Modeling key compromise impersonation attacks on group key exchange protocols

A key exchange protocol allows a set of parties to agree upon a secret session key over a public network. Two-party key exchange (2PKE) protocols have been rigorously analyzed under various models considering different adversarial actions. However, the analysis of group key exchange (GKE) protocols has not been as extensive as that of 2PKE protocols. Particularly, the security attribute of key compromise impersonation (KCI) resilience has so far been ignored for the case of GKE protocols. We first model the security of GKE protocols addressing KCI attacks by both outsider and insider adversaries. We then show that a few existing protocols are not secure even against outsider KCI attacks. The attacks on these protocols demonstrate the necessity of considering KCI resilience for GKE protocols. Finally, we give a new proof of security for an existing GKE protocol under the revised model assuming random oracles.

Nurse-determined assessment of cardiac output. Comparing a non-invasive cardiac output device and pulmonary artery catheter: a prospective observational study.

Background The accurate measurement of Cardiac output (CO) is vital in guiding the treatment of critically ill patients. Invasive or minimally invasive measurement of CO is not without inherent risks to the patient. Skilled Intensive Care Unit (ICU) nursing staff are in an ideal position to assess changes in CO following therapeutic measures. The USCOM (Ultrasonic Cardiac Output Monitor) device is a non-invasive CO monitor whose clinical utility and ease of use requires testing. Objectives To compare cardiac output measurement using a non-invasive ultrasonic device (USCOM) operated by a non-echocardiograhically trained ICU Registered Nurse (RN), with the conventional pulmonary artery catheter (PAC) using both thermodilution and Fick methods. Design Prospective observational study. Setting and participants Between April 2006 and March 2007, we evaluated 30 spontaneously breathing patients requiring PAC for assessment of heart failure and/or pulmonary hypertension at a tertiary level cardiothoracic hospital. Methods SCOM CO was compared with thermodilution measurements via PAC and CO estimated using a modified Fick equation. This catheter was inserted by a medical officer, and all USCOM measurements by a senior ICU nurse. Mean values, bias and precision, and mean percentage difference between measures were determined to compare methods. The Intra-Class Correlation statistic was also used to assess agreement. The USCOM time to measure was recorded to assess the learning curve for USCOM use performed by an ICU RN and a line of best fit demonstrated to describe the operator learning curve. Results In 24 of 30 (80%) patients studied, CO measures were obtained. In 6 of 30 (20%) patients, an adequate USCOM signal was not achieved. The mean difference (±standard deviation) between USCOM and PAC, USCOM and Fick, and Fick and PAC CO were small, −0.34 ± 0.52 L/min, −0.33 ± 0.90 L/min and −0.25 ± 0.63 L/min respectively across a range of outputs from 2.6 L/min to 7.2 L/min. The percent limits of agreement (LOA) for all measures were −34.6% to 17.8% for USCOM and PAC, −49.8% to 34.1% for USCOM and Fick and −36.4% to 23.7% for PAC and Fick. Signal acquisition time reduced on average by 0.6 min per measure to less than 10 min at the end of the study. Conclusions In 80% of our cohort, USCOM, PAC and Fick measures of CO all showed clinically acceptable agreement and the learning curve for operation of the non-invasive USCOM device by an ICU RN was found to be satisfactorily short. Further work is required in patients receiving positive pressure ventilation.

What’s in a handshake? Exploring business-to-business relational exchange

Despite its importance in the development of competitive advantage, attempts to unify diverse classifications of business-to-business relational exchange have been largely unsuccessful. We used 18 semi-structured, in-depth interviews with managers from a wide range of industries to explain the business-to-business relational exchange construct. Analysis of the data revealed that business-to-business relational exchange comprises five key dimensions. These are communication, compatibility, commitment, trust and power symmetry. The research highlights the importance of personal interaction in business relationships and provided additional insights into the importance of affective commitment. In addition we reveal a number of negative consequences of affective commitment, which have been previously unexplored. A new conceptual model of business-to-business relational exchange is presented, which synthesises these findings and directs future research.

Efficient one-round key exchange in the standard model

We consider one-round key exchange protocols secure in the standard model. The security analysis uses the powerful security model of Canetti and Krawczyk and a natural extension of it to the ID-based setting. It is shown how KEMs can be used in a generic way to obtain two different protocol designs with progressively stronger security guarantees. A detailed analysis of the performance of the protocols is included; surprisingly, when instantiated with specific KEM constructions, the resulting protocols are competitive with the best previous schemes that have proofs only in the random oracle model.

