On the security of TLS renegotiation

The Transport Layer Security (TLS) protocol is the most widely used security protocol on the Internet. It supports negotiation of a wide variety of cryptographic primitives through different cipher suites, various modes of client authentication, and additional features such as renegotiation. Despite its widespread use, only recently has the full TLS protocol been proven secure, and only the core cryptographic protocol with no additional features. These additional features have been the cause of several practical attacks on TLS. In 2009, Ray and Dispensa demonstrated how TLS renegotiation allows an attacker to splice together its own session with that of a victim, resulting in a man-in-the-middle attack on TLS-reliant applications such as HTTP. TLS was subsequently patched with two defence mechanisms for protection against this attack. We present the first formal treatment of renegotiation in secure channel establishment protocols. We add optional renegotiation to the authenticated and confidential channel establishment model of Jager et al., an adaptation of the Bellare--Rogaway authenticated key exchange model. We describe the attack of Ray and Dispensa on TLS within our model. We show generically that the proposed fixes for TLS offer good protection against renegotiation attacks, and give a simple new countermeasure that provides renegotiation security for TLS even in the face of stronger adversaries.

Traffic safety culture : what can we learn from Australia?

-- The role of traffic safety culture in Australia -- A comparison of drink driving (a success story) and speeding (a work in progress) ―Countermeasure approaches ―Community attitudes, perceptions and behaviors -- Lessons from Australia for the further development of the traffic safety culture concept

Interactions between cars and motorcycles testing underlying concepts through integration of on-road and simulator studies

We conducted on-road and simulator studies to explore the mechanisms underpinning driver-rider crashes. In Study 1 the verbal protocols of 40 drivers and riders were assessed at intersections as part of a 15km on-road route in Melbourne. Network analysis of the verbal transcripts highlighted key differences in the situation awareness of drivers and riders at intersections. In a further study using a driving simulator we examined in car drivers the influence of acute exposure to motorcyclists. In a 15 min simulated drive, 40 drivers saw either no motorcycles or a high number of motorcycles in the surrounding traffic. In a subsequent 45-60 min drive, drivers were asked to detect motorcycles in traffic. The proportion of motorcycles was manipulated so that there was either a high (120) or low (6) number of motorcycles during the drive. Those drivers exposed to a high number of motorcycles were significantly faster at detecting motorcycles. Fundamentally, the incompatible situation awareness at intersections by drivers and riders underpins the conflicts. Study 2 offers some suggestion for a countermeasure here, although more research around schema and exposure training to support safer interactions is needed.

Development and formative evaluation of a motorcycle rider training intervention to address risk taking

