SELinux policy management framework for HIS

Health Information Systems (HIS) make extensive use of Information and Communication Technologies (ICT). The use of ICT aids in improving the quality and efficiency of healthcare services by making healthcare information available at the point of care (Goldstein, Groen, Ponkshe, and Wine, 2007). The increasing availability of healthcare data presents security and privacy issues which have not yet been fully addressed (Liu, Caelli, May, and Croll, 2008a). Healthcare organisations have to comply with the security and privacy requirements stated in laws, regulations and ethical standards, while managing healthcare information. Protecting the security and privacy of healthcare information is a very complex task (Liu, May, Caelli and Croll, 2008b). In order to simplify the complexity of providing security and privacy in HIS, appropriate information security services and mechanisms have to be implemented. Solutions at the application layer have already been implemented in HIS such as those existing in healthcare web services (Weaver et al., 2003). In addition, Discretionary Access Control (DAC) is the most commonly implemented access control model to restrict access to resources at the OS layer (Liu, Caelli, May, Croll and Henricksen, 2007a). Nevertheless, the combination of application security mechanisms and DAC at the OS layer has been stated to be insufficient in satisfying security requirements in computer systems (Loscocco et al., 1998). This thesis investigates the feasibility of implementing Security Enhanced Linux (SELinux) to enforce a Role-Based Access Control (RBAC) policy to help protect resources at the Operating System (OS) layer. SELinux provides Mandatory Access Control (MAC) mechanisms at the OS layer. These mechanisms can contain the damage from compromised applications and restrict access to resources according to the security policy implemented. The main contribution of this research is to provide a modern framework to implement and manage SELinux in HIS. The proposed framework introduces SELinux Profiles to restrict access permissions over the system resources to authorised users. The feasibility of using SELinux profiles in HIS was demonstrated through the creation of a prototype, which was submitted to various attack scenarios. The prototype was also subjected to testing during emergency scenarios, where changes to the security policies had to be made on the spot. Attack scenarios were based on vulnerabilities common at the application layer. SELinux demonstrated that it could effectively contain attacks at the application layer and provide adequate flexibility during emergency situations. However, even with the use of current tools, the development of SELinux policies can be very complex. Further research has to be made in order to simplify the management of SELinux policies and access permissions. In addition, SELinux related technologies, such as the Policy Management Server by Tresys Technologies, need to be researched in order to provide solutions at different layers of protection.

Nation & internation practices in decision support tools in road asset management

This document provides a review of international and national practices in investment decision support tools in road asset management. Efforts were concentrated on identifying analytic frameworks, evaluation methodologies and criteria adopted by current tools. Emphasis was also given to how current approaches support Triple Bottom Line decision-making. Benefit Cost Analysis and Multiple Criteria Analysis are principle methodologies in supporting decision-making in Road Asset Management. The complexity of the applications shows significant differences in international practices. There is continuing discussion amongst practitioners and researchers regarding to which one is more appropriate in supporting decision-making. It is suggested that the two approaches should be regarded as complementary instead of competitive means. Multiple Criteria Analysis may be particularly helpful in early stages of project development, say strategic planning. Benefit Cost Analysis is used most widely for project prioritisation and selecting the final project from amongst a set of alternatives. Benefit Cost Analysis approach is useful tool for investment decision-making from an economic perspective. An extension of the approach, which includes social and environmental externalities, is currently used in supporting Triple Bottom Line decision-making in the road sector. However, efforts should be given to several issues in the applications. First of all, there is a need to reach a degree of commonality on considering social and environmental externalities, which may be achieved by aggregating the best practices. At different decision-making level, the detail of consideration of the externalities should be different. It is intended to develop a generic framework to coordinate the range of existing practices. The standard framework will also be helpful in reducing double counting, which appears in some current practices. Cautions should also be given to the methods of determining the value of social and environmental externalities. A number of methods, such as market price, resource costs and Willingness to Pay, are found in the review. The use of unreasonable monetisation methods in some cases has discredited Benefit Cost Analysis in the eyes of decision makers and the public. Some social externalities, such as employment and regional economic impacts, are generally omitted in current practices. This is due to the lack of information and credible models. It may be appropriate to consider these externalities in qualitative forms in a Multiple Criteria Analysis. Consensus has been reached in considering noise and air pollution in international practices. However, Australia practices generally omitted these externalities. Equity is an important consideration in Road Asset Management. The considerations are either between regions, or social groups, such as income, age, gender, disable, etc. In current practice, there is not a well developed quantitative measure for equity issues. More research is needed to target this issue. Although Multiple Criteria Analysis has been used for decades, there is not a generally accepted framework in the choice of modelling methods and various externalities. The result is that different analysts are unlikely to reach consistent conclusions about a policy measure. In current practices, some favour using methods which are able to prioritise alternatives, such as Goal Programming, Goal Achievement Matrix, Analytic Hierarchy Process. The others just present various impacts to decision-makers to characterise the projects. Weighting and scoring system are critical in most Multiple Criteria Analysis. However, the processes of assessing weights and scores were criticised as highly arbitrary and subjective. It is essential that the process should be as transparent as possible. Obtaining weights and scores by consulting local communities is a common practice, but is likely to result in bias towards local interests. Interactive approach has the advantage in helping decision-makers elaborating their preferences. However, computation burden may result in lose of interests of decision-makers during the solution process of a large-scale problem, say a large state road network. Current practices tend to use cardinal or ordinal scales in measure in non-monetised externalities. Distorted valuations can occur where variables measured in physical units, are converted to scales. For example, decibels of noise converts to a scale of -4 to +4 with a linear transformation, the difference between 3 and 4 represents a far greater increase in discomfort to people than the increase from 0 to 1. It is suggested to assign different weights to individual score. Due to overlapped goals, the problem of double counting also appears in some of Multiple Criteria Analysis. The situation can be improved by carefully selecting and defining investment goals and criteria. Other issues, such as the treatment of time effect, incorporating risk and uncertainty, have been given scant attention in current practices. This report suggested establishing a common analytic framework to deal with these issues.

