An integrated approach to cryptographic mitigation of denial-of-service attacks

Gradual authentication is a principle proposed by Meadows as a way to tackle denial-of-service attacks on network protocols by gradually increasing the confidence in clients before the server commits resources. In this paper, we propose an efficient method that allows a defending server to authenticate its clients gradually with the help of some fast-to-verify measures. Our method integrates hash-based client puzzles along with a special class of digital signatures supporting fast verification. Our hash-based client puzzle provides finer granularity of difficulty and is proven secure in the puzzle difficulty model of Chen et al. (2009). We integrate this with the fast-verification digital signature scheme proposed by Bernstein (2000, 2008). These schemes can be up to 20 times faster for client authentication compared to RSA-based schemes. Our experimental results show that, in the Secure Sockets Layer (SSL) protocol, fast verification digital signatures can provide a 7% increase in connections per second compared to RSA signatures, and our integration of client puzzles with client authentication imposes no performance penalty on the server since puzzle verification is a part of signature verification.

Trust and reputation management in web-based social network

know personally. They also communicate with other members of the network who are the friends of their friends and may be friends of their friend’s network. They share their experiences and opinions within the social network about an item which may be a product or service. The user faces the problem of evaluating trust in a service or service provider before making a choice. Opinions, reputations and ecommendations will influence users' choice and usage of online resources. Recommendations may be received through a chain of friends of friends, so the problem for the user is to be able to evaluate various types of trust recommendations and reputations. This opinion or ecommendation has a great influence to choose to use or enjoy the item by the other user of the community. Users share information on the level of trust they explicitly assign to other users. This trust can be used to determine while taking decision based on any recommendation. In case of the absence of direct connection of the recommender user, propagated trust could be useful.

English language study abroad program : an investigation of Hong Kong pre-service teachers’ experiences of a language immersion program

There has been minimal research focused on short-term study abroad language immersion programs, in particular, with home-stay families. The importance of authentic intercultural experience is increasingly clear and was acknowledged as central to the process of language learning (Liddicoat, 2004). In Hong Kong, education programs for pre-service language teachers have significantly emphasised language and intercultural training through short-term study abroad, and these short overseas language immersion courses have become a compulsory component for teacher training (Bodycott & Crew, 2001) in the last decade. This study aims to investigate eight Hong Kong pre-service teachers’ and their home-stay families’ experiences of a short-term (two months) language immersion program in Australia. The focus is on listening to commentaries concerning the development of communicative competence, intercultural competence and professional growth during the out-of-class study abroad experience. The conceptual framework adopted in this study views language and intercultural learning from social constructivist perspectives. Central to this framing is the notion that the internalisation of higher mental functions involves the transfer from the inter-psychological to the intra-psychological plane, that is, a progression process from the socially supported to individually controlled performance. From this perspective, language serves as a way to communicate about, and in relation to, actions and experience. Three research questions were addressed and studied through qualitative methodology. 1. How do the pre-service teachers and their home-stay families perceive the out-of-class component of the program in terms of opportunities for the development of language proficiency and communicative competence? 2. How do the pre-service teachers and their home-stay families perceive the out-of-class component of the program in terms of the development of intercultural competence? 3. How do the pre-service teachers and home-stay families perceive the outof- class component of the program in terms of teachers’ professional growth? Data were generated from multiple data collection methods and analysed through thematic analysis from both a “bottom up” and “top down” approach. The study showed that the pre-service teachers perceived that the immersion program influenced, to varying degrees, their language proficiency, communication and intercultural awareness, as well as their self-awareness and professional growth. These pre-service teachers believed that effective language learning centres on active engagement in the target language community. A mismatch between the views and evaluations of the two groups – the pre-service teachers and the home-stay family members – provides some evidence of misalignments in terms of expectations and perceptions of each other’s roles and responsibilities. The study has highlighted challenges encountered, and provided suggestions for ways of meeting these challenges. The inclusion in the study of the home-stay families’ perceptions and commentaries provided insights, which can inform program development. There is clearly further work to be done in terms of predeparture orientation and preparation, not only for the main participants themselves, the students, but also for the host families.

