Modelling client puzzles and denial-of-service resistant protocols

Denial-of-service (DoS) attacks are a growing concern to networked services like the Internet. In recent years, major Internet e-commerce and government sites have been disabled due to various DoS attacks. A common form of DoS attack is a resource depletion attack, in which an attacker tries to overload the server's resources, such as memory or computational power, rendering the server unable to service honest clients. A promising way to deal with this problem is for a defending server to identify and segregate malicious traffic as earlier as possible. Client puzzles, also known as proofs of work, have been shown to be a promising tool to thwart DoS attacks in network protocols, particularly in authentication protocols. In this thesis, we design efficient client puzzles and propose a stronger security model to analyse client puzzles. We revisit a few key establishment protocols to analyse their DoS resilient properties and strengthen them using existing and novel techniques. Our contributions in the thesis are manifold. We propose an efficient client puzzle that enjoys its security in the standard model under new computational assumptions. Assuming the presence of powerful DoS attackers, we find a weakness in the most recent security model proposed to analyse client puzzles and this study leads us to introduce a better security model for analysing client puzzles. We demonstrate the utility of our new security definitions by including two hash based stronger client puzzles. We also show that using stronger client puzzles any protocol can be converted into a provably secure DoS resilient key exchange protocol. In other contributions, we analyse DoS resilient properties of network protocols such as Just Fast Keying (JFK) and Transport Layer Security (TLS). In the JFK protocol, we identify a new DoS attack by applying Meadows' cost based framework to analyse DoS resilient properties. We also prove that the original security claim of JFK does not hold. Then we combine an existing technique to reduce the server cost and prove that the new variant of JFK achieves perfect forward secrecy (the property not achieved by original JFK protocol) and secure under the original security assumptions of JFK. Finally, we introduce a novel cost shifting technique which reduces the computation cost of the server significantly and employ the technique in the most important network protocol, TLS, to analyse the security of the resultant protocol. We also observe that the cost shifting technique can be incorporated in any Diffine{Hellman based key exchange protocol to reduce the Diffie{Hellman exponential cost of a party by one multiplication and one addition.

Planning for success : repurposing, retooling and reprioritising with results

This paper presents an organisational learning system implemented across a three year period within a multi campus tertiary library. It proposes a three stage system, framed within a reflective evidence based practice process to foster professional engagement and lifelong learning of staff.

Improved earthwork allocation planning for fuel consumption and emissions reduction in linear infrastructure construction – case study data

This document provides data for the case study presented in our recent earthwork planning papers. Some results are also provided in a graphical format using Excel.

Pre-service Physical Education teachers and concerns regarding their ability to successfully facilitate school-based physical activity promotion strategies

Regular physical activity (PA) in youth has numerous immediate and long-term health benefits. With several studies indicating low levels of youth PA globally, schools settings have become increasingly critical settings for youth health promotion strategies. The role of physical education (PE) teachers has long been considered central to the facilitation of such strategies. However, PE teachers have a selfreported lack of knowledge, skills, understanding, and competence to successfully implement these strategies. Tertiary education programs are fundamental to adequately preparing, and shaping the attitudes and philosophies of future PE teachers towards their involvement within these programs. The aim of this investigation was to explore the beliefs and perceptions of future secondary school PE teachers, regarding their potential roles in future school-based programs designed to promote student PA. Fifty-seven (21 males and 36 females) pre-service PE teachers completed a series of open-ended survey questions concerning their perceptions towards participating in school-based PA promotion programs both as preservice during practicum, and prospectively as practising teachers. Responses were analysed thematically. Participants responded both positively and enthusiastically to both questions. Concerns regarding time, and the intention or expectation to participate in such programs were also key themes for pre-service and practicing teacher participation respectively. Critically in this study, participants did not identify any limitations which may impact upon their ability to successfully promote youth PA in school settings. This may indicate that participants have misconceptions regarding their ability to fulfil this role, or conversely, the deficiency of current PE teachers regarding school-based PA promotion has been recognised by the tertiary institution, and addressed to adequately prepare its students. School-based PA promotion is an integral element of pre-service PE teacher education, and ongoing professional development of practicing PE teachers. This trend is expected to continue in the future, in order to address ongoing public health concerns.

