Mecanismos de segurança para um sistema cooperativo de armazenamento de arquivos baseado em P2P

Previous works have studied the characteristics and peculiarities of P2P networks, especially security information aspects. Most works, in some way, deal with the sharing of resources and, in particular, the storage of files. This work complements previous studies and adds new definitions relating to this kind of systems. A system for safe storage of files (SAS-P2P) was specified and built, based on P2P technology, using the JXTA platform. This system uses standard X.509 and PKCS # 12 digital certificates, issued and managed by a public key infrastructure, which was also specified and developed based on P2P technology (PKIX-P2P). The information is stored in a special file with XML format which is especially prepared, facilitating handling and interoperability among applications. The intention of developing the SAS-P2P system was to offer a complementary service for Giga Natal network users, through which the participants in this network can collaboratively build a shared storage area, with important security features such as availability, confidentiality, authenticity and fault tolerance. Besides the specification, development of prototypes and testing of the SAS-P2P system, tests of the PKIX-P2P Manager module were also performed, in order to determine its fault tolerance and the effective calculation of the reputation of the certifying authorities participating in the system

Superando os riscos da segurança baseada em perímetro - Uma abordagem com identificação federada através de certificados digitais A3/ICP-Brasil e SAML

The traditional perimeter-based approach for computer network security (the castle and the moat model) hinders the progress of enterprise systems and promotes, both in administrators and users, the delusion that systems are protected. To deal with the new range of threats, a new data-safety oriented paradigm, called de-perimeterisation , began to be studied in the last decade. One of the requirements for the implementation of the de-perimeterised model of security is the definition of a safe and effective mechanism for federated identity. This work seeks to fill this gap by presenting the specification, modelling and implementation of a mechanism for federated identity, based on the combination of SAML and X.509 digital certificates stored in smart-cards, following the A3 standard of ICP-Brasil (Brazilian official certificate authority and PKI)

Adaptação eletrônica de um leitor mecânico de coto, investigação e desenvolvimento de interface CAD

Due to advances in the manufacturing process of orthopedic prostheses, the need for better quality shape reading techniques (i.e. with less uncertainty) of the residual limb of amputees became a challenge. To overcome these problems means to be able in obtaining accurate geometry information of the limb and, consequently, better manufacturing processes of both transfemural and transtibial prosthetic sockets. The key point for this task is to customize these readings trying to be as faithful as possible to the real profile of each patient. Within this context, firstly two prototype versions (α and β) of a 3D mechanical scanner for reading residual limbs shape based on reverse engineering techniques were designed. Prototype β is an improved version of prototype α, despite remaining working in analogical mode. Both prototypes are capable of producing a CAD representation of the limb via appropriated graphical sheets and were conceived to work purely by mechanical means. The first results were encouraging as they were able to achieve a great decrease concerning the degree of uncertainty of measurements when compared to traditional methods that are very inaccurate and outdated. For instance, it's not unusual to see these archaic methods in action by making use of ordinary home kind measure-tapes for exploring the limb's shape. Although prototype β improved the readings, it still required someone to input the plotted points (i.e. those marked in disk shape graphical sheets) to an academic CAD software called OrtoCAD. This task is performed by manual typing which is time consuming and carries very limited reliability. Furthermore, the number of coordinates obtained from the purely mechanical system is limited to sub-divisions of the graphical sheet (it records a point every 10 degrees with a resolution of one millimeter). These drawbacks were overcome by designing the second release of prototype β in which it was developed an electronic variation of the reading table components now capable of performing an automatic reading (i.e. no human intervention in digital mode). An interface software (i.e. drive) was built to facilitate data transfer. Much better results were obtained meaning less degree of uncertainty (it records a point every 2 degrees with a resolution of 1/10 mm). Additionally, it was proposed an algorithm to convert the CAD geometry, used by OrtoCAD, to an appropriate format and enabling the use of rapid prototyping equipment aiming future automation of the manufacturing process of prosthetic sockets.