The need to address on-road motorcycle safety in Australia is important due to the disproportionately high percentage of riders and pillions killed and injured each year. One approach to preventing motorcycle-related injury is through training and education. However, motorcycle rider training lacks empirical support as an effective road safety countermeasure to reduce crash involvement. Previous reviews have highlighted that risk-taking is a contributing factor in many motorcycle crashes, rather than merely a lack of vehicle-control skills (Haworth & Mulvihill, 2005; Jonah, Dawson & Bragg, 1982; Watson et al, 1996). Hence, though the basic vehicle-handling skills and knowledge of road rules that are taught in most traditional motorcycle licence training programs may be seen as an essential condition of safe riding, they do not appear to be sufficient in terms of crash reduction. With this in mind there is considerable scope for the improvement of program focus and content for rider training and education. This program of research examined an existing traditional pre-licence motorcycle rider training program and formatively evaluated the addition of a new classroom-based module to address risky riding; the Three Steps to Safer Riding program. The pilot program was delivered in the real world context of the Q-Ride motorcycle licensing system in the state of Queensland, Australia. Three studies were conducted as part of the program of research: Study 1, a qualitative investigation of delivery practices and student learning needs in an existing rider training course; Study 2, an investigation of the extent to which an existing motorcycle rider training course addressed risky riding attitudes and motives; and Study 3, a formative evaluation of the new program. A literature review as well as the investigation of learning needs for motorcyclists in Study 1 aimed to inform the initial planning and development of the Three Steps to Safer Riding program. Findings from Study 1 suggested that the training delivery protocols used by the industry partner training organisation were consistent with a learner-centred approach and largely met the learning needs of trainee riders. However, it also found that information from the course needs to be reinforced by on-road experiences for some riders once licensed and that personal meaning for training information was not fully gained until some riding experience had been obtained. While this research informed the planning and development of the new program, a project team of academics and industry experts were responsible for the formulation of the final program. Study 2 and Study 3 were conducted for the purpose of formative evaluation and program refinement. Study 2 served primarily as a trial to test research protocols and data collection methods with the industry partner organisation and, importantly, also served to gather comparison data for the pilot program which was implemented with the same rider training organisation. Findings from Study 2 suggested that the existing training program of the partner organisation generally had a positive (albeit small) effect on safety in terms of influencing attitudes to risk taking, the propensity for thrill seeking, and intentions to engage in future risky riding. However, maintenance of these effects over time and the effects on riding behaviour remain unclear due to a low response rate upon follow-up 24 months after licensing. Study 3 was a formative evaluation of the new pilot program to establish program effects and possible areas for improvement. Study 3a examined the short term effects of the intervention pilot on psychosocial factors underpinning risky riding compared to the effects of the standard traditional training program (examined in Study 2). It showed that the course which included the Three Steps to Safer Riding program elicited significantly greater positive attitude change towards road safety than the existing standard licensing course. This effect was found immediately following training, and mean scores for attitudes towards safety were also maintained at the 12 month follow-up. The pilot program also had an immediate effect on other key variables such as risky riding intentions and the propensity for thrill seeking, although not significantly greater than the traditional standard training. A low response rate at the 12 month follow-up unfortunately prevented any firm conclusions being drawn regarding the impact of the pilot program on self-reported risky riding once licensed. Study 3a further showed that the use of intermediate outcomes such as self-reported attitudes and intentions for evaluation purposes provides insights into the mechanisms underpinning risky riding that can be changed by education and training. A multifaceted process evaluation conducted in Study 3b confirmed that the intervention pilot was largely delivered as designed, with course participants also rating most aspects of training delivery highly. The complete program of research contributed to the overall body of knowledge relating to motorcycle rider training, with some potential implications for policy in the area of motorcycle rider licensing. A key finding of the research was that psychosocial influences on risky riding can be shaped by structured education that focuses on awareness raising at a personal level and provides strategies to manage future riding situations. However, the formative evaluation was mainly designed to identify areas of improvement for the Three Steps to Safer Riding program and found several areas of potential refinement to improve future efficacy of the program. This included aspects of program content, program delivery, resource development, and measurement tools. The planned future follow-up of program participants' official crash and traffic offence records over time may lend further support for the application of the program within licensing systems. The findings reported in this thesis offer an initial indication that the Three Steps to Safer Riding is a useful resource to accompany skills-based training programs.

Countermeasures to driver sleepiness : is the message getting through?

The most effective countermeasures to driver sleepiness (caffeine and a nap, ideally in combination) are not the most popular choice for UK drivers. Groups susceptible to driver sleepiness (OSA patients and truck drivers) do not favour effective countermeasures to driver sleepiness. Prior experience of driver sleepiness does not promote an effective choice of countermeasure.

2010–2011 Queensland floods : using Haddon's Matrix to define and categorise public safety strategies

Objective The 2010–2011 Queensland floods resulted in the most deaths from a single flood event in Australia since 1916. This article analyses the information on these deaths for comparison with those from previous floods in modern Australia in an attempt to identify factors that have contributed to those deaths. Haddon's Matrix, originally designed for prevention of road trauma, offers a framework for understanding the interplay between contributing factors and helps facilitate a clearer understanding of the varied strategies required to ensure people's safety for particular flood types. Methods Public reports and flood relevant literature were searched using key words ‘flood’, ‘fatality’, ‘mortality’, ‘death’, ‘injury’ and ‘victim’ through Google Scholar, PubMed, ProQuest and EBSCO. Data relating to reported deaths during the 2010–2011 Queensland floods, and relevant data of previous Australian flood fatality (1997–2009) were collected from these available sources. These sources were also used to identify contributing factors. Results There were 33 deaths directly attributed to the event, of which 54.5% were swept away in a flash flood on 10 January 2011. A further 15.1% of fatalities were caused by inappropriate behaviours. This is different to floods in modern Australia where over 90% of deaths are related to the choices made by individuals. There is no single reason why people drown in floods, but rather a complex interplay of factors. Conclusions The present study and its integration of research findings and conceptual frameworks might assist governments and communities to develop policies and strategies to prevent flood injury and fatalities.

