Security in RFID devices

Aquest projecte inclou una aproximació als conceptes de RFID i targetes contactless centrant-se en l’ampliament usat MIFARE Classic chip. L’objectiu principal es mostrar el seu funcionament i les seves vulnerabilitats, així com alguns exemples pràctics fent una anàlisi de diferents serveis que les utilitzen.

Opportunities for prevention in primary care in a country with universal insurance coverage.

Data from studies in the United States suggest that young people engaging in health-compromising behaviors have lower access to health care. Using data from a Swiss national survey we tested the hypothesis that in a country with universal insurance coverage, adolescents engaging in health-compromising behaviors access primary care to the same extent as those who do not engage in these behaviors.

The role of community and population ecology in applying mycorrhizal fungi for improved food security.

The global human population is expected to reach ∼9 billion by 2050. Feeding this many people represents a major challenge requiring global crop yield increases of up to 100%. Microbial symbionts of plants such as arbuscular mycorrhizal fungi (AMF) represent a huge, but unrealized resource for improving yields of globally important crops, especially in the tropics. We argue that the application of AMF in agriculture is too simplistic and ignores basic ecological principals. To achieve this challenge, a community and population ecology approach can contribute greatly. First, ecologists could significantly improve our understanding of the determinants of the survival of introduced AMF, the role of adaptability and intraspecific diversity of AMF and whether inoculation has a direct or indirect effect on plant production. Second, we call for extensive metagenomics as well as population genomics studies that are crucial to assess the environmental impact that introduction of non-local AMF may have on native AMF communities and populations. Finally, we plead for an ecologically sound use of AMF in efforts to increase food security at a global scale in a sustainable manner.

Du retraité méritant au senior actif : genèse et transformations de la figure sociale de la vieillesse en Suisse

«Crise de l'assurance-vieillesse », «déséquilibre démographique», «vieillissement de la population », « faillite des systèmes de retraite », voilà des expressions qui occupent une place prépondérante dans tes discours portant sur l'avenir de la sécurité sociale aujourd'hui. Les autorités politiques suisses comme européennes font part de leur inquiétude face à la situation d'urgence que présenteraient les « sociétés vieillissantes ». En effet, alors que F assurance-vieillesse s'adressait initialement à une catégorie résiduelle de personnes qui parvenait à vivre plusieurs années au-delà de 65 ans, elle couvre maintenant près d'un cinquième de la population globale. Partant, les autorités fédérales appellent à une restriction des conditions d'accès à la rente de vieillesse. À première vue, les débats qui portent sur cette question dans l'arène politique relèvent de considérations essentiellement techniques liées aux conditions économiques de perpétuation de l'assurances-vieillesse. Il s'agit de modifier les règles d'accès à l'assurance ainsi que le montant des prestations afin d'assainir les caisses tout en faisant face à l'augmentation du nombre de retraités. Ce travail de thèse aborde cette question par une autre approche. Nous partons du postulat que les débats portant sur l'avenir de la politique de la vieillesse sont révélateurs d'une lutte entre acteurs du champ de régulation sociale qui participent d'un travail d'élaboration d'une pensée d'Etat, au sens de P Bourdieu. Cette lutte a pour objet l'imposition de catégories de pensées, soit la définition de ce qu'est un âgé aujourd'hui et de ce qu'il est moralement acceptable d'attendre de lui Nous montrons que cette question peut être comprise à l'aune de l'histoire du traitement social de la vieillesse dont nous relatons ici la genèse et les transformations. Nous soulignons également combien cette pensée d'Etat marque la manière dont les retraités aujourd'hui cherchent à se valoriser face à la déstabilisation de leur statut social. Summary "Crisis of social insurance for older people", "demographic imbalance", "aging of the population", "bankruptcy of pensions systems" ; these are some of the many expressions that today play a importance part in discussion about the future of social security. The Swiss and European political authorities show they are concerned about the crisis that "aging societies" are said to be facing. Indeed, while social insurance for old age used to concern a residual category of people who managet! to live to more than 65 years old, it now covers about a fifth of the global population. Hence, the Federal authorities are calling for a tightening of the conditions for access to retirement benefits. At first glance, the debates in the political arena »elated to (his question mainly deal with technical considerations linked to the economic conditions for the perpetuation of the insurance for old age. Ease of access and the level of the benefits have to be reduced in order to balance the funds, in the face of the rise of the number beneficiaries. This thesis study addresses this question through a different approach. We start from the proposition that debates concerning the future of social policy for old age reveal a struggle between those involved in (he field of social regulation ; this struggle is part of the development of the thought of the State as conceived by P. Bourdieu. The aim of this fight is to impose normative categories of thought, that is to say in relation to our subject, the definition of what an older person is today and what is morally acceptable to expect of him or her. We show that this question can be understood in the light of the the history of the social treatment of old age that we report here. Moreover, we show that this thought of the State explains the way retired people seek to value themselves and confront the destabilisation of their social status.