Estratégias para elaboração de um plano de segurança da água para abastecimento humano do município do Natal/RN

This research study deals with the production and distribution of drinking water with quality and safety in order to meet the needs of the Man. Points out the limitations of the methodology for assessing water quality in use today. Approaches the recommendations of the World Health Organization (WHO) for adoption, by the companies responsible for producing and distributing water, of assessment methodologies and risk management (HACCP), in order to ensure the quality and safety of water drinking. Suggests strategies for implementing the plan for water safety plan. Uses the process of water production, composed by Maxaranguape river basin, the water treatment plant and distribution system, which is part of the Plan for Expansion of the Supply System of Natal, as case study. The results, it was possible to devise strategies for implementation of the Water Safety Plan (WSP), which comprises the following steps: a) a preliminary stage. b) assessment system. c) process monitoring. d) management plan and e) validation and verification of the PSA. At each stage are included actions for its implementation. The implementation of the PSA shows a new type of water production, in which the fountain as a whole (watershed and point of capture), the Water Treatment Plant (WTP) and distribution, shall compose the production process, over which to build quality and safety of the final product (drinking water)

Gestão da segurança e saúde no trabalho em empresas produtoras de baterias automotivas: um estudo para identificar boas práticas

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Diretrizes para implantação de sistemas de segurança e saúde do trabalho em empresas produtoras de baterias automotivas

O desenvolvimento de Sistemas de Gestão da Segurança e Saúde no Trabalho (SGSST) ganha um significado cada vez mais importante no desempenho das empresas, pois, por meio deles, é possível obter a promoção da saúde e satisfação dos trabalhadores e a redução dos riscos de acidentes. No entanto, para que um SGSST obtenha bons resultados, as empresas precisam estar atentas às dificuldades comumente encontradas durante o seu processo de implantação, procurando solucioná-las de maneira antecipada e estruturada. Pelo exposto, este trabalho tem como principal objetivo apresentar diretrizes, baseadas no referencial teórico e nos resultados dos estudos de caso realizados, para implantação de SGSSTs em empresas fabricantes de baterias automotivas. Para o seu desenvolvimento adotou-se o método de pesquisa qualitativa a partir da realização de dois estudos de caso em empresas fabricantes de baterias automotivas localizadas na cidade de Bauru. Os instrumentos de coleta de dados foram entrevistas semiestruturadas, análise de documentos e observação in loco. Ao final do artigo, são propostas diretrizes relacionadas aos seguintes elementos: alta direção, estratégia organizacional, cultura organizacional, departamento de Segurança e Saúde do Trabalho (SST), técnicos de SST, recursos humanos, treinamento, equipes multidisciplinares, comunicação interna, resistência à mudança, indicadores de desempenho, ferramentas gerenciais para solução de problemas de SST, gestão de projetos, recompensas e incentivos, e integração do sistema.

Java applets para um software educacional distribuído em eletrônica de potência

Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq)

Análise sobre diferentes abordagens de configuração eletrônica de elementos apresentados em livros de química

