Secure modular password authentication for the web using channel bindings

Secure protocols for password-based user authentication are well-studied in the cryptographic literature but have failed to see wide-spread adoption on the Internet; most proposals to date require extensive modifications to the Transport Layer Security (TLS) protocol, making deployment challenging. Recently, a few modular designs have been proposed in which a cryptographically secure password-based mutual authentication protocol is run inside a confidential (but not necessarily authenticated) channel such as TLS; the password protocol is bound to the established channel to prevent active attacks. Such protocols are useful in practice for a variety of reasons: security no longer relies on users' ability to validate server certificates and can potentially be implemented with no modifications to the secure channel protocol library. We provide a systematic study of such authentication protocols. Building on recent advances in modelling TLS, we give a formal definition of the intended security goal, which we call password-authenticated and confidential channel establishment (PACCE). We show generically that combining a secure channel protocol, such as TLS, with a password authentication protocol, where the two protocols are bound together using either the transcript of the secure channel's handshake or the server's certificate, results in a secure PACCE protocol. Our prototype based on TLS is available as a cross-platform client-side Firefox browser extension and a server-side web application which can easily be installed on deployed web browsers and servers.

Experimental and numerical studies of fire exposed lipped channel columns subject to distortional buckling

Cold-formed steel sections are commonly used in low-rise commercial and residential buildings. During fire events, cold-formed steel structural elements in these buildings are exposed to elevated temperatures. Hence after such events there is a need to determine the residual strength of these structural elements. However, only limited information is available in relation to the residual strength of fire exposed cold-formed steel members. This research is aimed at investigating the residual distortional buckling capacities of fire exposed cold-formed steel lipped channel sections. A series of compression tests of fire exposed, short lipped channel columns made of varying steel grades and thicknesses was undertaken in this research. Test columns were exposed to different elevated temperatures up to 800 oC. They were then allowed to cool down at ambient temperature before they were tested to failure. Suitable finite element models of tested columns were also developed and validated using test results. The residual compression capacities of tested columns were predicted using the ambient temperature cold-formed steel design rules (AS/NZS 4600, AISI S100 and Direct Strength Method). Post-fire mechanical properties obtained from a previous study were used in this study. Comparison of results showed that ambient temperature design rules for compression members can be used to predict the residual compression capacities of fire exposed short or laterally restrained cold-formed steel columns provided the maximum temperature experienced by the columns can be estimated after a fire event. Such residual capacity assessments will allow structural and fire engineers to make an accurate prediction of the safety of buildings after fire events. This paper presents the details of these experimental and numerical studies and the results.

Distortional buckling behaviour of fire exposed cold-formed steel columns

Cold-formed steel sections are commonly used in low-rise commercial and residential buildings. During fire events, cold-formed steel structural elements in these buildings can be exposed to elevated temperatures. Hence after such events there is a need to evaluate their residual strengths. However, only limited information is available in relation to the residual strength of fire exposed cold-formed steel sections. This research is aimed at investigating the distortional buckling capacities of fire exposed cold-formed lipped channel sections. A series of compression tests of fire exposed, short lipped channel columns made of varying steel grades and thicknesses was undertaken in this research. Test columns were first exposed to different elevated temperatures up to 800 oC, and then tested to failure after cooling down. Suitable finite element models were developed with post-fire mechanical properties to simulate the behaviour of tested columns and were validated using test results. The residual compression capacities of short columns were also predicted using the current cold-formed steel standards and compared with test and finite element analysis results. This comparison showed that ambient temperature design rules for columns can be used to predict the residual compression capacities of fire exposed short or laterally restrained cold-formed steel columns provided the maximum temperature experienced by the column can be estimated after a fire event. Such residual capacity assessments will allow engineers to evaluate the safety of fire exposed buildings. This paper presents the details of this experimental study, finite element analyses and the results.

