Automatic generation of assertions to detect potential security vulnerabilities in C programs that use union and pointer types

Type unions, pointer variables and function pointers are a long standing source of subtle security bugs in C program code. Their use can lead to hard-to-diagnose crashes or exploitable vulnerabilities that allow an attacker to attain privileged access over classified data. This paper describes an automatable framework for detecting such weaknesses in C programs statically, where possible, and for generating assertions that will detect them dynamically, in other cases. Exclusively based on analysis of the source code, it identifies required assertions using a type inference system supported by a custom made symbol table. In our preliminary findings, our type system was able to infer the correct type of unions in different scopes, without manual code annotations or rewriting. Whenever an evaluation is not possible or is difficult to resolve, appropriate runtime assertions are formed and inserted into the source code. The approach is demonstrated via a prototype C analysis tool.

The role of bricolage and resource constraints in high potential sustainability ventures

Sustainability decisions and their impacts may be among the greatest challenges facing the world in the 21st century (Davos 2000). Apart from adaptation on the part of established organizations these challenges are arguably going to require solutions developed by new actors However, young ventures have only recently begun generating research interest within sustainability literature (Shepherd et al. 2009). In particular, little is known about resource behaviours of these ventures and how they adapt to substantial resource constraints. One promising theory that has been identified as a way that some entrepreneurs manage constraints is bricolage: a construct defined as “making do by applying combinations of the resources at hand to new problems and opportunities” (Baker and Nelson 2005: 333). Bricolage may be critical as the means of continued venture success as these ventures are frequently developed in severe resource constraint, owing to higher levels of technical sophistication (Rothaermel and Deeds 2006). Further, they are often developed by entrepreneurs committed to personal and social goals of resourcefulness, including values that focus on conservation rather than consumption of resources (Shepherd et al. 2009). In this paper, using seven novel cases of high potential sustainability firms from CAUSEE we consider how constraints impact resource behaviours and further illustrate and extend bricolage domains previously developed by Baker and Nelson (2005) with recommendations for theory and practice provided.

Enhancing security and continuity management at international airports

Operators of busy contemporary airports have to balance tensions between the timely flow of passengers, flight operations, the conduct of commercial business activities and the effective application of security processes. In addition to specific onsite issues airport operators liaise with a range of organisations which set and enforce aviation-related policies and regulations as well as border security agencies responsible for customs, quarantine and immigration, in addition to first response security services. The challenging demands of coordinating and planning in such complex socio-technical contexts place considerable pressure on airport management to facilitate coordination of what are often conflicting goals and expectations among groups that have standing in respect to safe and secure air travel. What are, as yet, significantly unexplored issues in large airports are options for the optimal coordination of efforts from the range of public and private sector participants active in airport security and crisis management. A further aspect of this issue is how airport management systems operate when there is a transition from business-as-usual into an emergency/crisis situation and then, on recovery, back to ‘normal’ functioning. Business Continuity Planning (BCP), incorporating sub-plans for emergency response, continuation of output and recovery of degraded operating capacity, would fit such a context. The implementation of BCP practices in such a significant high security setting offers considerable potential benefit yet entails considerable challenges. This paper presents early results of a 4 year nationally funded industry-based research project examining the merger of Business Continuity Planning and Transport Security Planning as a means of generating capability for improved security and reliability and, ultimately, enhanced resilience in major airports. The project is part of a larger research program on the Design of Secure Airports that includes most of the gazetted ‘first response’ international airports in Australia, key Aviation industry groups and all aviation-related border and security regulators as collaborative partners. The paper examines a number of initial themes in the research, including: ? Approaches to integrating Business Continuity & Aviation Security Planning within airport operations; ? Assessment of gaps in management protocols and operational capacities for identifying and responding to crises within and across critical aviation infrastructure; ? Identification of convergent and divergent approaches to crisis management used across Austral-Asia and their alignment to planned and possible infrastructure evolution.

Embedding gifted education in preservice teacher education : a collaborative school-university approach

A country’s prosperity relies on the creative potential of its people. Educating gifted students must be a priority for educators and education systems if society is to capitalise on their potential to contribute to an economical and sustainable future. Given the importance of teachers in supporting academic achievement, educating preservice teachers on how to cater for gifted students commences the process as they can foster the implementation of current teaching practices that draw on substantial research into the education of gifted children. This study investigated preservice teachers’ perceptions for teaching gifted students after participating in a school-based intervention with gifted students. The teachers implemented differentiated curriculum activities that catered for the diverse needs of learners. Participants (n=22) were surveyed at the end of the program on their perceptions of how to differentiate the curriculum for meeting the needs of the student. Analysis of the survey indicated these preservice teachers agreed or strongly agreed they had developed skills in curriculum planning (91%) with well-designed activities (96%), and lesson preparation skills (96%). They also claimed they were enthusiastic for teaching (91%) and had understanding of school practices and policies (96%). However, only 46% agreed they had knowledge of syllabus documents with 50% claiming an ability to provide written feedback on the student’s learning. Furthermore, only 64% suggested they had educational language from the syllabus and effective student management strategies. Preservice teachers require direction on how to cater for diversity by building knowledge from direct gifted education experiences. The survey may be used as a diagnostic tool to determine areas for developing education experiences related to the education of the gifted for preservice teachers.

