Information Security and Privacy : Proceedings of the 9th Australasian Conference, ACISP 2004, Sydney, Australia, July 13-15, 2004.

Preface The 9th Australasian Conference on Information Security and Privacy (ACISP 2004) was held in Sydney, 13–15 July, 2004. The conference was sponsored by the Centre for Advanced Computing – Algorithms and Cryptography (ACAC), Information and Networked Security Systems Research (INSS), Macquarie University and the Australian Computer Society. The aims of the conference are to bring together researchers and practitioners working in areas of information security and privacy from universities, industry and government sectors. The conference program covered a range of aspects including cryptography, cryptanalysis, systems and network security. The program committee accepted 41 papers from 195 submissions. The reviewing process took six weeks and each paper was carefully evaluated by at least three members of the program committee. We appreciate the hard work of the members of the program committee and external referees who gave many hours of their valuable time. Of the accepted papers, there were nine from Korea, six from Australia, five each from Japan and the USA, three each from China and Singapore, two each from Canada and Switzerland, and one each from Belgium, France, Germany, Taiwan, The Netherlands and the UK. All the authors, whether or not their papers were accepted, made valued contributions to the conference. In addition to the contributed papers, Dr Arjen Lenstra gave an invited talk, entitled Likely and Unlikely Progress in Factoring. This year the program committee introduced the Best Student Paper Award. The winner of the prize for the Best Student Paper was Yan-Cheng Chang from Harvard University for his paper Single Database Private Information Retrieval with Logarithmic Communication. We would like to thank all the people involved in organizing this conference. In particular we would like to thank members of the organizing committee for their time and efforts, Andrina Brennan, Vijayakrishnan Pasupathinathan, Hartono Kurnio, Cecily Lenton, and members from ACAC and INSS.

The security and privacy of usage policies and provenance logs in an Information Accountability Framework

The potential benefits of shared eHealth records systems are promising for the future of improved healthcare. However, the uptake of such systems is hindered by concerns over the security and privacy of patient information. The use of Information Accountability and so called Accountable-eHealth (AeH) systems has been proposed to balance the privacy concerns of patients with the information needs of healthcare professionals. However, a number of challenges remain before AeH systems can become a reality. Among these is the need to protect the information stored in the usage policies and provenance logs used by AeH systems to define appropriate use of information and hold users accountable for their actions. In this paper, we discuss the privacy and security issues surrounding these accountability mechanisms, define valid access to the information they contain, discuss solutions to protect them, and verify and model an implementation of the access requirements as part of an Information Accountability Framework.

Information technology investment governance: What is it and does it matter?

While the growth in the number of IT investments remains strong, research in the IT investment field is limited, resulting in suboptimal practical guidance on effectively governing IT investments. Based on resource-based theory, this paper reports the initial work involved in developing a construct names IT investment governance (ITIG), because it can be used to measure organizations' capability to govern their IT investments. This paper then empirically examines the association of ITIG and corporate performance. The preliminary result is a four-factor, 16-item instrument for assessing the ITIG construct. This method's factors are IT investment value governance, IT investment value monitoring, IT investment appraisals and IT investment project management. The impact of ITIG on corporate performance was demonstrated with a significant and positive relationship found to exist between the ITIG construct and corporate performance, thus supporting the effectiveness of the ITIG construct. Corporations with higher levels of ITIG capability are more likely to maximize the contribution of their IT investments to firm value.

The dual nature of information systems in enabling a new wave of hardware ventures: Towards a theory

Hardware ventures are emerging entrepreneurial firms that create new market offerings based on development of digital devices. These ventures are important elements in the global economy but have not yet received much attention in the literature. Our interest in examining hardware ventures is specifically in the role that information system (IS) resources play in enabling them. We ask how the role of IS resources for hardware ventures can be conceptualized and develop a framework for assessment. Our framework builds on the distinction of operand and operant resources and distinguishes between two key lifecycle stages of hardware ventures: start-up and growth. We show how this framework can be used to discuss the role, nature, and use of IS for hardware ventures and outline empirical research strategies that flow from it. Our work contributes to broadening and enriching the IS field by drawing attention to its role in significant and novel phenomena.

