Security in RFID devices

Aquest projecte inclou una aproximació als conceptes de RFID i targetes contactless centrant-se en l’ampliament usat MIFARE Classic chip. L’objectiu principal es mostrar el seu funcionament i les seves vulnerabilitats, així com alguns exemples pràctics fent una anàlisi de diferents serveis que les utilitzen.

Medical record search engines, using pseudonymised patient identity: an alternative to centralised medical records

Purpose The purpose of our multidisciplinary study was to define a pragmatic and secure alternative to the creation of a national centralised medical record which could gather together the different parts of the medical record of a patient scattered in the different hospitals where he was hospitalised without any risk of breaching confidentiality. Methods We first analyse the reasons for the failure and the dangers of centralisation (i.e. difficulty to define a European patients' identifier, to reach a common standard for the contents of the medical record, for data protection) and then propose an alternative that uses the existing available data on the basis that setting up a safe though imperfect system could be better than continuing a quest for a mythical perfect information system that we have still not found after a search that has lasted two decades. Results We describe the functioning of Medical Record Search Engines (MRSEs), using pseudonymisation of patients' identity. The MRSE will be able to retrieve and to provide upon an MD's request all the available information concerning a patient who has been hospitalised in different hospitals without ever having access to the patient's identity. The drawback of this system is that the medical practitioner then has to read all of the information and to create his own synthesis and eventually to reject extra data. Conclusions Faced with the difficulties and the risks of setting up a centralised medical record system, a system that gathers all of the available information concerning a patient could be of great interest. This low-cost pragmatic alternative which could be developed quickly should be taken into consideration by health authorities.

Three essays on the determinants of output, inflation and interest rates

Résumé: Output, inflation and interest rates are key macroeconomic variables, in particular for monetary policy. In modern macroeconomic models they are driven by random shocks which feed through the economy in various ways. Models differ in the nature of shocks and their transmission mechanisms. This is the common theme underlying the three essays of this thesis. Each essay takes a different perspective on the subject: First, the thesis shows empirically how different shocks lead to different behavior of interest rates over the business cycle. For commonly analyzed shocks (technology and monetary policy errors), the patterns square with standard models. The big unknown are sources of inflation persistence. Then the thesis presents a theory of monetary policy, when the central bank can better observe structural shocks than the public. The public will then seek to infer the bank's extra knowledge from its policy actions and expectation management becomes a key factor of optimal policy. In a simple New Keynesian model, monetary policy becomes more concerned with inflation persistence than otherwise. Finally, the thesis points to the huge uncertainties involved in estimating the responses to structural shocks with permanent effects.

The role of community and population ecology in applying mycorrhizal fungi for improved food security.

The global human population is expected to reach ∼9 billion by 2050. Feeding this many people represents a major challenge requiring global crop yield increases of up to 100%. Microbial symbionts of plants such as arbuscular mycorrhizal fungi (AMF) represent a huge, but unrealized resource for improving yields of globally important crops, especially in the tropics. We argue that the application of AMF in agriculture is too simplistic and ignores basic ecological principals. To achieve this challenge, a community and population ecology approach can contribute greatly. First, ecologists could significantly improve our understanding of the determinants of the survival of introduced AMF, the role of adaptability and intraspecific diversity of AMF and whether inoculation has a direct or indirect effect on plant production. Second, we call for extensive metagenomics as well as population genomics studies that are crucial to assess the environmental impact that introduction of non-local AMF may have on native AMF communities and populations. Finally, we plead for an ecologically sound use of AMF in efforts to increase food security at a global scale in a sustainable manner.

From 'Security for Privacy' to 'Privacy for Security'

This article envisions the use of context-awareness to improve single sign-on solutions (SSO) for mobile users. The attribute-based SSO is expected to increase users' perceived ease of use of the system and service providers' authentication security of the application. From these two features we derive two value propositions for a new business model for mobile platforms. The business model can be considered as an instantiation of the privacy-friendly business model pattern presented in our previous work, reinforcing our claim that privacy-friendly value propositions are possible and can be used to obtain a competitive advantage.

Software Security Design and Testing

Elektroninen kaupankäynti ja pankkipalvelut ovat herättäneet toiminnan jatkuvuuden kannalta erittäin kriittisen kysymyksen siitä, kuinka näitä palveluja pystytään suojaamaan järjestäytynyttä rikollisuutta ja erilaisia hyväksikäyttöjä vastaan.

Development of an investor relations strategy - Case SSH Communications Security Corp. Communications Security Corp.

