Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow

Forensic analysis requires the acquisition and management of many different types of evidence, including individual disk drives, RAID sets, network packets, memory images, and extracted files. Often the same evidence is reviewed by several different tools or examiners in different locations. We propose a backwards-compatible redesign of the Advanced Forensic Formatdan open, extensible file format for storing and sharing of evidence, arbitrary case related information and analysis results among different tools. The new specification, termed AFF4, is designed to be simple to implement, built upon the well supported ZIP file format specification. Furthermore, the AFF4 implementation has downward comparability with existing AFF files.

Integrating hardware and software information flow analyses

Security-critical communications devices must be evaluated to the highest possible standards before they can be deployed. This process includes tracing potential information flow through the device's electronic circuitry, for each of the device's operating modes. Increasingly, however, security functionality is being entrusted to embedded software running on microprocessors within such devices, so new strategies are needed for integrating information flow analyses of embedded program code with hardware analyses. Here we show how standard compiler principles can augment high-integrity security evaluations to allow seamless tracing of information flow through both the hardware and software of embedded systems. This is done by unifying input/output statements in embedded program execution paths with the hardware pins they access, and by associating significant software states with corresponding operating modes of the surrounding electronic circuitry.

The reliability of information on work-related injuries available from hospitalisation data in Australia

Objective: To examine the reliability of work-related activity coding for injury-related hospitalisations in Australia. Method: A random sample of 4373 injury-related hospital separations from 1 July 2002 to 30 June 2004 were obtained from a stratified random sample of 50 hospitals across 4 states in Australia. From this sample, cases were identified as work-related if they contained an ICD-10-AM work-related activity code (U73) allocated by either: (i) the original coder; (ii) an independent auditor, blinded to the original code; or (iii) a research assistant, blinded to both the original and auditor codes, who reviewed narrative text extracted from the medical record. The concordance of activity coding and number of cases identified as work-related using each method were compared. Results: Of the 4373 cases sampled, 318 cases were identified as being work-related using any of the three methods for identification. The original coder identified 217 and the auditor identified 266 work-related cases (68.2% and 83.6% of the total cases identified, respectively). Around 10% of cases were only identified through the text description review. The original coder and auditor agreed on the assignment of work-relatedness for 68.9% of cases. Conclusions and Implications: The current best estimates of the frequency of hospital admissions for occupational injury underestimate the burden by around 32%. This is a substantial underestimate that has major implications for public policy, and highlights the need for further work on improving the quality and completeness of routine, administrative data sources for a more complete identification of work-related injuries.

The information systems discipline in Australian universities : a contextual framework

This chapter presents the contextual framework for the second phase of a multi-method, multiple study of the information systems (IS) academic discipline in Australia. The chapter outlines the genesis of a two-phase Australian study, and positions the study as the precursor to a larger Pacific-Asia study. Analysis of existing literature on the state of IS and on relevant theory underpins a series of individual Australian state case studies summarised in this chapter and represented as separate chapters in the book. This chapter outlines the methodological approach employed, with emphasis on the case-study method of the multiple state studies. The process of multiple peer review of the studies is described. Importantly, this chapter summarises and analyses each of the subsequent chapters of this book, emphasising the role of a framework developed to guide much of the data gathering and analysis. This chapter also highlights the process involved in conducting the meta-analysis reported in the final chapter of this book, and summarises some of the main results of the meta-analysis.

Innovative Practices in the Australian Built Environment Sector : An Information Resource for Industry

PROJECT BRIEF Information provided by the Built Environment Industry Innovation Council as background to this project includes the following information on construction and innovation within the industry. • The construction industry contributes around $67 billion to GDP and employs around 970,000 and generates exports of nearly $150 million. • The industry has one of the lowest innovation rates of any industry in Australia, ranking third last across all Australian industries in terms of its proportion of business expenditure on innovation, and second last in terms of the proportion of income generated from innovation (ABS, 2006). • Key innovation challenges include addressing energy and water use efficiency, and housing costs in preparing for the implementation of the Carbon Pollution Reduction Scheme. The sector will need to build its capability and capacity to deliver the technical and operational expertise required.The broader Built Environment Innovation Project aims to address the following two objectives: 1. Identify current innovative practice across the Built Environment industry. 2. Develop a knowledge exchange strategy for this information to be disseminated to all industry stakeholders. Industry practice issues are critical to the built environment industry’s ability to innovate, and the BRITE project from the CRC for Construction Innovation has previously undertaken work to identify the key factors that drive innovation. Part 1 of the current project aims to extend this work by conducting a stocktake of current and emerging innovative practices within the built environment industry. Part 2 of the project addresses the second of these objectives, that is, to recommend a knowledge exchange strategy for promoting the wider uptake of innovative practices that makes the information identified in Part 1 of the study (on emerging innovative practices) accessible to Australian built environment industry stakeholders. The project brief was for the strategy to include a mechanism to enable this information resource to be updated as new initiatives/practices are developed. A better understanding of the built environment industry’s own knowledge infrastructure also has the potential to enhance innovation outcomes for the industry. This project will develop a coordinated knowledge exchange strategy, informed by the best available information on current innovation practices within the industry and suggest directions for gaining a better understanding of: the industry contexts that lead to innovative practices; the industry (including enterprise and individual) drivers for innovation; and appropriate knowledge exchange pathways for delivering future industry innovation. A deliverable of Part 2 will be a recommendation for a knowledge exchange strategy to accelerate adoption of innovative practices in the built environment industry, including resource implications and how such a recommendation could be taken forward as an ongoing resource.