Development and pilot test of a peer-support based Cardiac-Diabetes Self-Management program : a study protocol

Background: People with cardiac disease and type 2 diabetes have higher hospital readmission rates (22%)compared to those without diabetes (6%). Self-management is an effective approach to achieve better health outcomes; however there is a lack of specifically designed programs for patients with these dual conditions. This project aims to extend the development and pilot test of a Cardiac-Diabetes Self-Management Program incorporating user-friendly technologies and the preparation of lay personnel to provide follow-up support. Methods/Design: A randomised controlled trial will be used to explore the feasibility and acceptability of the Cardiac-Diabetes Self-Management Program incorporating DVD case studies and trained peers to provide follow-up support by telephone and text-messaging. A total of 30 cardiac patients with type 2 diabetes will be randomised, either to the usual care group, or to the intervention group. Participants in the intervention group will received the Cardiac-Diabetes Self-Management Program in addition to their usual care. The intervention consists of three faceto- face sessions as well as telephone and text-messaging follow up. The face-to-face sessions will be provided by a trained Research Nurse, commencing in the Coronary Care Unit, and continuing after discharge by trained peers. Peers will follow up patients for up to one month after discharge using text messages and telephone support. Data collection will be conducted at baseline (Time 1) and at one month (Time 2). The primary outcomes include self-efficacy, self-care behaviour and knowledge, measured by well established reliable tools. Discussion: This paper presents the study protocol of a randomised controlled trial to pilot evaluates a Cardiac- Diabetes Self-Management program, and the feasibility of incorporating peers in the follow-ups. Results of this study will provide directions for using such mode in delivering a self-management program for patients with both cardiac condition and diabetes. Furthermore, it will provide valuable information of refinement of the intervention program.

Using user-friendly telecommunications to improve cardiac and diabetes self-management programme : a pilot study

Previous studies exploring the incidence and readmission rates of cardiac patients admitted to a coronary care unit (CCU) with type 2 diabetes [1] have been undertaken by the first author. Interviews of these patients regarding their experiences in managing their everyday conditions [2] provided the basis for developing the initial cardiac–diabetes self-management programme (CDSMP) [3]. Findings from each of these previous studies highlighted the complexity of self-management for patients with both conditions and contributed to the creation of a new self-management programme, the CDSMP, based on Bandura’s (2004) self-efficacy theory [4]. From patient and staff feedback received for the CDSMP [3], it became evident that further revision of the programme was needed to improve self-management levels of patients and possibility of incorporating methods of information technology (IT). Little is known about the applicability of different methods of technology for delivering self-management programmes for patients with chronic diseases such as those with type 2 diabetes and cardiac conditions. Although there is some evidence supporting the benefits and the great potential of using IT in supporting self-management programmes, it is not strong, and further research on the use of IT in such programmes is recommended [5–7]. Therefore, this study was designed to pilot test feasibility of the CDSMP incorporating telephone and text-messaging as follow-up approaches.

Developing an IS-Impact decision tool : a literature based design science roadmap

This paper derives from research-in-progress intending both Design Research (DR) and Design Science (DS) outputs; the former a management decision tool based in IS-Impact (Gable et al. 2008) kernel theory; the latter being methodological learnings deriving from synthesis of the literature and reflection on the DR ‘case study’ experience. The paper introduces a generic, detailed and pragmatic DS ‘Research Roadmap’ or methodology, deriving at this stage primarily from synthesis and harmonization of relevant concepts identified through systematic archival analysis of related literature. The scope of the Roadmap too has been influenced by the parallel study aim to undertake DR applying and further evolving the Roadmap. The Roadmap is presented in attention to the dearth of detailed guidance available to novice Researchers in Design Science Research (DSR), and though preliminary, is expected to evolve and gradually be substantiated through experience of its application. A key distinction of the Roadmap from other DSR methods is its breadth of coverage of published DSR concepts and activities; its detail and scope. It represents a useful synthesis and integration of otherwise highly disparate DSR-related concepts.

Researching employment relations : a self-reflexive analysis of a multi-method, school-based project

Drawing on primary data and adjunct material, this article adopts a critical self-reflexive approach to a three-year, Australian Research Council-funded projectthat explored themes around 'employment citizenship'for high school students in Queensland. The article addresses three overlapping areas that reflect some of the central dilemmas and challenges arising through the project- consent in the context of research ethics, questionnaire administration in schools, and focus group research practice. It contributes to the broader methodological literature addressing research with young people by canvassing pragmatic suggestions for future school-based research, and research addressing adolescent employment.

