Segurança da informação no correio eletrônico com base na ISO/IEC 17799 :um estudo de caso em uma instituição superior com foco no treinamento

The electronic mail service is one of the most Internet services that grow in the corporate environment. This evolution is bringing several problems for the organizations, especially to information that circulates inside of the corporate net. The lack of correct orientation to the people, about the usage and the security importance of these resources, is leaving breaches and causing misusage and overuse of service, for example. In recent literature, it starts to coming out several ideas, which has helped to rganizations how to plain and how to implement the information security system to the electronic mail in computer environment. However, these ideas are still not placed in practice in many companies, public or private. This dissertation tries to demonstrate the results of a research that has like goal, identify the importance that user training has over the information security policy, through a case study inside of private superior education institute in this state. Besides, this work had by basic orientation the ISO/IEC 17799, which talk about People Security. This study was developed over a proposed model to this research, which looked for offer conditions to guide the institution studied, how to plan better a information security policy to the electronic mail. Also, this research has an exploratory and descreptive nature and your type, qualitative. Firstly, it was applied na questionary to the information technology manager, as better way to get some general data and to deepen the contact which still then, it was being kept through e-mail. Thereupon this first contact, eleven interviews were done with the same manager, beside one interview with twenty-four users, among employees e students. After that to collect and transcript the interviews, were review with the manager all informations given, to correct any mistakes and to update that informations, to then, start the data analyze. The research suggests that the institution has a pro attitude about the information security policy and the electronic mail usage. However, it was clear that answers have their perception about information security under a very inexperient way, derived of a planning lack in relation to training program capable to solve the problem

A oficina como método de desenvolvimento de projeto do produto aplicado à atividade jangadeira de Ponta Negra Natal-RN

The jangadas (brazilian fishing rafts) are rudimentary artisanal vessels intrinsic to the Northeast of Brazil. The fishery with jangadas is highly representative in the State of Rio Grande do Norte, and source of income for many families in addition to being a strong cultural icon. Is still alive despite the difficulties, bringing the history and customs of the fishermen and their people. However, is in process of extinction due to factors such as the low profitability of the activity, tourism and urbanization. From the understanding of activity involving their context and circumstances, based on identified problems regarding the conditions of use of jangadas as the unpredictability, the risk of accidents, poor working conditions, hygiene and housing, this dissertation aims to: analyzing the design of the jangada on the beach of Ponta Negra and its relationship with the activity in relation to health, safety, productivity and environment, and from such assessments, together with the results achieved during the workshops of the project, proposing a cart to move the raft, adapted to the local fisherman activity studied. To perform analysis of jangadeira activity, we used a methodology based on ergonomic work analysis - AET (WISNER, 1987; GUÈRIN, 2001; VIDAL, 2008, SALDANHA, 2004 and Carvalho, 2005). For data collection were used observational and interaction methods as a conversational action, verbalizations, photographs and video. It is emphasized that the search for solutions appropriate to the jangadeira activity was possible through the collaboration of several people, not just an informational level and understanding during the work activity, but effectively contributing to the making decisions

Proposta de um sistema de segurança eletrônica predial

This work presents a suggestion of a security system of land automation having as objective main the creation of a system capable from easy method, supervise the installations of a building with the goal to preserver security personal and patrimonial necessities, aim at portability low cost and use easiness. Was designed an alarms central and access controller that has digital and analogical inputs for sensors and outputs for buzzer, telephonic dialing and electronic lock. The system is supervised by software that makes solicitations of information to the alarms central through the one computer's serial port (RS-232). The supervisory software was developed in platform LabVIEW with displays the received data on a graphical interface informing the sensors' current states distributed in the building and system events as alarns occurrences. This system also can be viewed through the Internet for people registered by the land security's system administrator

Mecanismos de segurança para um sistema cooperativo de armazenamento de arquivos baseado em P2P

Previous works have studied the characteristics and peculiarities of P2P networks, especially security information aspects. Most works, in some way, deal with the sharing of resources and, in particular, the storage of files. This work complements previous studies and adds new definitions relating to this kind of systems. A system for safe storage of files (SAS-P2P) was specified and built, based on P2P technology, using the JXTA platform. This system uses standard X.509 and PKCS # 12 digital certificates, issued and managed by a public key infrastructure, which was also specified and developed based on P2P technology (PKIX-P2P). The information is stored in a special file with XML format which is especially prepared, facilitating handling and interoperability among applications. The intention of developing the SAS-P2P system was to offer a complementary service for Giga Natal network users, through which the participants in this network can collaboratively build a shared storage area, with important security features such as availability, confidentiality, authenticity and fault tolerance. Besides the specification, development of prototypes and testing of the SAS-P2P system, tests of the PKIX-P2P Manager module were also performed, in order to determine its fault tolerance and the effective calculation of the reputation of the certifying authorities participating in the system