Natural disaster risk-informed for a better public infrastructure asset planning in Indonesian Central Government

The natural disasters incident that frequently hit Indonesia are floods, severe droughts, tsunamis, earth-quakes, volcano, eruptions, landslides, windstorm and forest fires. The impact of those natural disasters are significantly severe and affecting the quality of life of the community due to the breakdown of the public as-sets as one source to deliver public services. This paper is aimed to emphasis the importance of natural disaster risk-informed in relation to public asset management in Indonesian Central Government, particularly in asset planning stage where asset decision is made as the gate into the whole public asset management processes. A Case study in the Ministry of Finance Indonesia as the central government public asset manager and in 5 (five) line ministries/governmental agencies as public asset users was used as the approach to achieved the research objective. The case study devoured three data collection techniques i.e. interviews, observations and document archival which will be analysed by a content analysis approach. The result of the study indicates that Indonesian geographical position exposing many of public infra-structure assets as a high vulnerability to natural disasters. Information on natural-disaster trends and predictions to identify and measure the risks are available, however, such information are not utilise and integrated to the process of public infrastructure asset planning as the gate to the whole public asset management processes. Therefore, in order to accommodate and incorporate this natural disaster risk-information into public asset management processes, particularly in public asset planning, a public asset performance measurements framework should be adopted and applied in the process as one sources in making decision for infrastructure asset planning. Findings from this study provide useful input for the Ministry of Finance as public asset manager, scholars and private asset management practitioners in Indonesia to establish natural disaster risks awareness in public infrastructure asset management processes.

Assessing resilience of water resources systems under the impacts of climate change

This paper presents an approach to assess the resilience of a water supply system under the impacts of climate change. Changes to climate characteristics such as rainfall, evapotranspiration and temperature can result in changes to the global hydrological cycle and thereby adversely impact on the ability of water supply systems to meet service standards in the future. Changes to the frequency and characteristics of floods and droughts as well as the quality of water provided by groundwater and surface water resources are the other consequences of climate change that will affect water supply system functionality. The extent and significance of these changes underline the necessity for assessing the future functionality of water supply systems under the impacts of climate change. Resilience can be a tool for assessing the ability of a water supply system to meet service standards under the future climate conditions. The study approach is based on defining resilience as the ability of a system to absorb pressure without going into failure state as well as its ability to achieve an acceptable level of function quickly after failure. In order to present this definition in the form of a mathematical function, a surrogate measure of resilience has been proposed in this paper. In addition, a step-by-step approach to estimate resilience of water storage reservoirs is presented. This approach will enable a comprehensive understanding of the functioning of a water storage reservoir under future climate scenarios and can also be a robust tool to predict future challenges faced by water supply systems under the consequence of climate change.

Assessing the suitability of existing spatial data for disaster planning and mitigation in Queensland

The Council of Australian Governments (COAG) in 2003 gave in-principle approval to a best-practice report recommending a holistic approach to managing natural disasters in Australia incorporating a move from a traditional response-centric approach to a greater focus on mitigation, recovery and resilience with community well-being at the core. Since that time, there have been a range of complementary developments that have supported the COAG recommended approach. Developments have been administrative, legislative and technological, both, in reaction to the COAG initiative and resulting from regular natural disasters. This paper reviews the characteristics of the spatial data that is becoming increasingly available at Federal, state and regional jurisdictions with respect to their being fit for the purpose for disaster planning and mitigation and strengthening community resilience. In particular, Queensland foundation spatial data, which is increasingly accessible by the public under the provisions of the Right to Information Act 2009, Information Privacy Act 2009, and recent open data reform initiatives are evaluated. The Fitzroy River catchment and floodplain is used as a case study for the review undertaken. The catchment covers an area of 142,545 km2, the largest river catchment flowing to the eastern coast of Australia. The Fitzroy River basin experienced extensive flooding during the 2010–2011 Queensland floods. The basin is an area of important economic, environmental and heritage values and contains significant infrastructure critical for the mining and agricultural sectors, the two most important economic sectors for Queensland State. Consequently, the spatial datasets for this area play a critical role in disaster management and for protecting critical infrastructure essential for economic and community well-being. The foundation spatial datasets are assessed for disaster planning and mitigation purposes using data quality indicators such as resolution, accuracy, integrity, validity and audit trail.

An approach for identifying the limit states of resilience of a water supply system

This paper presents an approach for identifying the limit states of resilience in a water supply system when influenced by different types of pressure (disturbing) forces. Understanding of systemic resilience facilitates identification of the trigger points for early managerial action to avoid further loss of ability to provide satisfactory service availability when the ability to supply water is under pressure. The approach proposed here is to illustrate the usefulness of a surrogate measure of resilience depicted in a three dimensional space encompassing independent pressure factors. That enables visualisation of the transition of the system-state (resilience) between high to low resilience regions and acts as an early warning trigger for decision-making. The necessity of a surrogate measure arises as a means of linking resilience to the identified pressures as resilience cannot be measured directly. The basis for identifying the resilience surrogate and exploring the interconnected relationships within the complete system, is derived from a meta-system model consisting of three nested sub-systems representing the water catchment and reservoir; treatment plant; and the distribution system and end-users. This approach can be used as a framework for assessing levels of resilience in different infrastructure systems by identifying a surrogate measure and its relationship to relevant pressures acting on the system.

