Visualising security incidents through event aggregation

Extracting and aggregating the relevant event records relating to an identified security incident from the multitude of heterogeneous logs in an enterprise network is a difficult challenge. Presenting the information in a meaningful way is an additional challenge. This paper looks at solutions to this problem by first identifying three main transforms; log collection, correlation, and visual transformation. Having identified that the CEE project will address the first transform, this paper focuses on the second, while the third is left for future work. To aggregate by correlating event records we demonstrate the use of two correlation methods, simple and composite. These make use of a defined mapping schema and confidence values to dynamically query the normalised dataset and to constrain result events to within a time window. Doing so improves the quality of results, required for the iterative re-querying process being undertaken. Final results of the process are output as nodes and edges suitable for presentation as a network graph.

Comparing child product safety concerns with injury incidents : does the evidence support the response?

Background Efficient effective child product safety (PS) responses require data on hazards, injury severity and injury probability. PS responses in Australia largely rely on reports from manufacturers/retailers, other jurisdictions/regulators, or consumers. The extent to which reactive responses reflect actual child injury priorities is unknown. Aims/Objectives/Purpose This research compared PS issues for children identified using data compiled from PS regulatory data and data compiled from health data sources in Queensland, Australia. Methods PS regulatory documents describing issues affecting children in Queensland in 2008–2009 were compiled and analysed to identify frequent products and hazards. Three health data sources (ED, injury surveillance and hospital data) were analysed to identify frequent products and hazards. Results/Outcomes Projectile toys/squeeze toys were the priority products for PS regulators with these toys having the potential to release small parts presenting choking hazards. However, across all health datasets, falls were the most common mechanism of injury, and several of the products identified were not subject to a PS system response. While some incidents may not require a response, a manual review of injury description text identified child poisonings and burns as common mechanisms of injuries in the health data where there was substantial documentation of product-involvement, yet only 10% of PS system responses focused on these two mechanisms combined. Significance/contribution to the field Regulatory data focused on products that fail compliance checks with ‘potential’ to cause harm, and health data identified actual harm, resulting in different prioritisation of products/mechanisms. Work is needed to better integrate health data into PS responses in Australia.

A comprehensive dual-scale wood torrefaction model : application to the analysis of thermal run-away in industrial heat treatment processes

A dual-scale model of the torrefaction of wood was developed and used to study industrial configurations. At the local scale, the computational code solves the coupled heat and mass transfer and the thermal degradation mechanisms of the wood components. At the global scale, the two-way coupling between the boards and the stack channels is treated as an integral component of the process. This model is used to investigate the effect of the stack configuration on the heat treatment of the boards. The simulations highlight that the exothermic reactions occurring in each single board can be accumulated along the stack. This phenomenon may result in a dramatic eterogeneity of the process and poses a serious risk of thermal runaway, which is often observed in industrial plants. The model is used to explain how thermal runaway can be lowered by increasing the airflow velocity, the sticker thickness or by gas flow reversal.

Understanding worker perceptions of common incidents at roadworks in Queensland

The process of building safer roads and roadsides needs to be managed to minimise risks to both the road using public and roadworkers. However, detailed and accurate data on fatalities and injuries at roadworks across Australia are not available. The lack of reliable safety records and consequent poor understanding of the hazards at roadworks motivated this research to examine the common trends in incidents and to understand workers' perceptions of the causes of incidents at roadworks. To achieve these aims, 66 roadworks personnel were interviewed in Queensland including road construction workers, traffic controllers, engineers, and managers. Qualitative analyses identified several major issues and themes. Vehicles driving into work areas, traffic controllers hit by vehicles, rear end crashes at roadwork approaches, and reversing incidents involving work vehicles and machinery were the most common types of incidents. Roadworkers perceived driver errors, such as violation of speed limits, distracted driving, and ignoring signage and traffic controllers' instructions as the main causes of the incidents.