Tutkimuksen tavoitteena oli muodostaa viitekehys sijoittajaviestinnän strategian muodostamiseen ja soveltaa viitekehystä käytännössä. Tutkimusongelma nousi case-yrityksestä, SSH Communications Security Oyj:stä, joka listautui vuoden 2000 lopussa. Teoreettinen viitekehys perustuu aikaisempaan kirjallisuuteen sijoittajaviestinnästä, strategian kehittämisestä ja rahoitusteoriasta. Rahoitusteorian alueet, joita käsiteltiin tutkimuksessa ovat; vapaaehtoinen tiedottaminen, markkinatehokkuus ja agenttiteoria. Tutkimuksen empiirinen osa toteutettiin soveltamalla teoreettista viitekehystä case yritykseen. Empiirisessä osuudessa käytiin läpi seuraavat vaiheet; nykyisen tilan ulkoinen ja sisäinen analyysi, tavoitteiden asettaminen ja sijoittajaviestintä strategia ehdotuksen muodostaminen case yritykseen. Tutkielman viimeinen kappale kokoaa tärkeimmät löydökset, pohtii työn teoreettista kontribuutiota ja liikkeenjohdollisia kytköksiä sekä esittää tutkimuksen herättämiä ehdotuksia jatkotutkimuksille

Police work and new 'security devices' : a tale from the beat

Mobile technologies have brought about major changes in police equipment and police work. If a utopian narrative remains strongly linked to the adoption of new technologies, often formulated as 'magic bullets' to real occupational problems, there are important tensions between their 'imagined' outcomes and the (unexpected) effects that accompany their daily 'practical' use by police officers. This article offers an analysis of police officers' perceptions and interactions with security devices. In so doing, it develops a conceptual typology of strategies for coping with new technology inspired by Le Bourhis and Lascoumes: challenging, neutralizing and diverting. To that purpose, we adopt an ethnographic approach that focuses on the discourses, practices and actions of police officers in relation to three security devices: the mobile digital terminal, the mobile phone and the body camera. Based on a case study of a North American municipal police department, the article addresses how these technological devices are perceived and experienced by police officers on the beat.

Les neurosciences au Tribunal : de la responsabilité à la dangerosité, enjeux éthiques soulevés par la nouvelle loi française

AIM: In the past few years, spectacular progress in neuroscience has led to the emergence of a new interdisciplinary field, the so-called "neurolaw" whose goal is to explore the effects of neuroscientific discoveries on legal proceedings and legal rules and standards. In the United States, a number of neuroscientific researches are designed specifically to explore legally relevant topics and a case-law has already been developed. In Europe, neuroscientific evidence is increasingly being used in criminal courtrooms, as part of psychiatric testimony, nourishing the debate about the legal implications of brain research in psychiatric-legal settings. Though largely debated, up to now the use of neuroscience in legal contexts had not specifically been regulated by any legislation. In 2011, with the new bioethics law, France has become the first country to admit by law the use of brain imaging in judicial expertise. According to the new law, brain imaging techniques can be used only for medical purposes, or scientific research, or in the context of judicial expertise. This study aims to give an overview of the current state of the neurolaw in the US and Europe, and to investigate the ethical issues raised by this new law and its potential impact on the rights and civil liberties of the offenders. METHOD: An overview of the emergence and development of "neurolaw" in the United States and Europe is given. Then, the new French law is examined in the light of the relevant debates in the French parliament. Consequently, we outline the current tendencies in Neurolaw literature to focus on assessments of responsibility, rather than dangerousness. This tendency is analysed notably in relation to the legal context relevant to criminal policies in France, where recent changes in the legislation and practice of forensic psychiatry show that dangerousness assessments have become paramount in the process of judicial decision. Finally, the potential interpretations of neuroscientific data introduced into psychiatric testimonies by judges are explored. RESULTS: The examination of parliamentary debates showed that the new French law allowing neuroimaging techniques in judicial expertise was introduced in the aim to provide a legal framework that would protect the subject against potential misuses of neuroscience. The underlying fear above all, was that this technology be used as a lie detector, or as a means to predict the subject's behaviour. However, the possibility of such misuse remains open. Contrary to the legislator's wish, the defendant is not fully guaranteed against uses of neuroimaging techniques in criminal courts that would go against their interests and rights. In fact, the examination of the recently adopted legislation in France shows that assessments of dangerousness and of risk of recidivism have become central elements of the criminal policy, which makes it possible, if not likely that neuroimaging techniques be used for the evaluation of the dangerousness of the defendant. This could entail risks for the latter, as judges could perceive neuroscientific data as hard evidence, more scientific and reliable than the soft data of traditional psychiatry. If such neuroscientific data are interpreted as signs of potential dangerousness of a subject rather than as signs of criminal responsibility, defendants may become subjected to longer penalties or measures aiming to ensure public safety in the detriment of their freedom. CONCLUSION: In the current context of accentuated societal need for security, the judge and the expert-psychiatrist are increasingly asked to evaluate the dangerousness of a subject, regardless of their responsibility. Influenced by this policy model, the judge might tend to use neuroscientific data introduced by an expert as signs of dangerousness. Such uses, especially when they subjugate an individual's interest to those of society, might entail serious threats to an individual's freedom and civil liberties.

