Intrusion detection framework for encrypted networks

Network-based Intrusion Detection Systems (NIDSs) monitor network traffic for signs of malicious activities that have the potential to disrupt entire network infrastructures and services. NIDS can only operate when the network traffic is available and can be extracted for analysis. However, with the growing use of encrypted networks such as Virtual Private Networks (VPNs) that encrypt and conceal network traffic, a traditional NIDS can no longer access network traffic for analysis. The goal of this research is to address this problem by proposing a detection framework that allows a commercial off-the-shelf NIDS to function normally in a VPN without any modification. One of the features of the proposed framework is that it does not compromise on the confidentiality afforded by the VPN. Our work uses a combination of Shamir’s secret-sharing scheme and randomised network proxies to securely route network traffic to the NIDS for analysis. The detection framework is effective against two general classes of attacks – attacks targeted at the network hosts or attacks targeted at framework itself. We implement the detection framework as a prototype program and evaluate it. Our evaluation shows that the framework does indeed detect these classes of attacks and does not introduce any additional false positives. Despite the increase in network overhead in doing so, the proposed detection framework is able to consistently detect intrusions through encrypted networks.

Bicycle helmet research : CARRS-Q monograph 5

Recent research on bicycle helmets and concerns about how public bicycle hire schemes will function in the context of compulsory helmet wearing laws have drawn media attention. This monograph presents the results of research commissioned by the Queensland Department of Transport and Main Roads to review the national and international literature regarding the health outcomes of cycling and bicycle helmets and examine crash and hospital data. It also includes critical examinations of the methodology used by Voukelatos and Rissel (2010), and estimates the likely effects of possible segmented approaches to bicycle helmet wearing legislation. The research concludes that current bicycle helmet wearing rates are halving the number of head injuries experienced by Queensland cyclists. Helmet wearing legislation discouraged people from cycling when it was first introduced but there is little evidence that it continues to do so. Cycling has significant health benefits and should be encouraged in ways that reduce the risk of the most serious injuries. Infrastructure and speed management approaches to improving the safety of cycling should be undertaken as part of a Safe System approach, but protection of the individual by simple and cost-effective methods such as bicycle helmets should also be part of an overall package of measures.

Pedagogy of feedback on student academic writing : research supervisor practices for the end of the research degree candidature

All academic writing is advanced with the benefit of feedback about the writing. In the case of the academic writing genres of the research proposal and the dissertation, feedback is usually provided by the research supervisor. Given that academic writing development is a process, and in the case of the research proposal and dissertation, writing which develops over time, it seems likely that the nature of feedback on drafts written early in the candidature may be different from feedback provided by the research supervisor later in a student’s candidature. ----- ----- When a research supervisor has been reading a student’s writing over a period of time, their own familiarity with the writing generates a risk to their ability to provide critical and objective feedback. Particularly by the end of a student’s candidature, the research supervisor’s familiarity with the work may cause them to miss elements of writing improvement. ----- ----- The author, as a research supervisor, has developed a feedback grid to facilitate feedback on the final drafts of a dissertation. This feedback grid is generated by the embedded promises in the early sections of the dissertation, which are then used to audit the content of the final sections of the dissertation to ascertain whether promises made have been fulfilled. This provides a strategy for the research supervisor to step back from the work and read the dissertation with the agenda of a dissertation examiner. ----- ----- The grid is one strategy within a broader pedagogy of providing feedback on writing samples.