Industrial land price and its impact on urban growth : a Chinese case study

China is experiencing rapid progress in industrialization, with its own rationale toward industrial land development based on a deliberate change from an extensive to intensive form of urban land use. One result has been concerted attempts by local government to attract foreign investment by a low industrial land price strategy, which has resulted in a disproportionally large amount of industrial land within the total urban land use structure at the expense of the urban sprawl of many cities. This paper first examines “Comparable Benchmark Price as Residential land use” (CBPR) as the theoretical basis of the low industrial land price phenomenon. Empirical findings are presented from a case study based on data from Jinyun County, China. These data are analyzed to reveal the rationale of industrial land price from 2000 to 2010 concerning the CBPR model. We then explore the causes of low industrial land prices in the form of a “Centipede Game Model”, involving two neighborhood regions as “major players” to make a set of moves (or strategies). When one of the players unilaterally reduces the land price to attract investment with the aim to maximize profits arising from the revenues generated from foreign investment and land premiums, a two-player price war begins in the form of a dynamic game, the effect of which is to produce a downward spiral of prices. In this context, the paradox of maximizing profits for each of the two players are not accomplished due to the inter-regional competition of attracted investment leading to a lose-lose situation for both sides’ in competing for land premium revenues. A short-term solution to the problem is offered involving the establishment of inter-regional cooperative partnerships. For the longer term, however, a comprehensive reform of the local financial system, more adroit regional planning and an improved means of evaluating government performance is needed to ensure the government's role in securing pubic goods is not abandoned in favor of one solely concerned with revenue generation.

High frequency high power converters for industrial applications

The main contribution of this project was to investigate power electronics technology in designing and developing high frequency high power converters for industrial applications. Therefore, the research was conducted at two levels; first at system level which mainly encapsulated the circuit topology and control scheme and second at application level which involves with real-world applications. Pursuing these objectives, varied topologies have been developed and proposed within this research. The main aim was to resolving solid-state switches limited power rating and operating speed while increasing the system flexibility considering the application characteristics. The developed new power converter configurations were applied to pulsed power and high power ultrasound applications for experimental validation.

The impact of incidents on macroscopic fundamental diagram

Macroscopic Fundamental Diagram (MFD) has been proved to exist in large urban road and freeway networks by theoretic method and real data in cities. However hysteresis and scatters have also been found existed both on motorway network and urban road. This paper investigates how the incident variables affect the scatter and shape of the MFD using both the simulated data and the real data collected from the Pacific Motorway M3 in Brisbane, Australia. Three key components of incident are investigated based on the simulated data: incident location, incident duration time and traffic demand. Results based on the simulated data indicate that MFD shape is a property not only of the network itself but also of the incident characteristics variables. MFDs for three types of real incidents (crash, hazard and breakdown) are explored separately. The results based on the empirical data are consistent with the simulated results. The hysteresis phenomenon occurs on both the upstream and the downstream of the incident location, but for opposite hysteresis loops. Gradient of the MFD for the upstream is more than that for the downstream on the incident site, when traffic demand is off peak.

Computer security incidents against Australian businesses : predictors of victimisation

Drawing on data from the Australian Business Assessment of Computer User Security (ABACUS) survey, this paper examines a range of factors that may influence businesses’ likelihood of being victimised by a computer security incident. It has been suggested that factors including business size, industry sector, level of outsourcing, expenditure on computer security functions and types of computer security tools and/or policies used may influence the probability of particular businesses experiencing such incidents. This paper uses probability modelling to test whether this is the case for the 4,000 businesses that responded to the ABACUS survey. It was found that the industry sector that a business belonged to, and business expenditure on computer security, were not related to businesses’ likelihood of detecting computer security incidents. Instead, the number of employees that a business has and whether computer security functions were outsourced were found to be key indicators of businesses’ likelihood of detecting incidents. Some of the implications of these findings are considered in this paper.

Purification of particles of subterranean clover red leaf virus using an industrial-grade cellulase

Particles of two isolates of subterranean clover red leaf virus were purified by a method in which infected plant tissue was digested with an industrial-grade cellulase, Celluclast® 2.0 L type X. The yields of virus particles using this enzyme were comparable with those obtained using either of two laboratory-grade cellulases, Cellulase type 1 (Sigma) and Driselase®. However, the specific infectivity or aphid transmissibility of the particles purified using Celluclast® was 10-100 times greater than those of preparations obtained using laboratory-grade cellulases or no enzyme. The main advantage of using Celluclast® is that at present in Australia its cost is only ca. 1% of laboratory-grade cellulases.