Efficient one-round key exchange in the efficient one-round key exchange in the standard model

We consider one-round key exchange protocols secure in the standard model. The security analysis uses the powerful security model of Canetti and Krawczyk and a natural extension of it to the ID-based setting. It is shown how KEMs can be used in a generic way to obtain two different protocol designs with progressively stronger security guarantees. A detailed analysis of the performance of the protocols is included; surprisingly, when instantiated with specific KEM constructions, the resulting protocols are competitive with the best previous schemes that have proofs only in the random oracle model.

Efficient one-round key exchange in the standard model

We consider one-round key exchange protocols secure in the standard model. The security analysis uses the powerful security model of Canetti and Krawczyk and a natural extension of it to the ID-based setting. It is shown how KEMs can be used in a generic way to obtain two different protocol designs with progressively stronger security guarantees. A detailed analysis of the performance of the protocols is included; surprisingly, when instantiated with specific KEM constructions, the resulting protocols are competitive with the best previous schemes that have proofs only in the random oracle model.

The moment of exchange : risk, vulnerability, responsibility

Any cycle of production and exchange – be it economic, cultural or aesthetic – involves an element of risk. It involves uncertainty, unpredictability, and a potential for new insight and innovation (the boom) as well as blockages, crises and breakdown (the bust). In performance, the risks are plentiful – economic, political, social, physical and psychological. The risks people are willing to take depend on their position in the exchange (performer, producer, venue manager or spectator), and their aesthetic preferences. This paper considers the often uncertain, confronting or ‘risky’ moment of exchange between performer, spectator and culture in Live Art practices. Encompassing body art, autobiographical art, site-specific art and other sorts of performative intervention in the public sphere, Live Art eschews the artifice of theatre, breaking down barriers between art and life, artist and spectator, to speak back to the public sphere, and challenge assumptions about bodies, identities, memories, relationships and histories. In the process, Live Art frequently privileges an uncertain, confrontational or ‘risky’ mode of exchange between performer, spectator and culture, as a way of challenging power structures. This paper examines the moment of exchange in terms of risk, vulnerability, responsibility and ethics. Why the romance with ‘risky’ behaviours and exchanges? Who is really taking a risk? What risk? With whose permission (or lack thereof)? What potential does a ‘risky’ exchange hold to destabilise aesthetic, social or political norms? Where lies the fine line between subversive intervention in the public sphere and sheer self-indulgence? What are the social and ethical implications of a moment of exchange that puts bodies, beliefs or social boundaries at ‘risk’? In this paper, these questions are addressed with reference to historical and contemporary practices under the broadly defined banner of Live Art, from the early work of Abrovamic and Burden, through to contemporary Australian practitioners like Fiona McGregor.

When and how to treat pulmonary non-tuberculous mycobacterial diseases

Nontuberculous mycobacteria are ubiquitous environmental organisms that have been recognised as a cause of pulmonary infection for over 50 years. Traditionally patients have had underlying risk factors for development of disease; however the proportion of apparently immunocompetent patients involved appears to be rising. Not all patients culture-positive for mycobacteria will have progressive disease, making the diagnosis difficult, though criteria to aid in this process are available. The two main forms of disease are cavitary disease (usually involving the upper lobes) and fibronodular bronchiectasis (predominantly middle and lingular lobes). For patients with disease, combination antibiotic therapy for 12-24 months is generally required for successful treatment, and this may be accompanied by drug intolerances and side effects. Published success rates range from 30-82%. As the progression of disease is variable, for some patients, attention to pulmonary hygiene and underlying diseases without immediate antimycobacterial therapy may be more appropriate. Surgery can be a useful adjunct, though is associated with risks. Randomised controlled trials in well described patients would provide stronger evidence-based data to guide therapy of NTM lung diseases, and thus are much needed.

Multi-factor password-authenticated key exchange

We consider a new form of authenticated key exchange which we call multi-factor password-authenticated key exchange, where session establishment depends on successful authentication of multiple short secrets that are complementary in nature, such as a long-term password and a one-time response, allowing the client and server to be mutually assured of each other's identity without directly disclosing private information to the other party. Multi-factor authentication can provide an enhanced level of assurance in higher-security scenarios such as online banking, virtual private network access, and physical access because a multi-factor protocol is designed to remain secure even if all but one of the factors has been compromised. We introduce a security model for multi-factor password-authenticated key exchange protocols, propose an efficient and secure protocol called MFPAK, and provide a security argument to show that our protocol is secure in this model. Our security model is an extension of the Bellare-Pointcheval-Rogaway security model for password-authenticated key exchange and accommodates an arbitrary number of symmetric and asymmetric authentication factors.

