Abstracting and correlating heterogeneous events to detect complex scenarios

The research presented in this thesis addresses inherent problems in signaturebased intrusion detection systems (IDSs) operating in heterogeneous environments. The research proposes a solution to address the difficulties associated with multistep attack scenario specification and detection for such environments. The research has focused on two distinct problems: the representation of events derived from heterogeneous sources and multi-step attack specification and detection. The first part of the research investigates the application of an event abstraction model to event logs collected from a heterogeneous environment. The event abstraction model comprises a hierarchy of events derived from different log sources such as system audit data, application logs, captured network traffic, and intrusion detection system alerts. Unlike existing event abstraction models where low-level information may be discarded during the abstraction process, the event abstraction model presented in this work preserves all low-level information as well as providing high-level information in the form of abstract events. The event abstraction model presented in this work was designed independently of any particular IDS and thus may be used by any IDS, intrusion forensic tools, or monitoring tools. The second part of the research investigates the use of unification for multi-step attack scenario specification and detection. Multi-step attack scenarios are hard to specify and detect as they often involve the correlation of events from multiple sources which may be affected by time uncertainty. The unification algorithm provides a simple and straightforward scenario matching mechanism by using variable instantiation where variables represent events as defined in the event abstraction model. The third part of the research looks into the solution to address time uncertainty. Clock synchronisation is crucial for detecting multi-step attack scenarios which involve logs from multiple hosts. Issues involving time uncertainty have been largely neglected by intrusion detection research. The system presented in this research introduces two techniques for addressing time uncertainty issues: clock skew compensation and clock drift modelling using linear regression. An off-line IDS prototype for detecting multi-step attacks has been implemented. The prototype comprises two modules: implementation of the abstract event system architecture (AESA) and of the scenario detection module. The scenario detection module implements our signature language developed based on the Python programming language syntax and the unification-based scenario detection engine. The prototype has been evaluated using a publicly available dataset of real attack traffic and event logs and a synthetic dataset. The distinct features of the public dataset are the fact that it contains multi-step attacks which involve multiple hosts with clock skew and clock drift. These features allow us to demonstrate the application and the advantages of the contributions of this research. All instances of multi-step attacks in the dataset have been correctly identified even though there exists a significant clock skew and drift in the dataset. Future work identified by this research would be to develop a refined unification algorithm suitable for processing streams of events to enable an on-line detection. In terms of time uncertainty, identified future work would be to develop mechanisms which allows automatic clock skew and clock drift identification and correction. The immediate application of the research presented in this thesis is the framework of an off-line IDS which processes events from heterogeneous sources using abstraction and which can detect multi-step attack scenarios which may involve time uncertainty.

Evaluation of polycaprolactone scaffold degradation for 6 months in vitro and in vivo

The use of polycaprolactone (PCL) as a biomaterial, especially in the fields of drug delivery and tissue engineering, has enjoyed significant growth. Understanding how such a device or scaffold eventually degrades in vivo is paramount as the defect site regenerates and remodels. Degradation studies of three-dimensional PCL and PCL-based composite scaffolds were conducted in vitro (in phosphate buffered saline) and in vivo (rabbit model). Results up to 6 months are reported. All samples recorded virtually no molecular weight changes after 6 months, with a maximum mass loss of only about 7% from the PCL-composite scaffolds degraded in vivo, and a minimum of 1% from PCL scaffolds. Overall, crystallinity increased slightly because of the effects of polymer recrystallization. This was also a contributory factor for the observed stiffness increment in some of the samples, while only the PCL-composite scaffold registered a decrease. Histological examination of the in vivo samples revealed good biocompatibility, with no adverse host tissue reactions up to 6 months. Preliminary results of medical-grade PCL scaffolds, which were implanted for 2 years in a critical-sized rabbit calvarial defect site, are also reported here and support our scaffold design goal for gradual and late molecular weight decreases combined with excellent long-term biocompatibility and bone regeneration. (C) 2008 Wiley Periodicals, Inc. J Biomed Mater Res 90A: 906-919, 2009

Completing the jigsaw : ESL and EFL undergraduate views on interactive peer-based learning

English as a Second Language (ESL) and English as a Foreign Language (EFL) students often face incongruence with Western teaching methods and learning expectations. The aim of this paper is to explore the potential for interactive peer-based learning to engage ESL and EFL language learners provide authentic communication experiences and accelerate learning through two case studies in different contexts. A study was undertaken to investigate student ‘voice’ (Rudduck, 1999, 2005; Rudduck & Flutter, 2004) during an intervention of communicative language teaching using peer-based learning strategies. This article describes unique similarities and subtle differences between ESL and EFL undergraduate learning in two different cultural contexts, using a 'stages of learning matrix' teaching tool to encourage civic skills and self-efficacy. It also suggests ways for teachers to improve on inconsistencies in group-based learning in order to promote more inclusive and congruent learning experiences for English language learners.

