Encryption schemes and key exchange protocols in the certificateless setting

The contributions of this thesis fall into three areas of certificateless cryptography. The first area is encryption, where we propose new constructions for both identity-based and certificateless cryptography. We construct an n-out-of- n group encryption scheme for identity-based cryptography that does not require any special means to generate the keys of the trusted authorities that are participating. We also introduce a new security definition for chosen ciphertext secure multi-key encryption. We prove that our construction is secure as long as at least one authority is uncompromised, and show that the existing constructions for chosen ciphertext security from identity-based encryption also hold in the group encryption case. We then consider certificateless encryption as the special case of 2-out-of-2 group encryption and give constructions for highly efficient certificateless schemes in the standard model. Among these is the first construction of a lattice-based certificateless encryption scheme. Our next contribution is a highly efficient certificateless key encapsulation mechanism (KEM), that we prove secure in the standard model. We introduce a new way of proving the security of certificateless schemes based that are based on identity-based schemes. We leave the identity-based part of the proof intact, and just extend it to cover the part that is introduced by the certificateless scheme. We show that our construction is more efficient than any instanciation of generic constructions for certificateless key encapsulation in the standard model. The third area where the thesis contributes to the advancement of certificateless cryptography is key agreement. Swanson showed that many certificateless key agreement schemes are insecure if considered in a reasonable security model. We propose the first provably secure certificateless key agreement schemes in the strongest model for certificateless key agreement. We extend Swanson's definition for certificateless key agreement and give more power to the adversary. Our new schemes are secure as long as each party has at least one uncompromised secret. Our first construction is in the random oracle model and gives the adversary slightly more capabilities than our second construction in the standard model. Interestingly, our standard model construction is as efficient as the random oracle model construction.

Getting more than the judgment debtor can give?

Prior to the decision of the High Court in Black v Garnock (2007) 230 CLR 438 it was an established principle in Queensland that a judgment creditor acting under an enforcement warrant could take no interest beyond what the judgment debtor could give. However, the decision of the High Court called this principle into question. This article examines the current position in the context of s 120 of the Land Title Act 1994 (Qld) , Queensland Titles Office practice and standard contractual provisions. This examination is further informed by the recent decision of Martin J in Secure Funding Pty Ltd v Doneley [2010] QSC 91.

Ceremony analysis : strengths and weaknesses

We investigate known security flaws in the context of security ceremonies to gain an understanding of the ceremony analysis process. The term security ceremonies is used to describe a system of protocols and humans which interact for a specific purpose. Security ceremonies and ceremony analysis is an area of research in its infancy, and we explore the basic principles involved to better understand the issues involved.We analyse three ceremonies, HTTPS, EMV and Opera Mini, and use the information gained from the experience to establish a list of typical flaws in ceremonies. Finally, we use that list to analyse a protocol proven secure for human use. This leads to a realisation of the strengths and weaknesses of ceremony analysis.

Preferences of first-time expectant mothers for care of their child : 'I wouldn't leave them somewhere that made me feel insecure'

Australia has witnessed a continual increase in maternal employment over the past two decades, which places focus on both supply of childcare and a demand for high quality care. This study examined childcare preferences regarding the return to paid work of 124 Australian women who were expecting their first child. In contrast with most studies that have retrospective designs, the design of this study presents the perspectives of women prior to the birth of their first child-that is, before they have made a final decision about child care. This study found that the majority (78 per cent) of the women intended to re-commence work within the 12 months after the birth of their child. There were two factors that were the most salient features in their decision making-the quality of care and the personal satisfaction of engaging in paid work. The findings suggest that family friendly employment practices and access to secure, high-quality child care are key to women's secure participation in the paid workforce.

Attachment, fear of intimacy and differentiation of self among clients in substance disorder treatment facilities

Attachment, fear of intimacy and differentiation of self were examined by means of self-report questionnaires in 158 volunteers, including 99 clients enrolled in addiction treatment programs. As expected, clients (who were undergoing treatment for alcoholism, heroin addiction, amphetamine/cocaine addiction or cannabis abuse) reported higher levels of insecure attachment and fear of intimacy, and lower levels of secure attachment and differentiation of self, compared to controls. Insecure attachment, high fear of intimacy and low self-differentiation appear to characterize clients enrolled in addiction treatment programs. Such characteristics may reflect a predisposition to substance problems, an effect of chronic substance problems, or conceivably both.

