A basis for instrusion detection in distributed systems using kernel-level data tainting

This project was a step forward in developing intrusion detection systems in distributed environments such as web services. It investigates a new approach of detection based on so-called "taint-marking" techniques and introduces a theoretical framework along with its implementation in the Linux kernel.

Decision making guidelines for sustainable construction of industrialised building systems

The construction industry has an obligation to respond to sustainability expectations of our society. Solutions that integrate innovative, intelligent and sustainability deliverables are vital for us to meet new and emerging challenges. Industrialised Building Systems (IBS), or known otherwise as prefabrication, employs a combination of ready-made components in the construction of buildings. They promote quality of production, enhance simplification of construction processes and minimise waste. The unique characteristics of this construction method respond well to sustainability. Despite the promises however, IBS has yet to be effectively implemented in Malaysia. There are often misconceptions among key stakeholders about IBS applications. The existing rating schemes fail to assess IBS against sustainability measures. To ensure the capture of full sustainability potential in buildings developed, the critical factors and action plans agreeable to all participants in the development processes need to be identified. Through questionnaire survey, eighteen critical factors relevant to IBS sustainability were identified and encapsulated into a conceptual framework to coordinate a systematic IBS decision making approach. Five categories were used to separate the critical factors into: ecological performance; economic value; social equity and culture; technical quality; and implementation and enforcement. This categorisation extends the "Triple Bottom Lines" to include social, economic, environmental and institutional dimensions. Semi-structured interviews help identify strategies of actions and solutions of potential problems through a SWOT analysis framework. These tools help the decision-makers maximise the opportunities by using available strengths, avoid weaknesses, and diagnose possible threats in the examined issues. The recommendations formed an integrated action plan to present information on what and how to improve sustainability through tackling each critical factor during IBS development. It can be used as part of the project briefing documents for IBS designers. For validation and finalisation the research deliverables, three case studies were conducted. The research fills a current gap by responding to IBS project scenarios in developing countries. It also provides a balanced view for designers to better understand sustainability potential and prioritize attentions to manage sustainability issues in IBS applications.

Sensemaking and sustainable practicing: Functional affordances of information systems in green transformations

This paper explores how a world-wide operating software solutions provider implemented environmentally sustainable business practices in response to emerging environmental concerns. Through an interpretive case study, we develop a theoretical framework that identifies four important functional affordances originating in information systems, which are required in environmental sustainability transformations as they create an actionable context in which (1) organizations can engage in a sensemaking process related to understanding emerging environmental requirements, and (2) individuals can implement environmentally sustainable work practices. Through our work, we provide several contributions, including a better understanding of IS-enabled organizational change and the types of functional affordances of information systems that are required in sustainability transformations. We describe implications relating to (1) how information systems can contribute to the creation of environmentally sustainable organizations, (2) the design of information systems to create required functional affordances, (3) the management of sustainability transformations, and (4) the further development of the concept of functional affordances in IS research.

Shifting from asset dominant to service centric delivery systems: engaging users and communities

Research and practice has observed a shift toward service-oriented approaches that depend on input from users and community as co-producers of services. Yet, in delivering public infrastructure the focus is still on assets rather than services. The contribution of external stakeholders in the co-production of public services is still limited. Using the Policy Delphi with a panel of experts, we found that although practitioners understand the need for asset management to follow the service approach, guidelines and policies still lack that service-centric perspective. Findings revealed a range of obstacles to effective service delivery, related to the sub-optimal involvement of stakeholders’, asymmetric levels of power, the lack of accountability, transparency and availability of government, and the lack of genuine consultations between government and stakeholder groups. The paper concludes by offering directions and strategies for asset managers and policymakers to support and reconnect disengaged government-citizen relations for optimal service delivery outcomes in asset management.

Aqueous phase synthesis of copper nanoparticles : a link between heavy metal resistance and nanoparticle synthesis ability in bacterial systems

We demonstrate aqueous phase biosynthesis of phase-pure metallic copper nanoparticles (CuNPs) using a silver resistant bacterium Morganella morganii. This is particularly important considering that there has been no report that demonstrates biosynthesis and stabilization of pure copper nanoparticles in the aqueous phase. Electrochemical analysis of bacterial cells exposed to Cu2+ ions provides new insights into the mechanistic aspect of Cu2+ ion reduction within the bacterial cell and indicates a strong link between the silver and copper resistance machinery of bacteria in the context of metal ion reduction. The outcomes of this study take us a step closer towards designing rational strategies for biosynthesis of different metal nanoparticles using microorganisms.