Cellular senescence and longevity of osteophyte-derived mesenchymal stem cells compared to patient-matched bone marrow stromal cells

This study aimed to determine the cellular aging of osteophyte-derived mesenchymal cells (oMSCs) in comparison to patient-matched bone marrow stromal cells (bMSCs). Extensive expansion of the cell cultures was performed and early and late passage cells (passages 4 and 9, respectively) were used to study signs of cellular aging, telomere length, telomerase activity, and cell-cycle-related gene expression. Our results showed that cellular aging was more prominent in bMSCs than in oMSCs, and that oMSCs had longer telomere length in late passages compared with bMSCs, although there was no significant difference in telomere lengths in the early passages in either cell type. Telomerase activity was detectable only in early passage oMSCs and not in bMSCs. In osteophyte tissues telomerase-positive cells were found to be located perivascularly and were Stro-1 positive. Fifteen cell-cycle regulator genes were investigated and only three genes (APC, CCND2, and BMP2) were differentially expressed between bMSC and oMSC. Our results indicate that oMSCs retain a level of telomerase activity in vitro, which may account for the relatively greater longevity of these cells, compared with bMSCs, by preventing replicative senescence. J. Cell. Biochem. 108: 839-850, 2009. (c) 2009 Wiley-Liss, Inc.

Class language

How social class factors into linguistic practices and use, language change and loss has been a major theme in postwar sociolinguistics and ethnography of communication, language planning and sociology of language. Key foci of linguistic and sociological research include the study of social class in everyday language use, media and institutional texts. A further concern is to understand the relationship between social class stratification, intergenerational social reproduction, and language variation. Bourdieu’s model of linguistic habitus and cultural capital offers a broad theoretical template for examining these relations, even as they are complicated by forces of economic and cultural globalization, new media and identity formations.

Translation and news making : a study of contemporary arabic television

Arabic satellite television has recently attracted tremendous attention in both the academic and professional worlds, with a special interest in Aljazeera as a curious phenomenon in the Arab region. Having made a household name for itself worldwide with the airing of the Bin Laden tapes, Aljazeera has set out to deliberately change the culture of Arabic journalism, as it has been repeatedly stated by its current General Manager Waddah Khanfar, and to shake up the Arab society by raising awareness to issues never discussed on television before and challenging long-established social and cultural values and norms while promoting, as it claims, Arab issues from a presumably Arab perspective. Working within the meta-frame of democracy, this Qatari-based network station has been received with mixed reactions ranging from complete support to utter rejection in both the west and the Arab world. This research examines the social semiotics of Arabic television and the socio-cultural impact of translation-mediated news in Arabic satellite television, with the aim to carry out a qualitative content analysis, informed by framing theory, critical linguistic analysis, social semiotics and translation theory, within a re-mediation framework which rests on the assumption that a medium “appropriates the techniques, forms and social significance of other media and attempts to rival or refashion them in the name of the real" (Bolter and Grusin, 2000: 66). This is a multilayered research into how translation operates at two different yet interwoven levels: translation proper, that is the rendition of discourse from one language into another at the text level, and translation as a broader process of interpretation of social behaviour that is driven by linguistic and cultural forms of another medium resulting in new social signs generated from source meaning reproduced as target meaning that is bound to be different in many respects. The research primarily focuses on the news media, news making and reporting at Arabic satellite television and looks at translation as a reframing process of news stories in terms of content and cultural values. This notion is based on the premise that by its very nature, news reporting is a framing process, which involves a reconstruction of reality into actualities in presenting the news and providing the context for it. In other words, the mediation of perceived reality through a media form, such as television, actually modifies the mind’s ordering and internal representation of the reality that is presented. The research examines the process of reframing through translation news already framed or actualized in another language and argues that in submitting framed news reports to the translation process several alterations take place, driven by the linguistic and cultural constraints and shaped by the context in which the content is presented. These alterations, which involve recontextualizations, may be intentional or unintentional, motivated or unmotivated. Generally, they are the product of lack of awareness of the dynamics and intricacies of turning a message from one language form into another. More specifically, they are the result of a synthesis process that consciously or subconsciously conforms to editorial policy and cultural interpretive frameworks. In either case, the original message is reproduced and the news is reframed. For the case study, this research examines news broadcasts by the now world-renowned Arabic satellite television station Aljazeera, and to a lesser extent the Lebanese Broadcasting Corporation (LBC) and Al- Arabiya where access is feasible, for comparison and crosschecking purposes. As a new phenomenon in the Arab world, Arabic satellite television, especially 24-hour news and current affairs, provides an interesting area worthy of study, not only for its immediate socio-cultural and professional and ethical implications for the Arabic media in particular, but also for news and current affairs production in the western media that rely on foreign language sources and translation mediation for international stories.