Court-provided trial technology : efficiency and fairness for criminal trials

In Australia, trials conducted as 'electronic trials' have ordinarily run with the assistance of commercial service providers, with the associated costs being borne by the parties. However, an innovative approach has been taken by the courts in Queensland. In October 2007 Queensland became the first Australian jurisdiction to develop its own court-provided technology, to facilitate the conduct of an electronic trial. This technology was first used in the conduct of civil trials. The use of the technology in the civil sphere highlighted its benefits and, more significantly, demonstrated the potential to achieve much greater efficiencies. The Queensland courts have now gone further, using the court-provided technology in the high proffle criminal trial of R v Hargraves, Hargraves and Stoten, in which the three accused were tried for conspiracy to defraud the Commonwealth of Australia of about $3.7 million in tax. This paper explains the technology employed in this case and reports on the perspectives of all of the participants in the process. The representatives for all parties involved in this trial acknowledged, without reservation, that the use of the technology at trial produced considerable overall efficiencies and costs savings. The experience in this trial also demonstrates that the benefits of trial technology for the criminal justice process are greater than those for civil litigation. It shows that, when skilfully employed, trial technology presents opportunities to enhance the fairness of trials for accused persons. The paper urges governments, courts and the judiciary in all jurisdictions to continue their efforts to promote change, and to introduce mechanisms to facilitate more broadly a shift from the entrenched paper-based approach to both criminal and civil procedure to one which embraces more broadly the enormous benefits trial technology has to offer.

Measuring transit service reliability using data from web-based transit user survey : a case study at Brisbane, Australia

This paper reports an empirical study on measuring transit service reliability using the data from a Web-based passenger survey on a major transit corridor in Brisbane, Australia. After an introduction of transit service reliability measures, the paper presents the results from the case study including study area, data collection, and reliability measures obtained. This includes data exploration of boarding/arrival lateness, in-vehicle time variation, waiting time variation, and headway adherence. Impacts of peak-period effects and separate operation on service reliability are examined. Relationships between transit service characteristics and passenger waiting time are also discussed. A summary of key findings and an agenda of future research are offered in conclusions.

Defending web services against denial of service attacks using client puzzles

The interoperable and loosely-coupled web services architecture, while beneficial, can be resource-intensive, and is thus susceptible to denial of service (DoS) attacks in which an attacker can use a relatively insignificant amount of resources to exhaust the computational resources of a web service. We investigate the effectiveness of defending web services from DoS attacks using client puzzles, a cryptographic countermeasure which provides a form of gradual authentication by requiring the client to solve some computationally difficult problems before access is granted. In particular, we describe a mechanism for integrating a hash-based puzzle into existing web services frameworks and analyze the effectiveness of the countermeasure using a variety of scenarios on a network testbed. Client puzzles are an effective defence against flooding attacks. They can also mitigate certain types of semantic-based attacks, although they may not be the optimal solution.

Self-management of cancer treatment-related fatigue, nausea, vomiting and oral mucositis in Chinese cancer patients