Microstructural characterization of electron beam evaporated tungsten oxide films for gas sensing applications

Tungsten trioxide is one of the potential semiconducting materials used for sensing NH3, CO, CH4 and acetaldehyde gases. The current research aims at development, microstructural characterization and gas sensing properties of thin films of Tungsten trioxide (WO3). In this paper, we intend to present the microstructural characterization of these films as a function of post annealing heat treatment. Microstructural and elemental analysis of electron beam evaporated WO3 thin films and iron doped WO3 films (WO3:Fe) have been carried out using analytical techniques such as Transmission electron microscopy, Rutherford Backscattered Spectroscopy and XPS analysis. TEM analysis revealed that annealing at 300oC for 1 hour improves cyrstallinity of WO3 film. Both WO3 and WO3:Fe films had uniform thickness and the values corresponded to those measured during deposition. RBS results show a fairly high concentration of oxygen at the film surface as well as in the bulk for both films, which might be due to adsorption of oxygen from atmosphere or lattice oxygen vacancy inherent in WO3 structure. XPS results indicate that tungsten exists in 4d electronic state on the surface but at a depth of 10 nm, both 4d and 4f electronic states were observed. Atomic force microscopy reveals nanosize particles and porous structure of the film. This study shows e-beam evaporation technique produces nanoaparticles and porous WO3 films suitable for gas sensing applications and doping with iron decreases the porosity and particle size which can help improve the gas selectivity.

Electron beam evaporation of tungsten oxide films for gas sensors

Pure and Iron incorporated nanostructured Tungsten Oxide (WO3) thin films were investigated for gas sensing applications using noise spectroscopy. The WO3 sensor was able to detect lower concentrations (1 ppm-10 ppm) of NH3, CO, CH4 and Acetaldehyde gases at higher operating temperatures between 100oC to 250oC. The response of the WO3 sensor to NH3, CH4 and Acetaldehyde at lower temperatures (50oC-100oC) was significant when the sensor was photo-activated using blue-light emitting diode (Blue-LED). The WO3 with Fe (WO3:Fe) was found to show some response to Acetaldehyde gas only at relatively higher operating temperature (250oC) and gas concentration of 10 ppm.

Thin film deposition and characterization of pure and iron-doped electron-beam evaporated tungsten oxide for gas sensors

Pure Tungsten Oxide (WO3) and Iron-doped (10 at%) Tungsten Oxide (WO3:Fe) nanostructured thin films were prepared using a dual crucible Electron Beam Evaporation techniques. The films were deposited at room temperature in high vacuum condition on glass substrate and post-heat treated at 300 oC for 1 hour. From the study of X-ray diffraction and Raman the characteristics of the as-deposited WO3 and WO3:Fe films indicated non-crystalline nature. The surface roughness of all the films showed in the order of 2.5 nm as observed using Atomic Force Microscopy (AFM). X-Ray Photoelectron Spectroscopy (XPS) analysis revealed tungsten oxide films with stoichiometry close to WO3. The addition of Fe to WO3 produced a smaller particle size and lower porosity as observed using Transmission Electron Microscopy (TEM). A slight difference in optical band gap energies of 3.22 eV and 3.12 eV were found between the as-deposited WO3 and WO3:Fe films, respectively. However, the difference in the band gap energies of the annealed films were significantly higher having values of 3.12 eV and 2.61 eV for the WO3 and WO3:Fe films, respectively. The heat treated samples were investigated for gas sensing applications using noise spectroscopy and doping of Fe to WO3 reduced the sensitivity to certain gasses. Detailed study of the WO3 and WO3:Fe films gas sensing properties is the subject of another paper.

The knowledge exchange intermediary as service provider : a discussion and an Australian case

The critical impact of innovation on national and the global economies has been discussed at length in the literature. Economic development requires the diffusion of innovations into markets. It has long been recognised that economic growth and development depends upon a constant stream of innovations. Governments have been keenly aware of the need to ensure this flow does not dry to a trickle and have introduced many and varied industry policies and interventions to assist in seeding, supporting and diffusing innovations. In Australia, as in many countries, Government support for the transfer of knowledge especially from publicly funded research has resulted in the creation of knowledge exchange intermediaries. These intermediaries are themselves service organisations, seeking innovative service offerings for their markets. The choice for most intermediaries is generally a dichotomous one, between market-pull and technology-push knowledge exchange programmes. In this article, we undertake a case analysis of one such innovative intermediary and its flagship programme. We then compare this case with other successful intermediaries in Europe. We put forward a research proposition that the design of intermediary programmes must match the service type they offer. That is, market-pull programmes require market-pull design, in close collaboration with industry, whereas technology programmes can be problem-solving innovations where demand is latent. The discussion reflects the need for an evolution in knowledge transfer policies and programmes beyond the first generation ushered in with the US Bayh-Dole Act (1980) and Stevenson-Wydler Act (1984). The data analysed is a case study comparison of market-pull and technology-push programmes, focusing on primary and secondary socio-economic benefits (using both Australian and international comparisons).