial persistence through inhibition of biofilm formation or removal of mature biofilms are therefore necessary. Current biofilm control strategies employed in the food industry (cleaning and disinfection, material selection and surface preconditioning, plasma treatment, ultrasonication, etc.), although effective to a certain point, fall short of biofilm control. Efforts have been explored, mainly with a view to their application in pharmaceutical and healthcare settings, which focus on targeting molecular determinants regulating biofilm formation. Their application to the food industry would greatly aid efforts to eradicate undesirable bacteria from food processing environments and, ultimately, from food products. These approaches, in contrast to bactericidal approaches, exert less selective pressure which in turn would reduce the likelihood of resistance development. A particularly interesting strategy targets quorum sensing systems, which regulate gene expression in response to fluctuations in cell-population density governing essential cellular processes including biofilm formation. This review article discusses the problems associated with bacterial biofilms in the food industry and summarizes the recent strategies explored to inhibit biofilm formation, with special focus on those targeting quorum sensing.

Diageo's 'Stop Out of Control Drinking' campaign in Ireland: an analysis

Background: It has been argued that the alcohol industry uses corporate social responsibility activities to influence policy and undermine public health, and that every opportunity should be taken to scrutinise such activities. This study analyses a controversial Diageo-funded ‘responsible drinking’ campaign (“Stop out of Control Drinking”, or SOOCD) in Ireland. The study aims to identify how the campaign and its advisory board members frame and define (i) alcohol-related harms, and their causes, and (ii) possible solutions. Methods: Documentary analysis of SOOCD campaign material. This includes newspaper articles (n = 9), media interviews (n = 11), Facebook posts (n = 92), and Tweets (n = 340) produced by the campaign and by board members. All material was coded inductively, and a thematic analysis undertaken, with codes aggregated into sub-themes. Results: The SOOCD campaign utilises vague or self-defined concepts of ‘out of control’ and ‘moderate’ drinking, tending to present alcohol problems as behavioural rather than health issues. These are also unquantified with respect to actual drinking levels. It emphasises alcohol-related antisocial behaviour among young people, particularly young women. In discussing solutions to alcohol-related problems, it focuses on public opinion rather than on scientific evidence, and on educational approaches and information provision, misrepresenting these as effective. “Moderate drinking” is presented as a behavioural issue (“negative drinking behaviours”), rather than as a health issue. Conclusions: The ‘Stop Out of Control Drinking’ campaign frames alcohol problems and solutions in ways unfavourable to public health, and closely reflects other Diageo Corporate Social Responsibility (CSR) activity, as well as alcohol and tobacco industry strategies more generally. This framing, and in particular the framing of alcohol harms as a behavioural issue, with the implication that consumption should be guided only by self-defined limits, may not have been recognised by all board members. It suggests a need for awareness-raising efforts among the public, third sector and policymakers about alcohol industry strategies

Distributed Large-scale Mixed-Integer Optimization with Application to Energy and Multi-robot Networks

Several decision and control tasks in cyber-physical networks can be formulated as large- scale optimization problems with coupling constraints. In these "constraint-coupled" problems, each agent is associated to a local decision variable, subject to individual constraints. This thesis explores the use of primal decomposition techniques to develop tailored distributed algorithms for this challenging set-up over graphs. We first develop a distributed scheme for convex problems over random time-varying graphs with non-uniform edge probabilities. The approach is then extended to unknown cost functions estimated online. Subsequently, we consider Mixed-Integer Linear Programs (MILPs), which are of great interest in smart grid control and cooperative robotics. We propose a distributed methodological framework to compute a feasible solution to the original MILP, with guaranteed suboptimality bounds, and extend it to general nonconvex problems. Monte Carlo simulations highlight that the approach represents a substantial breakthrough with respect to the state of the art, thus representing a valuable solution for new toolboxes addressing large-scale MILPs. We then propose a distributed Benders decomposition algorithm for asynchronous unreliable networks. The framework has been then used as starting point to develop distributed methodologies for a microgrid optimal control scenario. We develop an ad-hoc distributed strategy for a stochastic set-up with renewable energy sources, and show a case study with samples generated using Generative Adversarial Networks (GANs). We then introduce a software toolbox named ChoiRbot, based on the novel Robot Operating System 2, and show how it facilitates simulations and experiments in distributed multi-robot scenarios. Finally, we consider a Pickup-and-Delivery Vehicle Routing Problem for which we design a distributed method inspired to the approach of general MILPs, and show the efficacy through simulations and experiments in ChoiRbot with ground and aerial robots.