Exploring the parameter space of a rabbit ventricular action potential model to investigate the effect of variation on action potential and calcium transients

Computational models for cardiomyocyte action potentials (AP) often make use of a large parameter set. This parameter set can contain some elements that are fitted to experimental data independently of any other element, some elements that are derived concurrently with other elements to match experimental data, and some elements that are derived purely from phenomenological fitting to produce the desired AP output. Furthermore, models can make use of several different data sets, not always derived for the same conditions or even the same species. It is consequently uncertain whether the parameter set for a given model is physiologically accurate. Furthermore, it is only recently that the possibility of degeneracy in parameter values in producing a given simulation output has started to be addressed. In this study, we examine the effects of varying two parameters (the L-type calcium current (I(CaL)) and the delayed rectifier potassium current (I(Ks))) in a computational model of a rabbit ventricular cardiomyocyte AP on both the membrane potential (V(m)) and calcium (Ca(2+)) transient. It will subsequently be determined if there is degeneracy in this model to these parameter values, which will have important implications on the stability of these models to cell-to-cell parameter variation, and also whether the current methodology for generating parameter values is flawed. The accuracy of AP duration (APD) as an indicator of AP shape will also be assessed.

Enhancing workplace learning through collaborative HRD

Human resource development (HRD) has evolved a great deal over the past 20 years. Indeed, developments in HRD theory, research and practice have helped transform HRD from a reactive function focusing on administrative and bureaucratic issues to a proactive function focusing on creating learning and development opportunities for employees that not only allow them to achieve their potential but also make a substantial contribution to the longterm survival and sustainability of the organisation. HRD is now seen as an investment in the future of an organisation. This investment perspective is based on the recognition that HRD is linked to business strategy and the achievement of competitive advantage (Caravan et al. 2002). One reason for the shift in emphasis is that many of the traditional sources of competitive advantage (technology, economies of scale) have diminished in value. Nowadays it is the workforce that has come to be seen as an important source of competitive advantage for the organisation. However, not too long ago employees were viewed by management as a disposable resource rather than an asset to an organisation.

Collaborative academic/practitioner research in project management : theory and models

Purpose – The purpose of this paper is to provide of a review of the theory and models underlying project management (PM) research degrees that encourage reflective learning. Design/methodology/approach – Review of the literature and reflection on the practice of being actively involved in conducting and supervising academic research and disseminating academic output. The paper argues the case for the potential usefulness of reflective academic research to PM practitioners. It also highlights theoretical drivers of and barriers to reflective academic research by PM practitioners. Findings – A reflective learning approach to research can drive practical results though it requires a great deal of commitment and support by both academic and industry partners. Practical implications – This paper suggests how PM practitioners can engage in academic research that has practical outcomes and how to be more effective at disseminating these research outcomes. Originality/value – Advanced academic degrees, in particular those completed by PM practitioners, can validate a valuable source of innovative ideas and approaches that should be more quickly absorbed into the PM profession’s sources of knowledge. The value of this paper is to critically review and facilitate a reduced adaptation time for implementation of useful reflective academic research to industry.

Meaningful musical engagement : the potential impact of generative music systems on learning experiences

In order to create music, the student must establish a relationship with the musical materials. In this thesis, I examine the capacity of a generative music system called jam2jam to offer individuals a virtual musical play-space to explore. I outline the development of an iteration of software development named jam2jam blue and the evolution of a games-like user interface in the research design that jointly revealed the nature of this musical exploration. The findings suggest that the jam2jam blue interface provided an expressive gestural instrument to jam and experience musicmaking. By using the computer as an instrument, participants in this study were given access to meaningful musical experiences in both solo and ensemble situations and the researcher is allowed a view of their development of a relationship with the musical materials from the perspective of the individual participants. Through an iterative software development methodology, pedagogy and experience design were created simultaneously. The research reveals the potential for the jam2jam software to be used as a reflective tool for feedback and assessment purposes. The power of access to ensemble music making is realised though the participants’ virtual experiences which are brought into their physical space by sharing their experience with others. It is suggested that this interaction creates an environment conducive to self-initiated learning in which music is the language of interaction. The research concludes that the development of a relationship between the explorer and the musical materials is subject to the collaborative nature of the interaction through which the music is experienced.