Myynnin raportoinnin kehittäminen kassajärjestelmähankkeen yhteydessä

Raportointi liittyy kiinteänä osana yrityksen jokapäiväiseen toimintaan. Raportoinnin sisältö ja muoto vaihtelevat organisaatiotasosta riippuen päivittäisen toiminnan tarkkailusta kuukausittaiseen tulosraportointiin. Raportointi voidaan toteuttaa operatiivisten järjestelmien kautta tai nykyisin entistä suositumpana vaihtoehtona on keskitetty raportointi. Uuden raportointijärjestelmän hankintaprojekti on usein koko yritystä koskeva investointi. Jos raportointijärjestelmällä on tarkoitus raportoida sekä operatiivista toimintaa että johdon tarpeita, on sen mukauduttava moneen tarkoitukseen. Aluksi on tärkeää määritellä tietotarpeet ja tavoitteet projektille unohtamatta riskien- ja projektinhallintaa sekä investointilaskelmia. Jos raportoidaan myös yrityksen ulkopuolelle, tulee ottaa huomioon mahdolliset säädökset sekä tietoturvallisuusnäkökulmat. Myös yrityksen toimintatapoja ja – prosesseja on syytä tarkastella kriittisesti ennen järjestelmähankintaa jolloin voidaan havaita uusia raportointikohteita, tai toimintatapoja voidaan uudelleen organisoida parhaan toimintatavan saavuttamiseksi. Raportointijärjestelmää hankittaessa turvaudutaan usein ulkopuoliseen ohjelmistotoimittajaan, joka integroi ja räätälöi järjestelmän yrityksen omiin tarpeisiin soveltuvaksi. Raportointijärjestelmän hankintaprojekti ei lopu käyttöönottoon vaan projektin alussa on huomioitava myös järjestelmän huomattavasti pisin elinkaari eli käyttö ja ylläpito. Raportointi-, kuten ei moni muukaan tietojärjestelmä, ole ikinä valmis sillä tarpeet ja toimintatavat muuttuvat ajan kuluessa ja käyttäjien tietoisuus lisääntyy.

Les Neurosciences au Tribunal: de la responsabilité à la dangerosité

In recent years, an explosion of interest in neuroscience has led to the development of "Neuro-law," a new multidisciplinary field of knowledge whose aim is to examine the impact and role of neuroscientific findings in legal proceedings. Neuroscientific evidence is increasingly being used in US and European courts in criminal trials, as part of psychiatric testimony, nourishing the debate about the legal implications of brain research in psychiatric-legal settings. During these proceedings, the role of forensic psychiatrists is crucial. In most criminal justice systems, their mission consists in accomplishing two basic tasks: assessing the degree of responsibility of the offender and evaluating their future dangerousness. In the first part of our research, we aim to examine the impact of Neuroscientific evidence in the assessment of criminal responsibility, a key concept of law. An initial jurisprudential research leads to conclude that there are significant difficulties and limitations in using neuroscience for the assessment of criminal responsibility. In the current socio-legal context, responsibility assessments are progressively being weakened, whereas dangerousness assessments gain increasing importance in the field of forensic psychiatry. In the second part of our research we concentrate on the impact of using neuroscience for the assessment of dangerousness. We argue that in the current policy era of zero tolerance, judges, confronted with the pressure to ensure public security, may tend to interpret neuroscientific knowledge and data as an objective and reliable way of evaluating one's dangerousness and risk of reoffending, rather than their responsibility. This tendency could be encouraged by a utilitarian approach to punishment, advanced by some recent neuroscientific research which puts into question the existence of free will and responsibility and argues for a rejection of the retributive theory of punishment. Although this shift away from punishment aimed at retribution in favor of a consequentialist approach to criminal law is advanced by some authors as a more progressive and humane approach, we believe that it could lead to the instrumentalisation of neuroscience in the interest of public safety, which can run against the proper exercise of justice and civil liberties of the offenders. By advancing a criminal law regime animated by the consequentialist aim of avoiding social harms through rehabilitation, neuroscience promotes a return to a therapeutical approach to crime which can have serious impact on the kind and the length of sentences imposed on the offenders; if neuroscientific data are interpreted as evidence of dangerousness, rather than responsibility, it is highly likely that judges impose heavier sentences, or/and security measures (in civil law systems), which can be indeterminate in length. Errors and epistemic traps of past criminological movements trying to explain the manifestation of a violent and deviant behavior on a biological and deterministic basis stress the need for caution concerning the use of modern neuroscientific methods in criminal proceedings.