Distributed non-cooperative robust economic predictive control for dynamically coupled linear systems.

In this thesis, a tube-based Distributed Economic Predictive Control (DEPC) scheme is presented for a group of dynamically coupled linear subsystems. These subsystems are components of a large scale system and control inputs are computed based on optimizing a local economic objective. Each subsystem is interacting with its neighbors by sending its future reference trajectory, at each sampling time. It solves a local optimization problem in parallel, based on the received future reference trajectories of the other subsystems. To ensure recursive feasibility and a performance bound, each subsystem is constrained to not deviate too much from its communicated reference trajectory. This difference between the plan trajectory and the communicated one is interpreted as a disturbance on the local level. Then, to ensure the satisfaction of both state and input constraints, they are tightened by considering explicitly the effect of these local disturbances. The proposed approach averages over all possible disturbances, handles tightened state and input constraints, while satisfies the compatibility constraints to guarantee that the actual trajectory lies within a certain bound in the neighborhood of the reference one. Each subsystem is optimizing a local arbitrary economic objective function in parallel while considering a local terminal constraint to guarantee recursive feasibility. In this framework, economic performance guarantees for a tube-based distributed predictive control (DPC) scheme are developed rigorously. It is presented that the closed-loop nominal subsystem has a robust average performance bound locally which is no worse than that of a local robust steady state. Since a robust algorithm is applying on the states of the real (with disturbances) subsystems, this bound can be interpreted as an average performance result for the real closed-loop system. To this end, we present our outcomes on local and global performance, illustrated by a numerical example.

Chitosan/tripolyphosphate Nanoparticles Loaded With Paraquat Herbicide: An Environmentally Safer Alternative For Weed Control.

Paraquat is a fast acting nonselective contact herbicide that is extensively used worldwide. However, the aqueous solubility and soil sorption of this compound can cause problems of toxicity in nontarget organisms. This work investigates the preparation and characterization of nanoparticles composed of chitosan and sodium tripolyphosphate (TPP) to produce an efficient herbicidal formulation that was less toxic and could be used for safer control of weeds in agriculture. The toxicities of the formulations were evaluated using cell culture viability assays and the Allium cepa chromosome aberration test. The herbicidal activity was investigated in cultivations of maize (Zea mays) and mustard (Brassica sp.), and soil sorption of the nanoencapsulated herbicide was measured. The efficiency association of paraquat with the nanoparticles was 62.6 ± 0.7%. Encapsulation of the herbicide resulted in changes in its diffusion and release as well as its sorption by soil. Cytotoxicity and genotoxicity assays showed that the nanoencapsulated herbicide was less toxic than the pure compound, indicating its potential to control weeds while at the same time reducing environmental impacts. Measurements of herbicidal activity showed that the effectiveness of paraquat was preserved after encapsulation. It was concluded that the encapsulation of paraquat in nanoparticles can provide a useful means of reducing adverse impacts on human health and the environment, and that the formulation therefore has potential for use in agriculture.

Impact Of Pharmacist Interventions On Drug-related Problems And Laboratory Markers In Outpatients With Human Immunodeficiency Virus Infection.