“I drove after drinking alcohol” and other risky driving behaviours reported by young novice drivers in Queensland, Australia

Background. Volitional risky driving behaviours such as drink- and drug-driving (i.e. substance-impaired driving) and speeding contribute to the overrepresentation of young novice drivers in road crash fatalities, and crash risk is greatest during the first year of independent driving in particular. Aims. To explore the: 1) self-reported compliance of drivers with road rules regarding substance-impaired driving and other risky driving behaviours (e.g., speeding, driving while tired), one year after progression from a Learner to a Provisional (intermediate) licence; and 2) interrelationships between substance-impaired driving and other risky driving behaviours (e.g., crashes, offences, and Police avoidance). Methods. Drivers (n = 1,076; 319 males) aged 18-20 years were surveyed regarding their sociodemographics (age, gender) and self-reported driving behaviours including crashes, offences, Police avoidance, and driving intentions. Results. A relatively small proportion of participants reported driving after taking drugs (6.3% of males, 1.3% of females) and drinking alcohol (18.5% of males, 11.8% of females). In comparison, a considerable proportion of participants reported at least occasionally exceeding speed limits (86.7% of novices), and risky behaviours like driving when tired (83.6% of novices). Substance-impaired driving was associated with avoiding Police, speeding, risky driving intentions, and self-reported crashes and offences. Forty-three percent of respondents who drove after taking drugs also reported alcohol-impaired driving. Discussion and Conclusions. Behaviours of concern include drink driving, speeding, novice driving errors such as misjudging the speed of oncoming vehicles, violations of graduated driver licensing passenger restrictions, driving tired, driving faster if in a bad mood, and active punishment avoidance. Given the interrelationships between the risky driving behaviours, a deeper understanding of influential factors is required to inform targeted and general countermeasure implementation and evaluation during this critical driving period. Notwithstanding this, a combination of enforcement, education, and engineering efforts appear necessary to improve the road safety of the young novice driver, and for the drink-driving young novice driver in particular.

Continuing to drive while sleepy : the influence of sleepiness countermeasures, motivation for driving sleepy, and risk perception

Driver sleepiness is a major contributor to road crashes. The current study sought to examine the association between perceptions of effectiveness of six sleepiness countermeasures and their relationship with self-reports of continuing to drive while sleepy among 309 drivers after controlling for the influence of age, sex, motivation for driving sleepy, and risk perception of sleepy driving. The results demonstrate that the variables of age, sex, motivation, and risk perception were significantly associated with self-reports of continuing to drive while sleepy and only one countermeasure was associated with self-reports of continuing to drive while sleepy. Further, it was found that age differences in self-reports of continuing to drive while sleepy was mediated by participants’ motivation and risk perception. These findings highlight modifiable factors that could be focused on with interventions that seek to modify drivers’ attitudes and behaviours of driving while sleepy.

Graduated driver licensing : an international review

Graduated driver licensing (GDL) aims to gradually increase the exposure of new drivers to more complex driving situations and typically consists of learner, provisional and open licence phases. The first phase, the learner licence, is designed to allow novice drivers to obtain practical driving experience in lower risk situations. The learner licence can delay licensure, encourage novice drivers to learn under supervision, mandate the number of hours of practice required to progress to the next phase and encourage parental involvement. The second phase, the provisional licence, establishes various driving restrictions and thereby reduces exposure to situations of higher risk, such as driving at night, with passengers or after drinking alcohol. Parental involvement with a GDL system appears essential in helping novices obtain sufficient practice and in enforcing compliance with restrictions once the new driver obtains a provisional licence. Given the significant number of young drivers involved in crashes within Oman, GDL is one countermeasure that may be beneficial in reducing crash risk and involvement for this group.

