Security Analysis of salt||password Hashes

Protection of passwords used to authenticate computer systems and networks is one of the most important application of cryptographic hash functions. Due to the application of precomputed memory look up attacks such as birthday and dictionary attacks on the hash values of passwords to find passwords, it is usually recommended to apply hash function to the combination of both the salt and password, denoted salt||password, to prevent these attacks. In this paper, we present the first security analysis of salt||password hashing application. We show that when hash functions based on the compression functions with easily found fixed points are used to compute the salt||password hashes, these hashes are susceptible to precomputed offline birthday attacks. For example, this attack is applicable to the salt||password hashes computed using the standard hash functions such as MD5, SHA-1, SHA-256 and SHA-512 that are based on the popular Davies-Meyer compression function. This attack exposes a subtle property of this application that although the provision of salt prevents an attacker from finding passwords, salts prefixed to the passwords do not prevent an attacker from doing a precomputed birthday attack to forge an unknown password. In this forgery attack, we demonstrate the possibility of building multiple passwords for an unknown password for the same hash value and salt. Interestingly, password||salt (i.e. salts suffixed to the passwords) hashes computed using Davies-Meyer hash functions are not susceptible to this attack, showing the first security gap between the prefix-salt and suffix-salt methods of hashing passwords.

GHG emissions standard on its way

Throughout the world, there is increasing pressure on governments, companies,regulators and standard-setters to respond to the global challenge of climate change. The growing number of regulatory requirements for organisations to disclose their greenhouse gas (GHG) emissions and emergent national, regional and international emissions trading schemes (ETSs) reflect key government responses to this challenge. Assurance of GHG emissions disclosures enhances the credibility of these disclosures and any associated trading schemes. The auditing and assurance profession has an important role to play in the provision of such assurance, highlighted by the International Auditing and Assurance Standards Board’s (IAASB) decision to develop an international GHG emissions assurance standard. This article sets out the developments to date on an international standard for the assurance of GHG emissions disclosures. It then provides information on the way Australian companies have responded to the challenge of GHG reporting and assurance. Finally, it outlines the types of assurance that assurance providers in Australia are currently providing in this area.

The competitive market for assurance engagements on greenhouse gas statements : is there a role for assurers from the accounting profession?

In response to current and increasing demand for assurance on greenhouse gas statements, the International Auditing and Assurance Standards Board (IAASB) released an exposure draft of a new assurance standard, ISAE 3410 'Assurance on a Greenhouse Gas Statement' (IFAC 2011), to provide comprehensive guidance on these types of greenhouse gas (GHG) assurance engagements. Internationally, approximately 50 percent of GHG statements are independently assured. The related assurance market is competitive, with the accounting profession and those outside the profession currently holding approximately equal shares. This paper highlights the characteristics of GHG assurance engagements that warrant multi-disciplinary teamwork, the unique and interdependent skill-sets that different practitioners bring to these engagements, and the market forces that create a demand for diverse providers.

Effects of microfinance on poverty reduction in Vietnam : a pseudo-panel data analysis

The development of microfinance in Vietnam since 1990s has coincided with a remarkable progress in poverty reduction. Numerous descriptive studies have illustrated that microfinance is an effective tool to eradicate poverty in Vietnam but evidence from quantitative studies is mixed. This study contributes to the literature by providing new evidence on the impact of microfinance to poverty reduction in Vietnam using the repeated cross - sectional data from the Vietnam Living Standard s Survey (VLSS) during period 1992 - 2010. Our results show that micro - loans contribute significantly to household consumption.

The contribution of ISO 14067 to the evolution of global greenhouse gas standards—A review

Due to the increasing recognition of global climate change, the building and construction industry is under pressure to reduce carbon emissions. A central issue in striving towards reduced carbon emissions is the need for a practicable and meaningful yardstick for assessing and communicating greenhouse gas (GHG) results. ISO 14067 was published by the International Organization for Standardization in May 2013. By providing specific requirements in the life cycle assessment (LCA) approach, the standard clarifies the GHG assessment in the aspects of choosing system boundaries and simulating use and end-of-life phases when quantifying carbon footprint of products (CFPs). More importantly, the standard, for the first time, provides step-to-step guidance and standardized template for communicating CFPs in the form of CFP external communication report, CFP performance tracking report, CFP declaration and CFP label. ISO 14067 therefore makes a valuable contribution to GHG quantification and transparent communication and comparison of CFPs. In addition, as cradle-to-grave should be used as the system boundary if use and end-of-life phases can be simulated, ISO 14067 will hopefully promote the development and implementation of simulation technologies, with Building Information Modelling (BIM) in particular, in the building and construction industry.