The effectiveness of communication interventions in providing older people with information on access to in-home health and social care services: A systematic review protocol

The objective of this review is to locate, critically appraise and synthesize evidence on the effectiveness of communication strategies for providing older people access to information regarding in-home health and social care services. The review question is: What is the effectiveness of communication interventions in providing older people with information about in-home health and social care services?

An archival analysis of green information technology: The current state and future directions

This thesis provides a review of 199 papers published on Green IT/IS between 2007−2014, in order to present taxonomy of segments in Green IT/IS publications, where the segments are later used for multiple analyses to facilitate future research and to provide a retrospective analysis of existing knowledge and gaps thereof. This research also attempts to make a unique contribution to our understanding of Green IT/IS, by consolidating papers it observes current patterns of literature through approach analysis and segmentation, as well as allocating studies to the technology, process, or outcome (TPO) stage. Highlighting the necessity of a consolidated approach, these classification systems have been combined into a TPO matrix so that the studies could be arranged according to which stage of the Green IT/IS cycle they were focused on. We believe that these analyses will provide a solid platform from which future Green IT/IS research can be launched.

Use of online health information to manage children’s health care: A prospective study investigating parental decisions

Background The use of the internet to access information is rapidly increasing; however, the quality of health information provided on various online sites is questionable. We aimed to examine the underlying factors that guide parents' decisions to use online information to manage their child's health care, a behaviour which has not yet been explored systematically. Methods Parents (N=391) completed a questionnaire assessing the standard theory of planned behaviour (TPB) measures of attitude, subjective norm, perceived behavioural control (PBC), and intention as well as the underlying TPB belief-based items (i.e., behavioural, normative, and control beliefs) in addition to a measure of perceived risk and demographic variables. Two months later, consenting parents completed a follow-up telephone questionnaire which assessed the decisions they had made regarding their use of online information to manage their child's health care during the previous 2 months. Results We found support for the TPB constructs of attitude, subjective norm, and PBC as well as the additional construct of perceived risk in predicting parents' intentions to use online information to manage their child's health care, with further support found for intentions, but not PBC, in predicting parents' behaviour. The results of the TPB belief-based analyses also revealed important information about the critical beliefs that guide parents' decisions to engage in this child health management behaviour. Conclusions This theory-based investigation to understand parents' motivations and online information-seeking behaviour is key to developing recommendations and policies to guide more appropriate help-seeking actions among parents.

Extending building information models to construction specifications

This project examined the role that written specifications play in the building procurement process and the relationship that specifications should have with respect to the use of BIM within the construction industry. A three-part approach was developed to integrate specifications, product libraries and BIM. Typically handled by different disciplines within project teams, these provide the basis for a holistic approach to the development of building descriptions through the design process and into construction.

Where is spatial information and science in your world?

Skills in spatial sciences are fundamental to understanding our world in context. Increasing digital presence and the availability of data with accurate spatial components has allowed almost everything researchers and students do to be represented in a spatial context. Representing outcomes and disseminating information has moved from 2D to 4D with time series animation. In the next 5 years industry will not only demand QUT graduates have spatial skills along with analytical skills, graduates will be required to present their findings in spatial visualizations that show spatial, spectral and temporal contexts. Domains such as engineering and science will no longer be the leaders in spatial skills as social sciences, health, arts and the business community gain momentum from place-based research including human interactions. A university that can offer students a pathway to advanced spatial investigation will be ahead of the game.

2nd International Workshop on Secure and Privacy-Aware Information Management in eHealth

Information security and privacy in the healthcare domain is a complex and challenging problem for computer scientists, social scientists, law experts and policy makers. Appropriate healthcare provision requires specialized knowledge, is information intensive and much patient information is of a particularly sensitive nature. Electronic health record systems provide opportunities for information sharing which may enhance healthcare services, for both individuals and populations. However, appropriate information management measures are essential for privacy preservation...

Educating cultural heritage information professionals for Australia's galleries, libraries, archives and museums: A grounded Delphi study

This research explored the knowledge, skills, qualities, and professional education needs, of information professionals in galleries, libraries, archives and museums (GLAM) in Australia. The findings revealed that although full convergence of these sectors is unlikely, many of the skills, knowledge and qualities would be required across all four sectors. The research used the Grounded Delphi Method, a relatively new methodological extension of the Delphi method that incorporates aspects of Grounded Theory. The findings provide the first empirically based guidelines around what needs to be included in an educational framework for information professionals who will work in the emerging GLAM environment. As the first study of GLAM education requirements in Australia and the wider Asia-Pacific region to take a holistic approach by engaging information professionals across all four sectors, this thesis makes a contribution to the GLAM research field and to information education generally.

