Threat modeling a factory environment using Microsoft Security Development Lifecycle methodology

The number of security violations is increasing and a security breach could have irreversible impacts to business. There are several ways to improve organization security, but some of them may be difficult to comprehend. This thesis demystifies threat modeling as part of secure system development. Threat modeling enables developers to reveal previously undetected security issues from computer systems. It offers a structured approach for organizations to find and address threats against vulnerabilities. When implemented correctly threat modeling will reduce the amount of defects and malicious attempts against the target environment. In this thesis Microsoft Security Development Lifecycle (SDL) is introduced as an effective methodology for reducing defects in the target system. SDL is traditionally meant to be used in software development, principles can be however partially adapted to IT-infrastructure development. Microsoft threat modeling methodology is an important part of SDL and it is utilized in this thesis to find threats from the Acme Corporation’s factory environment. Acme Corporation is used as a pseudonym for a company providing high-technology consumer electronics. Target for threat modeling is the IT-infrastructure of factory’s manufacturing execution system. Microsoft threat modeling methodology utilizes STRIDE –mnemonic and data flow diagrams to find threats. Threat modeling in this thesis returned results that were important for the organization. Acme Corporation now has more comprehensive understanding concerning IT-infrastructure of the manufacturing execution system. On top of vulnerability related results threat modeling provided coherent views of the target system. Subject matter experts from different areas can now agree upon functions and dependencies of the target system. Threat modeling was recognized as a useful activity for improving security.

Situational awareness for critical infrastructure protection

Postgraduate seminar series with a title Situational Awareness for Critical Infrastructure Protection held at the Department of Military Technology of the National Defence University in 2015. This book is a collection of some of talks that were presented in the seminar. The papers address designing inter-organizational situation awareness system, principles of designing for situation awareness, situation awareness in distributed teams, vulnerability analysis in a critical system context, tactical Command, Control, Communications, Computers, & Intelligence (C4I) systems, and improving situational awareness in the circle of trust. This set of papers tries to give some insight to current issues of the situation awareness for critical infrastructure protection. The seminar has always made a publication of the papers but this has been an internal publication of the Finnish Defence Forces and has not hindered publication of the papers in international conferences. Publication of these papers in peer reviewed conferences has indeed been always the goal of the seminar, since it teaches writing conference level papers. We still hope that an internal publication in the department series is useful to the Finnish Defence Forces by offering an easy access to these papers.

Power Electronic Converters in Low-Voltage Direct Current Distribution – Analysis and Implementation

Over the recent years, smart grids have received great public attention. Many proposed functionalities rely on power electronics, which play a key role in the smart grid, together with the communication network. However, “smartness” is not the driver that alone motivates the research towards distribution networks based on power electronics; the network vulnerability to natural hazards has resulted in tightening requirements for the supply security, set both by electricity end-users and authorities. Because of the favorable price development and advancements in the field, direct current (DC) distribution has become an attractive alternative for distribution networks. In this doctoral dissertation, power electronic converters for a low-voltage DC (LVDC) distribution system are investigated. These include the rectifier located at the beginning of the LVDC network and the customer-end inverter (CEI) on the customer premises. Rectifier topologies are introduced, and according to the LVDC system requirements, topologies are chosen for the analysis. Similarly, suitable CEI topologies are addressed and selected for study. Application of power electronics into electricity distribution poses some new challenges. Because the electricity end-user is supplied with the CEI, it is responsible for the end-user voltage quality, but it also has to be able to supply adequate current in all operating conditions, including a short-circuit, to ensure the electrical safety. Supplying short-circuit current with power electronics requires additional measures, and therefore, the short-circuit behavior is described and methods to overcome the high-current supply to the fault are proposed. Power electronic converters also produce common-mode (CM) and radio-frequency (RF) electromagnetic interferences (EMI), which are not present in AC distribution. Hence, their magnitudes are investigated. To enable comprehensive research on the LVDC distribution field, a research site was built into a public low-voltage distribution network. The implementation was a joint task by the LVDC research team of Lappeenranta University of Technology and a power company Suur-Savon S¨ahk¨o Oy. Now, the measurements could be conducted in an actual environment. This is important especially for the EMI studies. The main results of the work concern the short-circuit operation of the CEI and the EMI issues. The applicability of the power electronic converters to electricity distribution is demonstrated, and suggestions for future research are proposed.