This study aimed to identify and review of the conceptual differences presented by authors of books, focusing on the theme of electronic configuration. It shows the changing concepts of electronic configuration, its implications for the cognitive development of students and their relations with the contemporary world. We identified possible obstacles in books generated in the search for simplifications, situations of different concepts of energy in the electron configuration for sublevels. For this analysis was carried out in several books, and some other general chemistry and inorganic chemistry without distinguishing between level of education, whether secondary or higher. It was found that some books for school books corroborated with higher education, others do not. To check the consistency of what was discussed, it was a survey of 30 teachers, it was found divergent points of responses, particularly with respect to the energy sublevels and authorship of the diagram which facilitated the electron configuration. It was found that the total 22professores, ie, 73,33% answered correctly on the energy sublevel more calcium (Ca) and 80%, ie, 24 teachers responded incorrectly on the iron. As for the authorship of the diagram used to facilitate the electronic configuration, we obtained 93, 33% of teachers indicated that they followed a diagram, and this was called "Diagram of Linus Pauling," teacher 01, 3,33%, indicated that the diagram was authored by Madelung and 01, 3,33%, did not respond to question. Was observed that it is necessary a more detailed assessment of ancient writings, as the search for simplifications and generalizations, not so plausible, lead to errors and consequences negative for understanding the properties of many substances. It was found that quantum mechanics combined with spectroscopic data should be part of a more thorough analysis, especially when it extends situations atoms monoelectronicpolieletrônicos to describe atoms, because factors such as effective nuclear charge and shielding factor must be taken into consideration, because interactions there is inside an atom, described by a set ofquantum numbers, sometimes not taken into account

Matrizes poliméricas puras e modificadas para adsorção do gás sulfeto de hidrogênio

The underground natural gas found associated or not with oil is characterized by a mixture of hydrocarbons and residual components such as carbon dioxide (CO2), nitrogen gas (N2) and hydrogen sulfide (H2S), called contaminants. The H2S especially promotes itself as a contaminant of natural gas to be associated with corrosion of pipelines, to human toxicity and final applications of Natural Gas (NG). The sulfur present in the GN must be fully or partially removed in order to meet the market specifications, security, transport or further processing. There are distinct and varied methods of desulfurization of natural gas processing units used in Natural Gas (UPGN). In order to solve these problems have for example the caustic washing, absorption, the use of membranes and adsorption processes is costly and great expenditure of energy. Arises on such findings, the need for research to active processes of economic feasibility and efficiency. This work promoted the study of the adsorption of sulfide gas in polymer matrices hydrogen pure and modified. The substrates of Poly(vinyl chloride) (PVC), poly(methyl methacrylate) (PMMA) and sodium alginate (NaALG) were coated with vanadyl phosphate compounds (VOPO4.2H2O), vanadium pentoxide (V2O5), rhodamine B (C28H31N2O3Cl) and ions Co2+ and Cu2+, aiming to the adsorption of hydrogen sulfide gas (H2S). The adsorption tests were through a continuous flow of H2S in a column system (fixed bed reactor) adsorption on a laboratory scale. The techniques used to characterize the adsorbents were Infrared spectroscopy (FTIR), thermogravimetry analysis (TGA), X-ray fluorescence (XRF), the X-ray diffraction (XRD) electron microscopy (SEM). Such work indicates, the results obtained, the adsorbents modified PMMA, PVC and NaALG have a significant adsorptive capacity. The matrix that stood out and had the best adsorption capacity, was to ALG modified Co2+ with a score of 12.79 mg H2S / g matrix

CALV3 - Uma linguagem específica de domínio para segurança em sistemas corporativos: um estudo de caso sistemático na indústria

The academic community and software industry have shown, in recent years, substantial interest in approaches and technologies related to the area of model-driven development (MDD). At the same time, continues the relentless pursuit of industry for technologies to raise productivity and quality in the development of software products. This work aims to explore those two statements, through an experiment carried by using MDD technology and evaluation of its use on solving an actual problem under the security context of enterprise systems. By building and using a tool, a visual DSL denominated CALV3, inspired by the software factory approach: a synergy between software product line, domainspecific languages and MDD, we evaluate the gains in abstraction and productivity through a systematic case study conducted in a development team. The results and lessons learned from the evaluation of this tool within industry are the main contributions of this work

PUPSI :uma proposta de processo unificado para políticas de segurança da informação

