A FIREWALL MODEL OF FILE SYSTEM SECURITY

File system security is fundamental to the security of UNIX and Linux systems since in these systems almost everything is in the form of a file. To protect the system files and other sensitive user files from unauthorized accesses, certain security schemes are chosen and used by different organizations in their computer systems. A file system security model provides a formal description of a protection system. Each security model is associated with specified security policies which focus on one or more of the security principles: confidentiality, integrity and availability. The security policy is not only about “who” can access an object, but also about “how” a subject can access an object. To enforce the security policies, each access request is checked against the specified policies to decide whether it is allowed or rejected. The current protection schemes in UNIX/Linux systems focus on the access control. Besides the basic access control scheme of the system itself, which includes permission bits, setuid and seteuid mechanism and the root, there are other protection models, such as Capabilities, Domain Type Enforcement (DTE) and Role-Based Access Control (RBAC), supported and used in certain organizations. These models protect the confidentiality of the data directly. The integrity of the data is protected indirectly by only allowing trusted users to operate on the objects. The access control decisions of these models depend on either the identity of the user or the attributes of the process the user can execute, and the attributes of the objects. Adoption of these sophisticated models has been slow; this is likely due to the enormous complexity of specifying controls over a large file system and the need for system administrators to learn a new paradigm for file protection. We propose a new security model: file system firewall. It is an adoption of the familiar network firewall protection model, used to control the data that flows between networked computers, toward file system protection. This model can support decisions of access control based on any system generated attributes about the access requests, e.g., time of day. The access control decisions are not on one entity, such as the account in traditional discretionary access control or the domain name in DTE. In file system firewall, the access decisions are made upon situations on multiple entities. A situation is programmable with predicates on the attributes of subject, object and the system. File system firewall specifies the appropriate actions on these situations. We implemented the prototype of file system firewall on SUSE Linux. Preliminary results of performance tests on the prototype indicate that the runtime overhead is acceptable. We compared file system firewall with TE in SELinux to show that firewall model can accommodate many other access control models. Finally, we show the ease of use of firewall model. When firewall system is restricted to specified part of the system, all the other resources are not affected. This enables a relatively smooth adoption. This fact and that it is a familiar model to system administrators will facilitate adoption and correct use. The user study we conducted on traditional UNIX access control, SELinux and file system firewall confirmed that. The beginner users found it easier to use and faster to learn then traditional UNIX access control scheme and SELinux.

Das Internet der Dinge unter dem Aspekt der Selbststeuerung-Ein Überblick

In den letzten Jahren wurde die Vision einer Welt smarter Alltagsgegenstände unter den Begriffen wie Ubiquitous Computing, Pervasive Computing und Ambient Intelligence in der Öffentlichkeit wahrgenommen. Die smarten Gegenstände sollen mit digitaler Logik, Sensorik und der Möglichkeit zur Vernetzung ausgestattet werden. Somit bilden sie ein „Internet der Dinge“, in dem der Computer als eigenständiges Gerät verschwindet und in den Objekten der physischen Welt aufgeht. Während auf der einen Seite die Vision des „Internet der Dinge“ durch die weiter anhaltenden Fortschritte in der Informatik, Mikroelektronik, Kommunikationstechnik und Materialwissenschaft zumindest aus technischer Sicht wahrscheinlich mittelfristig realisiert werden kann, müssen auf der anderen Seite die damit zusammenhängenden ökonomischen, rechtlichen und sozialen Fragen geklärt werden. Zur Weiterentwicklung und Realisierung der Vision des „Internet der Dinge“ wurde erstmals vom AutoID-Center das EPC-Konzept entwickelt, welches auf globale netzbasierte Informationsstandards setzt und heute von EPCglobal weiterentwickelt und umgesetzt wird. Der EPC erlaubt es, umfassende Produktinformationen über das Internet zur Verfügung zu stellen. Die RFID-Technologie stellt dabei die wichtigste Grundlage des „Internet der Dinge“ dar, da sie die Brücke zwischen der physischen Welt der Produkte und der virtuellen Welt der digitalen Daten schlägt. Die Objekte, die mit RFID-Transpondern ausgestattet sind, können miteinander kommunizieren und beispielsweise ihren Weg durch die Prozesskette finden. So können sie dann mit Hilfe der auf den RFID-Transpondern gespeicherten Informationen Förderanlagen oder sonstige Maschinen ohne menschliches Eingreifen selbstständig steuern.