Investigation of the effects of the fatty acid profile on fuel properties using a Multi-Criteria Decision Analysis

The structural features of fatty acids in biodiesel, including degree of unsaturation, percentage of saturated fatty acids and average chain length, influence important fuel properties such as cetane number, iodine value, density, kinematic viscosity, higher heating value and oxidation stability. The composition of fatty acid esters within the fuel should therefore be in the correct ratio to ensure fuel properties are within international biodiesel standards such as ASTM 6751 or EN 14214. This study scrutinises the influence of fatty acid composition and individual fatty acids on fuel properties. Fuel properties were estimated based on published equations, and measured according to standard procedure ASTM D6751 and EN 14214 to confirm the influences of the fatty acid profile. Based on fatty acid profile-derived calculations, the cetane number of the microalgal biodiesel was estimated to be 11.6, but measured 46.5, which emphasises the uncertainty of the method used for cetane number calculation. Multi-criteria decision analysis (MCDA), PROMETHEE-GAIA, was used to determine the influence of individual fatty acids on fuel properties in the GAIA plane. Polyunsaturated fatty acids increased the iodine value and had a negative influence on cetane number. Kinematic viscosity was negatively influenced by some long chain polyunsaturated fatty acids such as C20:5 and C22:6 and some of the more common saturated fatty acids C14:0 and C18:0. The positive impact of average chain length on higher heating value was also confirmed in the GAIA plane

Emissions Trading and WTO Law: A Global Analysis

Emissions trading schemes have been introduced throughout the world in order to achieve an environmental end. In the pursuit of reducing greenhouse gas emissions, these schemes will have a direct impact on the global economy. This book examines the details of emissions trading schemes through the lens of the World Trade Organization (WTO) law. Emissions trading schemes both implemented and proposed will be deconstructed to understand whether they will have a single uniform legal status within the WTO law, or indeed whether the legal status of the units of trade will differ on a case-by-case basis. This book examines non-discrimination provisions and exceptions within four significant WTO ‘covered agreements’. This analysis will be undertaken with a goal to understand how emissions trading scheme measures may be labelled and treated by WTO dispute settlement bodies. Moreover, the narrative of this publication demonstrates where decisions must be made by WTO Members in relation to the legal treatment of emissions trading units and liabilities. The aim of the book is to consider the issues associated with emissions trading that arise within the existing WTO law. This monograph will consider emissions trading schemes through the lens of WTO law to establish how these schemes will be defined, where they may potentially breach the non-discrimination provisions of the law and, whether the WTO law should be amended through Member agreement in order to accommodate these schemes. The book is an adaptation of a PhD thesis, which is an analysis of one emissions trading framework – the Australian Clean Energy Package – using WTO law as the theoretical framework. The aim of the proposed monograph is to increase the scope of analysis from the Clean Energy Package to emissions trading schemes more generally. It is envisaged that to do this effectively, examples of frameworks that have been proposed and implemented by various WTO members must be used as case studies for both WTO compliance and non-compliance.

Air analysis

There are three distinct categories of air environment to be considered in this chapter. These are as follows: (1) The “ambient” or general outdoors atmosphere to which the members of the population are exposed when they venture out of their homes or offices in industrial, urban or rural environments. (2) Indoor air environments, which occur in buildings such as homes, schools, restaurants, public hospitals and office buildings. This category does not cover factories or workplaces which are otherwise subjected to the provisions of various occupational health standards. (3) Workplace atmospheres, which occur in a variety of industries or factories and for which there are numerous atmospheric concentration limits (or exposure standards) promulgated by appropriate bodies or organisations. Since 2009 setting concentration limits for atmospheric contaminants has been administered by Safe Work Australia. A fourth category of air environment which falls outside this chapter is that which is related to upper atmospheric research, global atmospheric effects and concomitant areas of inquiry and/or debate. Such areas include “greenhouse” gas emissions, ozone depletion, and related matters of atmospheric chemistry and physics. This category is not referred to again in this chapter.