Substantial complexity has been introduced into treatment regimens for patients with human immunodeficiency virus (HIV) infection. Many drug-related problems (DRPs) are detected in these patients, such as low adherence, therapeutic inefficacy, and safety issues. We evaluated the impact of pharmacist interventions on CD4+ T-lymphocyte count, HIV viral load, and DRPs in patients with HIV infection. In this 18-month prospective controlled study, 90 outpatients were selected by convenience sampling from the Hospital Dia-University of Campinas Teaching Hospital (Brazil). Forty-five patients comprised the pharmacist intervention group and 45 the control group; all patients had HIV infection with or without acquired immunodeficiency syndrome. Pharmaceutical appointments were conducted based on the Pharmacotherapy Workup method, although DRPs and pharmacist intervention classifications were modified for applicability to institutional service limitations and research requirements. Pharmacist interventions were performed immediately after detection of DRPs. The main outcome measures were DRPs, CD4+ T-lymphocyte count, and HIV viral load. After pharmacist intervention, DRPs decreased from 5.2 (95% confidence interval [CI] =4.1-6.2) to 4.2 (95% CI =3.3-5.1) per patient (P=0.043). A total of 122 pharmacist interventions were proposed, with an average of 2.7 interventions per patient. All the pharmacist interventions were accepted by physicians, and among patients, the interventions were well accepted during the appointments, but compliance with the interventions was not measured. A statistically significant increase in CD4+ T-lymphocyte count in the intervention group was found (260.7 cells/mm(3) [95% CI =175.8-345.6] to 312.0 cells/mm(3) [95% CI =23.5-40.6], P=0.015), which was not observed in the control group. There was no statistical difference between the groups regarding HIV viral load. This study suggests that pharmacist interventions in patients with HIV infection can cause an increase in CD4+ T-lymphocyte counts and a decrease in DRPs, demonstrating the importance of an optimal pharmaceutical care plan.

Health services performance for TB treatment in Brazil: a cross-sectional study

Background: Researches to evaluate Primary Health Care performance in TB control in Brazil show that different cities aggregate local specificities in the dynamics of coping with the disease. This study aims to evaluate health services' performance in TB treatment in cities across different Brazilian regions. Methods: This cross-sectional study was conducted in five cities that are considered priorities for TB control in Brazil: Itaborai (ITA), Ribeirao Preto (RP) and Sao Jose do Rio Preto (SJRP) in the Southeast; Campina Grande (CG) and Feira de Santana (FS) in the Northeast. Data were collected through interviews with 514 TB patients under treatment in 2007, using the Primary Care Assessment Tool adapted for TB care in Brazil. Indicators were constructed based on the mean response scores (Likert scale) and compared among the study sites. Results: ""Access to treatment"" was evaluated as satisfactory in the Southeast and regular in the Northeast, which displayed poor results on 'home visits' and 'distance between treatment site and patient's house'. ""Bond"" was assessed as satisfactory in all cities, with a slightly better performance in RP and SJRP. ""Range of services"" was rated as regular, with better performance of southeastern cities. 'Health education', 'DOT' and 'food vouchers' were less offered in the Northeast. ""Coordination"" was evaluated as satisfactory in all cities. ""Family focus"" was evaluated as satisfactory in RP and SJRP, and regular in the others. 'Professional asking patient's family about other health problems' was evaluated as unsatisfactory, except in RP. Conclusions: Two types of obstacles are faced for health service performance in TB treatment in the cities under analysis, mainly in the Northeast. The first is structural and derives from difficulties to access health services and actions. The second is organizational and derives from the way health technologies and services are distributed and integrated. Incentives to improve care organization and management practices, aimed at the integration of primary, secondary and tertiary services, can contribute towards a better performance of health services in TB treatment.

Dynamical models for computer viruses propagation

Nowadays, digital computer systems and networks are the main engineering tools, being used in planning, design, operation, and control of all sizes of building, transportation, machinery, business, and life maintaining devices. Consequently, computer viruses became one of the most important sources of uncertainty, contributing to decrease the reliability of vital activities. A lot of antivirus programs have been developed, but they are limited to detecting and removing infections, based on previous knowledge of the virus code. In spite of having good adaptation capability, these programs work just as vaccines against diseases and are not able to prevent new infections based on the network state. Here, a trial on modeling computer viruses propagation dynamics relates it to other notable events occurring in the network permitting to establish preventive policies in the network management. Data from three different viruses are collected in the Internet and two different identification techniques, autoregressive and Fourier analyses, are applied showing that it is possible to forecast the dynamics of a new virus propagation by using the data collected from other viruses that formerly infected the network. Copyright (c) 2008 J. R. C. Piqueira and F. B. Cesar. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

Balance control in hemiparetic stroke patients: Main tools for evaluation

Balance problems in hemiparetic patients after stroke can be caused by different impairments in the physiological systems involved in Postural control, including sensory afferents, movement strategies, biomechanical constraints, cognitive processing, and perception of verticality. Balance impairments and disabilities must be appropriately addressed. This article reviews the most common balance abnormalities in hemiparetic patients with stroke and the main tools used to diagnose them.