An efficient public key management system : an application in vehicular ad hoc networks

The major purpose of Vehicular Ad Hoc Networks (VANETs) is to provide safety-related message access for motorists to react or make a life-critical decision for road safety enhancement. Accessing safety-related information through the use of VANET communications, therefore, must be protected, as motorists may make critical decisions in response to emergency situations in VANETs. If introducing security services into VANETs causes considerable transmission latency or processing delays, this would defeat the purpose of using VANETs to improve road safety. Current research in secure messaging for VANETs appears to focus on employing certificate-based Public Key Cryptosystem (PKC) to support security. The security overhead of such a scheme, however, creates a transmission delay and introduces a time-consuming verification process to VANET communications. This paper proposes an efficient public key management system for VANETs: the Public Key Registry (PKR) system. Not only does this paper demonstrate that the proposed PKR system can maintain security, but it also asserts that it can improve overall performance and scalability at a lower cost, compared to the certificate-based PKC scheme. It is believed that the proposed PKR system will create a new dimension to the key management and verification services for VANETs.

Open problems in the security of learning

Machine learning has become a valuable tool for detecting and preventing malicious activity. However, as more applications employ machine learning techniques in adversarial decision-making situations, increasingly powerful attacks become possible against machine learning systems. In this paper, we present three broad research directions towards the end of developing truly secure learning. First, we suggest that finding bounds on adversarial influence is important to understand the limits of what an attacker can and cannot do to a learning system. Second, we investigate the value of adversarial capabilities-the success of an attack depends largely on what types of information and influence the attacker has. Finally, we propose directions in technologies for secure learning and suggest lines of investigation into secure techniques for learning in adversarial environments. We intend this paper to foster discussion about the security of machine learning, and we believe that the research directions we propose represent the most important directions to pursue in the quest for secure learning.

Parent decisions regarding paid work and care of the child

Australia has witnessed a continual increase in maternal employment over the past two decades, which has placed focus on child care- its effects on the child and on early childhood education and care policy and provision. The engagement of women in the paid workforce contributes to national economic development, and is recognised in government policy incentives such as cash subsidies and tax relief for child care fees. These incentives are targeted towards mothers, to encourage them to engage in paid work. Making a contribution to the family’s economy and to a mother’s economic self sufficiency are two key drivers for women’s engagement in satisfying paid work. Many women also seek to maintain a personal investment in the development of their career, simultaneously ensuring that the child is experiencing suitable care. Policies that support women’s choices for satisfying workforce engagement and care arrangements are prudent for ensuring productivity of the economy as well as for enhancing the wellbeing of parents and children (OECD, 2007). Policies that provide family friendly employment arrangements, paid parental leave, and child care support, directly affect maternal employment decisions. Availability of family friendly employment policies is viewed as one way to not only promote gender equity in employment opportunities but also support the wellbeing of children and families (OECD, 2007). Yet there are not comprehensive and coherent policies on work and family in Australia. Australia is due to implement its first paid parental leave scheme in January, 2011. At the time of the data collection of this research, June 2007 to December 2008, Australia had no statutory provision for paid parental leave. To date, most research has focused on the consequences of paid work and care decisions made by women. Far less is known about the processes of decision-making and reasons underlying women’s choices. Investigation of what is most salient for women as they make decisions regarding engagement in paid work, and care for their child is important in order to inform policy and practices related to parental leave, family friendly employment and care for the child. This prospective longitudinal research was of 124 Australian expectant first-time mothers who completed questionnaires in their third trimester of pregnancy, and again at six and twelve months postpartum. First-time expectant mothers' decisions regarding engaging in paid work and selecting care for their child represent those of a group who are invested in motherhood and have usually had direct experience of engaging in paid work. They therefore provide an important insight into society’s idealised views about motherhood and the emotional and social uncertainty of making personal decisions where the consequences of such decisions are unknown. These decisions reflect public beliefs about the role of women in contributing to the country’s productivity and decisions about providing for the economic and emotional care needs of their family. As so little is known about the reasoning and processes of decision-making of women’s choices regarding paid work and care of the child this research was designed to capture expectant first-time mother’s preferred options for engaging in paid work and the care of their child, and investigate their actual decisions made at six and 12 months postpartum. To capture preferred options, decisions and outcomes of decisions regarding paid work and care of the child a prospective longitudinal research design was utilised. This design had three important components that addressed key limitations in the extant literature. First the research commenced in pregnancy in order to investigate preferences and beliefs about paid work and care and to examine baseline data that may influence decisions made as the women returned to paid work. Second the research involved longitudinal tracking from the antenatal time point to six and 12 months postpartum in order to identify the influences on decisions made. Third the research measured outcomes of the decisions made at each time point. This research examined the intentions, preferences, beliefs, influences, and outcomes of the decisions about engagement in paid work and choice of care. The analyses examined factors predicting return to paid work, the timing of return and extent of engagement in paid work; the care for the child; satisfaction with paid work; satisfaction with care for the child, motherhood and fulfilment; and maternal wellbeing at six and 12 months postpartum. The factors of interest were both rational/economic (availability and extent of paid and unpaid maternity leave; flexible work patterns) and emotional/affective (career satisfaction, investment in motherhood, and concern with quality of care for the child). Results indicated a group preference, and realisation for, return to paid work within the first year after the birth of a child but with reduction in hours to part-time. Most women saw paid work not only as a source of income but also as source of personal satisfaction. There were four key themes arising from this research. First, the women strived to feel emotionally secure when deciding about engaging in paid work and care of the child. To achieve emotional security women made their decisions for paid work and care of the child differently. A woman’s decision for maternal employment is a function of her personal beliefs, preferences and context regarding paid work and care of the child. She adjusts her established work identity with her new identity as a mother. The second key theme from this research is that the women made their decisions for maternal employment in response to their personal context and there were different levels of opportunities between the women’s choices. There is inequity of entitlement regarding work conditions associated with a woman’s education level. This has implications for the woman’s engagement in paid work, and her child’s health and wellbeing. The third key theme is that the quality of the child’s care mattered to the women in the research. They preferred care provided by parents and/or relatives more than any other types of care. The fourth key theme identified that satisfaction and wellbeing outcomes experienced as a result of maternal employment decisions were a complex interaction between multiple factors that change across time with the ongoing development of the mother’s identity, and the development of the child. The implications for policy within Australia are that the employment of mothers in the workforce necessitates that non-parental care becomes a public concern, where there is universal access to good quality affordable care for every child, not just for those who can afford it. This is equitable and represents real choice while supporting the rights of the child (Thorpe, Cloney & Tayler, 2010), protecting and promoting the public interest (Cleveland & Krashinsky, 2010). Children’s health and wellbeing will be supported (Moore & Oberklaid, 2010) while children are in non-parental care, and they will be exposed to environments and experiences that support their learning and development. The significant design of the research enabled the trajectories of first-time expectant women to be tracked from the antenatal point to 12 months postpartum. But there were limitations: the small sample size, the over-representation of the sample being highly educated and the nature of a longitudinal research that is set within the economic, social and political context at that time. These limitations are discussed in relation to suggestions for future research.