Pull-out strength of steel roof and wall cladding systems

When steel roof and wall cladding systems are subjected to wind uplift/suction forces, local pull-through/dimpling failures or pull-out failures occur prematurely at their screwed connections. During extreme wind events such as storms and hurricanes, these localized failures then lead to severe damage to buildings and their contents. An investigation was therefore carried out to study the failure that occurs when the screw fastener pulls out of the steel battens, purlins, or girts. Both two-span cladding tests and small-scale tests were conducted using a range of commonly used screw fasteners and steel battens, purlins, and girts. Experimental results showed that the current design formula may not be suitable unless a reduced capacity factor of 0.4 is used. Therefore, an improved design formula has been developed for pull-out failures in steel cladding systems. The formula takes into account thickness and ultimate tensile strength of steel, along with thread diameter and the pitch of screw fasteners, in order to model the pull-out behavior more accurately. This paper presents the details of this experimental investigation and its results.

Cyclic pull-out strength of steel roof and wall cladding systems

When crest-fixed thin steel roof cladding systems are subjected to wind uplift, local pull-through or pull-out failures occur prematurely at their screwed connections. During high wind events such as storms and cyclones these localised failures then lead to severe damage to buildings and their contents. In recent times, the use of thin steel battens/purlins has increased considerably. This has made the pull-out failures more critical in the design of steel cladding systems. Recent research has developed a design formula for the static pull-out strength of steel cladding systems. However, the effects of fluctuating wind uplift loading that occurs during high wind events are not known. Therefore a series of constant amplitude cyclic tests has been undertaken on connections between steel battens made of different thicknesses and steel grades, and screw fasteners with varying diameter and pitch. This paper presents the details of these cyclic tests and the results.

Prediction and proactivity in real-time interactive music systems

We advocate for the use of predictive techniques in interactive computer music systems. We suggest that the inclusion of prediction can assist in the design of proactive rather than reactive computational performance partners. We summarize the significant role prediction plays in human musical decisions, and the only modest use of prediction in interactive music systems to date. After describing how we are working toward employing predictive processes in our own metacreation software we reflect on future extensions to these approaches.

Beyond compliance : project on an integrated systems approach for pest risk management in South East Asia

The Beyond Compliance project, which began in July 2011 with funding from the Standards and Trade Development Facility for 2 years, aims to enhance competency and confidence in the South East Asian sub-region by applying a Systems Approach for pest risk management. The Systems Approach involves the use of integrated measures, at least two of which are independent, that cumulatively reduce the risk of introducing exotic pests through trade. Although useful in circumstances where single measures are inappropriate or unavailable, the Systems Approach is inherently more complicated than single-measure approaches, which may inhibit its uptake. The project methodology is to take prototype decision-support tools, such as Control Point-Bayesian Networks (CP-BN), developed in recent plant health initiatives in other regions, including the European PRATIQUE project, and to refine them within this sub-regional context. Case studies of high-priority potential agricultural trade will be conducted by National Plant Protection Organizations of participating South East Asian countries in trials of the tools, before further modifications. Longer term outcomes may include: more robust pest risk management in the region (for exports and imports); greater inclusion of stakeholders in development of pest risk management plans; increased confidence in trade negotiations; and new opportunities for trade.

V: Rewriting and reclaiming history : an analysis of the emergence of restorative justice in western criminal justice systems

During the last three decades, restorative justice has emerged in numerous localities around the world as an accepted approach to responding to crime. This article, which stems from a doctoral study on the history of restorative justice, provides a critical analysis of accepted histories of restorative practices. It revisits the celebrated historical texts of the restorative justice movement, and re-evaluates their contribution to the emergence of restorative justice measures. It traces the emergence of the term 'restorative justice', and reveals that it emerged in much earlier writings than is commonly thought to be the case by scholars in the restorative justice field. It also briefly considers some 'power struggles' in relation to producing an accepted version of the history of restorative justice, and scholars' attempts to 'rewrite history' to align with current views on restorative justice. Finally, this article argues that some histories of restorative justice selectively and inaccurately portray key figures from the history of criminology as restorative justice supporters. This, it is argued, gives restorative justice a false lineage and operates to legitimise the widespread adoption of restorative justice around the globe.