Toward global prevention of sexually transmitted infections (STIs): The need for STI vaccines.

An estimated 499 million curable sexually transmitted infections (STIs; gonorrhea, chlamydia, syphilis, and trichomoniasis) occurred globally in 2008. In addition, well over 500 million people are estimated to have a viral STI such as herpes simplex virus type 2 (HSV-2) or human papillomavirus (HPV) at any point in time. STIs result in a large global burden of sexual, reproductive, and maternal-child health consequences, including genital symptoms, pregnancy complications, cancer, infertility, and enhanced HIV transmission, as well as important psychosocial consequences and financial costs. STI control strategies based primarily on behavioral primary prevention and STI case management have had clear successes, but gains have not been universal. Current STI control is hampered or threatened by several behavioral, biological, and implementation challenges, including a large proportion of asymptomatic infections, lack of feasible diagnostic tests globally, antimicrobial resistance, repeat infections, and barriers to intervention access, availability, and scale-up. Vaccines against HPV and hepatitis B virus offer a new paradigm for STI control. Challenges to existing STI prevention efforts provide important reasons for working toward additional STI vaccines. We summarize the global epidemiology of STIs and STI-associated complications, examine challenges to existing STI prevention efforts, and discuss the need for new STI vaccines for future prevention efforts.

Extending in vitro conditioning in Aplysia to analyze operant and classical processes in the same preparation.

Operant and classical conditioning are major processes shaping behavioral responses in all animals. Although the understanding of the mechanisms of classical conditioning has expanded significantly, the understanding of the mechanisms of operant conditioning is more limited. Recent developments in Aplysia are helping to narrow the gap in the level of understanding between operant and classical conditioning, and have raised the possibility of studying the neuronal processes underlying the interaction of operant and classical components in a relatively complex learning task. In the present study, we describe a first step toward realizing this goal, by developing a single in vitro preparation in which both operant and classical conditioning can be studied concurrently. The new paradigm reproduced previously published results, even under more conservative and homogenous selection criteria and tonic stimulation regime. Moreover, the observed learning was resistant to delay, shortening, and signaling of reinforcement.

Training in intensive care medicine. A challenge within reach.

The medical training model is currently immersed in a process of change. The new paradigm is intended to be more effective, more integrated within the healthcare system, and strongly oriented towards the direct application of knowledge to clinical practice. Compared with the established training system based on certification of the completion of a series or rotations and stays in certain healthcare units, the new model proposes a more structured training process based on the gradual acquisition of specific competences, in which residents must play an active role in designing their own training program. Training based on competences guarantees more transparent, updated and homogeneous learning of objective quality, and which can be homologated internationally. The tutors play a key role as the main directors of the process, and institutional commitment to their work is crucial. In this context, tutors should receive time and specific formation to allow the evaluation of training as the cornerstone of the new model. New forms of objective summative and training evaluation should be introduced to guarantee that the predefined competences and skills are effectively acquired. The free movement of specialists within Europe is very desirable and implies that training quality must be high and amenable to homologation among the different countries. The Competency Based training in Intensive Care Medicine in Europe program is our main reference for achieving this goal. Scientific societies in turn must impulse and facilitate all those initiatives destined to improve healthcare quality and therefore specialist training. They have the mission of designing strategies and processes that favor training, accreditation and advisory activities with the government authorities.

Dynamic Intraligamentary Stabilization (DIS) for treatment of acute anterior cruciate ligament ruptures: case series experience of the first three years.

