A type system for value-dependent information flow analysis

Information systems are widespread and used by anyone with computing devices as well as corporations and governments. It is often the case that security leaks are introduced during the development of an application. Reasons for these security bugs are multiple but among them one can easily identify that it is very hard to define and enforce relevant security policies in modern software. This is because modern applications often rely on container sharing and multi-tenancy where, for instance, data can be stored in the same physical space but is logically mapped into different security compartments or data structures. In turn, these security compartments, to which data is classified into in security policies, can also be dynamic and depend on runtime data. In this thesis we introduce and develop the novel notion of dependent information flow types, and focus on the problem of ensuring data confidentiality in data-centric software. Dependent information flow types fit within the standard framework of dependent type theory, but, unlike usual dependent types, crucially allow the security level of a type, rather than just the structural data type itself, to depend on runtime values. Our dependent function and dependent sum information flow types provide a direct, natural and elegant way to express and enforce fine grained security policies on programs. Namely programs that manipulate structured data types in which the security level of a structure field may depend on values dynamically stored in other fields The main contribution of this work is an efficient analysis that allows programmers to verify, during the development phase, whether programs have information leaks, that is, it verifies whether programs protect the confidentiality of the information they manipulate. As such, we also implemented a prototype typechecker that can be found at http://ctp.di.fct.unl.pt/DIFTprototype/.

How to improve urban mobility in Lisbon: intermodality and information and ticketing systems

Urban mobility is one of the main challenges facing urban areas due to the growing population and to traffic congestion, resulting in environmental pressures. The pathway to urban sustainable mobility involves strengthening of intermodal mobility. The integrated use of different transport modes is getting more and more important and intermodality has been mentioned as a way for public transport compete with private cars. The aim of the current dissertation is to define a set of strategies to improve urban mobility in Lisbon and by consequence reduce the environmental impacts of transports. In order to do that several intermodal practices over Europe were analysed and the transport systems of Brussels and Lisbon were studied and compared, giving special attention to intermodal systems. In the case study was gathered data from both cities in the field, by using and observing the different transport modes, and two surveys were done to the cities users. As concluded by the study, Brussels and Lisbon present significant differences. In Brussels the measures to promote intermodality are evident, while in Lisbon a lot still needs to be done. It also made clear the necessity for improvements in Lisbon’s public transports to a more intermodal passenger transport system, through integration of different transport modes and better information and ticketing system. Some of the points requiring developments are: interchanges’ waiting areas; integration of bicycle in public transport; information about correspondences with other transport modes; real-time information to passengers pre-trip and on-trip, especially in buses and trams. After the identification of the best practices in Brussels and the weaknesses in Lisbon the possibility of applying some of the practices in Brussels to Lisbon was evaluated. Brussels demonstrated to be a good example of intermodality and for that reason some of the recommendations to improve intermodal mobility in Lisbon can follow the practices in place in Brussels.

Hand gesture recognition system based in computer vision and machine learning: Applications on human-machine interaction

Tese de Doutoramento em Engenharia de Eletrónica e de Computadores

Towards an engine for coordination-based architectural reconfigurations

Software reconfigurability became increasingly relevant to the architectural process due to the crescent dependency of modern societies on reliable and adaptable systems. Such systems are supposed to adapt themselves to surrounding environmental changes with minimal service disruption, if any. This paper introduces an engine that statically applies reconfigurations to (formal) models of software architectures. Reconfigurations are specified using a domain specific language— ReCooPLa—which targets the manipulation of software coordinationstructures,typicallyusedinservice-orientedarchitectures(soa).Theengine is responsible for the compilation of ReCooPLa instances and their application to the relevant coordination structures. The resulting configurations are amenable to formal analysis of qualitative and quantitative (probabilistic) properties.

Wireless GPS-based phase-locked synchronization system for outdoor environment.