Generating new economic activity through design

Firms face the challenge of remaining competitive through both entrepreneurial activities and the strategic management of resources. Strategic entrepreneurship around notions of acquiring, bundling and leveraging resources to create value for customers and firm competitive advantage has been studied in relation to large established firms (Hitt et al 2010) but largely overlooked in studies of small and medium enterprises. Recent theorizing regarding the processes by which firms orchestrate resources to create new economic activity (Sirmon et al, 2011) has focused on the managerial capabilities of structuring, bundling and leveraging resources across the firms breadth, depth and lifecycle. This approach offers a potential framework for investigating processes of economic activity and strategic renewal (Agarwal & Helfat, 2009).

Regional integration 2.0 : facilitating regional integration and development with collaborative technologies

The current global economic instability and the vulnerability of small nations provide the impetus for greater integration between the countries of the South Pacific region. This exercise is critical for their survival. Past efforts of regional integration in the South Pacific have mostly failed. However, today’s IT collaborative capabilities provide the opportunity to develop a shared IT infrastructure to facilitate integration in the South Pacific. In developing an IT-backed model of regional integration, this study identifies and reports on the antecedents of the current stage for integration in the Pacific. We conducted interviews with twenty five individuals from various sectors and find that while most respondents were optimistic about the potential of IT-backed regional integration, significant challenges exists. The study identifies and discusses these challenges providing policy implications to stakeholders in the regional integration process. The findings will assist in suggesting a model of regional integration 2.0 for the Pacific region.

From tiers to tables – enhancing student experience through collaborative learning spaces

BACKGROUND Collaborative and active learning have been clearly identified as ways students can engage in learning with each other and the academic staff. Traditional tier based lecture theatres and the didactic style they engender are not popular with students today as evidenced by the low attendance rates for lectures. Many universities are installing spaces designed with tables for group interaction with evolutions on spaces such as the TEAL (Technology Enabled Active Learning) (Massachusetts Institute of Technology, n.d.) and SCALE-UP (Student-Centred Activities for Large-Enrolment Undergraduate Programs) (North Carolina State University, n.d.) models. Technology advances in large screen computers and applications have also aided the move to these collaborative spaces. How well have universities structured learning using these spaces and how have students engaged with the content, technology, space and each other? This paper investigates the application of collaborative learning in such spaces for a cohort of 800+ first year engineers in the context of learning about and developing professional skills representative of engineering practice. PURPOSE To determine whether moving from tiers to tables enhances the student experience. Does utilising technology rich, activity based, collaborative learning spaces lead to positive experiences and active engagement of first year undergraduate engineering students? In developing learning methodology and approach in new learning spaces, what needs to change from a more traditional lecture and tutorial configuration? DESIGN/METHOD A post delivery review and analysis of outcomes was undertaken to determine how well students and tutors engaged with learning in new collaborative learning spaces. Data was gathered via focus group and survey of tutors, students survey and attendance observations. The authors considered the unit delivery approach along with observed and surveyed outcomes then conducted further review to produce the reported results. RESULTS Results indicate high participation in the collaborative sessions while the accompanying lectures were poorly attended. Students reported a high degree of satisfaction with the learning experience; however more investigation is required to determine the degree of improvement in retained learning outcomes. Survey feedback from tutors found that students engaged well in the activities during tutorials and there was an observed improvement in the quality of professional practice modelled by students during sessions. Student feedback confirmed the positive experiences in these collaborative learning spaces with 30% improvement in satisfaction ratings from previous years. CONCLUSIONS It is concluded that the right mix of space, technology and appropriate activities does engage students, improve participation and create a rich experience to facilitate potential for improved learning outcomes. The new Collaborative Teaching Spaces, together with integrated technology and tailored activities, has transformed the delivery of this unit and improved student satisfaction in tutorials significantly.