Strategy for the development of investment decision-making framework for road asset management for queensland department of main roads

The aim of this project is to develop a systematic investment decision-making framework for infrastructure asset management by incorporation economic justification, social and environmental consideration in the decision-making process. This project assesses the factors that are expected to provide significant impacts on the variability of expenditures. A procedure for assessing risk and reliability for project investment appraisals will be developed. The project investigates public perception, social and environmental impacts on road infrastructure investment. This research will contribute to the debate about how important social and environmental issues should be incorporated into the investment decision-making process for infrastructure asset management.

Review on Australian and international practices for asset management in building infrastructure

Both in developed and developing economies, major public funding is invested in civil infrastructure assets. Efficiency and comfort level of expected and demanded living standards are largely dependant on the management strategies of these assets. Buildings are one of the major & vital assets, which need to be maintained primarily to ensure its functionality by effective & efficient delivery of services and to optimize economic benefits. Not withstanding, public building infrastructure is not considered in Infrastructure report card published by Australian Infrastructure Report Card Alliance Partners (2001). The reason appears to be not having enough data to rate public building infrastructure. American Infrastructure Report Card (2001) gave “School Buildings” ‘d-’ rating, which is below ‘poor’. For effective asset management of building infrastructure, a need emerged to optimise the budget for managing assets, to cope up with increased user expectations, to response effectively to possible asset failures, to deal with ageing of assets and aging populations and to treat other scenarios including technology advancement and non-asset solutions. John (Asset Management, 2001) suggests that in the area of asset management worldwide, UK, Australia and New Zealand are leading.

Comparative study : health research on traffic noise pollution vs. Technical research on traffic noise mitigation

Community awareness and the perception on the traffic noise related health impacts have increased significantly over the last decade resulting in a large volume of public inquiries flowing to Road Authorities for planning advice. Traffic noise management in the urban environment is therefore becoming a “social obligation”, essentially due to noise related health concerns. Although various aspects of urban noise pollution and mitigation have been researched independently, an integrated approach by stakeholders has not been attempted. Although the current treatment and mitigation strategies are predominantly handled by the Road Agencies, a concerted effort by all stakeholders is becoming mandatory for effective and tangible outcomes in the future. A research project is underway a RMIT University, Australia, led by the second author to consider the use of “hedonic pricing” for alternative noise amelioration treatments within the road reserve and outside the road reserve. The project aims to foster a full range noise abatement strategy encompassing source, path and noise receiver. The benefit of such a study would be to mitigate the problem where it is most effective and would defuse traditional “authority” boundaries to produce the optimum outcome. The project is conducted in collaboration with the Department of Main Roads Queensland, Australia and funded by the CRC for Construction Innovation. As part of this study, a comprehensive literature search is currently underway to investigate the advancements in community health research, related to environmental noise pollution, and the advancements in technical and engineering research in mitigating the issue. This paper presents the outcomes of this work outlining state of the art, national and international good practices and gap analysis to identify major anomalies and developments.

Construction projects immediate health check : a CSF & KPI approach

Many factors have the potential to influence human health. These factors need to be monitored to maintain health. As is the case with human health, construction projects have a number of critical factors that can facilitate a broad evaluation of project health. In order to use these factors as an indication of health, they need to be assessed. This assessment can help to achieve desired outcomes for the project. This paper discusses the approach of assessing Critical Success Factors (CSFs) using Key Performance Indicators (KPIs) to ascertain the immediate health of a construction project. This approach is applicable to all phases of construction projects and many construction procurement methods. KPIs have been benchmarked on the basis of industry standards and historical data. The robustness of the KPIs to assess the immediate health of a project has been validated using Australian and international case studies.

Road Asset Management Investment

Australias civil infrastructure assets of roads, bridges, railways, buildings and other structures are worth billions of dollars. To effectively manage road infrastructures, road agencies firstly need to optimise the expenditure for data collection whilst not jeopardising the reliability in using the optimised data to predict maintenance and rehabilitation costs. Secondly, road agencies need to accurately predict the deterioration rates of infrastructures to reflect local conditions so that the budget estimates can be accurately calculated. Finally, the prediction of budgets for maintenance and rehabilitation must be reasonably reliable.