BACKGROUND In recent years, the scientific discussion has focused on new strategies to enable a torn anterior cruciate ligament (ACL) to heal into mechanically stable scar tissue. Dynamic intraligamentary stabilization (DIS) was first performed in a pilot study of 10 patients. The purpose of the current study was to evaluate whether DIS would lead to similarly sufficient stability and good clinical function in a larger case series. METHODS Acute ACL ruptures were treated by using an internal stabilizer, combined with anatomical repositioning of torn bundles and microfracturing to promote self-healing. Clinical assessment (Tegner, Lysholm, IKDC, and visual analogue scale [VAS] for patient satisfaction scores) and assessment of knee laxity was performed at 3, 6, 12, and 24 months. A one-sample design with a non-inferiority margin was chosen to compare the preoperative and postoperative IKDS and Lysholm scores. RESULTS 278 patients with a 6:4 male to female ratio were included. Average patient age was 31 years. Preoperative mean IKDC, Lysholm, and Tegner scores were 98.8, 99.3, and 5.1 points, respectively. The mean anteroposterior (AP) translation difference from the healthy contralateral knee was 4.7 mm preoperatively. After DIS treatment, the mean 12-month IKDC, Lysholm, and Tegner scores were 93.6, 96.2, and 4.9 points, respectively, and the mean AP translation difference was 2.3 mm. All these outcomes were significantly non-inferior to the preoperative or healthy contralateral values (p < 0.0001). Mean patient satisfaction was 8.8 (VAS 0-10). Eight ACL reruptures occurred and 3 patients reported insufficient subjective stability of the knee at the end of the study period. CONCLUSIONS Anatomical repositioning, along with DIS and microfracturing, leads to clinically stable healing of the torn ACL in the large majority of patients. Most patients exhibited almost normal knee function, reported excellent satisfaction, and were able to return to their previous levels of sporting activity. Moreover, this strategy resulted in stable healing of all sutured menisci, which could lower the rate of osteoarthritic changes in future. The present findings support the discussion of a new paradigm in ACL treatment based on preservation and self-healing of the torn ligament.

La odisea de un concepto nómada : el desarrollo sustentable en la órbita de la Geografía

Nuevo paradigma para algunos, o simple eslogan político-mediático para otros, el concepto de desarrollo sustentable levanta reacciones contradictorias en el mundo científico. Existen notables diferencias en el acercamiento al desarrollo sustentable entre los representantes de las ciencias naturales y los de las ciencias humanas. El carácter nómada del concepto (Stengers, 1987) de desarrollo sustentable es percibido por ciertos investigadores en geografía como una verdadera tara genética, cuando otros piensan por el contrario que puede servir de palanca para renovar el acercamiento geográfico a los grandes problemas contemporáneos. ¿Para la investigación en geografía, qué postura es conveniente adoptar? ¿El desarrollo sustentable, como concepto nómada, puede convertirse en una herramienta eficaz e innovadora? ¿O bien su incertidumbre semántica nos conduce de manera inexorable hacia un vagabundeo de las ideas? El objetivo central de esta reflexión es intentar situar el concepto de desarrollo sustentable en la órbita del pensamiento geográfico, en una óptica comparativa con disciplinas vecinas y cuestionando a su vez su interés para la investigación en nuestro campo disciplinario. Para ello, es necesario en primer lugar acercarse sin tabúes a los problemas planteados por este concepto: ¿Debe considerarse el nomadismo conceptual del desarrollo sustentable como una especie de pecado original que lo convertiría en un instrumento inoperante para la geografía? En segundo lugar, desmitificando la novedad aparente del concepto, conviene analizar cuáles son sus filiaciones con la geografía y otras disciplinas. Y finalmente, plantear casos concretos de utilización del concepto en la investigación geográfica (ciudad sustentable; bosques sustentables), subrayando sus aportes, pero también poniendo a la luz sus límites.

