Information Security in the Cloud: Should We be Using a Different Approach?

Postprint

SAFE: A Declarative Trust-Agile System with Linked Credentials

Secure Access For Everyone (SAFE), is an integrated system for managing trust

using a logic-based declarative language. Logical trust systems authorize each

request by constructing a proof from a context---a set of authenticated logic

statements representing credentials and policies issued by various principals

in a networked system. A key barrier to practical use of logical trust systems

is the problem of managing proof contexts: identifying, validating, and

assembling the credentials and policies that are relevant to each trust

decision.

SAFE addresses this challenge by (i) proposing a distributed authenticated data

repository for storing the credentials and policies; (ii) introducing a

programmable credential discovery and assembly layer that generates the

appropriate tailored context for a given request. The authenticated data

repository is built upon a scalable key-value store with its contents named by

secure identifiers and certified by the issuing principal. The SAFE language

provides scripting primitives to generate and organize logic sets representing

credentials and policies, materialize the logic sets as certificates, and link

them to reflect delegation patterns in the application. The authorizer fetches

the logic sets on demand, then validates and caches them locally for further

use. Upon each request, the authorizer constructs the tailored proof context

and provides it to the SAFE inference for certified validation.

Delegation-driven credential linking with certified data distribution provides

flexible and dynamic policy control enabling security and trust infrastructure

to be agile, while addressing the perennial problems related to today's

certificate infrastructure: automated credential discovery, scalable

revocation, and issuing credentials without relying on centralized authority.

We envision SAFE as a new foundation for building secure network systems. We

used SAFE to build secure services based on case studies drawn from practice:

(i) a secure name service resolver similar to DNS that resolves a name across

multi-domain federated systems; (ii) a secure proxy shim to delegate access

control decisions in a key-value store; (iii) an authorization module for a

networked infrastructure-as-a-service system with a federated trust structure

(NSF GENI initiative); and (iv) a secure cooperative data analytics service

that adheres to individual secrecy constraints while disclosing the data. We

present empirical evaluation based on these case studies and demonstrate that

SAFE supports a wide range of applications with low overhead.

A Intenção de uso da M-Wallet pelo consumidor português

Dissertação de Mestrado apresentada ao Instituto de Contabilidade e Administração do Porto para a obtenção do grau de Mestre em Marketing Digital, sob orientação de Mestre António da Silva Vieira.

Qualidade e satisfação do sistema de seguimento à distância de cardioversores-desfibrilhadores implantáveis

