Stronger difficulty notions for client puzzles and denial-of-service-resistant protocols

Client puzzles are meant to act as a defense against denial of service (DoS) attacks by requiring a client to solve some moderately hard problem before being granted access to a resource. However, recent client puzzle difficulty definitions (Stebila and Ustaoglu, 2009; Chen et al., 2009) do not ensure that solving n puzzles is n times harder than solving one puzzle. Motivated by examples of puzzles where this is the case, we present stronger definitions of difficulty for client puzzles that are meaningful in the context of adversaries with more computational power than required to solve a single puzzle. A protocol using strong client puzzles may still not be secure against DoS attacks if the puzzles are not used in a secure manner. We describe a security model for analyzing the DoS resistance of any protocol in the context of client puzzles and give a generic technique for combining any protocol with a strong client puzzle to obtain a DoS-resistant protocol.

The airport city : a new business model for airport development

The airport city concept has been embraced by many airports of different scales and in varied ways around the world. Airports everywhere have diversified their landside revenues with non-aviation commercial and industrial development in order to increase revenues and spread risk in the notoriously volatile aviation market. As intermodal hubs in a connected, globalised world, airports have evolved from transportation nodes into multi-faceted business enterprises. They have assumed a critical role as ‘transactional’ spaces in the global economy (Gottdiener 2001).

Values-driven leadership

The values of a leader set the culture of an organisation, determine the effectiveness of an organisation, and determine the success of an organisation. Understanding our values and being able to live our values adds significant emphasis to the leadership roles we perform in life. This book looks at where our values come from, and their role and impact in an organisational context. It offers a detailed conversation about values driven leadership - what it is and what it looks like.

X.509v3 Certificates for Secure Shell authentication

X.509 public key certificates use a signature by a trusted certification authority to bind a given public key to a given digital identity. This document specifies how to use X.509 version 3 public key certificates in public key algorithms in the Secure Shell protocol.

Factors affecting somatic embryogenesis and transformation in modern plant breeding

Somatic embryogenesis and transformation systems are indispensable modern plant breeding components since they provide an alternative platform to develop control strategies against the plethora of pests and diseases affecting many agronomic crops. This review discusses some of the factors affecting somatic embryogenesis and transformation, highlights the advantages and limitations of these systems and explores these systems as breeding tools for the development of crops with improved agronomic traits. The regeneration of non-chimeric transgenic crops through somatic embryogenesis with introduced disease and pest-resistant genes for instance, would be of significant benefit to growers worldwide.

An integrated approach to cryptographic mitigation of denial-of-service attacks

Gradual authentication is a principle proposed by Meadows as a way to tackle denial-of-service attacks on network protocols by gradually increasing the confidence in clients before the server commits resources. In this paper, we propose an efficient method that allows a defending server to authenticate its clients gradually with the help of some fast-to-verify measures. Our method integrates hash-based client puzzles along with a special class of digital signatures supporting fast verification. Our hash-based client puzzle provides finer granularity of difficulty and is proven secure in the puzzle difficulty model of Chen et al. (2009). We integrate this with the fast-verification digital signature scheme proposed by Bernstein (2000, 2008). These schemes can be up to 20 times faster for client authentication compared to RSA-based schemes. Our experimental results show that, in the Secure Sockets Layer (SSL) protocol, fast verification digital signatures can provide a 7% increase in connections per second compared to RSA signatures, and our integration of client puzzles with client authentication imposes no performance penalty on the server since puzzle verification is a part of signature verification.

Vibration of L-shaped plates under a deterministic force or moment excitation : a case of statistical energy analysis application

Analytical and closed form solutions are presented in this paper for the vibration response of an L-shaped plate under a point force or a moment excitation. Inter-relationships between wave components of the source and the receiving plates are clearly defined. Explicit expressions are given for the quadratic quantities such as input power, energy flow and kinetic energy distributions of the L-shaped plate. Applications of statistical energy analysis (SEA) formulation in the prediction of the vibration response of finite coupled plate structures under a single deterministic forcing are examined and quantified. It is found that the SEA method can be employed to predict the frequency averaged vibration response and energy flow of coupled plate structures under a deterministic force or moment excitation when the structural system satisfies the following conditions: (1) the coupling loss factors of the coupled subsystems are known; (2) the source location is more than a quarter of the plate bending wavelength away from the source plate edges in the point force excitation case, or is more than a quarter wavelength away from the pair of source plate edges perpendicular to the moment axis in the moment excitation case due to the directional characteristic of moment excitations. SEA overestimates the response of the L-shaped plate when the source location is less than a quarter bending wavelength away from the respective plate edges owing to wave coherence effect at the plate boundary

A proposed model for successful implementation of e-Government in Malaysia

This paper proposes a theoretical model for e-Government in Malaysia and addresses issues involved in its implementation. It presents three possible models including the Framework for Electronic Government (Grant & Chau, 2005), the Three Pillars Framework (Georgescu, 2007) and The Grid-Group Theory from cultural studies (Douglas, 1996) and integrates and adapts them to the specific needs of the Malaysian environment.