Examining signs of driver sleepiness, usage of sleepiness countermeasures and the associations with sleepy driving behaviours and individual factors

The impairing effect from sleepiness is a major contributor to road crashes. The ability of a sleepy driver to perceive their level of sleepiness is an important consideration for road safety as well as the type of sleepiness countermeasure used by drivers as some sleepiness countermeasures are more effective than others. The aims of the current study were to determine the extent that the signs of driver sleepiness were associated with sleepy driving behaviours, as well as determining which individual factors (demographic, work, driving, and sleep-related factors) were associated with using a roadside or in-vehicle sleepiness countermeasure. A sample of 1518 Australian drivers from the Australian State of New South Wales and the neighbouring Australian Capital Territory took part in the study. The participants’ experiences with the signs of sleepiness were reasonably extensive. A number of the early signs of sleepiness (e.g., yawning, frequent eye blinks) were related with continuing to drive while sleepy, with the more advanced signs of sleepiness (e.g., difficulty keeping eyes open, dreamlike state of consciousness) associated with having a sleep-related close call. The individual factors associated with using a roadside sleepiness countermeasure included age (being older), education (tertiary level), difficulties getting to sleep, not continuing to drive while sleepy, and having experienced many signs of sleepiness. The results suggest that these participants have a reasonable awareness and experience with the signs of driver sleepiness. Factors related to previous experiences with sleepiness were associated with implementing a roadside countermeasure. Nonetheless, the high proportions of drivers performing sleepy driving behaviours, suggest that concerted efforts are needed with road safety campaigns regarding the dangers of driving while sleepy.

Assessing specific deterrence effects of increased speeding penalties using four measures of recidivism

Traffic law enforcement sanctions can impact on road user behaviour through general and specific deterrence mechanisms. The manner in which specific deterrence can influence recidivist behaviour can be conceptualised in different ways. While any reduction in speeding will have road safety benefits, the ways in which a ‘reduction’ is determined deserves greater methodological attention and has implications for countermeasure evaluation more generally. The primary aim of this research was to assess the specific deterrent impact of penalty increases for speeding offences in Queensland, Australia, in 2003 on two cohorts of drivers detected for speeding prior to and after the penalty changes were investigated. Since the literature is relatively silent on how to assess recidivism in the speeding context, the secondary research aim was to contribute to the literature regarding ways to conceptualise and measure specific deterrence in the speeding context. We propose a novel way of operationalising four measures which reflect different ways in which a specific deterrence effect could be conceptualised: (1) the proportion of offenders who re-offended in the follow up period; (2) the overall frequency of re-offending in the follow up period; (3) the length of delay to re-offence among those who re-offended; and (4) the average number of re-offences during the follow up period among those who re-offended. Consistent with expectations, results suggested an absolute deterrent effect of penalty changes, as evidenced by significant reductions in the proportion of drivers who re-offended and the overall frequency of re-offending, although effect sizes were small. Contrary to expectations, however, there was no evidence of a marginal specific deterrent effect among those who re-offended, with a significant reduction in the length of time to re-offence and no significant change in the average number of offences committed. Additional exploratory analyses investigating potential influences of the severity of the index offence, offence history, and method of detection revealed mixed results. Access to additional data from various sources suggested that the main findings were not influenced by changes in speed enforcement activity, public awareness of penalty changes, or driving exposure during the study period. Study limitations and recommendations for future research are discussed with a view to promoting more extensive evaluations of penalty changes and better understanding of how such changes may impact on motorists’ perceptions of enforcement and sanctions, as well as on recidivist behaviour.

Do repeated rumble strip hits improve driver alertness?

Driving while sleepy is associated with increased crash risk. Rumble strips are designed to alert a sleepy or inattentive driver when they deviate outside their driving lane. The current study sought to examine the effects of repeated rumble strip hits on levels of physiological and subjective sleepiness as well as simulated driving performance. In total, 36 regular shift workers drove a high-fidelity moving base simulator on a simulated road with rumble strips installed at the shoulder and centre line after a working a full night shift. The results show that on average, the first rumble strip occurred after 20 minutes of driving, with subsequent hits occurring 10 minutes later, with the last three occurring approximately every 5 minutes thereafter. Specifically, it was found that the first rumble strip hit reduced physiological sleepiness; however, subsequent hits did not increase alertness. Moreover, the results also demonstrate that increased subjective sleepiness levels, via the Karolinska Sleepiness Scale, were associated with a greater probability of hitting a rumble strip. The present results suggest that sleepiness is very resilient to even strongly arousing stimuli, with physiologicl and subjective sleepiness increasing over the duration of the drive, despite the interference by rumble strips.