A summary of the 'Engineering Education for Sustainable Development:Toolkit of Information & Teaching Material'

This paper reflects on the critical need for an urgent transformation of higher education curriculum globally, to equip society with professionals who can address our 21st Century sustainable living challenges. Specifically it discusses a toolkit called the ‘Engineering Sustainable Solutions Program’, which is a freely available, rigorously reviewed and robust content resource for higher education institutions to access content on innovations and opportunities in the process of evolving the curriculum...

The empire of cancer: Gene patents and cancer voices

In his book, The Emperor of All Maladies, Siddhartha Mukherjee writes a history of cancer — "It is a chronicle of an ancient disease — once a clandestine, 'whispered-about' illness — that has metamorphosed into a lethal shape-shifting entity imbued with such penetrating metaphorical, medical, scientific, and political potency that cancer is often described as the defining plague of our generation." Increasingly, an important theme in the history of cancer is the role of law, particularly in the field of intellectual property law. It is striking that a number of contemporary policy debates over intellectual property and public health have concerned cancer research, diagnosis, and treatment. In the area of access to essential medicines, there has been much debate over Novartis’ patent application in respect of Glivec, a treatment for leukaemia. India’s Supreme Court held that the Swiss company’s patent application violated a safeguard provision in India’s patent law designed to stop evergreening. In the field of tobacco control, the Australian Government introduced plain packaging for tobacco products in order to address the health burdens associated with the tobacco epidemic. This regime was successfully defended in the High Court of Australia. In the area of intellectual property and biotechnology, there have been significant disputes over the Utah biotechnology company Myriad Genetics and its patents in respect of genetic testing for BRCA1 and BRCA2, which are related to breast cancer and ovarian cancer. The Federal Court of Australia handed down a decision on the validity of Myriad Genetics’ patent in respect of genetic testing for BRCA1 in February 2013. The Supreme Court of the United States heard a challenge to the validity of Myriad Genetics’ patents in this area in April 2013, and handed down a judgment in July 2013. Such disputes have involved tensions between intellectual property rights, and public health. This article focuses upon one of these important test cases involving intellectual property, public health, and cancer research. In June 2010, Cancer Voices Australia and Yvonne D’Arcy brought an action in the Federal Court of Australia against the validity of a BRCA1 patent — held by Myriad Genetics Inc, the Centre de Recherche du Chul, the Cancer Institute of Japan and Genetic Technologies Limited. Yvonne D’Arcy — a Brisbane woman who has had treatment for breast cancer — maintained: "I believe that what they are doing is morally and ethically corrupt and that big companies should not control any parts of the human body." She observed: "For my daughter, I've had her have [sic] mammograms, etc, because of me but I would still like her to be able to have the test to see if the mutation gene is in there from me." The applicants made the following arguments: "Genes and the information represented by human gene sequences are products of nature universally present in each individual, and the information content of a human gene sequence is fixed. Genetic variations or mutations are products of nature. The isolation of the BRCA1 gene mutation from the human body constitutes no more than a medical or scientific discovery of a naturally occurring phenomenon and does not give rise to a patentable invention." The applicants also argued that "the alleged invention is not a patentable invention in that, so far as claimed in claims 1–3, it is not a manner of manufacture within the meaning of s 6 of the Statute of Monopolies". The applicants suggested that "the alleged invention is a mere discovery". Moreover, the applicants contended that "the alleged invention of each of claims 1-3 is not a patentable invention because they are claims for biological processes for the generation of human beings". The applicants, though, later dropped the argument that the patent claims related to biological processes for the generation of human beings. In February 2013, Nicholas J of the Federal Court of Australia considered the case brought by Cancer Voices Australia and Yvonne D’Arcy against Myriad Genetics. The judge presented the issues in the case, as follows: "The issue that arises in this case is of considerable importance. It relates to the patentability of genes, or gene sequences, and the practice of 'gene patenting'. Briefly stated, the issue to be decided is whether under the Patents Act 1990 (Cth) a valid patent may be granted for a claim that covers naturally occurring nucleic acid — either deoxyribonucleic acid (DNA) or ribonucleic acid (RNA) — that has been 'isolated'". In