Liberalização financeira, estabilidade macroeconômica e crescimento econômico nos países do BRIC

The objective of this paper is to analyze the relationship between exchange rate regime, capital account convertibility and economic growth in 1990-2007 period within the emerging countries that constitute what has been called BRIC - Brazil, Russia, India and China. Our hypothesis is that economic performance of these countries is the result, at least partially, of the quality of the macroeconomic policy management adopted in each country, in which exchange rate policy, capital account convertibility and the degree of external vulnerability plays a key role.

Causação circular do crescimento das economias em desenvolvimento: uma ponte entre as abordagens evolucionária e pós keynesiana

Based on the Post Keynesian approach and on the Evolutionary literature, this study seeks to demonstrate the causal relationships between the National Innovation System and the national and international financial systems. This study shows that there is a circular causation in the less developed economies that contributes to the immaturity of its National Innovation System and to its structural external vulnerability. Conclusions highlight that the cycles in the less developed economies mirror the cycles of international liquidity.

Brazil: an economy caught in a financial trap (1993-2003)

In the early 1990s, Brazil entered a financialized economic dynamic in which short-term financial valorization generated by the issuing of guaranteed public debt overshadowed the entire economy. This article analyzes Brazilian economic processes between 1993 and 2003, in particular the bi-directional relationship with external vulnerability, erratic international financing behavior and how State actions to obtain and maintain these resources fostered financialization. As a result, the entire economy became enmeshed in a self-perpetuating trap in which financial activity was predominant over economic activity.

Käyttäjien manipulointi internetin yhteisöpalveluissa: Systemaattinen kirjallisuuskatsaus

Internetin yhteisöpalveluiden käyttäjien avoimuus ja sosiaalisuus altistavat heidät monenlaisille riskeille. “Social engineering” eli käyttäjien manipulointi on uhka, joka liittyy informaation hankkimiseen perinteisen kanssakäymisen kautta, mutta yhä enenevissä määrin myös internetissä. Kun kanssakäyminen tapahtuu internetin välityksellä, käyttäjien manipuloijat hyödyntävät yhteisöpalveluita yhteydenpitoon uhrien kanssa sekä paljon käyttäjäinformaatiota sisältävänä alustana. Tämän tutkielman tarkoitus on löytää internetin yhteisöpalveluiden ja käyttäjien manipuloinnin välinen yhteys. Tämä päämäärä saavutettiin etsimällä vastauksia kysymyksiin kuten: Mitkä ovat tyypilliset hyökkäystyypit? Miksi informaatiolla on niin suuri rooli? Mitä seurauksia ilmiöllä on ja miten hyökkäyksiltä on mahdollista suojautua? Vastaukset kysymyksiin löydettiin toteuttamalla systemaattinen kirjallisuuskatsaus. Katsaus muodostui yhdistämällä tärkeimmät löydökset 60 tarkoin valitusta ilmiötä käsittelevästä artikkelista. Käyttäjien manipuloinnin huomattiin olevan hyvin laaja ja monimutkainen ilmiö internetin yhteisöpalveluissa. Huomattiin, että manipulointia ilmenee sivustoilla useissa erilaisissa muodoissa, joita ovat muun muassa tietojen kalastelu, profiilien yhdistäminen, sosiaaliset sovellukset, roskaposti, haitalliset linkit, identiteettivarkaudet, tietovuodot ja erilaiset huijaukset, jotka hyödyntävät sekä ihmisluonnon että sivustojen perusominaisuuksia. Haavoittuvuus ja luottamus havaittiin myös tärkeiksi aspekteiksi, sillä ne yhdistävät informaation merkityksen ja ihmisluonnon, jotka molemmat ovat avaintekijöitä sekä manipuloinnissa että yhteisöpalvelusivustoilla. Vaikka ilmiön seurausten huomattiin olevan negatiivisia niin käyttäjien olemukselle internetissä kuin todellisessakin elämässä, havaittiin myös, että ilmiön ymmärtäminen ja tunnistaminen helpottaa siltä suojautumista