Intrusion detection in distributed systems, an approach based on taint marking

This paper presents a new framework for distributed intrusion detection based on taint marking. Our system tracks information flows between applications of multiple hosts gathered in groups (i.e., sets of hosts sharing the same distributed information flow policy) by attaching taint labels to system objects such as files, sockets, Inter Process Communication (IPC) abstractions, and memory mappings. Labels are carried over the network by tainting network packets. A distributed information flow policy is defined for each group at the host level by labeling information and defining how users and applications can legally access, alter or transfer information towards other trusted or untrusted hosts. As opposed to existing approaches, where information is most often represented by two security levels (low/high, public/private, etc.), our model identifies each piece of information within a distributed system, and defines their legal interaction in a fine-grained manner. Hosts store and exchange security labels in a peer to peer fashion, and there is no central monitor. Our IDS is implemented in the Linux kernel as a Linux Security Module (LSM) and runs standard software on commodity hardware with no required modification. The only trusted code is our modified operating system kernel. We finally present a scenario of intrusion in a web service running on multiple hosts, and show how our distributed IDS is able to report security violations at each host level.

What is an expert? A systems perspective on expertise

1. Expert knowledge continues to gain recognition as a valuable source of information in a wide range of research applications. Despite recent advances in defining expert knowledge, comparatively little attention has been given to how to view expertise as a system of interacting contributory factors, and thereby, to quantify an individual’s expertise. 2. We present a systems approach to describing expertise that accounts for many contributing factors and their interrelationships, and allows quantification of an individual’s expertise. A Bayesian network (BN) was chosen for this purpose. For the purpose of illustration, we focused on taxonomic expertise. The model structure was developed in consultation with professional taxonomists. The relative importance of the factors within the network were determined by a second set of senior taxonomists. This second set of experts (i.e. supra-experts) also provided validation of the model structure. Model performance was then assessed by applying the model to hypothetical career states in the discipline of taxonomy. Hypothetical career states were used to incorporate the greatest possible differences in career states and provide an opportunity to test the model against known inputs. 3. The resulting BN model consisted of 18 primary nodes feeding through one to three higher-order nodes before converging on the target node (Taxonomic Expert). There was strong consistency among node weights provided by the supra-experts for some nodes, but not others. The higher order nodes, “Quality of work” and “Total productivity”, had the greatest weights. Sensitivity analysis indicated that although some factors had stronger influence in the outer nodes of the network, there was relatively equal influence of the factors leading directly into the target node. Despite differences in the node weights provided by our supra-experts, there was remarkably good agreement among assessments of our hypothetical experts that accurately reflected differences we had built into them. 4. This systems approach provides a novel way of assessing the overall level of expertise of individuals, accounting for multiple contributory factors, and their interactions. Our approach is adaptable to other situations where it is desirable to understand components of expertise.

An IEEE 802.11p empirical performance model for cooperative systems applications

IEEE 802.11p is the new standard for Inter-Vehicular Communications (IVC) using the 5.9 GHz frequency band, as part of the DSRC framework; it will enable applications based on Cooperative Systems. Simulation is widely used to estimate or verify the potential benefits of such cooperative applications, notably in terms of safety for the drivers. We have developed a performance model for 802.11p that can be used by simulations of cooperative applications (e.g. collision avoidance) without requiring intricate models of the whole IVC stack. Instead, it provide a a straightforward yet realistic modelisation of IVC performance. Our model uses data from extensive field trials to infer the correlation between speed, distance and performance metrics such as maximum range, latency and frame loss. Then, we improve this model to limit the number of profiles that have to be generated when there are more than a few couples of emitter-receptor in a given location. Our model generates realistic performance for rural or suburban environments among small groups of IVC-equipped vehicles and road side units.