Experimental studies on web crippling behaviour of hollow flange channel beams under two flange load cases

This paper presents the details of an experimental study of a cold-formed steel hollow flange channel beam known as LiteSteel beam (LSB) subject to web crippling under End Two Flange (ETF) and Interior Two Flange (ITF) load cases. The LSB sections with two rectangular hollow flanges are made using a simultaneous cold-forming and electric resistance welding process. Due to the geometry of the LSB, and its unique residual stress characteristics and initial geometric imperfections, much of the existing research for common cold-formed steel sections is not directly applicable to LSB. Experimental and numerical studies have been carried out to evaluate the behaviour and design of LSBs subject to pure bending, predominant shear and combined actions. To date, however, no investigation has been conducted on the web crippling behaviour and strength of LSB sections. Hence an experimental study was conducted to investigate the web crippling behaviour and capacities of LSBs. Twenty-eight web crippling tests were conducted under ETF and ITF load cases, and the ultimate web crippling capacities were compared with the predictions from the design equations in AS/NZS 4600 and AISI S100. This comparison showed that AS/NZS 4600 and AISI S100 web crippling design equations are unconservative for LSB sections under ETF and ITF load cases. Hence new equations were proposed to determine the web crippling capacities of LSBs based on experimental results. Suitable design rules were also developed under the direct strength method (DSM) format.

Experimental investigation and design of lipped channel beams in shear

Cold-formed high strength steel members are increasingly used as primary load bearing components in low rise buildings. Lipped channel beam (LCB) is one of the most commonly used flexural members in these applications. In this research an experimental study was undertaken to investigate the shear behaviour and strengths of LCB sections. Simply supported test specimens of back to back LCBs with aspect ratios of 1.0 and 1.5 were loaded at mid-span until failure. Test specimens were chosen such that all three types of shear failure (shear yielding, inelastic and elastic shear buckling) occurred in the tests. The ultimate shear capacity results obtained from the tests were compared with the predictions from the current design rules in Australian/NewZealand and American cold-formed steel design standards. This comparison showed that these shear design rules are very conservative as they did not include the post-buckling strength observed in the shear tests and the higher shear buckling coefficient due to the additional fixity along the web-flange juncture. Improved shear design equations are proposed in this paper by including the above beneficial effects. Suitable lower bound design rules were also developed under the direct strength method format. This paper presents the details of this experimental study and the results including the improved design rules for the shear capacity of LCBs. It also includes the details of tests of LCBs subject to combined shear and flange distortion, and combined bending and shear actions, and proposes suitable design rules to predict the capacities in these cases.

Improving the shear capacities of lipped channel beams with web openings using plate stiffeners

Cold-formed steel lipped channel beams (LCB) are used extensively in residential, industrial and commercial buildings as load bearing structural elements. Their shear capacities are considerably reduced when web openings are included for the purpose of locating building services. Past research has shown that the shear capacities of LCBs were reduced by up to 70% due to the inclusion of these web openings. Hence there is a need to improve the shear capacities of LCBs with web openings. A cost effective way of eliminating the detrimental effects of large web openings is to attach suitable stiffeners around the web openings and restore the original shear strength and stiffness of LCBs. Hence detailed experimental studies were undertaken to investigate the behaviour and strength of LCBs with stiffened web openings subject to shear, and combined bending and shear actions. Both plate and stud stiffeners with varying sizes and thicknesses were attached to the web elements of LCBs using different screw-fastening arrangements. Simply supported test specimens of LCBs with aspect ratios of 1.0 and 1.5 were loaded at mid-span until failure. Numerical studies were also undertaken to investigate the strength of LCBs with stiffened web openings. Finite element models of LCBs with stiffened web openings under shear, combined bending and shear actions were developed to simulate the behaviour of tested LCBs. The developed models were then validated by comparing their results with experimental results and used in further studies. Both experimental and finite element analysis results showed that the stiffening arrangements recommended by past research and available design guidelines are not adequate to restore the original shear strengths of LCBs. Therefore new stiffener arrangements were proposed based on screw fastened plate stiffeners. This paper presents the details of this research study and the results.

Building resilient communities : creating effective multi-channel communication during disaster response and recovery

Aim: To examine evidence-based strategies that motivate appropriate action and increase informed decision-making during the response and recovery phases of disasters.

Healthcare channel consumer insights : supermarkets, pharmacy & general practitioners

Why are consumers different: Heterogeneity in the way consumers categorise products and services – Snack Food Influenced by the individual needs, personal traits, values and goals – Blood Donation Consumers base their choices on information from external sources and prior experiences stored in memory. Intrinsic – prior experience Extrinsic – advertising, blogs, etc

Audio signalling as a backup communication channel for multi-robot systems

This paper presents a low-bandwidth multi-robot communication system designed to serve as a backup communication channel in the event a robot suffers a network device fault. While much research has been performed in the area of distributing network communication across multiple robots within a system, individual robots are still susceptible to hardware failure. In the past, such robots would simply be removed from service, and their tasks re-allocated to other members. However, there are times when a faulty robot might be crucial to a mission, or be able to contribute in a less communication intensive area. By allowing robots to encode and decode messages into unique sequences of DTMF symbols, called words, our system is able to facilitate continued low-bandwidth communication between robots without access to network communication. Our results have shown that the system is capable of permitting robots to negotiate task initiation and termination, and is flexible enough to permit a pair of robots to perform a simple turn taking task.