Funding and employment conditions : critical issues for Australian music therapy beyond 2009

As the Australian Journal of Music Therapy celebrates its 20th year of publication, it is evident that the profession of music therapy in Australia, has made substantial progress over these last 20 years. Jobs are regularly advertised on the website, there is a greater public awareness of what music therapy is, there are government recognised salary awards applicable in several states of the country, working conditions have generally improved, and many Australian music therapists are recognised on the international stage as leaders in their field of expertise. You can even go to a party and tell someone you are a music therapist and there is a good chance they will say 'oh yeah, I know someone who does that at the hospital / school / community centre / nursing home' instead of saying 'oh, so like, a what?'. Despite the impressive leaps and bounds that have been made, and the success of many programs in Australia to date, there is still a great deal of room for improvement. What are the critical issues ahead for the development of music therapy in Australia? In particular, how do music therapists develop going forward and secure funding for clinical initiatives? In reflecting on this question, this article identifies two key areas, amongst the many, that can be addressed by music therapists over the next 20 years: funding and employment conditions. Examples from the national early intervention music therapy program 'Sing and Grow' are used to illustrate the potential impact of addressing these two issues on the positive development of the profession into the future.

Towards a global carbon integrity system : learning from the GFC and avoiding a GCC

This paper examines some of the central global ethical and governance challenges of climate change and carbon emis-sions reduction in relation to globalization, the “global financial crisis” (GFC), and unsustainable conceptions of the “good life”, and argues in favour of the development of a global carbon “integrity system”. It is argued that a funda-mental driver of our climate problems is the incipient spread of an unsustainable Western version of the “good life”, where resource-intensive, high-carbon western lifestyles, although frequently criticized as unsustainable and deeply unsatisfying, appear to have established an unearned ethical legitimacy. While the ultimate solution to climate change is the development of low carbon lifestyles, the paper argues that it is also important that economic incentives support and stimulate that search: the sustainable versions of the good life provide an ethical pull, whilst the incentives provide an economic push. Yet, if we are going to secure sustainable low carbon lifestyles, it is argued, we need more than the ethical pull and the economic push. Each needs to be institutionalized—built into the governance of global, regional, national, sub-regional, corporate and professional institutions. Where currently weakness in each exacerbates the weaknesses in others, it is argued that governance reform is required in all areas supporting sustainable, low carbon versions of the good life.