RESUMO - Com o aumento da esperança de vida e das doenças crónicas, cada vez se tem implantado mais cardioversores-desfibrilhadores (CDI) para prevenção de morte súbita. O aumento exponencial no número de implantes aumenta o número de seguimentos dos dispositivos, sobrecarregando os profissionais de saúde e comprometendo a qualidade dos serviços prestados. Segundo as recomendações internacionais, um CDI deverá ser vigiado a cada 3 meses, o que perfaz 4 consultas por ano/doente no mínimo, se não existirem episódios de “choques” ou “descompensações” clínicas, e mensalmente quando é atingido o indicador de substituição electiva do gerador. A evolução da tecnologia, de algoritmos, visualização de episódios e terapias requer recursos técnicos e humanos diferenciados e um gasto de tempo considerável no seguimento. Em países como os Estados Unidos da América, em que os doentes têm de percorrer distâncias muito grandes para aceder aos cuidados de saúde, tornou-se preemente a necessidade de um sistema de vigilância alternativo. Nesse sentido, e usando o conceito da telemedicina, foi criado o seguimento/monitorização à distância de dispositivos cardíacos. Este reduz os custos em consultas, deslocações e recursos humanos, uma vez que contempla apenas uma consulta presencial por ano. Por outro lado, aumenta a segurança do doente com a monitorização periódica e a criação de alarmes, permitindo uma assistência de qualidade e intervenção adequada imediata. Aproveitando as vantagens que este tipo de sistema de transmissão remota oferece, procedeu-se no meu serviço, à distribuição inicial de 62 comunicadores a doentes portadores de CDI´s ou com Ressincronizadores Cardíacos (TRC´s1). Apesar de ser considerada uma melhoria na qualidade dos serviços prestados, é também uma mudança importante na metodologia da consulta feita até aqui. Segundo vários autores, a avaliação da qualidade dos cuidados em saúde está intrinsecamente ligada ao grau de satisfação dos doentes com esses serviços, ou seja, à relação entre as suas expectativas e os resultados percebidos por eles, sendo considerado um importante indicador de qualidade dos serviços. Com este trabalho, pretende-se avaliar a percepção dos doentes face ao novo seguimento em termos de aceitação, satisfação, validade, segurança e confiança no novo sistema. Se este mantém os mesmos padrões de qualidade que o seguimento presencial. Trata-se de um estudo transversal com uma componente retrospectiva de avaliação da nova metodologia de consulta à distância. Para tal, foi elaborado um questionário, que foi aplicado a 40 doentes (17,5% do género feminino e 82,5% do género masculino; média de idades de 65 anos) que constituíram a amostra do estudo. Verificou-se uma média de 5 anos de tempo de implante do CDI. Dos dados obtidos, é de realçar que 70% dos inquiridos estão satisfeitos e 30% estão muito satisfeitos com esta nova metodologia de consulta e cerca 67,4% prefere a consulta à distância. Quando solicitados para comparar a qualidade do serviço prestado entre as duas consultas, 65% respondeu igual e 27,5% melhor. Todos os inquiridos responderam ter confiança e segurança com o sistema de consulta à distância. Cerca de 87,5% dos inquiridos vê-se mesmo a continuar com este tipo de consulta. Os resultados obtidos são bastante satisfatórios no que diz respeito à transição do modo como a consulta de CDI´s é feita. Reflectem também que a tecnologia não é necessariamente uma barreira no acesso aos profissionais de saúde, desde que suportada por algum contacto directo (telefone e através de uma consulta presencial por ano). 1 TRC – Terapia de Ressincronização Cardíaca

Centralised versus Decentralised Management of Patients's Medical Records

For more than 20 years, many countries have been trying to set up a standardised medical record at the regional or at the national level. Most of them have not reached this goal, essentially due to two main difficulties related to patient identification and medical records standardisation. Moreover, the issues raised by the centralisation of all gathered medical data have to be tackled particularly in terms of security and privacy. We discuss here the interest of a noncentralised management of medical records which would require a specific procedure that gives to the patient access to his/her distributed medical data, wherever he/she is located.

Medical record search engines, using pseudonymised patient identity: an alternative to centralised medical records

Purpose The purpose of our multidisciplinary study was to define a pragmatic and secure alternative to the creation of a national centralised medical record which could gather together the different parts of the medical record of a patient scattered in the different hospitals where he was hospitalised without any risk of breaching confidentiality. Methods We first analyse the reasons for the failure and the dangers of centralisation (i.e. difficulty to define a European patients' identifier, to reach a common standard for the contents of the medical record, for data protection) and then propose an alternative that uses the existing available data on the basis that setting up a safe though imperfect system could be better than continuing a quest for a mythical perfect information system that we have still not found after a search that has lasted two decades. Results We describe the functioning of Medical Record Search Engines (MRSEs), using pseudonymisation of patients' identity. The MRSE will be able to retrieve and to provide upon an MD's request all the available information concerning a patient who has been hospitalised in different hospitals without ever having access to the patient's identity. The drawback of this system is that the medical practitioner then has to read all of the information and to create his own synthesis and eventually to reject extra data. Conclusions Faced with the difficulties and the risks of setting up a centralised medical record system, a system that gathers all of the available information concerning a patient could be of great interest. This low-cost pragmatic alternative which could be developed quickly should be taken into consideration by health authorities.