Superando os riscos da segurança baseada em perímetro - Uma abordagem com identificação federada através de certificados digitais A3/ICP-Brasil e SAML

The traditional perimeter-based approach for computer network security (the castle and the moat model) hinders the progress of enterprise systems and promotes, both in administrators and users, the delusion that systems are protected. To deal with the new range of threats, a new data-safety oriented paradigm, called de-perimeterisation , began to be studied in the last decade. One of the requirements for the implementation of the de-perimeterised model of security is the definition of a safe and effective mechanism for federated identity. This work seeks to fill this gap by presenting the specification, modelling and implementation of a mechanism for federated identity, based on the combination of SAML and X.509 digital certificates stored in smart-cards, following the A3 standard of ICP-Brasil (Brazilian official certificate authority and PKI)

Um breve estudo acerca do cotidiano do trabalho de produtores rurais: intoxicações por agrotóxicos e subnotificação

Pesquisas na área da Saúde no Trabalho têm revelado a preocupação com os agravos à saúde de trabalhadores rurais decorrentes da utilização de defensivos agrícolas. Diante disso, este estudo objetivou conhecer o cotidiano de trabalho de produtores rurais de uma cooperativa agrícola localizada no interior do estado de São Paulo, bem como avaliar a exposição deles quando da utilização de agrotóxicos no desenvolvimento de suas atividades. Esperamos, com base nos resultados, estar contribuindo com discussões sobre o tema relacionado à saúde dos trabalhadores no contexto considerado. Para coleta de dados, utilizamos entrevistas semi-estruturadas, aplicadas de formas individual e coletiva. Participaram do estudo cinqüenta produtores rurais que desenvolvem atividades nas lavouras de café, soja, trigo e milho. Os dados foram agrupados em cinco categorias e analisados qualitativamente. Os resultados expõem as características da atividade agrícola na região, a utilização dos equipamentos de proteção individual, as técnicas no uso dos agrotóxicos, o sofrimento psíquico e a produção rural e maneiras de lidar com as situações de intoxicação e alertar os órgãos competentes para o problema da subnotificação.

Saúde do trabalhador no SUS: desafios e perspectivas frente à precarização do trabalho

Refletir sobre o campo saúde do(a) trabalhador(a) é o objetivo deste estudo. Busca-se sublinhar o significado das condições de trabalho para o ser humano do ponto de vista da saúde. A premissa não é quantificar, mas inferir que as condições de trabalho podem gerar danos à saúde, mas nem sempre apresentam de imediato a sua relação com o trabalho. São discutidas, a partir da abordagem qualitativa, três situações, as quais contemplam os trabalhos rural, informal e infantil e, como resultado, verifica-se a contradição da categoria trabalho, que, se por um lado é sinônimo de sociabilidade, por outro, contraditoriamente, constitui-se em mecanismo de exclusão social na medida em que é realizado sem o reconhecimento dos direitos sociais e trabalhistas. Verifica-se a expansão de formas de trabalho sem regulamentação, tais como o domiciliar e o familiar e os realizados em locais como a rua e o lixo. Encerra-se a reflexão com destaque ao papel do Sistema Único de Saúde (SUS) na assistência integral à saúde dos(as) trabalhadores(as) e ao desafio de atuar na perspectiva de prevenção e promoção da saúde do trabalhador de modo integrado e articulado aos demais órgãos públicos que atuam nesta área.

Motivação para o trabalho: um estudo com os profissionais de saúde das unidades básicas de saúde do município de Natal RN