Temporal trends and bioavailability assessment of heavy metals in the sediments of Deception Bay, Queensland, Australia

Thirteen sites in Deception Bay, Queensland, Australia were sampled three times over a period of 7 months and assessed for contamination by a range of heavy metals, primarily As, Cd, Cr, Cu, Pb and Hg. Fraction analysis, enrichment factors and Principal Components Analysis-Absolute Principal Component Scores (PCA-APCS) analysis were conducted in order to identify the potential bioavailability of these elements of concern and their sources. Hg and Te were identified as the elements of highest enrichment in Deception Bay while marine sediments, shipping and antifouling agents were identified as the sources of the Weak acid Extractable Metals (WE-M), with antifouling agents showing long residence time for mercury contamination. This has significant implications for the future of monitoring and regulation of heavy metal contamination within Deception Bay.

Protecting encrypted cookies from compression side-channel attacks

Compression is desirable for network applications as it saves bandwidth; however, when data is compressed before being encrypted, the amount of compression leaks information about the amount of redundancy in the plaintext. This side channel has led to successful CRIME and BREACH attacks on web traffic protected by the Transport Layer Security (TLS) protocol. The general guidance in light of these attacks has been to disable compression, preserving confidentiality but sacrificing bandwidth. In this paper, we examine two techniques - heuristic separation of secrets and fixed-dictionary compression|for enabling compression while protecting high-value secrets, such as cookies, from attack. We model the security offered by these techniques and report on the amount of compressibility that they can achieve.

Evaluation of channel congestion in dedicated short-range communication networks

This thesis presents a novel idea for an adaptive prioritized cross-layer design (APCLD) control algorithm to achieve comprehensive channel congestion control for vehicular safety communication based on DSRC technology. An appropriate evaluation metric and two control parameters have been established. Simulation studies have evaluated the DSRC network performance in different traffic scenario and under different channel conditions. The APCLD algorithm is derived from the results of the simulation analysis.

Side Channel Analysis of Some Hash Based MACs: A Response to SHA-3 Requirements

The forthcoming NIST’s Advanced Hash Standard (AHS) competition to select SHA-3 hash function requires that each candidate hash function submission must have at least one construction to support FIPS 198 HMAC application. As part of its evaluation, NIST is aiming to select either a candidate hash function which is more resistant to known side channel attacks (SCA) when plugged into HMAC, or that has an alternative MAC mode which is more resistant to known SCA than the other submitted alternatives. In response to this, we perform differential power analysis (DPA) on the possible smart card implementations of some of the recently proposed MAC alternatives to NMAC (a fully analyzed variant of HMAC) and HMAC algorithms and NMAC/HMAC versions of some recently proposed hash and compression function modes. We show that the recently proposed BNMAC and KMDP MAC schemes are even weaker than NMAC/HMAC against the DPA attacks, whereas multi-lane NMAC, EMD MAC and the keyed wide-pipe hash have similar security to NMAC against the DPA attacks. Our DPA attacks do not work on the NMAC setting of MDC-2, Grindahl and MAME compression functions.

Weak acid extractable metals in Bramble Bay, Queensland, Australia : temporal behaviour, enrichment and source apportionment

Sediment samples were taken from six sampling sites in Bramble Bay, Queensland, Australia between February and November in 2012. They were analysed for a range of heavy metals including Al, Fe, Mn, Ti, Ce, Th, U, V, Cr, Co, Ni, Cu, Zn, As, Cd, Sb, Te, Hg, Tl and Pb. Fraction analysis, enrichment factors and Principal Component Analysis –Absolute Principal Component Scores (PCA-APCS) were carried out in order to assess metal pollution, potential bioavailability and source apportionment. Cr and Ni exceeded the Australian Interim Sediment Quality Guidelines at some sampling sites, while Hg was found to be the most enriched metal. Fraction analysis identified increased weak acid soluble Hg and Cd during the sampling period. Source apportionment via PCA-APCS found four sources of metals pollution, namely, marine sediments, shipping, antifouling coatings and a mixed source. These sources need to be considered in any metal pollution control measure within Bramble Bay.