Asiakkaan luottamuksen kokemus terveydenhuollon palveluntarjoajaa kohtaan : case tutkimus terveydenhuollon yksityiseltä sektorilta

Tutkimuksen tavoite on selvittää mitkä tekijät vaikuttavat asiakkaan luottamuksen kokemukseen palveluntarjoajaa kohtaan ei kasvokkain tarjottavissa terveyspalveluissa. Tutkimusongelman käsittelyssä kiinnitetään erityisesti huomiota luottamuksen rakentumisen dynamiikkaan ja aikaulottuvuuteen sekä yksityisen palveluntarjoajan maineeseen yhtenä luottamuksen kokemusta selittavänä tekijänä. Kirjailisuuskatsauksessa on määritelty paääkäsitteet maine ja luottamus sekä niiden alakasitteita. Lähteinä on käytetty luottamusta käsittelevää kirjallisuutta useilta eri tieteenaloilta. Case tutkimus on suoritettu laadullisin menetelmin kirjallisuuskatsauksessa esitetyn viitekehyksen ja aikaisemman tutkimuksen pohjalta. Primaariaineisto on kerätty fokusryhmäkeskusteluilia. Aineistoa on pyritty anatysoimaan mahdollisimman yksityiskohtaisesti tutkimuskysymyksen kontekstissa. Analyysin pohjalta tehtyjä tulkintoja on verrattu aikaisempaan tutkimukseen. Case tutkimus osoitti, etta positiivisten odotusten ja suomalaista terveydenhuollon järjestelmää kohtaan tunnetun luottamuksen ansiosta suhtautuminen terveydenhuollon palveluntarjoajaa kohtaan on lähtokohtaisesti luottavainen. Luottamuksen rakentumisen ensivaiheessa nopea luottamus perustuu aikaisemmista kokemuksista siirrettyyn luottamukseen ja stereotypioihin. Seuraavassa vaiheessa luottamus henkilöityy hoitajaan. Luottamus syvenee positiivisten kokemusten ja odotusten täyttymyksen myötä koskemaan myös palveluntarjoajaa. Luottamuksen rakentumisen tärkeimmiksi tekijöiksi nousivat yrityksen maine sosiaalisessa mediassa, suosittelijat, yrityksen asema terveydenhuollon järjestelmässä sekä hoitajien kyvykkyys, kompetenssi, empatiakyky ja potilaan ymmärtäminen.

La diffamation sur Internet : actualiser la responsabilité en droit civil et en common law au Canada

En cette ère que plusieurs surnomment le « Web 2.0 », les usagers se sont emparés avec enthousiasme des fonctions liées aux communications et au partage sur Internet, ce médium devenant ainsi une nouvelle plate-forme pour les enjeux liés à la vie privée et à la réputation. La diffamation constitue justement un des problèmes prédominants constatés en lien avec ce contenu électronique, plus particulièrement lorsqu’il est question de contenu généré par les utilisateurs. Face à cet outil permettant une diffusion et une intéractivité sans précédent, comment devons-nous aborder Internet au regard des règles de droit applicables au Canada en matière de diffamation? L’analyse juridique traditionnelle sied-elle aux nouvelles réalités introduites par ce médium? Le bijuridisme canadien nous impose d’étudier parallèlement les régimes de droit civil et de common law et ce, dans une optique comparative afin de comprendre les concepts et le fonctionnement propres à chacune des approches juridiques cohabitant au pays. Cette analyse nous permettra de mettre en lumière les particularités du médium électronique qui se révèlent pertinentes lorsqu’il est question de diffamation et qui font la spécificité des situations et des acteurs en ligne, distinguant ainsi Internet des modes de communications traditionnels que le droit connaît. Cette approche comparative permet de poser un regard critique sur chacun des régimes de droit en vigueur au Canada, considérant la réalité propre à Internet et au contenu généré par les utilisateurs, mais surtout, vise à promouvoir le développement de méthodes d’analyse véritablement ancrées dans le fonctionnement du médium en cause et susceptibles d’évoluer avec celui-ci.