Wireless Technologies in e-Business; Services, Security and Management

Uusien mobiilien laitteiden ja palveluiden kehitys ovat herättäneet yritysten mielenkiinnon soveltaa langattomia sovelluksia omassa liiketoiminnassaan. Erilaisten tekniikoiden myötä myös mahdollisuuksien kirjo on laajentumassa, mikä johtaa erilaisten verkkojen ja laitteiden yhtenäiselle hallinnalle asetettavien vaatimusten kasvuun. Yritysten siirtyessä soveltamaan uusia langattomia palveluita ja sovelluksia on myös huomioon otettavaa sovellusten sekä palveluiden vaatima tietoturva ja sen hallittavuus. Tutkimuksessa esitetään langattoman sähköisen liiketoiminnan määritelmä sekä kyseisien teknologioiden käyttöä edistävät tekijät. Tutkimus luo viitekehyksen yrityksen langattomien teknologioiden käytölle ja siihen olennaisesti vaikuttavista tekijöistä. Viitekehystä on käytetty todelliseen esimerkkiin, liikkuva myyntihenkilö, kyseisten teknologioiden, palveluiden, tietoturvan ja hallittavuuden näkökulmasta. Johtopäätöksinä on arvioitu mobiilien ja langattomien teknologioiden sekä palveluiden, tietoturvan ja hallittavuuden tilaa ja analysoimalla niitä tulevaa ajatellen.

From 'Security for Privacy' to 'Privacy for Security'

This article envisions the use of context-awareness to improve single sign-on solutions (SSO) for mobile users. The attribute-based SSO is expected to increase users' perceived ease of use of the system and service providers' authentication security of the application. From these two features we derive two value propositions for a new business model for mobile platforms. The business model can be considered as an instantiation of the privacy-friendly business model pattern presented in our previous work, reinforcing our claim that privacy-friendly value propositions are possible and can be used to obtain a competitive advantage.

Software Security Design and Testing

Elektroninen kaupankäynti ja pankkipalvelut ovat herättäneet toiminnan jatkuvuuden kannalta erittäin kriittisen kysymyksen siitä, kuinka näitä palveluja pystytään suojaamaan järjestäytynyttä rikollisuutta ja erilaisia hyväksikäyttöjä vastaan.

Consumption, investment and life insurance strategies with heterogeneous discounting

[cat] En aquest treball s'analitza l'efecte que comporta l'introducció de preferències inconsistents temporalment sobre les decisions òptimes de consum, inversió i compra d'assegurança de vida. En concret, es pretén recollir la creixent importància que un individu dóna a la herència que deixa i a la riquesa disponible per a la seva jubilació al llarg de la seva vida laboral. Amb aquesta finalitat, es parteix d'un model estocàstic en temps continu amb temps final aleatori, i s'introdueix el descompte heterogeni, considerant un agent amb una distribució de vida residual coneguda. Per tal d'obtenir solucions consistents temporalment es resol una equació de programació dinàmica no estàndard. Per al cas de funcions d'utilitat del tipus CRRA i CARA es troben solucions explícites. Finalment, els resultats obtinguts s'il·lustren numèricament.

