Social security : racial difference in disability decisions warrants further investigation : report to the Ranking Minority Member, Special Committee on Aging, U.S. Senate /

"B-247327."

The mandatory social security coverage proposal : potential impacts on rural and urban areas /

Title from cover.

Social security as a retirement resource for near-retirees /

"May 2005."

Paying for social security : funding options for the near term /

Item 1005-C

Relief and social security,

Mode of access: Internet.

Cyber security in home and small office local area networks - Attack vectors and vulnerabilities

This thesis presents security issues and vulnerabilities in home and small office local area networks that can be used in cyber-attacks. There is previous research done on single vulnerabilities and attack vectors, but not many papers present full scale attack examples towards LAN. First this thesis categorizes different security threads and later in the paper methods to launch the attacks are shown by example. Offensive security and penetration testing is used as research methods in this thesis. As a result of this thesis an attack is conducted using vulnerabilities in WLAN, ARP protocol, browser as well as methods of social engineering. In the end reverse shell access is gained to the target machine. Ready-made tools are used in the attack and their inner workings are described. Prevention methods are presented towards the attacks in the end of the thesis.

Social cohesion: inclusion and a sense of belonging in Latin America and the Caribbean. Summary

Includes bibliography

Entre a potência e a impotência do exercício profissional de médico perito no Intituto Nacional do Seguro Social (INSS): a importância do Estado como componente dilemático e paradoxal

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Reflecting on Whether Checklists Can Tick the Box for Cloud Security.

Postprint

Progress and Research in Cybersecurity - Supporting a resilient and trustworthy system for the UK

Executive summary
Digital systems have transformed, and will continue to transform, our world. Supportive government policy, a strong research base and a history of industrial success make the UK particularly well-placed to realise the benefits of the emerging digital society. These benefits have already been substantial, but they remain at risk. Protecting the benefits and minimising the risks requires reliable and robust cybersecurity, underpinned by a strong research and translation system.
Trust is essential for growing and maintaining participation in the digital society. Organisations earn trust by acting in a trustworthy manner: building systems that are reliable and secure, treating people, their privacy and their data with respect, and providing credible and comprehensible information to help people understand how secure they are.
Resilience, the ability to function, adapt, grow, learn and transform under stress or in the face of shocks, will help organisations deliver systems that are reliable and secure. Resilient organisations can better protect their customers, provide more useful products and services, and earn people’s trust.
Research and innovation in industry and academia will continue to make important contributions to creating this resilient and trusted digital environment. Research can illuminate how best to build, assess and improve digital systems, integrating insights from different disciplines, sectors and around the globe. It can also generate advances to help cybersecurity keep up with the continued evolution of cyber risks.
Translation of innovative ideas and approaches from research will create a strong supply of reliable, proven solutions to difficult to predict cybersecurity risks. This is best achieved by maximising the diversity and number of innovations that see the light of day as products.
Policy, practice and research will all need to adapt. The recommendations made in this report seek to set up a trustworthy, self-improving and resilient digital environment that can thrive in the face of unanticipated threats, and earn the trust people place in it.
Innovation and research will be particularly important to the UK’s economy as it establishes a new relationship with the EU. Cybersecurity delivers important economic benefits, both by underpinning the digital foundations of UK business and trade and also through innovation that feeds directly into growth. The findings of this report will be relevant regardless of how the UK’s relationship to the EU changes.
Headline recommendations
● Trust: Governments must commit to preserving the robustness of encryption, including end-to-end encryption, and promoting its widespread use. Encryption is a foundational security technology that is needed to build user trust, improve security standards and fully realise the benefits of digital systems.
● Resilience: Government should commission an independent review of the UK’s future cybersecurity needs, focused on the institutional structures needed to support resilient and trustworthy digital systems in the medium and longer term. A self-improving, resilient digital environment will need to be guided and governed by institutions that are transparent, expert and have a clear and widely-understood remit.
● Research: A step change in cybersecurity research and practice should be pursued; it will require a new approach to research, focused on identifying ambitious high-level goals and enabling excellent researchers to pursue those ambitions. This would build on the UK's existing strengths in many aspects of cybersecurity research and ultimately help build a resilient and trusted digital sector based on excellent research and world-class expertise.
● Translation: The UK should promote a free and unencumbered flow of cybersecurity ideas from research to practical use and support approaches that have public benefits beyond their short term financial return. The unanticipated nature of future cyber threats means that a diverse set of cybersecurity ideas and approaches will be needed to build resilience and adaptivity. Many of the most valuable ideas will have broad security benefits for the public, beyond any direct financial returns.

ISO/IEC 27000, 27001 and 27002 for Information Security Management

With the increasing significance of information technology, there is an urgent need for adequate measures of information security. Systematic information security management is one of most important initiatives for IT management. At least since reports about privacy and security breaches, fraudulent accounting practices, and attacks on IT systems appeared in public, organizations have recognized their responsibilities to safeguard physical and information assets. Security standards can be used as guideline or framework to develop and maintain an adequate information security management system (ISMS). The standards ISO/IEC 27000, 27001 and 27002 are international standards that are receiving growing recognition and adoption. They are referred to as “common language of organizations around the world” for information security. With ISO/IEC 27001 companies can have their ISMS certified by a third-party organization and thus show their customers evidence of their security measures.