Vulnerabilidade externa e composição da posição internacional de investimentos: Brasil 2001-2010

The aim of this paper is to indicate that there was a significant change in the composition of the Brazilian International Investment Position in the period 2001-2010: international reserves became higher than the external debt and decreased the share of foreign liabilities denominated in foreign currency, getting smaller that the participation of the external liabilities denominated in domestic currency. These tend to suffer a double devaluation (prices and exchange rates) in times of crisis, thus characterizing the reduction of the external vulnerability in the financial sphere as evidenced in the global crisis hatched in 2008.

Interdependence in Southern Africa: an examination of the relations between Zimbabwe and South Africa

Most research on southern Africa focuses on the total dependency of the region's states--Angola, Botswana, Lesotho, Malawi, Mozambique, Swaziland, zambia and Zimbabwe--upon the dominant power, South Africa. This thesis examines the relationship between South Africa and Zimbabwe and argues that these two states are more interdependent than dependency scholars would acknowledge. Although a study of the historical period reveals that dependency theory, as defined by Raul Prebisch, Andre Gunder Frank and A. Valenzuela, is helpful for understanding the development of relations between the two states, it is unable to account for many of the characteristics of the relationship which are found in the contemporary context, especially since 1980. An examination of various economic areas of interaction, including investment, trade and transportation, as well as the political realm, indicates that each state exhibits a degree of dependence upon the other. Thus, it is possible to characterize the relationship as one of "mutual dependence," or interdependence as defined by Robert Keohane and Joseph S. Nye. Interdependence is further examined through the concepts of sensitivity and vulnerability. Sensitivity signifies the ability of a state to respond effectively to policy changes made by another state wi thin a given area of interaction without incurring large costs, while vulnerability denotes that an actor is unable to respond, or only at great cost. By applying these concepts to the relationship between Zimbabwe and South Africa, it is determined that although South Africa tends to be sensitive while Zimbabwe is generally vulnerable, the degrees to which these two states are sensi ti ve and vulnerable varies over time and issue area. As the changes wi thin South Africa start to affect relations wi th the rest of southern Africa, it wi 11 be necessary to understand the interaction between the states from an interdependency perspective if cooperation within the region wi 11 be successful. By appl ying an interdependence framework, this study aims at contributing to the understanding of relations among the countries of southern Africa in general, and between South Africa and Zimbabwe in particular.

Nursing staffs' perceptions of a generic service manager position

The recent reengineering within the health care industry has challenged many assumptions regarding traditional structures and roles. Within a product-line management structure, the traditional viewpoint that those who manage patient care areas must have a nursing background, is an example of one such assumption being challenged. The nursing profession is often seen as the greatest obstacle to the implementation of a product-line management structure and generic manager positions (does not require a nursing background), due to the perceived loss of professional identity. This qualitative study focused on how nursing staff within a chronic care and rehabilitation facility perceived a generic service manager position. Focus groups were conducted in three phases, over a 14 month period of time. The data collected from the focus groups were then coded according to common themes. Each phase was analyzed independently, with the study concluding with an analysis and interpretation of the collective results. The results of this study revealed a significant shift in how the nursing staff perceived their professional identity and accountability in light of the implementation of the generic Service Manager position. Initial reactions of personal and professional vulnerability and resentment were seen to transform into an increased ability to explicitly articulate the role of nursing. Changes in behavior that were described included: increased consultation and collaboration with other

Vegetational history and geochronology of several sites in South Southwestern Ontario with discussion on mastodon extinction in Southern Ontario /