This thesis studied the motivation to work among health professionals of the Basic Unities (BUH) in the health network of the city of Natal (RN). It was understood that the work motivation is a process. Then, the expectation theory was applied and motivation components (results of work, expectative, valence, instrumentality, and motivational force) were used to analyses. It s understanding the motivation as multifaceted phenomenon, the psycho sociological perspective was adopted. The research was developed in two phases: one with application of Work Motivation and Meaning Inventory (WMMI), and another with interview. In the first phases, the analysis of results revealed that the major factors contributing to increase the motivational force to health professionals in the BUH´s are: in valence, Self Expression and Personal Realization (VF2), Personal and Family Survival (VF3); in expectative, Self Expression and Work Justice (EF1), Safety and Dignity (EF2) and Responsibility (EF4); in instrumentality, Involvement (IF1) and Recognition and Economic Independence (IF4). In opposition, the factors that more contribute to reduce the motivational force are Wear and Dehumanization factors in valence (VF4), in expectative (EF3), and in instrumentality (IF4), behind the Work Justice Factor (IF2). Basing in content analysis of interviews, it was possible to associate by equivalence, the senses presented by health professionals with obtained results of first phase, indicating that the results of second phase corroborated and complemented those of first one. This possibility broadened the comprehension of the studied phenomenon. In speaking of the respondents, it was visible the presence of contents showing that they perceive the Health System and BUH´s in degradation. In the first phase, the participants´ instruction also predict the results in motivation, and in the interviews can be saw that the instruction is associated with the opportunities in outside of system. As work motivation is a process, the impact of personal and occupational characteristics tend to interact with contextual aspects. It was concluded the majority of health professionals present the moderated motivational force, but it was falling because they experience and perceive a degrading context with work condition increasingly unfavorable.

Agente penitenciário: trabalho no cárcere

Behind the high walls of a prison, there is suffering! Suffering from those who atone to their punishment, from those who work on behalf of an alleged regeneration, suffering that has remained for over two centuries. For those who had their conducts characterized as a crime, many studies have been developed. On the other hand, little is known about the prison servants. This research focused mainly on the identification, from the perspective of the correctional officers from two prisons in different states of Brazil, of the negative influence that their jobs have on them, on the factors that serve as protection, as well as the ones that offer them risk. It was observed that hygiene and security conditions are precarious in both prisons. From the reports, scabies, tuberculosis, hepatitis, H1N1, constant violence, politicization of the working environment, doubled working hours, lack of career planning and salaries emerge as evidence of the place where the bodies who work there are subdued, not taking the differences into account. From the above, and as of the many things that still need to be said about this category, it is reiterated the importance in developing studies about the conditions and the work organization and its implications on the mental health of those workers, who lack of public policies committed to their working realities

Impacto do trabalho em profissionais de Saúde Mental de serviços de saúde do município de Mossoró-RN, 2012

The Psychiatric Reform has brought profound changes in assistance to people affected by mental disorders and behavior. In this context, mental health workers have played decisive roles of great impact, acting driving the process. Objective: To evaluate the impact felt by working professionals, because of the daily work with people who have psychiatric disorders. Methodology: This is a search field, a quantitative approach, sectional, descriptive and applied. Data collection occurred through the Assessment Scale Impact of Working in Mental Health Services (IMPACT-BR) applied to mental health researchers city Mossoró - RN. Results: Participants in this study 87 professionals, mostly female married, which took charge of higher education, working on a single service, working in the area for more than six years, aged between 25 and 64 years. There were a low effect of overloading the professionals surveyed. Discussion: Our results corroborate findings in other surveys conducted previously, not identifying large impact load at work among professionals of mental health teams studied. Subscales studied the highest score was observed in measuring the impact of work on team functioning. It was observed that the greater age and duration of action, reduced the emotional impact at work, suggesting that the experience enhances safety in decisions made and the possibility of greater control over the demands of work. Final Thoughts: The work presented showed that the interactive relationships between professionals and users are not the causes of greatest impact in the workplace, although it revealed overload in relation to specific aspects such as: fear of being assaulted by a patient and the feeling of physical exhaustion the end of the workday. Further investigations should be conducted on this topic in order to contribute to the implementation of psychiatric reform proposed by advances both in terms of assistance to individuals and the quality of life in the work of the professionals involved

Trabalho e saúde na sociedade capitalista: uma relação inversamente proporciona

It is a dissertation which has the Area of Concentration: Social Services, Vocational Training, Labour and Social Protection. Research Line: Social Services, Labor, Social Protection and Citizenship. Brings an approach to health and worker safety, approached on the organization of work in their processes of worker exploitation, analyzed from the critical perspective and all. Its central objective of uncovering how the organization of work affects the health of their workers, considering the working process in the capitalist mode of production, the health-disease relationship. Displays the worker, as determined by the work process, emphasizing, along the lines of capitalism, the consequences for the physical well-being, mental and social workers. To this end, we make a documentary and bibliographic research, whose point of analysis is based on the perspective of the centrality of work, recovering their sense of ontological Marx, through which the transformations are discussed in the working world, listed based on context productive restructuring of capital, which occurs along the imperialist stage of capitalist mode of production. It is problematized, though, worker health, analyzed from the wider definition of health as a field of public health, considering the work process in health-disease relationship. Finally, the research developed raised between 2006 and 2010, the Graduate Programs UFRN that address the range of issues studied in this dissertation. The scientific outputs are problematized as a way to reveal the theoretical trends (critical or conservative) which facilitate the thematic area