Medical imaging and Biomechanical analysis of scoliosis progression in the growing adolescent spine

Progression of spinal deformity in children was studied with Computed Tomography (CT) and Magnetic Resonance Imaging (MRI) to identify how gravity affects the deformity and to determine the full three-dimensional character of the deformity. The CT study showed that gravity is significant in deformity progression in some patients which has implications for clinical patient management. The world first MRI study showed that the standard clinical measure used to define the extent of the deformity is inadequate and further use of three-dimensional MRI should be considered by spinal surgeons.

Beyond survivorship? A discursive analysis of how people with pancreatic cancer negotiate identity transitions in their health

We explored how people negotiate, and respond to, identity transitions following a diagnosis of pancreatic cancer. Interviews with 19 people with pancreatic cancer were analysed using thematic discourse analysis. While discursively negotiating two transitions, “moving from healthy to ill” and “moving from active treatment to end-of-life care”, participants positioned themselves as “in control”, “optimistic” and managing their health and illness. In the absence of other discourses or “models” of life post-cancer, many people draw on the promise of survival. Moving away from “survivorship” may assist people with advanced cancer to make sense of their lives in a short timeframe.

Formal modelling and analysis of DNP3 secure authentication

Supervisory Control and Data Acquisition (SCADA) systems are one of the key foundations of smart grids. The Distributed Network Protocol version 3 (DNP3) is a standard SCADA protocol designed to facilitate communications in substations and smart grid nodes. The protocol is embedded with a security mechanism called Secure Authentication (DNP3-SA). This mechanism ensures that end-to-end communication security is provided in substations. This paper presents a formal model for the behavioural analysis of DNP3-SA using Coloured Petri Nets (CPN). Our DNP3-SA CPN model is capable of testing and verifying various attack scenarios: modification, replay and spoofing, combined complex attack and mitigation strategies. Using the model has revealed a previously unidentified flaw in the DNP3-SA protocol that can be exploited by an attacker that has access to the network interconnecting DNP3 devices. An attacker can launch a successful attack on an outstation without possessing the pre-shared keys by replaying a previously authenticated command with arbitrary parameters. We propose an update to the DNP3-SA protocol that removes the flaw and prevents such attacks. The update is validated and verified using our CPN model proving the effectiveness of the model and importance of the formal protocol analysis.

Cone location and correction of keratoconus with rigid gas-permeable contact lenses

Purpose To evaluate the influence of cone location and corneal cylinder on RGP corrected visual acuities and residual astigmatism in patients with keratoconus. Methods In this prospective study, 156 eyes from 134 patients were enrolled. Complete ophthalmologic examination including manifest refraction, Best spectacle visual acuity (BSCVA), slit-lamp biomicroscopy was performed and corneal topography analysis was done. According to the cone location on the topographic map, the patients were divided into central and paracentral cone groups. Trial RGP lenses were selected based on the flat Sim K readings and a ‘three-point touch’ fitting approach was used. Over contact lens refraction was performed, residual astigmatism (RA) was measured and best-corrected RGP visual acuities (RGPVA) were recorded. Results The mean age (±SD) was 22.1 ± 5.3 years. 76 eyes (48.6%) had central and 80 eyes (51.4%) had paracentral cone. Prior to RGP lenses fitting mean (±SD) subjective refraction spherical equivalent (SRSE), subjective refraction astigmatism (SRAST) and BSCVA (logMAR) were −5.04 ± 2.27 D, −3.51 ± 1.68 D and 0.34 ± 0.14, respectively. There were statistically significant differences between central and paracentral cone groups in mean values of SRSE, SRAST, flat meridian (Sim K1), steep meridian (Sim K2), mean K and corneal cylinder (p-values < 0.05). Comparison of BSCVA to RGPVA shows that vision has improved 0.3 logMAR by RGP lenses (p < 0.0001). Mean (±SD) RA was −0.72 ± 0.39 D. There were no statistically significant differences between RGPVAs and RAs of central and paracentral cone groups (p = 0.22) and (p = 0.42), respectively. Pearson's correlation analysis shows that there is a statistically significant relationship between corneal cylinder and BSCVA and RGPVA, However, the relationship between corneal cylinder and residual astigmatism was not significant. Conclusions Cone location has no effect on the RGP corrected visual acuities and residual astigmatism in patients with keratoconus. Corneal cylinder and Sim K values influence RGP-corrected visual acuities but do not influence residual astigmatism.