Cadre juridique de l'utilisation de la biométrie au Québec : sécurité et vie privée

La biométrie, appliquée dans un contexte de traitement automatisé des données et de reconnaissance des identités, fait partie de ces technologies nouvelles dont la complexité d’utilisation fait émerger de nouveaux enjeux et où ses effets à long terme sont incalculables. L’envergure des risques suscite des questionnements dont il est essentiel de trouver les réponses. On justifie le recours à cette technologie dans le but d’apporter plus de sécurité, mais, vient-elle vraiment apporter plus de protection dans le contexte actuel? En outre, le régime législatif québécois est-il suffisant pour encadrer tous les risques qu’elle génère? Les technologies biométriques sont flexibles en ce sens qu’elles permettent de saisir une multitude de caractéristiques biométriques et offrent aux utilisateurs plusieurs modalités de fonctionnement. Par exemple, on peut l’utiliser pour l’identification tout comme pour l’authentification. Bien que la différence entre les deux concepts puisse être difficile à saisir, nous verrons qu’ils auront des répercussions différentes sur nos droits et ne comporteront pas les mêmes risques. Par ailleurs, le droit fondamental qui sera le plus touché par l’utilisation de la biométrie sera évidemment le droit à la vie privée. Encore non bien compris, le droit à la vie privée est complexe et son application est difficile dans le contexte des nouvelles technologies. La circulation des données biométriques, la surveillance accrue, le détournement d’usage et l’usurpation d’identité figurent au tableau des risques connus de la biométrie. De plus, nous verrons que son utilisation pourra avoir des conséquences sur d’autres droits fondamentaux, selon la manière dont le système est employé. Les tests de nécessité du projet et de proportionnalité de l’atteinte à nos droits seront les éléments clés pour évaluer la conformité d’un système biométrique. Ensuite, le succès de la technologie dépendra des mesures de sécurité mises en place pour assurer la protection des données biométriques, leur intégrité et leur accès, une fois la légitimité du système établie.

INFO2009 2012-13 Resource Group 21 - We know where you live

We know where you live is an entertaining and informative quiz show highlighting the dangers resulting from a lack of awareness of Facebook's privacy and security settings. The game show is complemented by a short tutorial explaining these settings. The show is aimed at a wider audience and is suitable for all.

Young caregiving and HIV in the UK: caring relationships and mobilities in African migrant families

Recent research in Sub-Saharan Africa has revealed the importance of children’s caring roles in families affected by HIV and AIDS. However, few studies have explored young caregiving in the context of HIV in the UK, where recently arrived African migrant and refugee families are adversely affected by the global epidemic. This paper explores young people’s socio-spatial experiences of caring for a parent with HIV, based on qualitative research with 37 respondents in London and other urban areas in England. In-depth semi-structured interviews were conducted with young people with caring responsibilities and mothers with HIV, who were predominantly African migrants, as well as with service providers. Drawing on their perspectives, the paper discusses the ways that young people and mothers negotiate the boundaries of young people’s care work within and beyond homespace, according to norms of age, gender, generational relations and cultural constructions of childhood. Despite close attachments within the family, the emotional effects of living with a highly stigmatised life-limiting illness, pressures associated with insecure immigration status, transnational migration and low income undermined African mothers’ and young people’s sense of security and belonging to homespace. These factors also restricted their mobility and social participation in school/college and neighbourhood spaces. While young people and mothers valued supportive safe spaces within the community, the stigma surrounding HIV significantly affected their ability to seek support. The article identifies security, privacy, independence and social mobility as key dimensions of African young people’s and mothers’ imagined futures of ‘home’ and ‘family’.

Organisational semiotics methods to assess organisational readiness for internal use of social media

The paper presents organisational semiotics (OS) as an approach for identifying organisational readiness factors for internal use of social media within information intensive organisations (IIO). The paper examines OS methods, such as organisational morphology, containment analysis and collateral analysis to reveal factors of readiness within an organisation. These models also help to identify the essential patterns of activities needed for social media use within an organisation, which can provide a basis for future analysis. The findings confirmed many of the factors, previously identified in literature, while also revealing new factors using OS methods. The factors for organisational readiness for internal use of social media include resources, organisational climate, processes, motivational readiness, benefit and organisational control factors. Organisational control factors revealed are security/privacy, policies, communication procedures, accountability and fallback.