Synchronization of data coming from different sources is of high importance in biomechanics to ensure reliable analyses. This synchronization can either be performed through hardware to obtain perfect matching of data, or post-processed digitally. Hardware synchronization can be achieved using trigger cables connecting different devices in many situations; however, this is often impractical, and sometimes impossible in outdoors situations. The aim of this paper is to describe a wireless system for outdoor use, allowing synchronization of different types of - potentially embedded and moving - devices. In this system, each synchronization device is composed of: (i) a GPS receiver (used as time reference), (ii) a radio transmitter, and (iii) a microcontroller. These components are used to provide synchronized trigger signals at the desired frequency to the measurement device connected. The synchronization devices communicate wirelessly, are very lightweight, battery-operated and thus very easy to set up. They are adaptable to every measurement device equipped with either trigger input or recording channel. The accuracy of the system was validated using an oscilloscope. The mean synchronization error was found to be 0.39 μs and pulses are generated with an accuracy of <2 μs. The system provides synchronization accuracy about two orders of magnitude better than commonly used post-processing methods, and does not suffer from any drift in trigger generation.

6

The use of the Internet now has a specific purpose: to find information. Unfortunately, the amount of data available on the Internet is growing exponentially, creating what can be considered a nearly infinite and ever-evolving network with no discernable structure. This rapid growth has raised the question of how to find the most relevant information. Many different techniques have been introduced to address the information overload, including search engines, Semantic Web, and recommender systems, among others. Recommender systems are computer-based techniques that are used to reduce information overload and recommend products likely to interest a user when given some information about the user's profile. This technique is mainly used in e-Commerce to suggest items that fit a customer's purchasing tendencies. The use of recommender systems for e-Government is a research topic that is intended to improve the interaction among public administrations, citizens, and the private sector through reducing information overload on e-Government services. More specifically, e-Democracy aims to increase citizens' participation in democratic processes through the use of information and communication technologies. In this chapter, an architecture of a recommender system that uses fuzzy clustering methods for e-Elections is introduced. In addition, a comparison with the smartvote system, a Web-based Voting Assistance Application (VAA) used to aid voters in finding the party or candidate that is most in line with their preferences, is presented.

Les symbioses industrielles : une nouvelle stratégie pour l'amélioration de l'utilisation des ressources matérielles et énergétiques par les activités économiques