The role of information avoidance in everyday-life information behaviors

This paper presents the results from a study of information behaviors in the context of people's everyday lives as part of a larger study of information behaviors (IB). 34 participants from across 6 countries maintained a daily information journal or diary – mainly through a secure web log – for two weeks, to an aggregate of 468 participant days over five months. The text-rich diary data was analyzed using Grounded Theory analysis. The findings indicate that information avoidance is a common phenomenon in everyday life and consisted of both passive avoidance and active avoidance. This has implications for several aspects of peoples' lives including health, finance, and personal relationships.

An efficient public key management regime for vehicular ad hoc networks (VANETS)

The primary goal of the Vehicular Ad Hoc Network (VANET) is to provide real-time safety-related messages to motorists to enhance road safety. Accessing and disseminating safety-related information through the use of wireless communications technology in VANETs should be secured, as motorists may make critical decisions in dealing with an emergency situation based on the received information. If security concerns are not addressed in developing VANET systems, an adversary can tamper with, or suppress, the unprotected message to mislead motorists to cause traffic accidents and hazards. Current research on secure messaging in VANETs focuses on employing the certificate-based Public Key Infrastructure (PKI) scheme to support message encryption and digital signing. The security overhead of such a scheme, however, creates a transmission delay and introduces a time-consuming verification process to VANET communications. This thesis has proposed a novel public key verification and management approach for VANETs; namely, the Public Key Registry (PKR) regime. Compared to the VANET PKI scheme, this new approach can satisfy necessary security requirements with improved performance and scalability, and at a lower cost by reducing the security overheads of message transmission and eliminating digital certificate deployment and maintenance issues. The proposed PKR regime consists of the required infrastructure components, rules for public key management and verification, and a set of interactions and associated behaviours to meet these rule requirements. This is achieved through a system design as a logic process model with functional specifications. The PKR regime can be used as development guidelines for conforming implementations. An analysis and evaluation of the proposed PKR regime includes security features assessment, analysis of the security overhead of message transmission, transmission latency, processing latency, and scalability of the proposed PKR regime. Compared to certificate-based PKI approaches, the proposed PKR regime can maintain the necessary security requirements, significantly reduce the security overhead by approximately 70%, and improve the performance by 98%. Meanwhile, the result of the scalability evaluation shows that the latency of employing the proposed PKR regime stays much lower at approximately 15 milliseconds, whether operating in a huge or small environment. It is therefore believed that this research will create a new dimension to the provision of secure messaging services in VANETs.

Post-operative CT assessment of interbody fusion two years after thoracoscopic scoliosis surgery

The relationship between radiologic union and clinical outcome in thoracoscopic scoliosis surgery is not clear, as apparent non-union of a spinal fusion does not always correspond to a poor clinical result. The aim of this study was to evaluate CT fusion rates 24 months after thoracoscopic anterior scoliosis surgery, and to explore the relationship between fusion scores and; (i) rod diameter, (ii) graft type, (iii) fusion level, (iv) occurrence of post-operative implant failure, and (v) lateral position of the fusion mass in the intervertebral disc space. We propose that moderate fusion scores on the Sucato scale secure successful clinical outcomes in thoracoscopic scoliosis surgery.

Postoperative low dose CT assessment of interbody fusion two years after thoracoscopic scoliosis surgery

The relationship between radiologic union and clinical outcomes in thoracoscopic scoliosis surgery is not clear, as apparent non-union of a spinal fusion does not always correspond to a poor clinical result. The aim of this study was to evaluate for the first time the interbody fusion rates using low dose CT scans at minimum 24 months after thoracoscopic scoliosis surgery, and to explore the relationship between fusion scores and; (i) rod diameter, (ii) graft type, (iii) fusion level, (iv) implant failure, and (v) lateral position in the disc space. The study found that moderate fusion scores on the Sucato scale secure successful clinical outcomes in thoracoscopic scoliosis surgery.

The HRM practices of innovative knowledge-intensive firms

There is little research on HRM practices in knowledge-intensive firms (KIFs), especially in comparison to that conducted in traditional production environments. Whether such HRM practices are appropriate for KIFs, particularly ones that differentiate themselves on their ability to innovate, is the basis of this research. The study investigates the HRM practices being used by four innovative firms: two KIFs and two traditional production companies. The findings suggest that there are some similarities between the HRM practices of the case firms, but there are also important differences. Specifically, the KIFs emphasise use of selection criteria and processes that secure a workforce with a desire for challenging work and the ability to work collaboratively. The KIFs are also more likely to provide a breadth of training and development opportunities for teams and individuals, to make extensive use of performance management systems, and to utilise a range of strategies to encourage and reward innovation.