Optimized Water Demand Management Through Intelligent Sensing And Analytics: The WISDOM Approach

New business and technology platforms are required to sustainably manage urban water resources [1,2]. However, any proposed solutions must be cognisant of security, privacy and other factors that may inhibit adoption and hence impact. The FP7 WISDOM project (funded by the European Commission - GA 619795) aims to achieve a step change in water and energy savings via the integration of innovative Information and Communication Technologies (ICT) frameworks to optimize water distribution networks and to enable change in consumer behavior through innovative demand management and adaptive pricing schemes [1,2,3]. The WISDOM concept centres on the integration of water distribution, sensor monitoring and communication systems coupled with semantic modelling (using ontologies, potentially connected to BIM, to serve as intelligent linkages throughout the entire framework) and control capabilities to provide for near real-time management of urban water resources. Fundamental to this framework are the needs and operational requirements of users and stakeholders at domestic, corporate and city levels and this requires the interoperability of a number of demand and operational models, fed with data from diverse sources such as sensor networks and crowsourced information. This has implications regarding the provenance and trustworthiness of such data and how it can be used in not only the understanding of system and user behaviours, but more importantly in the real-time control of such systems. Adaptive and intelligent analytics will be used to produce decision support systems that will drive the ability to increase the variability of both supply and consumption [3]. This in turn paves the way for adaptive pricing incentives and a greater understanding of the water-energy nexus. This integration is complex and uncertain yet being typical of a cyber-physical system, and its relevance transcends the water resource management domain. The WISDOM framework will be modeled and simulated with initial testing at an experimental facility in France (AQUASIM – a full-scale test-bed facility to study sustainable water management), then deployed and evaluated in in two pilots in Cardiff (UK) and La Spezia (Italy). These demonstrators will evaluate the integrated concept providing insight for wider adoption.

O atendimento por instituição pública de saúde: percepção de famílias de doentes com câncer

This study aimed to analyze how the families of cancer patients perceived the treatment provided at a specialist public outpatient clinic, using Bardin's method of Content Analysis. Seven families consisting of fourteen family members were interviewed. They underlined doctor-patient relationship, judging it to be impersonal and superficial, resulting in a lack of security and trust. Families try to to participate but feel undervalued and excluded from the care. Necessary information that they are not given is sought in the media, while comfort is achieved through religious or spiritual practices. Health care training must encourage professionals to view the family as a unit of care, aligning training to different modes of health care.

A Culture of Relationships: Early Care for Italian and American Children

A culture of childhood is a shared vision – an agreed upon vision – of the needs and rights of children, including ideas about how the people of the community can collectively nurture them and at the same time be renewed by them. In other words, it is a set of values, beliefs, and practices that people have created to guide their way of nurturing young children and their families. The vision is about investing in young children and investing in the supports and relationships that children need to learn and grow, both for the reason that children carry our future and because they carry our hopes and dreams for the future. These hopes and dreams begin with birth. Sensitive, emotionally available parents create the framework for interaction with their children by responding to the baby’s cues, engaging the baby in mutual gazes, and imitating the baby. The baby, born with a primary ability to share emotions with other human beings eagerly joins the relationship dance. The intimate family circle soon widens. Providers, teachers, and directors of early childhood programs become significant figures in children’s lives—implicit or explicit partners in a "relationship dance" (Edwards & Raikes, 2002). These close relationships are believed to be critical to healthy intellectual, emotional, social, and physical development in childhood and adolescence as well. These conclusions have been documented by diverse fields of science, ranging from cognitive science to communication studies and social and personality psychology. Close relationships contribute to security and trust, promote skill development and understanding, nurture healthy physical growth, infuse developing self-understanding and self-confidence, enable self-control and emotion regulation, and strengthen emotional connections with others that contribute to prosocial motivation (Dunn, 1993; Fogel, 1993; Thompson, 1996). Furthermore, many studies showing how relationship dysfunction is linked to child abuse and neglect, aggression, criminality, and other problems involving the lack of significant human connections (Shankoff & Meisels, 2000). In extending the dance of primary relationships to new relationships, a childcare teacher can play a primary role. The teacher makes the space ready--creating a beautiful place that causes everyone to feel like dancing. Gradually, as the dance between them becomes smooth and familiar, the teacher encourages the baby to try out more complex steps and learn how to dance to new compositions, beats, and tempos. As the baby alternates dancing sometimes with one or two partners, sometimes with many, the dance itself becomes a story about who the child has been and who the child is becoming, a reciprocal self created through close relationships.