Video analytics for the detection of near-miss incidents on approach to railway level crossings

Recent modelling of socio-economic costs by the Australian railway industry in 2010 has estimated the cost of level crossing accidents to exceed AU$116 million annually. To better understand causal factors that contribute to these accidents, the Cooperative Research Centre for Rail Innovation is running a project entitled Baseline Level Crossing Video. The project aims to improve the recording of level crossing safety data by developing an intelligent system capable of detecting near-miss incidents and capturing quantitative data around these incidents. To detect near-miss events at railway level crossings a video analytics module is being developed to analyse video footage obtained from forward-facing cameras installed on trains. This paper presents a vision base approach for the detection of these near-miss events. The video analytics module is comprised of object detectors and a rail detection algorithm, allowing the distance between a detected object and the rail to be determined. An existing publicly available Histograms of Oriented Gradients (HOG) based object detector algorithm is used to detect various types of vehicles in each video frame. As vehicles are usually seen from a sideway view from the cabin’s perspective, the results of the vehicle detector are verified using an algorithm that can detect the wheels of each detected vehicle. Rail detection is facilitated using a projective transformation of the video, such that the forward-facing view becomes a bird’s eye view. Line Segment Detector is employed as the feature extractor and a sliding window approach is developed to track a pair of rails. Localisation of the vehicles is done by projecting the results of the vehicle and rail detectors on the ground plane allowing the distance between the vehicle and rail to be calculated. The resultant vehicle positions and distance are logged to a database for further analysis. We present preliminary results regarding the performance of a prototype video analytics module on a data set of videos containing more than 30 different railway level crossings. The video data is captured from a journey of a train that has passed through these level crossings.

Supermarkets and agro-industrial foods : the strategic manufacturing of consumer trust

There is increasing evidence of a weakened platform of consumer trust in mass produced food products. The resistance shown by consumers to the agro-industrial paradigm is evident in an emergent phase of reflexive consumerism, public reactions to an overly-concentrated retail sector and the rise of alternative food networks such as farmers' markets and organic box schemes. Supermarkets are responding strategically by aiming to manufacture new trust relations with consumers. This paper identifies three key strategies of trust manufacturing: (i) reputational enhancement though the institution of “behind the scenes,” business-to-business private standards; (ii) direct quality claims via private standard certification badges on food products, and ; (iii) discursive claimsmaking through symbolic representations of “authenticity” and “tradition.” Drawing upon the food governance literature and a “visual sociology” of supermarkets and supermarket produce, we highlight how trust is both commoditized and increasingly embedded into the marketing of mass-produced foods.

Provotypes: Teasing out tensions between industrial context and use context

What industrial organisations think people do and what they actually do are often two very different things. But exactly this tension can be a source of innovation: how can we give form to insights about what people do, to deliberately challenge industries' conceptions, and inspire new product and service development

Ethnography of software maintenance activities in an industrial engineering setup

New technical and procedural interventions are less likely to be adopted in industry, unless they are smoothly integrated into the existing practices of professionals. In this paper, we provide a case study of the use of ethnographic methods for studying software bug-fixing activities at an industrial engineering conglomerate. We aimed at getting an in-depth understanding of software developers' everyday practices in bug-fixing related projects and in turn inform the design of novel productivity tools. The use of ethnography has allowed us to look at the social side of software maintenance practices. In this paper, we highlight: 1) organizational issues that influence bug-fixing activities; 2) social role of bug tracking systems, and; 3) social issues specific to different phases of bug-fixing activities.

Numerical investigation of mechanical and thermal dynamic properties of the industrial transformer

Industrial transformer is one of the most critical assets in the power and heavy industry. Failures of transformers can cause enormous losses. The poor joints of the electrical circuit on transformers can cause overheating and results in stress concentration on the structure which is the major cause of catastrophic failure. Few researches have been focused on the mechanical properties of industrial transformers under overheating thermal conditions. In this paper, both mechanical and thermal properties of industrial transformers are jointly investigated using Finite Element Analysis (FEA). Dynamic response analysis is conducted on a modified transformer FEA model, and the computational results are compared with experimental results from literature to validate this simulation model. Based on the FEA model, thermal stress is calculated under different temperature conditions. These analysis results can provide insights to the understanding of the failure of transformers due to overheating, therefore are significant to assess winding fault, especially to the manufacturing and maintenance of large transformers.

Preventing industrial scale using bauxite refinery residues

An Australian green power (AGP) company produces energy from burning biomass from the sugar industry and recycled wood waste, however alkali in biomass is released into a recirculating stream that forms a scale as it becomes more concentrated. This investigation has shown that the addition of Bayer liquor (alumina waste residue) successfully removes scale-forming species from the recirculating stream and thus has the potential to reduce the rate of scaling. Characterisation of the scale and Bayer precipitates has been performed using X-ray diffraction (XRD), infrared spectroscopy (IR) and inductively coupled plasma optical emission spectroscopy (ICP-OES).