Epidemiology and injury patterns of patients consulting following assault by nightclub security agents in a university hospital emergency service and an associated specialised forensic consultation

Introduction: The Violence Medical Unit (VMU), a specialised forensic medical consultation, was created at the Lausanne university Hospital in 2006. All patients consulting at the ED for interpersonal violencerelated injury are referred to the VMU, which provides forensic documentation of the injury and referral to the relevant community based victim-support organisations within 48 hours of the ED visit. This frees the ED medical staff from forensic injury documentation and legal/social referral, tasks for which they lack both time and training. Among community violence, assaults by nightclub security agents against patrons have increased from 6% to 10% between 2007 and 2009. We set out to characterise the demographics, assault mechanisms, subsequent injuries, prior alcohol intake and ED & VMU costs incurred by this group of patients. Methods: We retrospectively included all patients consulting at the VMU due to assault by nightclub security agents from January 2007 to December 2009. Data was obtained from ED & VMU medical, nursing and administrative records. Results: Our sample included 70 patients, of which 64 were referred by the CHUV ED. The victims were typically young (median age 29) males (93%). 77% of assaults occurred on the weekend between 12 PM and 4 AM, and 73% of the victims were under the influence of alcohol. 83% of the patients were punched, kicked and/or head-butted; 9% had been struck with a blunt instrument. 80% of the injuries were in the head and neck area and 19% of the victims sustained fractures. 21% of the victims were prescribed medical leave. Total ED & VMU costs averaged 1048 SFr. Conclusion: Medical staff treating this population of assault victims must be aware of the assault mechanisms and injury patterns, in particular the high probability of fractures, in order to provide adequate diagnosis and care. Associated inebriation mandates liberal use of radiology, as delayed or missed diagnosis may have medical, medicolegal and legal implications. Emergency medical services play an important role in detecting and reporting of such incidents. Centralised management of the forensic documentation facilitates referral to victim support organisations and epidemiological data collection. Magnitudes and trends of the different types of violence can be determined, and this information can be then impact public safety management policies.

Accuracy of cognitive MRI-targeted biopsy in hitting prostate cancer-positive regions of interest.

PURPOSE: Prostate cancer (PCa) diagnosis relies on clinical suspicion leading to systematic transrectal ultrasound-guided biopsy (TRUSGB). Multiparametric magnetic resonance imaging (mpMRI) allows for targeted biopsy of suspicious areas of the prostate instead of random 12-core biopsy. This method has been shown to be more accurate in detecting significant PCa. However, the precise spatial accuracy of cognitive targeting is unknown. METHODS: Consecutive patients undergoing mpMRI-targeted TRUSGB with cognitive registration (MRTB-COG) followed by robot-assisted radical prostatectomy were included in the present analysis. The regions of interest (ROIs) involved by the index lesion reported on mpMRI were subsequently targeted by two experienced urologists using the cognitive approach. The 27 ROIs were used as spatial reference. Mapping on radical prostatectomy specimen was used as reference to determine true-positive mpMRI findings. Per core correlation analysis was performed. RESULTS: Forty patients were included. Overall, 40 index lesions involving 137 ROIs (mean ROIs per index lesion 3.43) were identified on MRI. After correlating these findings with final pathology, 117 ROIs (85 %) were considered as true-positive lesions. A total of 102 biopsy cores directed toward such true-positive ROIs were available for final analysis. Cognitive targeted biopsy hit the target in 82 % of the cases (84/102). The only identified risk factor for missing the target was an anterior situated ROI (p = 0.01). CONCLUSION: In experienced hands, cognitive MRTB-COG allows for an accuracy of 82 % in hitting the correct target, given that it is a true-positive lesion. Anterior tumors are less likely to be successfully targeted.