this context, the word "isolated" implies that naturally occurring nucleic acid found in the cells of the human body, whether it be DNA or RNA, has been removed from the cellular environment in which it naturally exists and separated from other cellular components also found there. The genes found in the human body are made of nucleic acid. The particular gene with which the patent in suit is concerned (BRCA1) is a human breast and ovarian cancer disposing gene. Various mutations that may be present in this gene have been linked to various forms of cancer including breast cancer and ovarian cancer.' The judge held in this particular case that Myriad Genetics’ patent claims were a "manner of manufacture" under s 6 of the Statute of Monopolies and s 18(1)(a) of the Patents Act 1990 (Cth). The matter is currently under appeal in the Full Court of the Federal Court of Australia. This article interprets the dispute over Myriad Genetics in light of the scholarly work of Nobel Laureate Professor Joseph Stiglitz on inequality. Such work has significant explanatory power in the context of intellectual property and biotechnology. First, Stiglitz has contended that "societal inequality was a result not just of the laws of economics, but also of how we shape the economy — through politics, including through almost every aspect of our legal system". Stiglitz is concerned that "our intellectual property regime … contributes needlessly to the gravest form of inequality." He maintains: "The right to life should not be contingent on the ability to pay." Second, Stiglitz worries that "some of the most iniquitous aspects of inequality creation within our economic system are a result of 'rent-seeking': profits, and inequality, generated by manipulating social or political conditions to get a larger share of the economic pie, rather than increasing the size of that pie". He observes that "the most iniquitous aspect of this wealth appropriation arises when the wealth that goes to the top comes at the expense of the bottom." Third, Stiglitz comments: "When the legal regime governing intellectual property rights is designed poorly, it facilitates rent-seeking" and "the result is that there is actually less innovation and more inequality." He is concerned that intellectual property regimes "create monopoly rents that impede access to health both create inequality and hamper growth more generally." Finally, Stiglitz has recommended: "Government-financed research, foundations, and the prize system … are alternatives, with major advantages, and without the inequality-increasing disadvantages of the current intellectual property rights system.’" This article provides a critical analysis of the Australian litigation and debate surrounding Myriad Genetics’ patents in respect of genetic testing for BRCA1. First, it considers the ruling of Nicholas J in the Federal Court of Australia that Myriad Genetics’ patent was a manner of manufacture as it related to an artificially created state of affairs, and not mere products of nature. Second, it examines the policy debate over gene patents in Australia, and its relevance to the litigation involving Myriad Genetics. Third, it examines comparative law, and contrasts the ruling by Nicholas J in the Federal Court of Australia with developments in the United States, Canada, and the European Union. Fourth, this piece considers the reaction to the decision of Nicholas at first instance in Australia. Fifth, the article assesses the prospects of an appeal to the Full Federal Court of Australia over the Myriad Genetics’ patents. Finally, this article observes that, whatever happens in respect of litigation against Myriad Genetics, there remains controversy over Genetic Technologies Limited. The Melbourne firm has been aggressively licensing and enforcing its related patents on non-coding DNA and genomic mapping.

Beyond blue gene: Intellectual property and bioinformatics

This article considers the challenges posed to intellectual property law by the emerging field of bioinformatics. It examines the intellectual property strategies of established biotechnology companies, such as Celera Genomics, and information technology firms entering into the marketplace, such as IBM. First this paper argues that copyright law is not irrelevant to biotechnology, as some commentators would suggest. It claims that the use of copyright law and contract law is fundamental to the protection of biomedical and genomic databases. Second this article questions whether biotechnology companies are exclusively interested in patenting genes and genetics sequences. Recent evidence suggests that biotechnology companies and IT firms are patenting bioinformatics software and Internet business methods, as well as underlying instrumentation such as microarrays and genechips. Finally, this paper evaluates what impact the privatisation of bioinformatics will have on public research and scientific communication. It raises important questions about integration, interoperability, and the risks of monopoly. It finally considers whether open source software such as the Ensembl Project and peer to peer technology like DSAS will be able to counter this trend of privatisation.