This study has three purposes: to establish a chronologically controlled vegetational history for a number of sites in south Southwestern Ontario; to utilize the resulting data to support and/or add to the current understanding of Quaternary geology and stratigraphy, and the glacial and postglacial history of the Great Lakes in south Southwestern Ontario; and to attempt to propose a possible explanation for the extinction of the mastodon in Southern Ontario. Palynological and geochronological analyses were conducted on material collected from eleven sites (east to west): Verbeke Mastodon Site, Woloshko Mastodon Site, Walker Pond II, Pond Mills I, Lake Hunger Bog, Bouckaert Site. Mabee Site, Cornell Bog. Colles Lake I, Folden Mastodon Site and Forest Pond. Individual geochronologically controlled (where possible) vegetational histories were reconstructed for each of the sites investigated. The results of the individual studies, when considered in overview. indicated the existance of an established closed boreal forest throughout south Southwestern Ontario by 10,000 years B.P. This evidence for a significant climatic change coincident throughout south Southwestern Ontario supports the proposed age of 10,000 years B.P. for the Pleistocene/Holocene Boundary (Terasmae, 1972). Remnant patches of 'open spruce parkland' persisted in small local 'wet' areas. It was in these areas that the mastodon was restricted during early Holocene time. With continued encroachment by the surrounding boreal forest, possibly speeded up by this browser's destructive feeding habits, the spruce enclaves shrank and the mastodon became extinct in south Southwestern Ontario. The results of this thesis basically support Dreimanis' (1967, 1968) proposed 'Environmental-Climatic' theory for mastodon extinction. It is suggested that increased dryness during the present interglacial compared to the climate of earlier interglacials may be the key to unravelling the problem of mastodon extinction in eastern North America.

Predictors of prejudice perceptions and the role of group identification in international students

The purpose of the present study was first to determine what influences international students' perceptions of prejudice, and secondly to examine how perceptions of prejudice would affect international students' group identification. Variables such as stigma vulnerability and contact which have been previously linked with perceptions of prejudice and intergroup relations were re-examined (Berryman-Fink, 2006; Gilbert, 1998; Nesdale & Todd, 2000), while variables classically linked to prejudicial attitudes such as right-wing authoritarianism and openness to experience were explored in relation to perceptions of prejudice. Furthermore, the study examined how perceptions of prejudice might affect the students' identification choices, by testing two opposing models. The first model was based on the motivational nature of social identity theory (Tajfel & Turner, 1986) while the second model was based on the cognitive nature of self-categorization theory/ rejection-identification model (Turner, Hogg, Oakes, Reicher, & Wetherell, 1987; Schmitt, Spears, & Branscombe,2003). It was hypothesized that stigma vulnerability, right-wing authoritarianism, openness to experience and contact would predict both personal and group perceptions of prejudice. It was also hypothesized that perceptions of prejudice would predict group identification. If the self-categorizationlrejection-identification model was supported, international students would identify with the international students. If the social mobility strategy was supported, international students would identify with the university students group. Participants were 98 international students who filled out questionnaires on the Brock University Psychology Department Website. The first hypothesis was supported. The combination of stigma vulnerability, right-wing authoritarianism, openness to experience and contact predicted both personal and group prejudice perceptions of international students. Furthermore, the analyses supported the self-categorizationlrejectionidentification model. International identification was predicted by the combination of personal and group prejudice perceptions of international students.

The role of physical activity and perceived adequacy on cardiorespiratory fitness in children with developmental coordination disorder

Evidence suggests that children with developmental coordination disorder (DCD) have lower levels of cardiorespiratory fitness (CRF) compared to children without the condition. However, these studies were restricted to field-based methods in order to predict V02 peak in the determination of CRF. Such field tests have been criticised for their ability to provide a valid prediction of V02 peak and vulnerability to psychological aspects in children with DCD, such as low perceived adequacy toward physical activity. Moreover, the contribution of physical activity to the variance in V02 peak between the two groups is unknown. The purpose of our study was to determine the mediating role of physical activity and perceived adequacy towards physical activity on V02 peak in children with significant motor impairments. This prospective case-control design involved 122 (age 12-13 years) children with significant motor impairments (n=61) and healthy matched controls (n=61) based on age, gender and school location. Participants had been previously assessed for motor proficiency and classified as a probable DCD (p-DCD) or healthy control using the movement ABC test. V02 peak was measured by a progressive exercise test on a cycle ergometer. Perceived adequacy was measured using a 7 -item subscale from Children's Selfperception of Adequacy and Predilection for Physical Activity scale. Physical activity was monitored for seven days with the Actical® accelerometer. Children with p-DCD had significantly lower V02 peak (48.76±7.2 ml/ffm/min; p:50.05) compared to controls (53.12±8.2 ml/ffm/min), even after correcting for fat free mass. Regression analysis demonstrated that perceived adequacy and physical activity were significant mediators in the relationship between p-DCD and V02 peak. In conclusion, using a stringent laboratory assessment, the results of the current study verify the findings of earlier studies, adding low CRF to the list of health consequences associated with DCD. It seems that when testing for CRF in this population, there is a need to consider the psychological barriers associated with their condition. Moreover, strategies to increase physical activity in children with DCD may result in improvement in their CRF.