Background: Treatment-related symptoms continue to place a significant burden on many cancer patients. Many side effects require patients to engage in a range of self-management actions. While some studies have explored self-management of treatment-related side effects in Western settings, very few studies were identified that described the self-management practices of cancer patients in China. Objective: The purposes of this study are to: (1) Investigate Chinese cancer patients. self-management behaviours in dealing with the fatigue, nausea/vomiting and oral mucositis that result from treatment, as well as the perceived effectiveness of these behaviours and related self-efficacy in performing them. (2) Explore factors influencing symptom self-management behaviours using the Cancer Symptom Self-management Framework based on Grey, Knafl and McCorkle.s (2006) self-management framework as a guide. Methods: This study was divided into two phases. Phase One consisted of the translation and modification of two instruments. The adaptation of these instruments to ensure applicability in the Chinese context was achieved through semi-structured interviews with six cancer patients, and content evaluation with eight experienced oncology nurses. A pilot study was conducted with nine cancer patients to trial the questionnaire set in the Chinese context. Based on the results of Phase One, Phase Two involved a cross-sectional survey of Chinese cancer patients undergoing cancer treatment using these instruments. A total of 277 chemotherapy patients with fatigue and/or nausea and vomiting, and 100 radiotherapy patients with oral mucositis were surveyed. Results: Participants in this study reported a variety of self-management behaviours to cope with fatigue, nausea, vomiting and oral mucositis. There are some consistencies as well disparities between strategies that are frequently used and those rated as effective. For fatigue self-management, participants were more likely to use strategies related to rest and sleep, while activity enhancement strategies were rated as achieving higher relief. For nausea and vomiting self-management, dietary modification and taking medication were most frequently used and rated as moderately effective. Psychological strategies were used by more than a third of participants and were rated as mildly effective. Some other infrequently used strategies, such as distraction by keeping busy and acupressure, were rated as moderately effective. For oral mucositis self-management, having soft, bland food and keeping the mouth moisturised were most frequently reported and they were rated as achieving moderate relief. A prescribed mouthwash was used by most but not all participants and brought moderate relief. In general, patients had low-to-moderate self-efficacy in nausea and vomiting self-management behaviours, moderate self-efficacy in fatigue self-management behaviours, and low-to-moderate self-efficacy in oral mucositis self-management behaviours. In terms of the factors influencing symptom self-management, different predictors were identified affecting engagement in fatigue, nausea/vomiting and oral mucositis self-management behaviours. Self-efficacy scores of different behaviours were consistently found to be a positive predictor of the relief level from corresponding behaviours, after controlling for other variables. Perceived social support from health care professionals was identified as an important factor influencing nausea and vomiting self-management behaviours, while neighbourhood support was important for fatigue self-management. In addition, symptom distress was identified as an important factor influencing nausea and vomiting self-management. Conclusion: Similar to reports from overseas, Chinese cancer patients initiate a wide range of self-management behaviours in response to treatment-related side effects. While some behaviours were reported to provide relief, many did not. Given these results, this study has a number of practical implications for health care professionals, particularly in relation to developing tailored self-management programs for fatigue, nausea, vomiting and oral mucositis. Additionally, this study suggests a number of theoretical implications and directions for future research. It is envisaged that these recommendations may pave the way for further studies understanding and promoting cancer symptom self-management in Chinese people affected by cancer.

'Being-in-the-world-of-care' : the lived experiences of older people receiving community aged care packages in Queensland

It has been recognised in current literature that, in general, Australia’s population is ageing and that older people are increasingly choosing to continue to live in the community in their own homes for as long as possible. Such factors of social change are expected to lead to larger numbers of older people requiring community care services for longer periods. Despite this, there is little information available in the literature on the perceptions and experiences of older people regarding community-based care and support. This study explores the lived experience of a small group of older people living in South East Queensland who were receiving a level of care consistent with the Community Aged Care Package (CACP). It also sought to examine the impact and meaning of that care on the older person’s overall lifestyle, autonomy, and personal satisfaction. In-depth interviews were undertaken with these older people, and were analysed using Heidegger’s interpretive hermeneutical phenomenological approach. Shared narratives were then explored using Ricoeur’s narrative analysis framework. In order to sensitise the researcher to the unconscious or symbolic aspects of the care experience, Wolfensberger’s social role valorization theory (SRV) was also utilised during a third phase of analysis. Methodological rigour was strengthened within this study through the use of reflexivity and an in-depth member check discussion that was conducted with each participant. The interviews revealed there were significant differences in expectations, understanding, and perceptions between older people and their carers or service providers. The older person perceived care primarily in relational terms, and clearly preferred active participation in their care and a consistent relationship with a primary carer. Older people also sought to maintain their sense of autonomy, lifestyle, home environment, routines, and relationships, as closely as possible to those that existed prior to their requiring assistance. However, these expectations were not always supported by the care model. On the whole, service providers did not always understand what older people perceived was important within the care context. Carers seldom looked beyond the provision of assistance with specific daily tasks to consider the real impact of care on the older person. The study identified that older people reported a range of experiences when receiving care in their own homes. While some developed healthy and supportive connections with their carers, others experienced ageism, abuse, and exploitation. Unsatisfactory interactions at times resulted in a loss, to varying degrees, of their independence, their possessions, and their connectedness with others. There is therefore a need for service providers to pay more attention to the perceptions and self-perceived needs of older people, to avoid unintended or unnecessary negative impacts occurring within care provision. The study provides valuable information regarding the older person’s experience that will assist in supporting the further development and improvement of this model of care. It is proposed that these insights will enable CACPs to cater more closely to the actual needs and preferences of older people, and to avoid causing preventable harm to care recipients.