Questions of English : ethics, aesthetics, rhetoric, and the formation of the subject in England, Australia and the United States

The impact and content of English as a subject on the curriculum is once more the subject of lively debate. Questions of English sets out to map the development of English as a subject and how it has come to encompass the diversity of ideas that currently characterise it. Drawing on a combination of historical analysis and recent research findings Robin Peel, Annette Patterson and Jeanne Gerlach bring together and compare important new insights on curriculum development and teaching practice from England, Australia and the United States. They also discuss the development of teacher training, highlighting the variety of ways in which teachers build their own beliefs and knowledge about English.

The stewardship paradigm : an enquiry into the ethical obligation associated with being in control of resorces

The resource allocation and utilization discourse is dominated by debates about rights particularly individual property rights and ownership. This is due largely to the philosophic foundations provided by Hobbes and Locke and adopted by Bentham. In our community, though, resources come not merely with rights embedded but also obligations. The relevant laws and equitable principles which give shape to our shared rights and obligations with respect to resources take cognizance not merely of the title to the resource (the proprietary right) but the particular context in which the right is exercised. Moral philosophy regarding resource utilisation has from ancient times taken cognizance of obligations but with ascendance of modernity, the agenda of moral philosophy regarding resources, has been dominated, at least since John Locke, by a preoccupation with property rights; the ethical obligations associated with resource management have been largely ignored. The particular social context has also been ignored. Exploring this applied ethical terrain regarding resource utilisation, this thesis: (1) Revisits the justifications for modem property rights (and in that the exclusion of obligations); (2) Identifies major deficiencies in these justifications and reasons for this; (3) Traces the concept of stewardship as understood in classical Greek writing and in the New Testament, and considers its application in the Patristic period and by Medieval and reformist writers, before turning to investigate its influence on legal and equitable concepts through to the current day; 4) Discusses the nature of the stewardship obligation,maps it and offers a schematic for applying the Stewardship Paradigm to problems arising in daily life; and, (5) Discusses the way in which the Stewardship Paradigm may be applied by, and assists in resolving issues arising from within four dominant philosophic world views: (a) Rawls' social contract theory; (b) Utilitarianism as discussed by Peter Singer; (c) Christianity with particular focus on the theology of Douglas Hall; (d) Feminism particularly as expressed in the ethics of care of Carol Gilligan; and, offers some more general comments about stewardship in the context of an ethically plural community.

Characterization of particle number concentrations and PM2.5 in a school : influence of outdoor air pollution on indoor air

Background, Aim and Scope The impact of air pollution on school children’s health is currently one of the key foci of international and national agencies. Of particular concern are ultrafine particles which are emitted in large quantities, contain large concentrations of toxins and are deposited deeply in the respiratory tract. Materials and methods In this study, an intensive sampling campaign of indoor and outdoor airborne particulate matter was carried out in a primary school in February 2006 to investigate indoor and outdoor particle number (PN) and mass concentrations (PM2.5), and particle size distribution, and to evaluate the influence of outdoor air pollution on the indoor air. Results For outdoor PN and PM2.5, early morning and late afternoon peaks were observed on weekdays, which are consistent with traffic rush hours, indicating the predominant effect of vehicular emissions. However, the temporal variations of outdoor PM2.5 and PN concentrations occasionally showed extremely high peaks, mainly due to human activities such as cigarette smoking and the operation of mower near the sampling site. The indoor PM2.5 level was mainly affected by the outdoor PM2.5 (r = 0.68, p<0.01), whereas the indoor PN concentration had some association with outdoor PN values (r = 0.66, p<0.01) even though the indoor PN concentration was occasionally influenced by indoor sources, such as cooking, cleaning and floor polishing activities. Correlation analysis indicated that the outdoor PM2.5 was inversely correlated with the indoor to outdoor PM2.5 ratio (I/O ratio) (r = -0.49, p<0.01), while the indoor PN had a weak correlation with the I/O ratio for PN (r = 0.34, p<0.01). Discussion and Conclusions The results showed that occupancy did not cause any major changes to the modal structure of particle number and size distribution, even though the I/O ratio was different for different size classes. The I/O curves had a maximum value for particles with diameters of 100 – 400 nm under both occupied and unoccupied scenarios, whereas no significant difference in I/O ratio for PM2.5 was observed between occupied and unoccupied conditions. Inspection of the size-resolved I/O ratios in the preschool centre and the classroom suggested that the I/O ratio in the preschool centre was the highest for accumulation mode particles at 600 nm after school hours, whereas the average I/O ratios of both nucleation mode and accumulation mode particles in the classroom were much lower than those of Aitken mode particles. Recommendations and Perspectives The findings obtained in this study are useful for epidemiological studies to estimate the total personal exposure of children, and to develop appropriate control strategies for minimizing the adverse health effects on school children.