Crisis response planning in tunnel and road networks

Critical road infrastructure (such as tunnels and overpasses) is of major significance to society and constitutes major components of interdependent, ‘systems and networks’. Failure in critical components of these wide area infrastructure systems can often result in cascading disturbances with secondary and tertiary impacts - some of which may become initiating sources of failure in their own right, triggering further systems failures across wider networks. Perrow1) considered the impact of our increasing use of technology in high-risk fields, analysing the implications on everyday life and argued that designers of these types of infrastructure systems cannot predict every possible failure scenario nor create perfect contingency plans for operators. Challenges exist for transport system operators in the conceptualisation and implementation of response and subsequent recovery planning for significant events. Disturbances can vary from reduced traffic flow causing traffic congestion throughout the local road network(s) and subsequent possible loss of income to businesses and industry to a major incident causing loss of life or complete loss of an asset. Many organisations and institutions, despite increasing recognition of the effects of crisis events, are not adequately prepared to manage crises2). It is argued that operators of land transport infrastructure are in a similar category of readiness given the recent instances of failures in road tunnels. These unexpected infrastructure failures, and their ultimately identified causes, suggest there is significant room for improvement. As a result, risk profiles for road transport systems are often complex due to the human behaviours and the inter-mix of technical and organisational components and the managerial coverage needed for the socio-technical components and the physical infrastructure. In this sense, the span of managerial oversight may require new approaches to asset management that combines the notion of risk and continuity management. This paper examines challenges in the planning of response and recovery practices of owner/operators of transport systems (above and below ground) in Australia covering: • Ageing or established infrastructure; and • New-build infrastructure. With reference to relevant international contexts this paper seeks to suggest options for enhancing the planning and practice for crisis response in these transport networks and as a result support the resilience of Critical Infrastructure.

Urban transit quality of service : user perception and behaviour

Despite its potential multiple contributions to sustainable policy objectives, urban transit is generally not widely used by the public in terms of its market share compared to that of automobiles, particularly in affluent societies with low-density urban forms like Australia. Transit service providers need to attract more people to transit by improving transit quality of service. The key to cost-effective transit service improvements lies in accurate evaluation of policy proposals by taking into account their impacts on transit users. If transit providers knew what is more or less important to their customers, they could focus their efforts on optimising customer-oriented service. Policy interventions could also be specified to influence transit users’ travel decisions, with targets of customer satisfaction and broader community welfare. This significance motivates the research into the relationship between urban transit quality of service and its user perception as well as behaviour. This research focused on two dimensions of transit user’s travel behaviour: route choice and access arrival time choice. The study area chosen was a busy urban transit corridor linking Brisbane central business district (CBD) and the St. Lucia campus of The University of Queensland (UQ). This multi-system corridor provided a ‘natural experiment’ for transit users between the CBD and UQ, as they can choose between busway 109 (with grade-separate exclusive right-of-way), ordinary on-street bus 412, and linear fast ferry CityCat on the Brisbane River. The population of interest was set as the attendees to UQ, who travelled from the CBD or from a suburb via the CBD. Two waves of internet-based self-completion questionnaire surveys were conducted to collect data on sampled passengers’ perception of transit service quality and behaviour of using public transit in the study area. The first wave survey is to collect behaviour and attitude data on respondents’ daily transit usage and their direct rating of importance on factors of route-level transit quality of service. A series of statistical analyses is conducted to examine the relationships between transit users’ travel and personal characteristics and their transit usage characteristics. A factor-cluster segmentation procedure is applied to respodents’ importance ratings on service quality variables regarding transit route preference to explore users’ various perspectives to transit quality of service. Based on the perceptions of service quality collected from the second wave survey, a series of quality criteria of the transit routes under study was quantitatively measured, particularly, the travel time reliability in terms of schedule adherence. It was proved that mixed traffic conditions and peak-period effects can affect transit service reliability. Multinomial logit models of transit user’s route choice were estimated using route-level service quality perceptions collected in the second wave survey. Relative importance of service quality factors were derived from choice model’s significant parameter estimates, such as access and egress times, seat availability, and busway system. Interpretations of the parameter estimates were conducted, particularly the equivalent in-vehicle time of access and egress times, and busway in-vehicle time. Market segmentation by trip origin was applied to investigate the difference in magnitude between the parameter estimates of access and egress times. The significant costs of transfer in transit trips were highlighted. These importance ratios were applied back to quality perceptions collected as RP data to compare the satisfaction levels between the service attributes and to generate an action relevance matrix to prioritise attributes for quality improvement. An empirical study on the relationship between average passenger waiting time and transit service characteristics was performed using the service quality perceived. Passenger arrivals for services with long headways (over 15 minutes) were found to be obviously coordinated with scheduled departure times of transit vehicles in order to reduce waiting time. This drove further investigations and modelling innovations in passenger’ access arrival time choice and its relationships with transit service characteristics and average passenger waiting time. Specifically, original contributions were made in formulation of expected waiting time, analysis of the risk-aversion attitude to missing desired service run in the passengers’ access time arrivals’ choice, and extensions of the utility function specification for modelling passenger access arrival distribution, by using complicated expected utility forms and non-linear probability weighting to explicitly accommodate the risk of missing an intended service and passenger’s risk-aversion attitude. Discussions on this research’s contributions to knowledge, its limitations, and recommendations for future research are provided at the concluding section of this thesis.