Nursing and competencies - a natural fit : the politics of skill/competency formation in nursing

The last two decades have seen a significant restructuring of work across Australia and other industrialised economies, a critical part of which has been the appearance of competency based education and assessment. The competency movement is about creating a more flexible and mobile labour force to increase productivity and it does so by redefining work as a set of transferable or ‘soft’ generic skills that are transportable and are the possession of the individual. This article sought to develop an analysis of competency based clinical assessment of nursing students across a bachelor of nursing degree course. This involved an examination of a total of 406 clinical assessment tools that covered the years 1992-2009 and the three years of a bachelor degree. Data analysis generated three analytical findings: the existence of a hierarchy of competencies that prioritises soft skills over intellectual and technical skills; the appearance of skills as personal qualities or individual attributes; and the absence of context in assessment. The article argues that the convergence in nursing of soft skills and the professionalisation project reform has seen the former give legitimacy to the enduring invisibility and devaluation of nursing work.

Causing economic harm to property developers : damages for starting an incurably bad appeal?

A recent decision of the Queensland Court of Appeal involved an unusual statement of claim made on behalf of the developer of a proposed resort in Port Douglas. The decision is The Beach Club Port Douglas Pty Ltd v Page [2005] QCA 475. The issue The defendant had objected to a development application of the plaintiff developer and lodged an appeal in the Planning and Environment Court against the council decision granting a development permit. The main issue in the Planning and Environment Court was whether the site coverage of the proposed resort was excessive. In a separate action (the subject matter of the present appeal), the plaintiff developer claimed damages for ‘negligence’ alleging that the defendant had breached a duty of care not to appeal without properly or reasonably assessing whether the development qualified for a permit given that the resort qualified for the maximum allowable site coverage. It was alleged that the appeal lodged by the defendant in the Planning and Environment Court had no reasonable prospects of success and that any reasonable person properly advised would know, or ought reasonably to have known, that to be so. The defendant had been “put on notice” that the plaintiff would incur loss of $10,000 for every day there was a delay in starting construction of the resort. The claim made by the developer required the court to consider those circumstances where a person may lawfully and deliberately cause economic harm to another. Was a duty of care owed by the defendant for negligent conduct of litigation that caused economic loss to the plaintiff?

Cranes, claims and a statutory right of user

In larger developments there is potential for construction cranes to encroach into the airspace of neighbouring properties. To resolve issues of this nature, a statutory right of user may be sought under s 180 of the Property Law Act 1974 (Qld). Section 180 allows the court to impose a statutory right of user on servient land where it is reasonably necessary in the interests of effective use in any reasonable manner of the dominant land. Such an order will not be made unless the court is satisfied that it is consistent with public interest, the owner of the servient land can be adequately recompensed for any loss or disadvantage which may be suffered from the imposition and the owner of the servient land has refused unreasonably to agree to accept the imposition of that obligation. In applying the statutory provision, a key practical concern for legal advisers will be the basis for assessment of compensation. A recent decision of the Queensland Supreme Court (Douglas J) provides guidance concerning matters relevant to this assessment. The decision is Lang Parade Pty Ltd v Peluso [2005] QSC 112.

Clinical education for nephrology nurse practitioner candidates in Australia : a consensus statement

Objectives: To develop recommendations for the clinical education required to prepare Australian Nurse Practitioner candidates for advanced and extended practice in nephrology settings. Methods: Using the Delphi research technique a consensus statement was developed over a nine month period. All endorsed and candidate Nephrology Nurse Practitioners (NNP) were invited to participate as the expert panel. The Delphi research technique uses a systematic and iterative process. The expert panel were asked to generate a list of items which were then circulated to all NNPs. They were asked to determine their degree of agreement or disagreement with each statement using a 5-point Likert scale There was opportunity for free-text comments to be provided if desired. Results from each round were collated; the document was refined and circulated to the experts for a subsequent round. Consensus was demonstrated after three Delphi rounds. Results: The consensus statement comprises four components explaining the role and membership of the mentorship team, the setting and location of NNP clinical education, learning strategies to support the NNP, and outcomes of NNP clinical education. Demographic questions in the final survey revealed information about the qualifications, years of experience, and practice location of Australian NNPs. Conclusions: The consensus statement is not prescriptive but it will inform NNP candidates, university course providers and mentors about the expected extended nephrology specific clinical education that will enable the NNP to provide advanced nursing care for patients regardless of the stage of chronic kidney disease (CKD) and the practice setting.