The impact of construction organisations’ learning capabilities on collaborative projects

Dynamic capability theory asserts that the learning capabilities of construction organisations influence the degree to which value-for-money (VfM) is achieved on collaborative projects. However, there has been little study conducted to verify this relationship. The evidence is particularly limited within the empirical context of infrastructure delivery in Australia. Primarily drawing on the theoretical perspectives of the resource-based view of the firm (e.g. Barney 1991), dynamic capabilities (e.g. Helfat et al. 2007), absorptive capacity (e.g. Lane et al. 2006) and knowledge management (e.g. Nonaka 1994), this paper conceptualises learning capability as a knowledge-based dynamic capability. Learning capability builds on the micro-foundations of high-order learning routines, which are deliberately developed by construction organisations for managing collaborative projects. Based on this conceptualisation of learning capability, an exploratory case study was conducted. The study investigated the operational and higher-order learning routines adopted by a project alliance team to successfully achieve VfM. The case study demonstrated that the learning routines of the alliance project were developed and modified by the continual joint learning activities of participant organisations. Project-level learning routines were found to significantly influence the development of organisational-level learning routines. In turn, the learning outcomes generated from the alliance project appeared to significantly influence the development of project management routines and contractual arrangements applied by the participant organisations in subsequent collaborative projects. The case study findings imply that the higher-order learning routines that underpin the learning capability of construction organisations have the potential to influence the VfM achieved on both current and future collaborative projects.

Collaborative design learning for traditional crafts industry

Traditional craft industries need assistance with being transformed into creative industries; as such a transformation will support them to face the future competitive global market. Assistance such as advisory programs should serve long-term benefit for crafts industries as well as optimize self-help potential. Advisory programs using participatory methods will enable craftspeople and stakeholders to reveal resources and potencies, such as socio-cultural value, tradition and other kind of heritages, to generate new innovative ideas of craft design in a sustainable way.

Generating transgenic banana (cv. Sukali Ndizi) resistant to Fusarium Wilt

Banana is one of the world’s most popular fruit crops and Sukali Ndizi is the most popular dessert banana in the East African region. Like other banana cultivars, Sukali Ndizi is threatened by several constraints, of which the Fusarium wilt disease is the most destructive. Fusarium wilt is caused by a soil-borne fungus, Fusarium oxysporum f.sp. cubense (Foc). No effective control strategy currently exists for this disease and although disease resistance exists in some banana cultivars, introducing resistance into commercial cultivars by conventional breeding is difficult because of low fertility. Considering that conventional breeding generates hybrids with additional undesirable traits, transformation is the most suitable way of introducing resistance in the banana genome. The success of this strategy depends on the availability of genes for genetic transformation. Recently, a novel strategy involving the expression of anti-apoptosis genes in plants was shown to result in resistance against several necrotrophic fungi, including Foc race 1 in banana cultivar Lady Finger. This thesis explores the potential of a plant-codon optimised nematode anti-apoptosis gene (Mced9) to provide resistance against Foc race 1 in dessert banana cultivar Sukali Ndizi. Agrobacterium-mediated transformation was used to transform embryogenic cell suspension of Sukali Ndizi with plant expression vector pYC11, harbouring maize ubiquitin promoter driven Mced9 gene and nptII as a plant selection marker. A total of 42 independently transformed lines were regenerated and characterized. The transgenic lines were multiplied, infected and evaluated for resistance to Foc race 1 in a small pot bioassay. The pathogenicity of the Ugandan Foc race 1 isolate used for infection was pre-determined and the spore concentration was standardised for consistent infection and symptom development. This process involved challenging tissue culture plants of Sukali Ndizi, a Foc race 1 susceptible cultivar and Nakinyika, an East African Highland cultivar known to be resistant to Foc race 1, with Fusarium inoculum and observing external and internal disease symptom development. Rhizome discolouration symptoms were the best indicators of Fusarium wilt with yellowing being an early sign of disease. Three transgenic lines were found to show significantly less disease severities compared to the wild-type control plants after 13 weeks of infection, indicating that Mced9 has the potential to provide tolerance to Fusarium wilt in Sukali Ndizi.

On facilitating regional integration and economic development with collaborative technologies in the South Pacific

The current global economic instability and the vulnerability of small island nations are providing the impetus for greater integration between the countries of the South Pacific region. This exercise is critical for their survival in today’s turbulent economic environment. Past efforts of regional integration in the South Pacific have not been very successful. Reasons attributed to this outcome include issues related to damage of sovereignty, and lack of a shared integration infrastructure. Today, the IT resources with collaborative capacities provide the opportunity to develop a shared IT infrastructure to facilitate integration in the South Pacific. In an attempt to develop a model of regional integration with an IT-backed infrastructure, we identify and report on the antecedents of the current stage of regional integration, and the stakeholders’ perceived benefits of an IT resources backed regional integration in the South Pacific. Employing a case study based approach, the study finds that while most stakeholders were positive about the potential of IT-backed regional integration, significant challenges exist that hinder the realisation of this model. The study finds that facilitating IT-backed regional integration requires enabling IT infrastructure, equitable IT development in the region, greater awareness on the potential of the modern IT resources, market liberalisation of the information and telecommunications sector and greater political support for IT initiatives.