A city for all citizens : integrating children and youth from marginalized populations into city planning

Socially just, intergenerational urban spaces should not only accommodate children and adolescents, but engage them as participants in the planning and design of welcoming spaces. With this goal, city agencies in Boulder, Colorado, the Boulder Valley School District, the Children, Youth and Environments Center at the University of Colorado, and a number of community organizations have been working in partnership to integrate young people’s ideas and concerns into the redesign of parks and civic areas and the identification of issues for city planning. Underlying their work is a commitment to the Convention on the Rights of the Child and children’s rights to active citizenship from a young age. This paper describes approaches used to engage with young people and methods of participation, and reflects on lessons learned about how to most effectively involve youth from underrepresented populations and embed diverse youth voices into the culture of city planning.

Developing a sustainability impact assessment framework for local urban planning

In order to meet the land use and infrastructure needs of the community with the additional challenges posed by climate change and a global recession, it is essential that Queensland local governments test their proposed integrated land use and infrastructure plans to ensure the maximum achievement of triple-bottom line sus-tainability goals. Extensive regulatory impact assessment systems are in place at the Australian and state government levels to substantiate and test policy and legislative proposals, however no such requirement has been extended to the local government level. This paper contends that with the devolution of responsibility to local government and growing impacts of local government planning and development assessment activities, impact assessment of regulatory planning instruments is appropriate and overdue. This is particularly so in the Queensland context where local governments manage metropolitan and regional scale responsibilities and their planning schemes under the Sustainable Planning Act 2009 integrate land use and infrastructure planning to direct development rights, the spatial allocation of land, and infrastructure investment. It is critical that urban planners have access to fit-for-purpose impact assessment frameworks which support this challenging task and address the important relationship between local planning and sustainable urban development. This paper uses two examples of sustainability impact assessment and a case study from the Queensland local urban planning context to build an argument and potential starting point for impact assessment in local planning processes.

Valuing student and community voices in the university : action research as a framework for community service-learning

The Community Service-learning Lab (the Lab) was initiated as a university-wide service-learning experience at an Australian university. The Lab engages students, academics, and key community organisations in interdisciplinary action research projects to support student learning and to explore complex and ongoing problems nominated by the community partners. The current study uses feedback from the first offering of the Lab and focuses on exploring student experiences of the service learning project using an action research framework. Student reflections on this experience have revealed some positive outcomes of the Lab such as an appreciation for positive and strengths-based change. These outcomes are corroborated by collected reflections from community partners and academics. The students also identified challenges balancing the requirements for assessment and their goals to serve the community partner’s needs. This feedback has provided vital information for the academic team, highlighting the difficulties in balancing the agenda of the academic framework and the desire to give students authentic experiences.

Usability extensions for the worklet service

The YAWL Worklet Service is an effective approach to facilitating dynamic flexibility and exception handling in workflow processes. Recent additions to the Service extend its capabilities through a programming interface that provides easier access to rules storage and evaluation, and an event server that notifies listening servers and applications when exceptions are detected, which together serve enhance the functionality and accessibility of the Service's features and expand its usability to new potential domains.

Detecting distributed Denial-of-Service attacks and Flash Events

This thesis investigates and develops techniques for accurately detecting Internet-based Distributed Denial-of-Service (DDoS) Attacks where an adversary harnesses the power of thousands of compromised machines to disrupt the normal operations of a Web-service provider, resulting in significant down-time and financial losses. This thesis also develops methods to differentiate these attacks from similar-looking benign surges in web-traffic known as Flash Events (FEs). This thesis also addresses an intrinsic challenge in research associated with DDoS attacks, namely, the extreme scarcity of public domain datasets (due to legal and privacy issues) by developing techniques to realistically emulate DDoS attack and FE traffic.