A case study of how primary school teachers in Papua New Guinea understand outcomes-based education

This case study explored how a group of primary school teachers in Papua New Guinea (PNG) understood Outcomes-based Education (OBE). OBE measures students. learning against specific outcomes. These outcomes are derived from a country.s vision of the kind of citizen that the education system should produce. While countries such as Australia, South Africa, New Zealand and the United States have abandoned OBE, others such as PNG have adopted it in various ways. How teachers understand OBE in PNG is important because such understandings are likely to influence how they implement the OBE curriculum. There has been no research to date which has investigated PNG primary school teachers. understandings and experiences with OBE. This study used a single exploratory case study design to investigate how twenty primary school teachers from the National Capital District (NCD) in PNG understood OBE. The study, underpinned by an intepretivist paradigm, explored the research question: How do primary school teachers understand outcomes-based education in PNG? The data comprised surveys, in-depth interviews and documents. Data were analysed thematically and using explanation building techniques. The findings revealed that OBE is viewed by teachers as a way to equip them with additional strategies for planning and programming, teaching and learning, and assessment. Teachers also described how OBE enabled both students and teachers to become more engaged and develop positive attitudes towards teaching and learning. There was also a perception that OBE enhanced students. future life skills through increased local community support. While some teachers commented on how the OBE reforms provided them with increased professional development opportunities, the greatest impediment to implementing OBE was perceived to be a lack of sufficient teaching and learning resources. The process of planning and programming classroom activities was also regarded as onerous. Some teachers indicated that they had been required to implement OBE without adequate in-service training support. The social constructivist theory of knowledge which underpins OBE.s student-centred pedagogy can cause tensions within PNG.s cultural contexts of teaching and learning. Teachers need to be aware of these tensions when conducting peer or group learning under OBE in PNG. By exploring how these PNG primary teachers understood OBE, the study highlighted how teachers engaged with OBE concepts when interpreting syllabus documents and how they applied these concepts to curriculum. Identifying differences in teacher understanding of OBE provides guidance for both the design of materials to support the implementation of OBE and for the design of in-service training. Thus, the outcomes of this study will inform educators about the implementation of OBE in PNG. In addition, the outcomes will provide much needed insight into how a mandated curriculum and pedagogical reform impacts teachers‟ practices in PNG.

Data preprocessing for anomaly based network intrusion detection : a review

Data preprocessing is widely recognized as an important stage in anomaly detection. This paper reviews the data preprocessing techniques used by anomaly-based network intrusion detection systems (NIDS), concentrating on which aspects of the network traffic are analyzed, and what feature construction and selection methods have been used. Motivation for the paper comes from the large impact data preprocessing has on the accuracy and capability of anomaly-based NIDS. The review finds that many NIDS limit their view of network traffic to the TCP/IP packet headers. Time-based statistics can be derived from these headers to detect network scans, network worm behavior, and denial of service attacks. A number of other NIDS perform deeper inspection of request packets to detect attacks against network services and network applications. More recent approaches analyze full service responses to detect attacks targeting clients. The review covers a wide range of NIDS, highlighting which classes of attack are detectable by each of these approaches. Data preprocessing is found to predominantly rely on expert domain knowledge for identifying the most relevant parts of network traffic and for constructing the initial candidate set of traffic features. On the other hand, automated methods have been widely used for feature extraction to reduce data dimensionality, and feature selection to find the most relevant subset of features from this candidate set. The review shows a trend toward deeper packet inspection to construct more relevant features through targeted content parsing. These context sensitive features are required to detect current attacks.

Optimal budget allocation in budget-based access control

In dynamic and uncertain environments, where the needs of security and information availability are difficult to balance, an access control approach based on a static policy will be suboptimal regardless of how comprehensive it is. Risk-based approaches to access control attempt to address this problem by allocating a limited budget to users, through which they pay for the exceptions deemed necessary. So far the primary focus has been on how to incorporate the notion of budget into access control rather than what or if there is an optimal amount of budget to allocate to users. In this paper we discuss the problems that arise from a sub-optimal allocation of budget and introduce a generalised characterisation of an optimal budget allocation function that maximises organisations expected benefit in the presence of self-interested employees and costly audit.