CALV3 - Uma linguagem específica de domínio para segurança em sistemas corporativos: um estudo de caso sistemático na indústria

The academic community and software industry have shown, in recent years, substantial interest in approaches and technologies related to the area of model-driven development (MDD). At the same time, continues the relentless pursuit of industry for technologies to raise productivity and quality in the development of software products. This work aims to explore those two statements, through an experiment carried by using MDD technology and evaluation of its use on solving an actual problem under the security context of enterprise systems. By building and using a tool, a visual DSL denominated CALV3, inspired by the software factory approach: a synergy between software product line, domainspecific languages and MDD, we evaluate the gains in abstraction and productivity through a systematic case study conducted in a development team. The results and lessons learned from the evaluation of this tool within industry are the main contributions of this work

PUPSI :uma proposta de processo unificado para políticas de segurança da informação

The way to deal with information assets means nowadays the main factor not only for the success but also for keeping the companies in the global world. The number of information security incidents has grown for the last years. The establishment of information security policies that search to keep the security requirements of assets in the desired degrees is the major priority for the companies. This dissertation suggests a unified process for elaboration, maintenance and development of information security policies, the Processo Unificado para Políticas de Segurança da Informação - PUPSI. The elaboration of this proposal started with the construction of a structure of knowledge based on documents and official rules, published in the last two decades, about security policies and information security. It's a model based on the examined documents which defines the needed security policies to be established in the organization, its work flow and identifies the sequence of hierarchy among them. It's also made a model of the entities participating in the process. Being the problem treated by the model so complex, which involves all security policies that the company must have. PUPSI has an interative and developing approach. This approach was obtained from the instantiation of the RUP - Rational Unified Process model. RUP is a platform for software development object oriented, of Rational Software (IBM group). Which uses the best practice known by the market. PUPSI got from RUP a structure of process that offers functionality, diffusion capacity and comprehension, performance and agility for the process adjustment, offering yet capacity of adjustment to technological and structural charges of the market and the company

Recurso de interface captcha: segurança e usabilidade na distinção entre humano e máquina

Com o intuito de impedir que computadores enviem mensagens automáticas se passando por usuários reais, desenvolvedores tem utilizado o recurso de interface CAPTCHA para distinguir o preenchimento de dados e submissões realizadas por humanos e por máquinas. Este trabalho apresenta as principais modalidades de CAPTCHAs e discute as implicações na usabilidade. Para tanto, foram aplicados questionários e realizados testes de usabilidade em três modalidades de CAPTCHA. Verificou-se que, embora os usuários tenham consciência da importância do uso do CAPTCHA como ferramenta de segurança, percebeu-se que tal recurso compromete a usabilidade, gerando insatisfação e em alguns casos, a desistência da realização da tarefa

Perfil dos acidentes de trabalho ocorridos no município de Araçatuba-SP nos anos de 2000 e 2001

O objetivo do presente estudo consiste em descrever o perfil dos acidentes de trabalho ocorridos no município de Araçatuba-SP nos anos de 2000 e 2001. Para tanto, foram analisadas as Comunicações de Acidentes de Trabalho (CATs) emitidas no referido período e as informações pertinentes transcritas em formulário específico elaborado através do programa estatístico Epi-Info versão 6.04, utilizado para tabulação e análise dos dados obtidos. Foram analisadas 772 CATs, das quais 656 correspondiam à ocorrência de acidentes típicos, 92 a acidentes de trajeto e 24 a doenças ocupacionais. A média de idade dos acidentados foi de 32,42 anos (d.p. 10,88) e o tempo médio trabalhado até o momento do acidente foi de 4,15 horas (d.p. 2,73). Quanto ao gênero, 632 acidentes (81,9%) ocorreram com trabalhadores do sexo masculino e 140 (18,1%) com trabalhadores do sexo feminino. O presente estudo revela um amplo predomínio de acidentes de trabalho classificados como típicos, além de uma maior prevalência em trabalhadores do sexo masculino.