The way to deal with information assets means nowadays the main factor not only for the success but also for keeping the companies in the global world. The number of information security incidents has grown for the last years. The establishment of information security policies that search to keep the security requirements of assets in the desired degrees is the major priority for the companies. This dissertation suggests a unified process for elaboration, maintenance and development of information security policies, the Processo Unificado para Políticas de Segurança da Informação - PUPSI. The elaboration of this proposal started with the construction of a structure of knowledge based on documents and official rules, published in the last two decades, about security policies and information security. It's a model based on the examined documents which defines the needed security policies to be established in the organization, its work flow and identifies the sequence of hierarchy among them. It's also made a model of the entities participating in the process. Being the problem treated by the model so complex, which involves all security policies that the company must have. PUPSI has an interative and developing approach. This approach was obtained from the instantiation of the RUP - Rational Unified Process model. RUP is a platform for software development object oriented, of Rational Software (IBM group). Which uses the best practice known by the market. PUPSI got from RUP a structure of process that offers functionality, diffusion capacity and comprehension, performance and agility for the process adjustment, offering yet capacity of adjustment to technological and structural charges of the market and the company

Recurso de interface captcha: segurança e usabilidade na distinção entre humano e máquina

Com o intuito de impedir que computadores enviem mensagens automáticas se passando por usuários reais, desenvolvedores tem utilizado o recurso de interface CAPTCHA para distinguir o preenchimento de dados e submissões realizadas por humanos e por máquinas. Este trabalho apresenta as principais modalidades de CAPTCHAs e discute as implicações na usabilidade. Para tanto, foram aplicados questionários e realizados testes de usabilidade em três modalidades de CAPTCHA. Verificou-se que, embora os usuários tenham consciência da importância do uso do CAPTCHA como ferramenta de segurança, percebeu-se que tal recurso compromete a usabilidade, gerando insatisfação e em alguns casos, a desistência da realização da tarefa

Segurança e eficácia da técnica de biopsia pulmonar transtorácica percutânea para avaliação histopatológica do parênquima pulmonar de ovinos clinicamente sadios

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Conducão eletrônica e propriedades termodinâmicas da molécula de DNA

In this thesis, we study the thermo-electronic properties of the DNA molecule. For this purpose, we used three types of models with the DNA, all assuming a at geometry (2D), each built by a sequence of quasiperiodic (Fibonacci and / or Rudin-Shapiro) and a sequence of natural DNA, part of the human chromosome Ch22. The first two models have two types of components that are the nitrogenous bases (guanine G, cytosine C, adenine A and thymine T) and a cluster sugar-phosphate (SP), while the third has only the nitrogenous bases. In the first model we calculate the density of states using the formalism of Dyson and transmittance for the time independent Schr odinger equation . In the second model we used the renormalizationprocedure for the profile of the transmittance and consequently the I (current) versus V (voltage). In the third model we calculate the density of states formalism by Dean and used the results together with the Fermi-Dirac statistics for the chemical potential and the quantum specific heat. Finally, we compare the physical properties found for the quasi-periodic sequences and those that use a portion of the genomic DNA sequence (Ch22).

Checklist de cirurgia segura: análise da segurança e comunicação das equipes de um hospital escola

Este estudo teve como objetivo aplicar o checklist de cirurgia segura, da Organização Mundial de Saúde, nas especialidades cirúrgicas de um hospital escola, e verificar a opinião das equipes sobre a influência da aplicação do checklist na segurança do processo cirúrgico e da comunicação interpessoal da equipe. Trata-se de um estudo de campo, descritivo, analítico, com abordagem qualitativa, realizado no centro cirúrgico de um hospital-escola. Para a coleta de dados, foi aplicado o checklist num total de 30 cirurgias, conduzido pela pesquisadora, em três etapas, e, a seguir, um componente da equipe cirúrgica foi convidado a participar do estudo, assinando o TCLE e respondendo a questões norteadoras. Para organização e análise dos dados, recorremos ao Método de Análise de Conteúdo de Bardin. Os sujeitos não perceberam mudanças na comunicação interpessoal com o uso do checklist, porém, indicaram que o uso proporcionou mais segurança ao procedimento. Adaptações ao checklist foram sugeridas.