Worker views on safety at roadworks

Roadworks in live traffic environments are hazardous to workers and road users alike. In an increasing body of international research literature, roadwork risks and hazards have been comprehensively examined. As in the broader field of road safety research, much of the work rightly takes a quantitative approach to assessing risk and related issues and to addressing the identified risks appropriately. In Australia, however, limited official data constrains the ability of researchers to achieve an in-depth understanding of the situation at state/territory and national levels based on traditional quantitative analyses. One way to enhance and supplement the limited available data is to consult those who are directly involved in roadworks for qualitative information, although such an approach is rarely reported in the roadwork safety arena. As part of the major study focusing on safety at roadworks in Queensland, 66 workers were interviewed about their perceptions and experiences regarding roadwork safety. This paper thus outlines a qualitative examination of workers' perceptions of the causes of roadwork incidents and the effectiveness of hazard mitigation measures. Consistent with findings reported in the literature is the view among workers that speeding is a major hazard and that police enforcement is the most effective countermeasure. Other hazards commonly observed by workers but less frequently reported elsewhere include driver distraction and aggression toward workers, working in poor weather and working at night. Workers mostly suggested educational measures to address distraction and aggression issues, though such measures are only tentatively supported in the literature.

The impact of safety measures on the re-offence and crash rates of drink-driving offenders in Victoria

Alcohol is a major factor in road deaths and serious injuries. In Victoria, between 2008 and 2013, 30% of drivers killed were involved in alcohol-related crashes. From the early 1980s Victoria progressively introduced a series of measures, such as driver licence cancellation and alcohol interlocks, to reduce the level of drink-driving on Victoria's roads. This project tracked drink-driving offenders to measure and understand their re-offence and road trauma involvement levels during and after periods of licensing and driving interventions. The methodology controlled for exposure by aggregating crashes and traffic violations within relevant categories (e.g. licence cancelled/relicensed/relicensing not sought) and calculated as rates 'per thousand person-years'. Inferential statistical techniques were used to compare crash and offence rates between control and treatment groups across three distinct time periods, which coincided with the introduction of new interventions. This paper focuses on the extent to which the Victorian drink-driving measures have been successful in reducing re-offending and road trauma involvement during and after periods of licence interventions. It was found that a licence cancellation/ban is an effective drink-driving countermeasure as it reduced drink-driving offending and drink-driving crashes. Interlocks also had a positive effect on drink-driving offences as they were reduced during the interlock period as well as for the entire intervention period. Possible drink-driving policy implications are briefly discussed.

Driver sleepiness on YouTube: A content analysis

Driver sleepiness is a major contributor to severe crashes and fatalities on our roads. Many people continue to drive despite being aware of feeling tired. Prevention relies heavily on education campaigns as it is difficult to police driver sleepiness. The video sharing social media site YouTube is extremely popular, particularly with at risk driver demographics. Content and popularity of uploaded videos can provide insight into the quality of publicly accessible driver sleepiness information. The purpose of this research was to answer two questions; firstly, how prevalent are driver sleepiness videos on YouTube? And secondly, what are the general characteristics of driver sleepiness videos in terms of (a) outlook on driver sleepiness, (b) tone, (c) countermeasures to driver sleepiness, and, (d) driver demographics. Using a keywords search, 442 relevant videos were found from a five year period (2nd December 2009–2nd December 2014). Tone, outlook, and countermeasure use were thematically coded. Driver demographic and video popularity data also were recorded. The majority of videos portrayed driver sleepiness as dangerous. However, videos that had an outlook towards driver sleepiness being amusing were viewed more often and had more mean per video comments and likes. Humorous videos regardless of outlook, were most popular. Most information regarding countermeasures to deal with driver sleepiness was accurate. Worryingly, 39.8% of videos with countermeasure information contained some kind of ineffective countermeasure. The use of humour to convey messages about the dangers of driver sleepiness may be a useful approach in educational interventions.