Information security value in e-entrepreneurship

This paper researches the information security value in e-entrepreneurship by revising the literature that establishes the entrepreneurial domain and by relating it with the development of technological resources that create value for the customer in an online business. It details multiple paradigms regarding consumer’s values of information security, while relating them with common practices and previous researches in technological entrepreneurship. This research presents and discusses the benefits of information security standards in e-entrepreneurship. It details and discusses the ISO 27001 and PCI-DSS information security standards that can be used to differentiate security initiatives to achieve competitive advantage, while preserving information leadership as a critical resource for online business success. Based on the literature review, a theoretical research model is presented and research hypotheses are discussed. This model believes that information security affects information leadership and that information leadership, as a unique resource in e-business, contributes to e-entrepreneurship success. The adoption of information security standards affects customer’s trust in e-business, which also benefits e-entrepreneurial strategy.

Sickness presenteeism in Spanish-born and immigrant workers in Spain

Background: Previous studies have shown that immigrant workers face relatively worse working and employment conditions, as well as lower rates of sickness absence than native-born workers. This study aims to assess rates of sickness presenteeism in a sample of Spanish-born and foreign-born workers according to different characteristics. Methods: A cross-sectional survey was conducted amongst a convenience sample of workers (Spanish-born and foreign-born), living in four Spanish cities: Barcelona, Huelva, Madrid and Valencia (2008-2009). Sickness presenteeism information was collected through two items in the questionnaire ("Have you had health problems in the last year?" and "Have you ever had to miss work for any health problem?") and was defined as worker who had a health problem (answered yes, first item) and had not missed work (answered no, second item). For the analysis, the sample of 2,059 workers (1,617 foreign-born) who answered yes to health problems was included. After descriptives, logistic regressions were used to establish the association between origin country and sickness presenteeism (adjusted odds ratios aOR; 95% confidence interval 95%CI). Analyses were stratified per time spent in Spain among foreign-born workers. Results: All of the results refer to the comparison between foreign-born and Spanish-born workers as a whole, and in some categories relating to personal and occupational conditions. Foreign-born workers were more likely to report sickness presenteeism compared with their Spanish-born counterparts, especially those living in Spain for under 2 years [Prevalence: 42% in Spanish-born and 56.3% in Foreign-born; aOR 1.77 95%CI 1.24-2.53]. In case of foreign-born workers (with time in Spain < 2 years), men [aOR 2.31 95%CI 1.40-3.80], those with university studies [aOR 3.01 95%CI 1.04-8.69], temporary contracts [aOR 2.26 95%CI 1.29-3.98] and salaries between 751-1,200€ per month [aOR 1.74 95% CI 1.04-2.92] were more likely to report sickness presenteeism. Also, recent immigrants with good self-perceived health and good mental health were more likely to report presenteeism than Spanish-born workers with the same good health indicators. Conclusions: Immigrant workers report more sickness presenteeism than their Spanish-born counterparts. These results could be related to precarious work and employment conditions of immigrants. Immigrant workers should benefit from the same standards of social security, and of health and safety in the workplace that are enjoyed by Spanish workers.

Parasitic Order Machine. A Sociology and Ontology of Information Securing

This study examines information security as a process (information securing) in terms of what it does, especially beyond its obvious role of protector. It investigates concepts related to ‘ontology of becoming’, and examines what it is that information securing produces. The research is theory driven and draws upon three fields: sociology (especially actor-network theory), philosophy (especially Gilles Deleuze and Félix Guattari’s concept of ‘machine’, ‘territory’ and ‘becoming’, and Michel Serres’s concept of ‘parasite’), and information systems science (the subject of information security). Social engineering (used here in the sense of breaking into systems through non-technical means) and software cracker groups (groups which remove copy protection systems from software) are analysed as examples of breaches of information security. Firstly, the study finds that information securing is always interruptive: every entity (regardless of whether or not it is malicious) that becomes connected to information security is interrupted. Furthermore, every entity changes, becomes different, as it makes a connection with information security (ontology of becoming). Moreover, information security organizes entities into different territories. However, the territories – the insides and outsides of information systems – are ontologically similar; the only difference is in the order of the territories, not in the ontological status of entities that inhabit the territories. In other words, malicious software is ontologically similar to benign software; they both are users in terms of a system. The difference is based on the order of the system and users: who uses the system and what the system is used for. Secondly, the research shows that information security is always external (in the terms of this study it is a ‘parasite’) to the information system that it protects. Information securing creates and maintains order while simultaneously disrupting the existing order of the system that it protects. For example, in terms of software itself, the implementation of a copy protection system is an entirely external addition. In fact, this parasitic addition makes software different. Thus, information security disrupts that which it is supposed to defend from disruption. Finally, it is asserted that, in its interruption, information security is a connector that creates passages; it connects users to systems while also creating its own threats. For example, copy protection systems invite crackers and information security policies entice social engineers to use and exploit information security techniques in a novel manner.

Les mémorandums d’entente sur le contrôle des navires par l'État portuaire comme mécanisme de renforcement de la sécurité maritime : une approche prometteuse du transgouvernementalisme

La thèse a été réalisée en cotutelle avec l'Université Paul Céazanne (Aix Marseille III).