Economic issues in funding and supplying public sector information

In May 2005, a research team began to investigate whether designing and implementing a whole-of-government information licensing framework was possible. This framework was needed to administer copyright in relation to information produced by the government and to deal properly with privately-owned copyright on which government works often rely. The outcome so far is the design of the Government Information Licensing Framework (GILF) and its gradual uptake within a number of Commonwealth and State government agencies. However, licensing is part of a larger issue in managing public sector information (PSI); and it has important parallels with the management of libraries and public archives. Among other things, managing the retention and supply of PSI requires an ability to search and locate information, ability to give public access to the information legally, and an ability to administer charges for supplying information wherever it is required by law. The aim here is to provide a summary overview of pricing principles as they relate to the supply of PSI.

A visualisation framework for collaborative virtual environment usage information

Due to the popularity of modern Collaborative Virtual Environments, there has been a related increase in their size and complexity. Developers therefore need visualisations that expose usage patterns from logged data, to understand the structures and dynamics of these complex environments. This chapter presents a new framework for the process of visualising virtual environment usage data. Major components, such as an event model, designer task model and data acquisition infrastructure are described. Interface and implementation factors are also developed, along with example visualisation techniques that make use of the new task and event model. A case study is performed to illustrate a typical scenario for the framework, and its benefits to the environment development team.

Fatal motorcycle crashes in north Queensland : characteristics and potential interventions

Aims: The Rural and Remote Road Safety Study (RRRSS) addresses a recognised need for greater research on road trauma in rural and remote Australia, the costs of which are disproportionately high compared with urban areas. The 5-year multi-phase study with whole-of-government support concluded in June 2008. Drawing on RRRSS data, we analysed fatal motorcycle crashes which occurred over 39 months to provide a description of crash characteristics, contributing factors and people involved. The descriptive analysis and discussion may inform development of tailored motorcycle safety interventions. Methods: RRRSS criteria sought vehicle crashes resulting in death or hospitalisation for 24 hours minimum of at least 1 person aged 16 years or over, in the study area defined roughly as the Queensland area north from Bowen in the east and Boulia in the west (excluding Townsville and Cairns urban areas). Fatal motorcycle crashes were selected from the RRRSS dataset. Analysis considered medical data covering injury types and severity, evidence of alcohol, drugs and prior medical conditions, as well as crash descriptions supplied by police to Queensland Transport on contributing circumstances, vehicle types, environmental conditions and people involved. Crash data were plotted in a geographic information system (MapInfo) for spatial analysis. Results: There were 23 deaths from 22 motorcycle crashes on public roads meeting RRRSS criteria. Of these, half were single vehicle crashes and half involved 2 or more vehicles. In contrast to general patterns for driver/rider age distribution in crashes, riders below 25 years of age were represented proportionally within the population. Riders in their thirties comprised 41% of fatalities, with a further 36% accounted for by riders in their fifties. 18 crashes occurred in the Far North Statistical Division (SD), with 2 crashes in both the Northern and North West SDs. Behavioural factors comprised the vast majority of contributing circumstances cited by police, with adverse environmental conditions noted in only 4 cases. Conclusions: Fatal motorcycle crashes were more likely to involve another vehicle and less likely to involve a young rider than non-fatal crashes recorded by the RRRSS. Rider behaviour contributed to the majority of crashes and should be a major focus of research, education and policy development, while other road users’ behaviour and awareness also remains important. With 68% of crashes occurring on major and secondary roads within a 130km radius of Cairns, efforts should focus on this geographic area.

Formative and reflective measurement and validation mismatch in survey research : an archival analysis of information systems success constructs 1985-2007

The generic IS-success constructs first identified by DeLone and McLean (1992) continue to be widely employed in research. Yet, recent work by Petter et al (2007) has cast doubt on the validity of many mainstream constructs employed in IS research over the past 3 decades; critiquing the almost universal conceptualization and validation of these constructs as reflective when in many studies the measures appear to have been implicitly operationalized as formative. Cited examples of proper specification of the Delone and McLean constructs are few, particularly in light of their extensive employment in IS research. This paper introduces a four-stage formative construct development framework: Conceive > Operationalize > Respond > Validate (CORV). Employing the CORV framework in an archival analysis of research published in top outlets 1985-2007, the paper explores the extent of possible problems with past IS research due to potential misspecification of the four application-related success dimensions: Individual-Impact, Organizational-Impact, System-Quality and Information-Quality. Results suggest major concerns where there is a mismatch of the Respond and Validate stages. A general dearth of attention to the Operationalize and Respond stages in methodological writings is also observed.