Power, Contextual Intelligence and Leadership: Research Approaches for Understanding Participatory Community Climate Change Adaptation

Analysis of power in natural resources management is important as multiple stakeholders interact within complex, social-ecological systems. As a sub-set of these interactions, community climate change adaptation is increasingly using participatory processes to address issues of local concern. While some attention has been paid to power relations in this respect, e.g. evaluating international climate regimes or assessing vulnerability as part of integrated impact assessments, little attention has been paid to how a structured assessment of power could facilitate real adaptation and increase the potential for successful participatory processes. This paper surveys how the concept of power is currently being applied in natural resources management and links these ideas to agency and leadership for climate change adaptation. By exploring behavioural research on destructive leadership, a model is developed for informing participatory climate change adaptation. The working paper then concludes with a discussion of developing research questions in two specific areas - examining barriers to adaptation and mapping the evolution of specific participatory processes for climate change adaptation.

Estelle Cuffe Hawley fonds, 1852-1999, n.d.

Estelle Cuffe Hawley (1894-1995) was an educator, businesswoman and politician, who became the first woman alderman on the St. Catharines City Council. She began her career as a teacher in Peterborough in 1913, and later taught in St. Catharines at Connaught School and St. Paul’s Ward School, where she served as Principal for six years. In 1928-29, she worked as an exchange teacher in Edmonton, Alberta. This would be Estelle’s last year in the teaching profession. She moved back to St. Catharines in 1930 and began a career in business, as an employee of Sun Life Assurance Co. She remained in this profession until around 1952. It was during this period that she became very active in the community and local politics. In 1934 she was elected to the St. Catharines Board of Education, where she advocated for the improvement of teachers’ salaries, the introduction of nursing services in schools, and the inclusion of music in the curriculum. She served as a member of the school board until 1937. The following year, she became the first woman elected to the St. Catharines City Council. As an alderman, she worked to improve the community's social welfare services, serving consecutively as chairman of all committees. She established comprehensive health services (including medical, dental and nursing), in the public, separate and secondary schools of St. Catharines, the first program of its kind in Canada. She was also instrumental in establishing minimum housing standards and engaging the public in local government by arranging a series of lectures by city officials. She remained a member of City Council until 1943. The following year she campaigned unsuccessfully for the mayoralty. In 1953 she married Hubert Hawley and moved to Orillia. She continued to remain active in the community, serving as President of the Ontario Recreation Association from 1950-1953, and editor of their Bulletin from 1955-1961. During the 1960s, she worked with various groups, including the Voice of Women, the Mental Health Association and the Freedom from Hunger Campaign. In addition to this work, Estelle wrote poetry and short stories, some of which were published in the Peterborough Review, the Globe and Mail and the Canadian Churchman. Some of her short stories (often about her childhood experiences) were broadcast on the CBC, as well as her experiences as a Town Councillor (under the pseudonym Rebecca Johnson in 1961). She also broadcast a segment that was part of a series called “Winning the Peace” in April 1944. Estelle was a sought-after public speaker, speaking on topics such as peace, democracy, citizenship, education, and women’s rights. In 1976, Brock University conferred an honorary Doctor of Law degree to Estelle for her leadership as an educator, businesswoman and a stateswoman. Her husband Hubert died that same year, and Estelle subsequently moved to Mississauga. With the assistance of an Ontario Heritage Foundation grant, she began work on her memoir. She later moved back to Orillia and died there in 1995, at the age of 101.