RésuméCette thèse traite d'un domaine d'application de l'écologie industrielle, les symbioses industrielles, comme stratégie d'amélioration de la consommation des ressources matérielles et énergétiques et de la gestion des déchets par les activités économiques. Les symbioses industrielles cherchent à créer de nouvelles collaborations directement entre les acteurs économiques d'un territoire dans le but d'échanger de l'information, des matières premières et des déchets, et d'intensifier les mutualisations de services et d'infrastructures possibles entre entreprises voisines. Ces quatre types de collaboration sont représentés schématiquement dans la figure ci-dessous.Dans ce travail, la détection et la mise en oeuvre de symbioses industrielles sont abordées sous plusieurs angles. Les recherches réalisées concernent le développement de procédures de mise en oeuvre s'adressant aux collectivités publiques, aux institutions académiques et aux bureaux de conseil dans le domaine de l'environnement. Les objectifs des procédures sont de créer une dynamique de collaboration et de confiance entre les acteurs économiques et l'administration publique d'un territoire afin de détecter des symbioses industrielles potentielles. Ces procédures requièrent la gestion de grandes quantités d'informations relatives aux flux de matière et d'énergie.Un travail de terrain, réalisé sur les territoires du canton de Genève et de Lausanne Région et utilisé comme études de cas, a permis de mettre en évidence un grand nombre de symbioses industrielles qui existent déjà en Suisse romande. Plusieurs dizaines d'exemples ont été identifiés principalement dans lesdomaines de la gestion de l'eau, de l'énergie, des produits chimiques et des matériaux de construction. La législation suisse autoriserait cependant la concrétisation de nombreuses autres opportunités. Dans cette recherche, celles-ci sont évaluées techniquement, légalement, économiquement et environnementalement. La création d'un référentiel d'évaluation des opportunités permet de déterminer quelles sont les symbioses industrielles techniquement réalisables et pertinentes dans le contexte suisse et dans quels cas celles-ci représenteraient une réelle plus-value par rapport à l'utilisation actuelle de la ressource et aux filières existantes de collecte et de valorisation des déchets.Finalement, un logiciel, SymbioGIS, destiné à soutenir la détection et l'évaluation de symbioses industrielles potentielles a été développé. Il s'agit d'une interface web accessible pour de nombreux utilisateurs, couplée à une interface de systèmes d'information géographique. En plus de la détection de symbioses industrielles, plusieurs fonctionnalités sont proposées pour faciliter la prise en compte des flux de matière et d'énergie dans les problématiques liées à l'aménagement du territoire et au positionnement des activités économiques.En conclusion, cette recherche met en évidence la nécessité de rapprocher les institutions publiques en charge de la protection de l'environnement, de la promotion économique et de l'aménagement du territoire pour favoriser l'essor des symbioses industrielles comme stratégie pour la gestion des ressources matérielles et énergétiques. Elle propose des pistes pour intensifier les collaborations entre ces domaines et accélérer le partage des connaissances liées aux flux de matière et d'énergie et à leur cheminement au sein des activités économiques afin de rendre le système industriel existant en Suisse romande viable à long terme. Parallèlement, elle étudie les possibilités de transposer ces considérations et les procédures et outils développés dans le contexte économique et social de la région Asie-Pacifique, où se trouvent aujourd'hui de nombreuses activités de production.SummaryIndustrial symbioses: A new strategy for improving how economic activities use material and energy resourcesThis thesis focuses on one application of industrial ecology, industrial symbioses, as a strategy for improving how economic activities consume material and energy resources. Industrial symbioses seek to create new collaborations among economic players with the goal of exchanging information, raw materials, and waste directly among area businesses, and to step up the potential pooling of services and infrastructure among neighboring companies.The identification and implementation of industrial symbioses are studied from several angles. The research first examines the development of implementation procedures for government bodies, academic institutions, and environmental consulting services. The purpose of the procedures is to create a dynamic of collaboration and trust between the economic players and the public officials in a region in order to identify potential industrial symbioses. The procedures necessitate managing large amounts of information about material and energy flows.Fieldwork conducted in the canton of Geneva and the Lausanne region, and used as case studies for the research, highlights a great number of industrial symbioses that already exist in French-speaking Switzerland. Several dozen examples are identified, primarily in the areas of water management, energy, chemical products, and building materials; however, Swiss law would permit many others. The research evaluates these opportunities from a technical, legal, economic, and environmental standpoint. By developing an assessment framework it is possible to determine which industrial symbioses are technically feasible and pertinent in Switzerland, and under what circumstances they would represent real added value compared to the current use of the resource and to existing systems for collecting and reusing waste.Lastly, SymbioGIS software was developed to help identify and assess potential industrial symbioses. The program's Web-based interface can be accessed by multiple users and is coupled with an interface that provides geographic information. In addition to identifying industrial symbioses, several program functionalities make it easier to consider material and energy flows with regard to local development issues and siting economic activities.In conclusion, the research highlights the need to bring together public institutions charged with protecting the environment, promoting economic activity, and overseeing development in order to foster the expansion of industrial symbioses as a strategy for managing material and energy resources. It proposes solutions for stepping up collaboration among these players and accelerating the sharing of knowledge about material and energy flows and their paths within economic activities with the goal of making theexisting industrial system in French-speaking Switzerland viable long-term. Also examined were thepossibilities of transposing these considerations and the study's findings about Switzerland to the economic and social context of the Asia-Pacific region, where much production is now located.

Ambulatory healthcare information system: a conceptual framework

Despite the tremendous amount of data collected in the field of ambulatory care, political authorities still lack synthetic indicators to provide them with a global view of health services utilization and costs related to various types of diseases. Moreover, public health indicators fail to provide useful information for physicians' accountability purposes. The approach is based on the Swiss context, which is characterized by the greatest frequency of medical visits in Europe, the highest rate of growth for care expenditure, poor public information but a lot of structured data (new fee system introduced in 2004). The proposed conceptual framework is universal and based on descriptors of six entities: general population, people with poor health, patients, services, resources and effects. We show that most conceptual shortcomings can be overcome and that the proposed indicators can be achieved without threatening privacy protection, using modern cryptographic techniques. Twelve indicators are suggested for the surveillance of the ambulatory care system, almost all based on routinely available data: morbidity, accessibility, relevancy, adequacy, productivity, efficacy (from the points of view of the population, people with poor health, and patients), effectiveness, efficiency, health services coverage and financing. The additional costs of this surveillance system should not exceed Euro 2 million per year (Euro 0.3 per capita).