Ergonomic DHM systems - limitations and trends – a systematic literature review focused on the ‘future of ergonomics’

Digital Human Models (DHM) have been used for over 25 years. They have evolved from simple drawing templates, which are nowadays still used in architecture, to complex and Computer Aided Engineering (CAE) integrated design and analysis tools for various ergonomic tasks. DHM are most frequently used for applications in product design and production planning, with many successful implementations documented. DHM from other domains, as for example computer user interfaces, artificial intelligence, training and education, or the entertainment industry show that there is also an ongoing development towards a comprehensive understanding and holistic modeling of human behavior. While the development of DHM for the game sector has seen significant progress in recent years, advances of DHM in the area of ergonomics have been comparatively modest. As a consequence, we need to question if current DHM systems are fit for the design of future mobile work systems. So far it appears that DHM in Ergonomics are rather limited to some traditional applications. According to Dul et al. (2012), future characteristics of Human Factors and Ergonomics (HFE) can be assigned to six main trends: (1) global change of work systems, (2) cultural diversity, (3) ageing, (4) information and communication technology (ICT), (5) enhanced competiveness and the need for innovation, and; (6) sustainability and corporate social responsibility. Based on a literature review, we systematically investigate the capabilities of current ergonomic DHM systems versus the ‘Future of Ergonomics’ requirements. It is found that DHMs already provide broad functionality in support of trends (1) and (2), and more limited options in regards to trend (3). Today’s DHM provide access to a broad range of national and international databases for correct differentiation and characterization of anthropometry for global populations. Some DHM explicitly address social and cultural modeling of groups of people. In comparison, the trends of growing importance of ICT (4), the need for innovation (5) and sustainability (6) are addressed primarily from a hardware-oriented and engineering perspective and not reflected in DHM. This reflects a persistent separation between hardware design (engineering) and software design (information technology) in the view of DHM – a disconnection which needs to be urgently overcome in the era of software defined user interfaces and mobile devices. The design of a mobile ICT-device is discussed to exemplify the need for a comprehensive future DHM solution. Designing such mobile devices requires an approach that includes organizational aspects as well as technical and cognitive ergonomics. Multiple interrelationships between the different aspects result in a challenging setting for future DHM. In conclusion, the ‘Future of Ergonomics’ pose particular challenges for DHM in regards to the design of mobile work systems, and moreover mobile information access.

Prognostic factors for malignant mesothelioma in 142 patients : validation of CALGB and EORTC prognostic scoring systems

Background The incidence of malignant mesothelioma is increasing. There is the perception that survival is worse in the UK than in other countries. However, it is important to compare survival in different series based on accurate prognostic data. The European Organisation for Research and Treatment of Cancer (EORTC) and the Cancer and Leukaemia Group B (CALGB) have recently published prognostic scoring systems. We have assessed the prognostic variables, validated the EORTC and CALGB prognostic groups, and evaluated survival in a series of 142 patients. Methods Case notes of 142 consecutive patients presenting in Leicester since 1988 were reviewed. Univariate analysis of prognostic variables was performed using a Cox proportional hazards regression model. Statistically significant variables were analysed further in a forward, stepwise multivariate model. EORTC and CALGB prognostic groups were derived, Kaplan-Meier survival curves plotted, and survival rates were calculated from life tables. Results Significant poor prognostic factors in univariate analysis included male sex, older age, weight loss, chest pain, poor performance status, low haemoglobin, leukocytosis, thrombocytosis, and non-epithelial cell type (p<0.05). The prognostic significance of cell type, haemoglobin, white cell count, performance status, and sex were retained in the multivariate model. Overall median survival was 5.9 (range 0-34.3) months. One and two year survival rates were 21.3% (95% CI 13.9 to 28.7) and 3.5% (0 to 8.5), respectively. Median, one, and two year survival data within prognostic groups in Leicester were equivalent to the EORTC and CALGB series. Survival curves were successfully stratified by the prognostic groups. Conclusions This study validates the EORTC and CALGB prognostic scoring systems which should be used both in the assessment of survival data of series in different countries and in the stratification of patients into randomised clinical studies.