Otra Patagonia Austral es posible : proyectos de territorio entre la emergencia y la urgencia

Nuevo paradigma para algunos, o simple eslogan político-mediático para otros, el concepto de desarrollo sustentable levanta reacciones contradictorias en el mundo científico. Existen notables diferencias en el acercamiento al desarrollo sustentable entre los representantes de las ciencias naturales y los de las ciencias humanas. El carácter nómada del concepto (Stengers, 1987) de desarrollo sustentable es percibido por ciertos investigadores en geografía como una verdadera tara genética, cuando otros piensan por el contrario que puede servir de palanca para renovar el acercamiento geográfico a los grandes problemas contemporáneos. ¿Para la investigación en geografía, qué postura es conveniente adoptar? ¿El desarrollo sustentable, como concepto nómada, puede convertirse en una herramienta eficaz e innovadora? ¿O bien su incertidumbre semántica nos conduce de manera inexorable hacia un vagabundeo de las ideas? El objetivo central de esta reflexión es intentar situar el concepto de desarrollo sustentable en la órbita del pensamiento geográfico, en una óptica comparativa con disciplinas vecinas y cuestionando a su vez su interés para la investigación en nuestro campo disciplinario. Para ello, es necesario en primer lugar acercarse sin tabúes a los problemas planteados por este concepto: ¿Debe considerarse el nomadismo conceptual del desarrollo sustentable como una especie de pecado original que lo convertiría en un instrumento inoperante para la geografía? En segundo lugar, desmitificando la novedad aparente del concepto, conviene analizar cuáles son sus filiaciones con la geografía y otras disciplinas. Y finalmente, plantear casos concretos de utilización del concepto en la investigación geográfica (ciudad sustentable; bosques sustentables), subrayando sus aportes, pero también poniendo a la luz sus límites.

Restauración de incisivo inferior fracturado mediante procedimientos de invasión mínima : reporte de un caso clínico

La odontología está inmersa en un nuevo paradigma: no se puede pensar en ninguna técnica restauradora sin que participen fenómenos de adhesión. El desarrollo de pernos de fibra de vidrio, sumado a los procedimientos de restauraciones adhesivas puede utilizarse como uno de los tantos recursos de la odontología de invasión mínima. Los pernos de fibra de vidrio ofrecen varias ventajas: comportamiento anisótropo, módulo de elasticidad bajo, buena resistencia mecánica, el lecho que aloja al perno de fibra requiere de una mínima preparación y se cementan con cementos adhesivos con carga, permitiendo de esta manera obtener una superficie homogénea que se interpone entre el perno de fibra y los tejidos dentales, conectándolo a los tejidos del conducto y sustituyendo mecánicamente la dentina. El caso clínico que se reporta se presentó para su resolución en la Clínica Integrada III F. O. UNCuyo durante el año lectivo 2009. El paciente presentaba una fractura amelodentinaria desde hacía cuatro años, con compromiso de la vitalidad y un proceso periapical. Durante los procedimientos endodónticos se realizó una perforación de la pared del conducto que se selló mediante la colocación de hidróxido de calcio y la obturación del mismo con conos de gutapercha. Se efectuó el seguimiento clínico y radiográfico del caso en donde se constató la reparación del proceso apical y luego se procedió a la restauración del elemento dentario con resinas compuestas con la ayuda de un poste de fibra de vidrio cementado con cemento resinoso. Dadas las características del tratamiento endodóntico realizado, se decidió dejar más porción del cono de gutapercha a pesar de lo aconsejado por numerosos autores, ya que de esta manera se aseguró el sellado de la perforación radicular para evitar de esta manera la nanofiltración hacia el interior del elemento dentario.