Automated 3D mapping & shape analysis of the lateral ventricles via fluid registration of multiple surface-based atlases

We developed and validated a new method to create automated 3D parametric surface models of the lateral ventricles, designed for monitoring degenerative disease effects in clinical neuroscience studies and drug trials. First we used a set of parameterized surfaces to represent the ventricles in a manually labeled set of 9 subjects' MRIs (atlases). We fluidly registered each of these atlases and mesh models to a set of MRIs from 12 Alzheimer's disease (AD) patients and 14 matched healthy elderly subjects, and we averaged the resulting meshes for each of these images. Validation experiments on expert segmentations showed that (1) the Hausdorff labeling error rapidly decreased, and (2) the power to detect disease-related alterations monotonically improved as the number of atlases, N, was increased from 1 to 9. We then combined the segmentations with a radial mapping approach to localize ventricular shape differences in patients. In surface-based statistical maps, we detected more widespread and intense anatomical deficits as we increased the number of atlases, and we formulated a statistical stopping criterion to determine the optimal value of N. Anterior horn anomalies in Alzheimer's patients were only detected with the multi-atlas segmentation, which clearly outperformed the standard single-atlas approach.

Intravascular device administration sets: Replacement after standard versus prolonged use in hospitalised patients--a study protocol for a randomised controlled trial (The RSVP Trial)

Introduction Vascular access devices (VADs), such as peripheral or central venous catheters, are vital across all medical and surgical specialties. To allow therapy or haemodynamic monitoring, VADs frequently require administration sets (AS) composed of infusion tubing, fluid containers, pressure-monitoring transducers and/or burettes. While VADs are replaced only when necessary, AS are routinely replaced every 3–4 days in the belief that this reduces infectious complications. Strong evidence supports AS use up to 4 days, but there is less evidence for AS use beyond 4 days. AS replacement twice weekly increases hospital costs and workload. Methods and analysis This is a pragmatic, multicentre, randomised controlled trial (RCT) of equivalence design comparing AS replacement at 4 (control) versus 7 (experimental) days. Randomisation is stratified by site and device, centrally allocated and concealed until enrolment. 6554 adult/paediatric patients with a central venous catheter, peripherally inserted central catheter or peripheral arterial catheter will be enrolled over 4 years. The primary outcome is VAD-related bloodstream infection (BSI) and secondary outcomes are VAD colonisation, AS colonisation, all-cause BSI, all-cause mortality, number of AS per patient, VAD time in situ and costs. Relative incidence rates of VAD-BSI per 100 devices and hazard rates per 1000 device days (95% CIs) will summarise the impact of 7-day relative to 4-day AS use and test equivalence. Kaplan-Meier survival curves (with log rank Mantel-Cox test) will compare VAD-BSI over time. Appropriate parametric or non-parametric techniques will be used to compare secondary end points. p Values of <0.05 will be considered significant.

A Web-based system enabling the integration, analysis, and 3D sub-surface visualization of groundwater monitoring data and geological models

The 3D Water Chemistry Atlas is an intuitive, open source, Web-based system that enables the three-dimensional (3D) sub-surface visualization of ground water monitoring data, overlaid on the local geological model (formation and aquifer strata). This paper firstly describes the results of evaluating existing virtual globe technologies, which led to the decision to use the Cesium open source WebGL Virtual Globe and Map Engine as the underlying platform. Next it describes the backend database and search, filtering, browse and analysis tools that were developed to enable users to interactively explore the groundwater monitoring data and interpret it spatially and temporally relative to the local geological formations and aquifers via the Cesium interface. The result is an integrated 3D visualization system that enables environmental managers and regulators to assess groundwater conditions, identify inconsistencies in the data, manage impacts and risks and make more informed decisions about coal seam gas extraction, waste water extraction, and water reuse.