Creating an effective prevention curriculum to reduce transport risks and injuries

Adolescent injury is a significant health concern and can be a result of the adolescents engagement in transport-related behaviours. There is however significant planning and formative research needed to inform prevention programme design. This presentation reports on the development and evaluation of a curriculum programme that was shown to be effective in reducing transport-related risks and injuries. Early adolescents report injuries resulting from a number of transport-related behaviours including those associated with riding a bicycle, a motorcycle, and as a passenger (survey of 209 Year 9 students). In focus groups, students (n=30) were able to describe the context of transport risks and injuries. Such information provided evidence of the need for an intervention and ecologically valid data on which to base programme design including insights into the language, culture and development of adolescents and their experiences with transport risks. Additional information about teaching practices and implementation issues were explored in interviews with 13 teachers. A psychological theory was selected to operationalise the design of the programmes that drew on such preparatory data. The programme, Skills for Preventing Injury in Youth was evaluated with 197 participating and 137 control students (13–14 year olds). Results showed a significant difference between the intervention and control groups from baseline to 6-month follow-up in a number of transport-related risk behaviours and transport-related injuries. The programme thus demonstrated potential in reduce early adolescents transport risk behaviours and associated harm. Discussion will involve the implications of the development research process in designing road safety interventions.

English language study abroad program : an investigation of Hong Kong pre-service teachers’ experiences of a language immersion program

There has been minimal research focused on short-term study abroad language immersion programs, in particular, with home-stay families. The importance of authentic intercultural experience is increasingly clear and was acknowledged as central to the process of language learning (Liddicoat, 2004). In Hong Kong, education programs for pre-service language teachers have significantly emphasised language and intercultural training through short-term study abroad, and these short overseas language immersion courses have become a compulsory component for teacher training (Bodycott & Crew, 2001) in the last decade. This study aims to investigate eight Hong Kong pre-service teachers’ and their home-stay families’ experiences of a short-term (two months) language immersion program in Australia. The focus is on listening to commentaries concerning the development of communicative competence, intercultural competence and professional growth during the out-of-class study abroad experience. The conceptual framework adopted in this study views language and intercultural learning from social constructivist perspectives. Central to this framing is the notion that the internalisation of higher mental functions involves the transfer from the inter-psychological to the intra-psychological plane, that is, a progression process from the socially supported to individually controlled performance. From this perspective, language serves as a way to communicate about, and in relation to, actions and experience. Three research questions were addressed and studied through qualitative methodology. 1. How do the pre-service teachers and their home-stay families perceive the out-of-class component of the program in terms of opportunities for the development of language proficiency and communicative competence? 2. How do the pre-service teachers and their home-stay families perceive the out-of-class component of the program in terms of the development of intercultural competence? 3. How do the pre-service teachers and home-stay families perceive the outof- class component of the program in terms of teachers’ professional growth? Data were generated from multiple data collection methods and analysed through thematic analysis from both a “bottom up” and “top down” approach. The study showed that the pre-service teachers perceived that the immersion program influenced, to varying degrees, their language proficiency, communication and intercultural awareness, as well as their self-awareness and professional growth. These pre-service teachers believed that effective language learning centres on active engagement in the target language community. A mismatch between the views and evaluations of the two groups – the pre-service teachers and the home-stay family members – provides some evidence of misalignments in terms of expectations and perceptions of each other’s roles and responsibilities. The study has highlighted challenges encountered, and provided suggestions for ways of meeting these challenges. The inclusion in the study of the home-stay families’ perceptions and commentaries provided insights, which can inform program development. There is clearly further work to be done in terms of predeparture orientation and preparation, not only for the main participants themselves, the students, but also for the host families.