El Cid humanístico : La configuración del paradigma caballeresco

Si bien el Cid sigue su camino cuatrocentista en las derivaciones cronísticas y en el romancero épico, se afirma paralelamente a lo largo del siglo xv un nuevo paradigma en torno a Rodrigo, para acercarlo a los esquemas de la actuación caballeresca con que se entraman las biografías o crónicas particulares de héroes reales. Las ponderaciones del héroe en la literatura de la época se vinculan con los principales proyectos de renovación de la caballería, instigados a lo largo de los tres reinados de esta centuria, en especial a los promovidos en el entorno de don Álvaro de Luna y en el marco militar de los Reyes Católicos.

El Cid humanístico : La configuración del paradigma caballeresco

Si bien el Cid sigue su camino cuatrocentista en las derivaciones cronísticas y en el romancero épico, se afirma paralelamente a lo largo del siglo xv un nuevo paradigma en torno a Rodrigo, para acercarlo a los esquemas de la actuación caballeresca con que se entraman las biografías o crónicas particulares de héroes reales. Las ponderaciones del héroe en la literatura de la época se vinculan con los principales proyectos de renovación de la caballería, instigados a lo largo de los tres reinados de esta centuria, en especial a los promovidos en el entorno de don Álvaro de Luna y en el marco militar de los Reyes Católicos.

El Cid humanístico : La configuración del paradigma caballeresco

Si bien el Cid sigue su camino cuatrocentista en las derivaciones cronísticas y en el romancero épico, se afirma paralelamente a lo largo del siglo xv un nuevo paradigma en torno a Rodrigo, para acercarlo a los esquemas de la actuación caballeresca con que se entraman las biografías o crónicas particulares de héroes reales. Las ponderaciones del héroe en la literatura de la época se vinculan con los principales proyectos de renovación de la caballería, instigados a lo largo de los tres reinados de esta centuria, en especial a los promovidos en el entorno de don Álvaro de Luna y en el marco militar de los Reyes Católicos.

Toward reduction of artifacts in fused images

Most fusion satellite image methodologies at pixel-level introduce false spatial details, i.e.artifacts, in the resulting fusedimages. In many cases, these artifacts appears because image fusion methods do not consider the differences in roughness or textural characteristics between different land covers. They only consider the digital values associated with single pixels. This effect increases as the spatial resolution image increases. To minimize this problem, we propose a new paradigm based on local measurements of the fractal dimension (FD). Fractal dimension maps (FDMs) are generated for each of the source images (panchromatic and each band of the multi-spectral images) with the box-counting algorithm and by applying a windowing process. The average of source image FDMs, previously indexed between 0 and 1, has been used for discrimination of different land covers present in satellite images. This paradigm has been applied through the fusion methodology based on the discrete wavelet transform (DWT), using the à trous algorithm (WAT). Two different scenes registered by optical sensors on board FORMOSAT-2 and IKONOS satellites were used to study the behaviour of the proposed methodology. The implementation of this approach, using the WAT method, allows adapting the fusion process to the roughness and shape of the regions present in the image to be fused. This improves the quality of the fusedimages and their classification results when compared with the original WAT method

Generating Awareness from Collaborative Working Environment using Social Data

Nowadays, Internet is a place where social networks have reached an important impact in collaboration among people over the world in different ways. This article proposes a new paradigm for building CSCW business tools following the novel ideas provided by the social web to collaborate and generate awareness. An implementation of these concepts is described, including the components we provide to collaborate in workspaces, (such as videoconference, chat, desktop sharing, forums or temporal events), and the way we generate awareness from these complex social data structures. Figures and validation results are also presented to stress that this architecture has been defined to support awareness generation via joining current and future social data from business and social networks worlds, based on the idea of using social data stored in the cloud.

HALA!'s White Paper. Towards Higher Levels of Automation in ATM

• Objectives of HALA! • Main Activities • HALA! Magement Team • Participants • Intended Audience • Heritage in ATM and Automation • The new paradigm shift in Automation in ATM • Overall system performance as main driver for ATM Automation • The three interdependent dimensions for the paradigm change. • New roles assignment based on : • “best time” • “decision place” • “best player” • HALA! main research areas