EORTC Radiation Oncology Group quality assurance platform: establishment of a digital central review facility.

OBJECTIVE: Quality assurance (QA) in clinical trials is essential to ensure treatment is safely and effectively delivered. As QA requirements have increased in complexity in parallel with evolution of radiation therapy (RT) delivery, a need to facilitate digital data exchange emerged. Our objective is to present the platform developed for the integration and standardization of QART activities across all EORTC trials involving RT. METHODS: The following essential requirements were identified: secure and easy access without on-site software installation; integration within the existing EORTC clinical remote data capture system; and the ability to both customize the platform to specific studies and adapt to future needs. After retrospective testing within several clinical trials, the platform was introduced in phases to participating sites and QART study reviewers. RESULTS: The resulting QA platform, integrating RT analysis software installed at EORTC Headquarters, permits timely, secure, and fully digital central DICOM-RT based data review. Participating sites submit data through a standard secure upload webpage. Supplemental information is submitted in parallel through web-based forms. An internal quality check by the QART office verifies data consistency, formatting, and anonymization. QART reviewers have remote access through a terminal server. Reviewers evaluate submissions for protocol compliance through an online evaluation matrix. Comments are collected by the coordinating centre and institutions are informed of the results. CONCLUSIONS: This web-based central review platform facilitates rapid, extensive, and prospective QART review. This reduces the risk that trial outcomes are compromised through inadequate radiotherapy and facilitates correlation of results with clinical outcomes.

Construcción de un visor web de senderismo para dispositivos móviles con OpenLayers y jQuery Mobile

El presente TFC se centra en la creación de un sistema de información geográfica destinado a dispositivos móviles (Ipads, Smartphones ¿) y dedicado al senderismo, utilizando para ello varias aplicaciones de código abierto ofrecidas en la actualidad.

Aplicació web per a gestió patrimonial de les administracions publiques

Aplicació web que adapti el Reglament deBéns de les Entitats Locals a la gestió Patrimonial que fan les Corporacions dels seus béns, amb l'objectiu d'establir les normes procedimentals a seguir en els expedients administratius municipals, quan afecten al seu patrimoni.

Diseño y desarrollo de un cliente WPS en el entorno GVSIG

Extensió per gvSIG anomenada extWPS, que permet executar processos a través de Web Processing Service (wps), el protocol promogut per l'Open Geospatial Consortium (OGC). El programari, elaborat en Java, es basa en el conjunt de llibreries de la iniciativa 52north i té llicència GPL. Fa possible, una vegada instal lat sobre gvSIG, connectar-se a un servidor wps, veure els geoprocesos disponibles a ell i executar de manera remota.

Diseño y Desarrollo de un cliente Web Processing Services (WPS) para gvSIG

Configuració d'un entorn de desenvolupament en el IDE Eclipse. Introducció als SIG. Usos, utilitats i exemples. Conèixer la eina gvSIG. Conèixer els estàndards més estesos de l'Open Geospatial Consortium (OGC) i en especial del Web Processing Services. Analitzar, dissenyar i desenvolupar un client capaç de consumir serveis wps.

Diseño y Desarrollo de un cliente Web Processing Service (WPS) para gvSIG

Estudi dels estàndards definits per l'Open Geospatial Consortium, i més concretament en l'estàndard Web Processing Service (wps). Així mateix, ha tingut una component pràctica que ha consistit en el disseny i desenvolupament d'un client capaç de consumir serveis Web creats segons wps i integrat a la plataforma gvSIG.

PalmaRouting : cálculo web de rutas con pgRouting, OpenStreetMap y OpenLayers

Con este proyecto se pretender dar una visión global de los SIG, y cuya aplicación principal es calcular y mostrar el camino a seguir entre dos puntos. Tanto el resultadoobtenido como los puntos de inicio y fin de la ruta deben mostrarse sobre un mapa enun navegador. Como particularidad del PFC, el mapa a mostrar corresponde a laciudad de Palma de Mallorca, y se establece como puntos de destino para las rutas losatractivos turísticos o puntos de interés de la ciudad.