A model for assessing and correcting project Health

Maintaining the health of a construction project can help to achieve the desired outcomes of the project. An analogy is drawn to the medical process of a human health check where it is possible to broadly diagnose health in terms of a number of key areas such as blood pressure or cholesterol level. Similarly it appears possible to diagnose the current health of a construction project in terms of a number of Critical Success Factors (CSFs) and key performance indicators (KPIs). The medical analogy continues into the detailed investigation phase where a number of contributing factors are evaluated to identify possible causes of ill health and through the identification of potential remedies to return the project to the desired level of health. This paper presents the development of a model that diagnoses the immediate health of a construction project, investigates the factors which appear to be causing the ill health and proposes a remedy to return the project to good health. The proposed model uses the well-established continuous improvement management model (Deming, 1986) to adapt the process of human physical health checking to construction project health.

Integrated versus non-integrated management and care for clients with co-occurring mental health and substance use disorders : a qualitative systematic review of randomised controlled trials

The purpose of this paper is to conduct a qualitative review of randomised controlled trials in relation to the treatment of adults with co-occurring mental health and substance use disorder (MH/SUD). In particular, integrated approaches are compared with non-integrated approaches to treatment. Ten articles were identified for inclusion in the review. The findings are equivocal with regard to the superior efficacy of integrated approaches to treatment, although the many limitations of the studies need to be considered in our understanding of this finding. Clearly, this is an extremely challenging client group to engage and maintain in intervention research, and the complexity and variability of the problems render control particularly difficult. The lack of available evidence to support the superiority of integration is discussed in relation to these challenges. Much remains to be investigated with regard to integrated management and care for people with co-occurring and MH/SUD, particularly for specific combinations of dual diagnosis and giving consideration to the level of inter-relatedness between the disorders.

Contrasting views and experiences of health professionals on the management of comorbid substance misuse and mental disorders

Objectives: To determine opinions and experiences of health professionals concerning the management of people with comorbid substance misuse and mental health disorders. Method: We conducted a survey of staff from mental health services and alcohol and drug services across Queensland. Survey items on problems and potential solutions had been generated by focus groups. Results: We analysed responses from 112 staff of alcohol and drug services and 380 mental health staff, representing a return of 79% and 42% respectively of the distributed surveys. One or more issues presented a substantial clinical management problem for 98% of respondents. Needs for increased facilities or services for dual disorder clients figured prominently. These included accommodation or respite care, work and rehabilitation programs, and support groups and resource materials for families. Needs for adolescent dual diagnosis services and after-hours alcohol and drug consultations were also reported. Each of these issues raised substantial problems for over 70% of staff. Another set of problems involved coordination of client care across mental health and alcohol and drug services, including disputes over duty of care. Difficulties with intersectoral liaison were more pronounced for alcohol and drug staff than for mental health. A majority of survey respondents identified 13 solutions as practical. These included routine screening for dual diagnosis at intake, and a range of proposals for closer intersectoral communication such as exchanging client information, developing shared treatment plans, conducting joint case conferences and offering consultation facilities. Conclusions: A wide range of problems for the management of comorbid disorders were identified. While solution of some problems will require resource allocation, many may be addressed by closer liaison between existing services.

Stakeholder impact analysis of infrastructure project management in developing countries : a study of perception of project managers in state-owned engineering firms in Vietnam

Construction projects can involve a diverse range of stakeholders and the success of the project depends very much on fulfilling their needs and expectations. It is important, therefore, to identify and recognize project stakeholders and develop a rigorous stakeholder management process. However, limited research has investigated the impact of stakeholders on construction projects in developing countries. A stakeholder impact analysis (SIA), based on an approach developed by Olander (2007), was adopted to investigate the stakeholders' impact on state-owned civil engineering projects in Vietnam. This involved the analysis of a questionnaire survey of 57 project managers to determine the relative importance of different stakeholders. The results show the client to have the highest level of impact on the projects, followed by project managers and the senior management of state-owned engineering firms. The SIA also provides suggestions to project managers in developing and evaluating the stakeholder management process.

Condition-based prognosis of machine health

Modern machines are complex and often required to operate long hours to achieve production targets. The ability to detect symptoms of failure, hence, forecasting the remaining useful life of the machine is vital to prevent catastrophic failures. This is essential to reducing maintenance cost, operation downtime and safety hazard. Recent advances in condition monitoring technologies have given rise to a number of prognosis models that attempt to forecast machinery health based on either condition data or reliability data. In practice, failure condition trending data are seldom kept by industries and data that ended with a suspension are sometimes treated as failure data. This paper presents a novel approach of incorporating historical failure data and suspended condition trending data in the prognostic model. The proposed model consists of a FFNN whose training targets are asset survival probabilities estimated using a variation of Kaplan-Meier estimator and degradation-based failure PDF estimator. The output survival probabilities collectively form an estimated survival curve. The viability of the model was tested using a set of industry vibration data.