Consumption, investment and life insurance strategies with heterogeneous discounting

[cat] En aquest treball s'analitza l'efecte que comporta l'introducció de preferències inconsistents temporalment sobre les decisions òptimes de consum, inversió i compra d'assegurança de vida. En concret, es pretén recollir la creixent importància que un individu dóna a la herència que deixa i a la riquesa disponible per a la seva jubilació al llarg de la seva vida laboral. Amb aquesta finalitat, es parteix d'un model estocàstic en temps continu amb temps final aleatori, i s'introdueix el descompte heterogeni, considerant un agent amb una distribució de vida residual coneguda. Per tal d'obtenir solucions consistents temporalment es resol una equació de programació dinàmica no estàndard. Per al cas de funcions d'utilitat del tipus CRRA i CARA es troben solucions explícites. Finalment, els resultats obtinguts s'il·lustren numèricament.

Development of an investor relations strategy - Case SSH Communications Security Corp. Communications Security Corp.

Tutkimuksen tavoitteena oli muodostaa viitekehys sijoittajaviestinnän strategian muodostamiseen ja soveltaa viitekehystä käytännössä. Tutkimusongelma nousi case-yrityksestä, SSH Communications Security Oyj:stä, joka listautui vuoden 2000 lopussa. Teoreettinen viitekehys perustuu aikaisempaan kirjallisuuteen sijoittajaviestinnästä, strategian kehittämisestä ja rahoitusteoriasta. Rahoitusteorian alueet, joita käsiteltiin tutkimuksessa ovat; vapaaehtoinen tiedottaminen, markkinatehokkuus ja agenttiteoria. Tutkimuksen empiirinen osa toteutettiin soveltamalla teoreettista viitekehystä case yritykseen. Empiirisessä osuudessa käytiin läpi seuraavat vaiheet; nykyisen tilan ulkoinen ja sisäinen analyysi, tavoitteiden asettaminen ja sijoittajaviestintä strategia ehdotuksen muodostaminen case yritykseen. Tutkielman viimeinen kappale kokoaa tärkeimmät löydökset, pohtii työn teoreettista kontribuutiota ja liikkeenjohdollisia kytköksiä sekä esittää tutkimuksen herättämiä ehdotuksia jatkotutkimuksille

Security in multicast communication

Multicast is one method to transfer information in IPv4 based communication. Other methods are unicast and broadcast. Multicast is based on the group concept where data is sent from one point to a group of receivers and this remarkably saves bandwidth. Group members express an interest to receive data by using Internet Group Management Protocol and traffic is received by only those receivers who want it. The most common multicast applications are media streaming applications, surveillance applications and data collection applications. There are many data security methods to protect unicast communication that is the most common transfer method in Internet. Popular data security methods are encryption, authentication, access control and firewalls. The characteristics of multicast such as dynamic membership cause that all these data security mechanisms can not be used to protect multicast traffic. Nowadays the protection of multicast traffic is possible via traffic restrictions where traffic is allowed to propagate only to certain areas. One way to implement this is packet filters. Methods tested in this thesis are MVR, IGMP Filtering and access control lists which worked as supposed. These methods restrict the propagation of multicast but are laborious to configure in a large scale. There are also a few manufacturerspecific products that make possible to encrypt multicast traffic. These separate products are expensive and mainly intended to protect video transmissions via satellite. Investigation of multicast security has taken place for several years and the security methods that will be the results of the investigation are getting ready. An IETF working group called MSEC is standardizing these security methods. The target of this working group is to standardize data security protocols for multicast during 2004.

Police work and new 'security devices' : a tale from the beat

Mobile technologies have brought about major changes in police equipment and police work. If a utopian narrative remains strongly linked to the adoption of new technologies, often formulated as 'magic bullets' to real occupational problems, there are important tensions between their 'imagined' outcomes and the (unexpected) effects that accompany their daily 'practical' use by police officers. This article offers an analysis of police officers' perceptions and interactions with security devices. In so doing, it develops a conceptual typology of strategies for coping with new technology inspired by Le Bourhis and Lascoumes: challenging, neutralizing and diverting. To that purpose, we adopt an ethnographic approach that focuses on the discourses, practices and actions of police officers in relation to three security devices: the mobile digital terminal, the mobile phone and the body camera. Based on a case study of a North American municipal police department, the article addresses how these technological devices are perceived and experienced by police officers on the beat.