Decision support system architecture for consultant selection

Decision Support System (DSS) has played a significant role in construction project management. This has been proven that a lot of DSS systems have been implemented throughout the whole construction project life cycle. However, most research only concentrated in model development and left few fundamental aspects in Information System development. As a result, the output of researches are complicated to be adopted by lay person particularly those whom come from a non-technical background. Hence, a DSS should hide the abstraction and complexity of DSS models by providing a more useful system which incorporated user oriented system. To demonstrate a desirable architecture of DSS particularly in public sector planning, we aim to propose a generic DSS framework for consultant selection. It will focus on the engagement of engineering consultant for irrigation and drainage infrastructure. The DSS framework comprise from operational decision to strategic decision level. The expected result of the research will provide a robust framework of DSS for consultant selection. In addition, the paper also discussed other issues that related to the existing DSS framework by integrating enabling technologies from computing. This paper is based on the preliminary case study conducted via literature review and archival documents at Department of Irrigation and Drainage (DID) Malaysia. The paper will directly affect to the enhancement of consultant pre-qualification assessment and selection tools. By the introduction of DSS in this area, the selection process will be more efficient in time, intuitively aided qualitative judgment, and transparent decision through aggregation of decision among stakeholders.

Effects of susceptibility to normative influence and type of testimonial on attitudes toward print advertising

In two experiments, we show how a consumer’s susceptibility to normative influence (SNI) offers useful insights into the effectiveness of two types of testimonials: a typical person endorsement (Study 1) and a celebrity endorsement (Study 2). Specifically, we suggest that two variables moderate testimonial effects—SNI and product attribute information. Results show that in forming their evaluations, high-SNI consumers place a greater emphasis on the testimonial than on the attribute information. In contrast, low-SNI consumers are more influenced by attribute information. A mediation analysis shows that advertising attitudes for high-SNI consumers are mediated by testimonial thoughts, whereas the attitudes for low-SNI consumers are mediated by their attribute thoughts. Theoretical and managerial implications are presented.

Reconceptualising the information system as a service

The study will cross-fertilise Information Systems (IS) and Services Marketing ideas through reconceptualising the information system as a service (ISaaS). The study addresses known limitations of arguably the two most significant dependent variables in these disciplines - Information System Success or IS-Impact, and Service Quality. Planned efforts to synthesise analogous conceptions across these disciplines, are expected to force a deeper theoretical understanding of the broad notions of success, quality, value and satisfaction and their interrelations. The aims of this research are to: (1) yield a conceptually superior and more extensively validated IS success measurement model, and (2) develop and operationalise a more rigorously validated Service Quality measurement model, while extending the ‘service’ notion to ‘operational computer-based information systems in organisations’. In the development of the new models the study will address contemporary validation issues.

Privacy and security in open and trusted health information systems

The Open and Trusted Health Information Systems (OTHIS) Research Group has formed in response to the health sector’s privacy and security requirements for contemporary Health Information Systems (HIS). Due to recent research developments in trusted computing concepts, it is now both timely and desirable to move electronic HIS towards privacy-aware and security-aware applications. We introduce the OTHIS architecture in this paper. This scheme proposes a feasible and sustainable solution to meeting real-world application security demands using commercial off-the-shelf systems and commodity hardware and software products.

Open and trusted information systems/health informatics access control (OTHIS/HIAC)

Information and Communications Technologies globally are moving towards Service Oriented Architectures and Web Services. The healthcare environment is rapidly moving to the use of Service Oriented Architecture/Web Services systems interconnected via this global open Internet. Such moves present major challenges where these structures are not based on highly trusted operating systems. This paper argues the need of a radical re-think of access control in the contemporary healthcare environment in light of modern information system structures, legislative and regulatory requirements, and security operation demands in Health Information Systems. This paper proposes the Open and Trusted Health Information Systems (OTHIS), a viable solution including override capability to the provision of appropriate levels of secure access control for the protection of sensitive health data.

Visualisation of Information Uncertainty : Progress and Challenges

Information uncertainty which is inherent in many real world applications brings more complexity to the visualisation problem. Despite the increasing number of research papers found in the literature, much more work is needed. The aims of this chapter are threefold: (1) to provide a comprehensive analysis of the requirements of visualisation of information uncertainty and their dimensions of complexity; (2) to review and assess current progress; and (3) to discuss remaining research challenges. We focus on four areas: information uncertainty modelling, visualisation techniques, management of information uncertainty modelling, propagation and visualisation, and the uptake of uncertainty visualisation in application domains.